Skip to content

Commit 5805368

Browse files
Merge branch 'main' into 11-fix-delete-account-flow
2 parents fbcb550 + 99a18ad commit 5805368

File tree

11 files changed

+642
-93
lines changed

11 files changed

+642
-93
lines changed

docs/architecture.qmd

Lines changed: 107 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,4 +59,110 @@ dot.render('static/data_flow', format='png', cleanup=True)
5959

6060
![Data flow diagram](static/data_flow.png)
6161

62-
The advantage of the PRG pattern is that it is very straightforward to implement and keeps most of the rendering logic on the server side. The disadvantage is that it requires an extra round trip to the database to fetch the updated data, and re-rendering the entire page template may be less efficient than a partial page update on the client side.
62+
The advantage of the PRG pattern is that it is very straightforward to implement and keeps most of the rendering logic on the server side. The disadvantage is that it requires an extra round trip to the database to fetch the updated data, and re-rendering the entire page template may be less efficient than a partial page update on the client side.
63+
64+
## Form validation flow
65+
66+
We've experimented with several approaches to validating form inputs in the FastAPI endpoints.
67+
68+
### Objectives
69+
70+
Ideally, on an invalid input, we would redirect the user back to the form, preserving their inputs and displaying an error message about which input was invalid.
71+
72+
This would keep the error handling consistent with the PRG pattern described in the [Architecture](https://promptlytechnologies.com/fastapi-jinja2-postgres-webapp/docs/architecture) section of this documentation.
73+
74+
To keep the code DRY, we'd also like to handle such validation with Pydantic dependencies, Python exceptions, and exception-handling middleware as much as possible.
75+
76+
### Obstacles
77+
78+
One challenge is that if we redirect back to the page with the form, the page is re-rendered with empty form fields.
79+
80+
This can be overcome by passing the inputs from the request as context variables to the template.
81+
82+
But that's a bit clunky, because then we have to support form-specific context variables in every form page and corresponding GET endpoint.
83+
84+
Also, we have to:
85+
86+
1. access the request object (which is not by default available to our middleware), and
87+
2. extract the form inputs (at least one of which is invalid in this error case), and
88+
3. pass the form inputs to the template (which is a bit challenging to do in a DRY way since there are different sets of form inputs for different forms).
89+
90+
Solving these challenges is possible, but gets high-complexity pretty quickly.
91+
92+
### Approaches
93+
94+
The best solution, I think, is to use really robust client-side form validation to prevent invalid inputs from being sent to the server in the first place. That makes it less important what we do on the server side, although we still need to handle the server-side error case as a backup in the event that something slips past our validation on the client side.
95+
96+
Here are some patterns we've considered for server-side error handling:
97+
98+
<style>
99+
.styled-table, .styled-table th, .styled-table td {
100+
border: 1px solid black;
101+
padding: 8px;
102+
border-collapse: collapse;
103+
}
104+
105+
.styled-table th:nth-child(1) { width: 5%; }
106+
.styled-table th:nth-child(2) { width: 50%; }
107+
.styled-table th:nth-child(3),
108+
.styled-table th:nth-child(4),
109+
.styled-table th:nth-child(5) { width: 15%; }
110+
.styled-table th:nth-child(6) { width: 10%; }
111+
</style>
112+
113+
<table class="styled-table">
114+
<thead>
115+
<tr>
116+
<th>ID</th>
117+
<th>Approach</th>
118+
<th>Returns to same page</th>
119+
<th>Preserves form inputs</th>
120+
<th>Follows PRG pattern</th>
121+
<th>Complexity</th>
122+
</tr>
123+
</thead>
124+
<tbody>
125+
<tr>
126+
<td>1</td>
127+
<td>Validate with Pydantic dependency, catch and redirect from middleware (with exception message as context) to an error page with "go back" button</td>
128+
<td>No</td>
129+
<td>Yes</td>
130+
<td>Yes</td>
131+
<td>Low</td>
132+
</tr>
133+
<tr>
134+
<td>2</td>
135+
<td>Validate in FastAPI endpoint function body, redirect to origin page with error message query param</td>
136+
<td>Yes</td>
137+
<td>No</td>
138+
<td>Yes</td>
139+
<td>Medium</td>
140+
</tr>
141+
<tr>
142+
<td>3</td>
143+
<td>Validate in FastAPI endpoint function body, redirect to origin page with error message query param and form inputs as context so we can re-render page with original form inputs</td>
144+
<td>Yes</td>
145+
<td>Yes</td>
146+
<td>Yes</td>
147+
<td>High</td>
148+
</tr>
149+
<tr>
150+
<td>4</td>
151+
<td>Validate with Pydantic dependency, use session context to get form inputs from request, redirect to origin page from middleware with exception message and form inputs as context so we can re-render page with original form inputs</td>
152+
<td>Yes</td>
153+
<td>Yes</td>
154+
<td>Yes</td>
155+
<td>High</td>
156+
</tr>
157+
<tr>
158+
<td>5</td>
159+
<td>Validate in either Pydantic dependency or function endpoint body and directly return error message or error toast HTML partial in JSON, then mount error toast with HTMX or some simple layout-level Javascript</td>
160+
<td>Yes</td>
161+
<td>Yes</td>
162+
<td>No</td>
163+
<td>Low</td>
164+
</tr>
165+
</tbody>
166+
</table>
167+
168+
Presently this template primarily uses option 1 but also supports option 2. Ultimately, I think option 5 will be preferable; support for that [is planned](https://github.com/Promptly-Technologies-LLC/fastapi-jinja2-postgres-webapp/issues/5) for a future update or fork of this template.

