django-cfg 1.1.73__tar.gz → 1.1.75__tar.gz

{django_cfg-1.1.73 → django_cfg-1.1.75}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-cfg
-Version: 1.1.73
+Version: 1.1.75
 Summary: 🚀 Production-ready Django configuration framework with type-safe settings, smart automation, and modern developer experience
 Project-URL: Homepage, https://github.com/markolofsen/django-cfg
 Project-URL: Documentation, https://django-cfg.readthedocs.io
@@ -552,31 +552,68 @@ def queue_document_processing(sender, instance, created, **kwargs):
 
 Django-CFG includes powerful management commands for development and operations:
 
+### 🗄️ Database & Migration Commands
+| Command | Description | Example |
+|---------|-------------|---------|
+| **`migrator`** | Interactive database migration tool with multi-DB support | `python manage.py migrator --auto` |
+| **`migrate_all`** | Simple migration command for all databases (production-ready) | `python manage.py migrate_all --dry-run` |
+
+**Migration Command Details:**
+- **`migrator`** - Full-featured migration tool with interactive menu, database status, and diagnostics
+  - `python manage.py migrator` - Interactive menu with all options
+  - `python manage.py migrator --auto` - Automatic migration of all databases
+  - `python manage.py migrator --database vehicles` - Migrate specific database only
+  - `python manage.py migrator --app vehicles_data` - Migrate specific app across all databases
+- **`migrate_all`** - Simplified migration tool optimized for production and CI/CD
+  - `python manage.py migrate_all` - Migrate all databases automatically
+  - `python manage.py migrate_all --dry-run` - Show what would be migrated without executing
+  - `python manage.py migrate_all --skip-makemigrations` - Skip makemigrations step
+
+### 🔧 Configuration & Validation Commands
 | Command | Description | Example |
 |---------|-------------|---------|
 | **`check_settings`** | Validate configuration and settings | `python manage.py check_settings` |
+| **`show_config`** | Display current configuration | `python manage.py show_config --format yaml` |
+| **`validate_config`** | Deep validation of all settings | `python manage.py validate_config --strict` |
+| **`tree`** | Display Django project structure | `python manage.py tree --depth 3 --include-docs` |
+
+### 🚀 API & Development Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`create_token`** | Generate API tokens and keys | `python manage.py create_token --user admin` |
 | **`generate`** | Generate API clients and documentation | `python manage.py generate --zone client` |
-| **`migrator`** | Smart database migrations with routing | `python manage.py migrator --apps blog,shop` |
-| **`script`** | Run custom scripts with Django context | `python manage.py script my_script.py` |
-| **`show_config`** | Display current configuration | `python manage.py show_config --format yaml` |
 | **`show_urls`** | Display all URL patterns | `python manage.py show_urls --zone client` |
+| **`script`** | Run custom scripts with Django context | `python manage.py script my_script.py` |
+| **`runserver_ngrok`** | Run development server with ngrok tunnel | `python manage.py runserver_ngrok --domain custom` |
+
+### 👤 User & Authentication Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`superuser`** | Create superuser with smart defaults | `python manage.py superuser --email admin@example.com` |
+
+### 📧 Communication & Integration Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`test_email`** | Test email configuration | `python manage.py test_email --to test@example.com` |
 | **`test_telegram`** | Test Telegram bot integration | `python manage.py test_telegram --chat_id 123` |
 | **`test_twilio`** | Test Twilio SMS and WhatsApp integration | `python manage.py test_twilio` |
 | **`translate_content`** | Translate JSON with LLM and smart caching | `python manage.py translate_content --target-lang es` |
+
+### 🎫 Built-in Module Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`support_stats`** | Display support ticket statistics | `python manage.py support_stats --format json` |
 | **`test_newsletter`** | Test newsletter sending functionality | `python manage.py test_newsletter --email test@example.com` |
 | **`newsletter_stats`** | Display newsletter campaign statistics | `python manage.py newsletter_stats --format json` |
 | **`leads_stats`** | Display lead conversion statistics | `python manage.py leads_stats --format json` |
-| **`runserver_ngrok`** | Run development server with ngrok tunnel | `python manage.py runserver_ngrok --domain custom` |
+
+### 🔄 Background Task Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`rundramatiq`** | Run Dramatiq background task workers | `python manage.py rundramatiq --processes 4` |
 | **`task_status`** | Show Dramatiq task status and queues | `python manage.py task_status --queue high` |
 | **`task_clear`** | Clear Dramatiq queues | `python manage.py task_clear --queue default` |
 | **`test_tasks`** | Test Dramatiq task processing pipeline | `python manage.py test_tasks --document-id 123` |
-| **`tree`** | Display Django project structure | `python manage.py tree --depth 3 --include-docs` |
-| **`validate_config`** | Deep validation of all settings | `python manage.py validate_config --strict` |
 
