django-nativemojo 0.1.10__tar.gz

django_nativemojo-0.1.10/LICENSE

@@ -0,0 +1,19 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+Copyright [2025] Native Mojo
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

django_nativemojo-0.1.10/NOTICE

@@ -0,0 +1,8 @@
+Native Mojo Framework
+Copyright 2025 Native Mojo
+
+This product includes software developed by Native Mojo.
+Licensed under the Apache License, Version 2.0 (the "License").
+
+You may obtain a copy of the License at:
+http://www.apache.org/licenses/LICENSE-2.0

django_nativemojo-0.1.10/PKG-INFO

@@ -0,0 +1,96 @@
+Metadata-Version: 2.3
+Name: django-nativemojo
+Version: 0.1.10
+Summary: A REST framework for DJANGO with some extra apps that make it easy to provide a secure robust graph like RESIT API.
+License: MIT
+Author: MOJO Dev Team
+Author-email: gotmojo@nativemojo.com
+Requires-Python: >=3.9,<4.0
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Requires-Dist: django (>=4.2.18,<6.0.0)
+Requires-Dist: django-cors-headers (>=4.7.0,<5.0.0)
+Requires-Dist: faker (>=35.2.0,<36.0.0)
+Requires-Dist: gevent (>=25.5.1,<26.0.0)
+Requires-Dist: pycryptodome (>=3.21.0,<4.0.0)
+Requires-Dist: pyjwt (>=2.10.1,<3.0.0)
+Requires-Dist: pyobjict (>=2.0.2,<4.0.0)
+Requires-Dist: pytz (>=2025.1,<2026.0)
+Requires-Dist: redis (>=3.5.3,<6.0.0)
+Requires-Dist: requests (>=2.32.3,<3.0.0)
+Requires-Dist: ua-parser (>=1.0.1,<2.0.0)
+Requires-Dist: ujson (>=5.10.0,<6.0.0)
+Description-Content-Type: text/markdown
+
+# Django-MOJO Documentation
+
+Django-MOJO is a streamlined set of Django applications and a lightweight REST framework designed to simplify user authentication, authorization, and efficient API testing. This documentation provides descriptions and examples to help you get started quickly.
+
+## Why Django-MOJO?
+
+We built Django-MOJO to address the complexity and overhead of existing REST frameworks. Many frameworks are feature-heavy, making them cumbersome for projects that require simplicity, speed, and robust security.
+
+## Key Differentiators
+
+- **Lightweight Framework:** Django-MOJO is minimalistic, providing an easy way to add REST APIs to your Django models without unnecessary complexity.
+- **Built-in Security:** Security is integral to Django-MOJO. We offer an alternative to Django's built-in permissions system, automatically protecting your REST APIs and data.
+- **Robust Object-Level Permission System:** Unlike Django's native model-level permissions, Django-MOJO provides a simple yet robust permission system at the object level. This allows fine-grained control, enabling permissions to be applied to individual objects and extended to both user and group levels.
+- **Effortless Integration:** Adding REST endpoints to your models is straightforward, enabling rapid development without compromising security or performance.
+
+With Django-MOJO, you get a simple, efficient framework with powerful security features designed for developers who value speed and control.
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [Installation](#installation)
+3. [MOJO.Auth - Authentication and Authorization](#mojo-auth)
+   - [JWT Authentication Middleware](#jwt-authentication)
+   - [Models](#models)
+   - [REST API](#mojo-auth-rest-api)
+4. [MOJO - REST Framework](#mojo)
+   - [URL Decorators](#url-decorators)
+   - [GraphSerializer](#graphserializer)
+5. [Testit - Testing Suite](#testit)
+   - [Writing Tests](#writing-tests)
+   - [Running Tests](#running-tests)
+6. [Taskit - Task Runner](#taskit)
+7. [Utilities](#utilities)
+8. [Contributing](#contributing)
+9. [License](#license)
+
+## Overview
+
+Django-MOJO is a collection of Django-based applications focused on authentication, task management, and testing. These tools are built to enhance development efficiency by providing utilities for common requirements such as user management, token-based authentication, and automated testing.
+
+## Installation
+
+```bash
+pip install django-nativemojo
+```
+
+## Detailed Documentation
+
+For detailed information about each module and its usage, refer to the documentation within the `docs` folder:
+
+- [MOJO Auth Documentation](docs/auth.md): Authentication and authorization management with JWT support.
+- [MOJO REST Documentation](docs/rest.md): Provides RESTful API capabilities for Django models.
+- [MOJO Testing Documentation](docs/testit.md): Offers tools and utilities for testing Django applications.
+- [MOJO Tasks Documentation](docs/tasks.md): Handles task management and processing with Redis.
+- [MOJO Decorators Documentation](docs/decorators.md): Describes decorators to enhance Django views with HTTP routing, validation, etc.
+- [Helpers Documentation](docs/helpers.md): Lists various helper utilities for common tasks.
+- [MOJO Metrics Documentation](docs/metrics.md): Details on recording and retrieving metrics using Redis.
+- [Cron Scheduler Documentation](docs/cron.md): Explains task scheduling using a cron syntax.
+
+## Contributing
+
+We welcome contributions! Please create an issue or submit a pull request on the GitHub repository.
+
+## License
+
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
+