docs/authentication.qmd

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ This template implements a comprehensive authentication system with security bes
3232

3333
The diagrams below show the main authentication flows.
3434

35-
### Registration and login flow
35+
## Registration and login flow
3636

3737
``` {python}
3838
#| echo: false
@@ -87,7 +87,7 @@ auth.render('static/auth_flow', format='png', cleanup=True)
8787

8888
![Registration and login flow](static/auth_flow.png)
8989

90-
### Password reset flow
90+
## Password reset flow
9191

9292
``` {python}
9393
#| echo: false

docs/contributing.qmd

Lines changed: 49 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,46 @@ title: "Contributing"
44

55
## Contributors
66

7-
Fork the repository, create a new branch, make your changes, and submit a pull request.
7+
### Opening issues and bug reports
88

9-
### Render the documentation
9+
When opening a new issue or submitting a bug report, please include:
1010

11-
The README and documentation website are rendered with [Quarto](https://quarto.org/docs/). Make changes to the `.qmd` files in the root folder and the `docs` folder. Then run the following commands to render:
11+
1. A clear, descriptive title
12+
2. For bug reports:
13+
- Description of the expected behavior
14+
- Description of the actual behavior
15+
- Steps to reproduce the issue
16+
- Version information (OS, Python version, package version)
17+
- Any relevant error messages or screenshots
18+
3. For feature requests:
19+
- Description of the proposed feature
20+
- Use case or motivation for the feature
21+
- Any implementation suggestions (optional)
22+
23+
Labels help categorize issues:
24+
- Use `bug` for reporting problems
25+
- Use `enhancement` for feature requests
26+
- Use `documentation` for documentation improvements
27+
- Use `question` for general queries
28+
29+
### Contributing code
30+
31+
To contribute code to the project:
32+
33+
1. Fork the repository and clone your fork locally
34+
2. Create a new branch from `main` with a descriptive name
35+
3. Review the [customization](https://promptlytechnologies.com/fastapi-jinja2-postgres-webapp/customization.html), [architecture](https://promptlytechnologies.com/fastapi-jinja2-postgres-webapp/architecture.html), and [authentication](https://promptlytechnologies.com/fastapi-jinja2-postgres-webapp/authentication.html) pages for guidance on design patterns and code structure and style
36+
4. Ensure all tests pass, including `mypy` type checking
37+
5. Stage, commit, and push your changes to the branch:
38+
- Use clear, descriptive commit messages
39+
- Keep commits focused and atomic
40+
6. Submit your pull request:
41+
- Provide a clear description of the changes
42+
- Link to any related issues
43+
44+
### Rendering the documentation
45+
46+
The README and documentation website are rendered with [Quarto](https://quarto.org/docs/). If you ,make changes to the `.qmd` files in the root folder and the `docs` folder, run the following commands to re-render the docs:
1247

1348
``` bash
1449
# To render the documentation website
@@ -19,17 +54,22 @@ quarto render index.qmd --output-dir . --output README.md --to gfm
1954

2055
Due to a quirk of Quarto, an unnecessary `index.html` file is created in the root folder when the README is rendered. This file can be safely deleted.
2156

57+
Note that even if your pull request is merged, your changes will not be reflected on the live website until a maintainer republishes the docs.
58+
2259
## Maintainers
2360

24-
### Increment the version
61+
### Git flow
2562

26-
Run the following command to increment the version:
63+
When creating new features,
2764

28-
``` bash
29-
poetry version patch minor
30-
```
65+
1. Open a Github issue with the label `feature` and assign it to yourself.
66+
2. Create a new branch from the issue sidebar.
67+
3. Follow the instructions in the popup to check out the branch locally and make your changes on the branch.
68+
4. Commit your changes and push to the branch.
69+
5. When you are ready to merge, open a pull request from the branch to main.
70+
6. Assign someone else for code review.
3171

32-
### Publish the documentation
72+
### Publishing the documentation
3373

3474
To publish the documentation to GitHub Pages, run the following command:
3575

0 commit comments

Comments
 (0)