 ---
 

{django_cfg-1.1.73 → django_cfg-1.1.75}/README.md

@@ -425,31 +425,68 @@ def queue_document_processing(sender, instance, created, **kwargs):
 
 Django-CFG includes powerful management commands for development and operations:
 
+### 🗄️ Database & Migration Commands
+| Command | Description | Example |
+|---------|-------------|---------|
+| **`migrator`** | Interactive database migration tool with multi-DB support | `python manage.py migrator --auto` |
+| **`migrate_all`** | Simple migration command for all databases (production-ready) | `python manage.py migrate_all --dry-run` |
+
+**Migration Command Details:**
+- **`migrator`** - Full-featured migration tool with interactive menu, database status, and diagnostics
+  - `python manage.py migrator` - Interactive menu with all options
+  - `python manage.py migrator --auto` - Automatic migration of all databases
+  - `python manage.py migrator --database vehicles` - Migrate specific database only
+  - `python manage.py migrator --app vehicles_data` - Migrate specific app across all databases
+- **`migrate_all`** - Simplified migration tool optimized for production and CI/CD
+  - `python manage.py migrate_all` - Migrate all databases automatically
+  - `python manage.py migrate_all --dry-run` - Show what would be migrated without executing
+  - `python manage.py migrate_all --skip-makemigrations` - Skip makemigrations step
+
+### 🔧 Configuration & Validation Commands
 | Command | Description | Example |
 |---------|-------------|---------|
 | **`check_settings`** | Validate configuration and settings | `python manage.py check_settings` |
+| **`show_config`** | Display current configuration | `python manage.py show_config --format yaml` |
+| **`validate_config`** | Deep validation of all settings | `python manage.py validate_config --strict` |
+| **`tree`** | Display Django project structure | `python manage.py tree --depth 3 --include-docs` |
+
+### 🚀 API & Development Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`create_token`** | Generate API tokens and keys | `python manage.py create_token --user admin` |
 | **`generate`** | Generate API clients and documentation | `python manage.py generate --zone client` |
-| **`migrator`** | Smart database migrations with routing | `python manage.py migrator --apps blog,shop` |
-| **`script`** | Run custom scripts with Django context | `python manage.py script my_script.py` |
-| **`show_config`** | Display current configuration | `python manage.py show_config --format yaml` |
 | **`show_urls`** | Display all URL patterns | `python manage.py show_urls --zone client` |
+| **`script`** | Run custom scripts with Django context | `python manage.py script my_script.py` |
+| **`runserver_ngrok`** | Run development server with ngrok tunnel | `python manage.py runserver_ngrok --domain custom` |
+
+### 👤 User & Authentication Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`superuser`** | Create superuser with smart defaults | `python manage.py superuser --email admin@example.com` |
+
+### 📧 Communication & Integration Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`test_email`** | Test email configuration | `python manage.py test_email --to test@example.com` |
 | **`test_telegram`** | Test Telegram bot integration | `python manage.py test_telegram --chat_id 123` |
 | **`test_twilio`** | Test Twilio SMS and WhatsApp integration | `python manage.py test_twilio` |
 | **`translate_content`** | Translate JSON with LLM and smart caching | `python manage.py translate_content --target-lang es` |
+
+### 🎫 Built-in Module Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`support_stats`** | Display support ticket statistics | `python manage.py support_stats --format json` |
 | **`test_newsletter`** | Test newsletter sending functionality | `python manage.py test_newsletter --email test@example.com` |
 | **`newsletter_stats`** | Display newsletter campaign statistics | `python manage.py newsletter_stats --format json` |
 | **`leads_stats`** | Display lead conversion statistics | `python manage.py leads_stats --format json` |
-| **`runserver_ngrok`** | Run development server with ngrok tunnel | `python manage.py runserver_ngrok --domain custom` |
+
+### 🔄 Background Task Commands
+| Command | Description | Example |
+|---------|-------------|---------|
 | **`rundramatiq`** | Run Dramatiq background task workers | `python manage.py rundramatiq --processes 4` |
 | **`task_status`** | Show Dramatiq task status and queues | `python manage.py task_status --queue high` |
 | **`task_clear`** | Clear Dramatiq queues | `python manage.py task_clear --queue default` |
 | **`test_tasks`** | Test Dramatiq task processing pipeline | `python manage.py test_tasks --document-id 123` |
-| **`tree`** | Display Django project structure | `python manage.py tree --depth 3 --include-docs` |
-| **`validate_config`** | Deep validation of all settings | `python manage.py validate_config --strict` |
 
 ---
 

{django_cfg-1.1.73 → django_cfg-1.1.75}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "django-cfg"
-version = "1.1.73"
+version = "1.1.75"
 description = "🚀 Production-ready Django configuration framework with type-safe settings, smart automation, and modern developer experience"
 readme = "README.md"
 license = {text = "MIT"}

{django_cfg-1.1.73 → django_cfg-1.1.75}/src/django_cfg/__init__.py

@@ -38,7 +38,7 @@ default_app_config = "django_cfg.apps.DjangoCfgConfig"
 from typing import TYPE_CHECKING
 
 # Version information
-__version__ = "1.1.73"
+__version__ = "1.1.75"
 __author__ = "Unrealos Team"
 __email__ = "info@unrealos.com"
 __license__ = "MIT"

{django_cfg-1.1.73 → django_cfg-1.1.75}/src/django_cfg/apps/accounts/managers/user_manager.py

@@ -83,8 +83,8 @@ class UserManager(UserManager):
                 f"Attempting to get_or_create user with email: {email}, username: {username}"
             )
 
-            # Create or get user using self.model instead of importing CustomUser
-            user, created = self.model.objects.get_or_create(
+            # Create or get user using self (the manager)
+            user, created = self.get_or_create(
                 email=email, defaults=defaults
             )
 

{django_cfg-1.1.73 → django_cfg-1.1.75}/src/django_cfg/core/config.py

@@ -633,6 +633,7 @@ class DjangoConfig(BaseModel):
             "django.contrib.sessions.middleware.SessionMiddleware",
             "django.middleware.common.CommonMiddleware",
             "django.middleware.csrf.CsrfViewMiddleware",
+            "django_cfg.middleware.PublicEndpointsMiddleware",  # Handle invalid JWT tokens on public endpoints
             "django.contrib.auth.middleware.AuthenticationMiddleware",
             "django.contrib.messages.middleware.MessageMiddleware",
             "django.middleware.clickjacking.XFrameOptionsMiddleware",

django_cfg-1.1.75/src/django_cfg/management/commands/migrate_all.py

@@ -0,0 +1,117 @@
+"""
+Simple Migration Command for Django Config Toolkit
+Migrate all databases based on django-cfg configuration.
+"""
+
+from django.core.management.base import BaseCommand
+from django.core.management import call_command
+from django.apps import apps
+
+from django_cfg.core.config import get_current_config
+
+
+class Command(BaseCommand):
+    help = "Migrate all databases based on django-cfg configuration"
+
+    def add_arguments(self, parser):
+        parser.add_argument(
+            "--dry-run", 
+            action="store_true", 
+            help="Show what would be migrated without executing"
+        )
+        parser.add_argument(
+            "--skip-makemigrations",
+            action="store_true",
+            help="Skip makemigrations step"
+        )
+
+    def handle(self, *args, **options):
+        """Run migrations for all configured databases."""
+        dry_run = options.get("dry_run", False)
+        skip_makemigrations = options.get("skip_makemigrations", False)
+        
+        if dry_run:
+            self.stdout.write(self.style.WARNING("🔍 DRY RUN - No changes will be made"))
+        
+        self.stdout.write(self.style.SUCCESS("🚀 Migrating all databases..."))
+
+        # Step 1: Create migrations if needed
+        if not skip_makemigrations:
+            self.stdout.write("📝 Creating migrations...")
+            if not dry_run:
+                call_command("makemigrations", verbosity=1)
+            else:
+                self.stdout.write("  Would run: makemigrations")
+
+        # Step 2: Get database configuration
+        try:
+            config = get_current_config()
+            if not config or not hasattr(config, 'databases'):
+                self.stdout.write(self.style.ERROR("❌ No django-cfg configuration found"))
+                return
+        except Exception as e:
+            self.stdout.write(self.style.ERROR(f"❌ Error loading configuration: {e}"))
+            return
+
+        # Step 3: Migrate each database
+        for db_name, db_config in config.databases.items():
+            self.stdout.write(f"\n🔄 Migrating database: {db_name}")
+            
+            if hasattr(db_config, 'apps') and db_config.apps:
+                # Migrate specific apps for this database
+                for app_path in db_config.apps:
+                    app_label = self._get_app_label(app_path)
+                    if app_label:
+                        self.stdout.write(f"  📦 Migrating {app_label}...")
+                        if not dry_run:
+                            try:
+                                call_command("migrate", app_label, database=db_name, verbosity=1)
+                            except Exception as e:
+                                self.stdout.write(self.style.WARNING(f"  ⚠️  Warning: {e}"))
+                        else:
+                            self.stdout.write(f"  Would run: migrate {app_label} --database={db_name}")
+            else:
+                # Migrate all apps for this database (usually default)
+                self.stdout.write(f"  📦 Migrating all apps...")
+                if not dry_run:
+                    try:
+                        call_command("migrate", database=db_name, verbosity=1)
+                    except Exception as e:
+                        self.stdout.write(self.style.WARNING(f"  ⚠️  Warning: {e}"))
+                else:
+                    self.stdout.write(f"  Would run: migrate --database={db_name}")
+
+        # Step 4: Migrate constance if needed
+        self.stdout.write(f"\n🔧 Migrating constance...")
+        if not dry_run:
+            try:
+                call_command("migrate", "constance", database="default", verbosity=1)
+            except Exception as e:
+                self.stdout.write(self.style.WARNING(f"⚠️  Constance warning: {e}"))
+        else:
+            self.stdout.write("  Would run: migrate constance --database=default")
+
+        self.stdout.write(self.style.SUCCESS("\n✅ All migrations completed!"))
+
+    def _get_app_label(self, app_path: str) -> str:
+        """Convert full module path to Django app_label."""
+        try:
+            # Try to get app config by full path first
+            try:
+                app_config = apps.get_app_config(app_path)
+                return app_config.label
+            except LookupError:
+                pass
+            
+            # Fallback: extract last part of the path as potential app_label
+            potential_label = app_path.split('.')[-1]
+            try:
+                app_config = apps.get_app_config(potential_label)
+                return app_config.label
+            except LookupError:
+                pass
+                
+            return app_path
+            
+        except Exception:
+            return app_path

django_cfg-1.1.75/src/django_cfg/middleware/README.md

@@ -0,0 +1,318 @@
+# 🛡️ Django CFG Middleware
+
+Custom Django middleware components for Django CFG applications.
+
+## 📋 Contents
+
+- [UserActivityMiddleware](#useractivitymiddleware) - User activity tracking
+- [PublicEndpointsMiddleware](#publicendpointsmiddleware) - Ignore invalid JWT tokens on public endpoints
+
+## UserActivityMiddleware
+
+Middleware for automatic user activity tracking by updating the `last_login` field on API requests.
+
+### ✨ Features
+
+- ✅ Automatic `last_login` update on API requests
+- ✅ Smart API request detection (JSON, DRF, REST methods)
+- ✅ 5-minute update interval to prevent database spam
+- ✅ In-memory caching for performance optimization
+- ✅ Only works when `accounts` app is enabled
+- ✅ KISS principle - no configuration needed
+
+### 🚀 Automatic Integration
+
+The middleware is automatically included when `enable_accounts = True`:
+
+```python
+class MyConfig(DjangoConfig):
+    enable_accounts = True  # UserActivityMiddleware will be auto-included
+```
+
+### 🎯 API Request Detection
+
+The middleware intelligently detects API requests using:
+
+1. **JSON Content-Type or Accept header**
+   ```
+   Content-Type: application/json
+   Accept: application/json
+   ```
+
+2. **DRF format parameter**
+   ```
+   ?format=json
+   ?format=api
+   ```
+
+3. **REST methods** (POST, PUT, PATCH, DELETE) on non-admin paths
+
+4. **Configured API prefixes**
+   - Django Revolution API: `/{api_prefix}/` (from config)
+   - Django CFG API: `/cfg/` (always)
+
+### 📊 Statistics
+
+Get middleware statistics:
+
+```python
+from django_cfg.middleware import UserActivityMiddleware
+
+# In view or management command
+middleware = UserActivityMiddleware()
+stats = middleware.get_activity_stats()
+
+print(stats)
+# {
+#     'tracked_users': 42,
+#     'update_interval': 300,
+#     'api_only': True,
+#     'accounts_enabled': True,
+#     'middleware_active': True
+# }
+```
+
+### 🔍 Logging
+
+The middleware logs activity at DEBUG level:
+
+```python
+# settings.py
+LOGGING = {
+    'loggers': {
+        'django_cfg.middleware.user_activity': {
+            'level': 'DEBUG',
+            'handlers': ['console'],
+        },
+    },
+}
+```
+
+### 🎛️ Manual Integration
+
+If you need to include the middleware manually:
+
+```python
+# settings.py
+MIDDLEWARE = [
+    # ... other middleware
+    'django_cfg.middleware.UserActivityMiddleware',
+]
+```
+
+### 🔧 Performance
+
+- **Caching**: Last update times are cached in memory
+- **Batch updates**: Uses `update()` instead of `save()` for optimization
+- **Auto-cleanup**: Cache automatically cleans up when exceeding 1000 users
+- **Graceful errors**: Errors don't break request processing
+
+### 🎯 Admin Integration
+
+The `last_login` field is automatically displayed in accounts admin:
+
+- ✅ In user list view (`last_login_display`)
+- ✅ In user detail view
+- ✅ With human-readable time format
+
+### 🚨 Important Notes
+
+1. **Accounts only**: Middleware only works when `enable_accounts = True`
+2. **Authentication**: Only tracks authenticated users
+3. **Performance**: 5-minute interval prevents database spam
+4. **Safety**: Middleware doesn't break requests on errors
+
+### 📈 Monitoring
+
+For user activity monitoring:
+
+```python
+# In Django admin or management command
+from django.contrib.auth import get_user_model
+from django.utils import timezone
+from datetime import timedelta
+
+User = get_user_model()
+
+# Active users in the last hour
+active_users = User.objects.filter(
+    last_login__gte=timezone.now() - timedelta(hours=1)
+).count()
+
+# Online users (last 5 minutes)
+online_users = User.objects.filter(
+    last_login__gte=timezone.now() - timedelta(minutes=5)
+).count()
+```
+
+### 💡 Usage Examples
+
+The middleware works automatically with no configuration needed:
+
+```python
+# Your DjangoConfig
+class MyProjectConfig(DjangoConfig):
+    enable_accounts = True  # That's it! Middleware is active
+
+# API requests will automatically update last_login:
+# POST /cfg/accounts/profile/
+# GET /api/users/?format=json
+# PUT /cfg/newsletter/subscribe/
+```
+
+## PublicEndpointsMiddleware
+
+Middleware that temporarily removes invalid JWT tokens from public endpoints to prevent authentication errors.
+
+### ✨ Features
+
+- ✅ **Automatic activation** - No configuration needed, works out of the box
+- ✅ **Smart endpoint detection** - Configurable regex patterns for public endpoints
+- ✅ **JWT token detection** - Only processes requests with Bearer tokens
+- ✅ **Temporary removal** - Auth headers are restored after request processing
+- ✅ **Performance optimized** - Compiled regex patterns for fast matching
+- ✅ **Detailed logging** - Debug information for troubleshooting
+- ✅ **Statistics tracking** - Monitor middleware usage and effectiveness
+
+### 🎯 Problem Solved
+
+When a frontend sends an invalid/expired JWT token to a public endpoint (like OTP request), Django's authentication middleware tries to authenticate the user and fails with "User not found" errors, even though the endpoint has `AllowAny` permissions.
+
+This middleware temporarily removes the `Authorization` header for public endpoints, allowing them to work without authentication errors.
+
+### 🚀 Automatic Integration
+
+The middleware is **automatically included** in all Django CFG projects:
+
+```python
+class MyConfig(DjangoConfig):
+    # No configuration needed - PublicEndpointsMiddleware is always active
+    pass
+```
+
+### 🎯 Default Public Endpoints
+
+The middleware protects these endpoints by default:
+
+```python
+DEFAULT_PUBLIC_PATTERNS = [
+    r'^/api/accounts/otp/',           # OTP endpoints (request, verify)
+    r'^/cfg/accounts/otp/',           # CFG OTP endpoints
+    r'^/api/accounts/token/refresh/', # Token refresh
+    r'^/cfg/accounts/token/refresh/', # CFG Token refresh
+    r'^/api/health/',                 # Health check endpoints
+    r'^/cfg/api/health/',             # CFG Health check endpoints
+    r'^/admin/login/',                # Django admin login
+    r'^/api/schema/',                 # API schema endpoints
+    r'^/api/docs/',                   # API documentation
+]
+```
+
+### ⚙️ Custom Configuration
+
+You can customize public endpoint patterns in your Django settings:
+
+```python
+# settings.py (optional)
+PUBLIC_ENDPOINT_PATTERNS = [
+    r'^/api/accounts/otp/',
+    r'^/api/public/',
+    r'^/api/webhooks/',
+    # Add your custom patterns here
+]
+```
+
+### 🔍 How It Works
+
+1. **Request Processing**: Middleware checks if the request path matches public endpoint patterns
+2. **Token Detection**: If a Bearer token is present, it's temporarily removed
+3. **Request Handling**: Django processes the request without authentication
+4. **Token Restoration**: The original Authorization header is restored after processing
+
+### 📊 Statistics
+
+Get middleware statistics for monitoring:
+
+```python
+from django_cfg.middleware import PublicEndpointsMiddleware
+
+# In your view or management command
+middleware = PublicEndpointsMiddleware()
+stats = middleware.get_stats()
+
+print(stats)
+# {
+#     'requests_processed': 1250,
+#     'tokens_ignored': 45,
+#     'public_endpoints_hit': 120,
+#     'public_patterns_count': 9,
+#     'middleware_active': True
+# }
+```
+
+### 🔍 Logging
+
+The middleware logs activity at DEBUG level:
+
+```python
+# settings.py
+LOGGING = {
+    'loggers': {
+        'django_cfg.middleware.public_endpoints': {
+            'level': 'DEBUG',
+            'handlers': ['console'],
+        },
+    },
+}
+```
+
+### 🎛️ Manual Integration
+
+If you need to include the middleware manually (not recommended):
+
+```python
+# settings.py
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
+    'django_cfg.middleware.PublicEndpointsMiddleware',  # Add early in stack
+    # ... other middleware
+]
+```
+
+### 🚨 Important Notes
+
+1. **Always Active**: Middleware is included by default in all Django CFG projects
+2. **Performance**: Uses compiled regex patterns for fast endpoint matching
+3. **Safety**: Only removes Authorization headers temporarily, restores them after processing
+4. **Logging**: All actions are logged for debugging and monitoring
+
+### 💡 Usage Examples
+
+The middleware works automatically with no configuration needed:
+
+```python
+# Your DjangoConfig
+class MyProjectConfig(DjangoConfig):
+    # PublicEndpointsMiddleware is automatically active
+    pass
+
+# These requests will work even with invalid tokens:
+# POST /api/accounts/otp/request/ (with expired Bearer token)
+# POST /cfg/accounts/otp/verify/ (with invalid Bearer token)
+# GET /api/health/ (with any Bearer token)
+```
+
+### 🔧 Frontend Integration
+
+Perfect companion to frontend error handling:
+
+```typescript
+// Frontend automatically clears invalid tokens on 401/403
+// Middleware ensures public endpoints work during token cleanup
+const response = await api.requestOTP({
+  identifier: "user@example.com",
+  channel: "email"
+});
+// ✅ Works even if localStorage has invalid token
+```

{django_cfg-1.1.73 → django_cfg-1.1.75}/src/django_cfg/middleware/__init__.py

@@ -5,7 +5,9 @@ Provides middleware components for Django CFG applications.
 """
 
 from .user_activity import UserActivityMiddleware
+from .public_endpoints import PublicEndpointsMiddleware
 
 __all__ = [
     'UserActivityMiddleware',
+    'PublicEndpointsMiddleware',
 ]