django_nativemojo-0.1.10/README.md

@@ -0,0 +1,66 @@
+# Django-MOJO Documentation
+
+Django-MOJO is a streamlined set of Django applications and a lightweight REST framework designed to simplify user authentication, authorization, and efficient API testing. This documentation provides descriptions and examples to help you get started quickly.
+
+## Why Django-MOJO?
+
+We built Django-MOJO to address the complexity and overhead of existing REST frameworks. Many frameworks are feature-heavy, making them cumbersome for projects that require simplicity, speed, and robust security.
+
+## Key Differentiators
+
+- **Lightweight Framework:** Django-MOJO is minimalistic, providing an easy way to add REST APIs to your Django models without unnecessary complexity.
+- **Built-in Security:** Security is integral to Django-MOJO. We offer an alternative to Django's built-in permissions system, automatically protecting your REST APIs and data.
+- **Robust Object-Level Permission System:** Unlike Django's native model-level permissions, Django-MOJO provides a simple yet robust permission system at the object level. This allows fine-grained control, enabling permissions to be applied to individual objects and extended to both user and group levels.
+- **Effortless Integration:** Adding REST endpoints to your models is straightforward, enabling rapid development without compromising security or performance.
+
+With Django-MOJO, you get a simple, efficient framework with powerful security features designed for developers who value speed and control.
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [Installation](#installation)
+3. [MOJO.Auth - Authentication and Authorization](#mojo-auth)
+   - [JWT Authentication Middleware](#jwt-authentication)
+   - [Models](#models)
+   - [REST API](#mojo-auth-rest-api)
+4. [MOJO - REST Framework](#mojo)
+   - [URL Decorators](#url-decorators)
+   - [GraphSerializer](#graphserializer)
+5. [Testit - Testing Suite](#testit)
+   - [Writing Tests](#writing-tests)
+   - [Running Tests](#running-tests)
+6. [Taskit - Task Runner](#taskit)
+7. [Utilities](#utilities)
+8. [Contributing](#contributing)
+9. [License](#license)
+
+## Overview
+
+Django-MOJO is a collection of Django-based applications focused on authentication, task management, and testing. These tools are built to enhance development efficiency by providing utilities for common requirements such as user management, token-based authentication, and automated testing.
+
+## Installation
+
+```bash
+pip install django-nativemojo
+```
+
+## Detailed Documentation
+
+For detailed information about each module and its usage, refer to the documentation within the `docs` folder:
+
+- [MOJO Auth Documentation](docs/auth.md): Authentication and authorization management with JWT support.
+- [MOJO REST Documentation](docs/rest.md): Provides RESTful API capabilities for Django models.
+- [MOJO Testing Documentation](docs/testit.md): Offers tools and utilities for testing Django applications.
+- [MOJO Tasks Documentation](docs/tasks.md): Handles task management and processing with Redis.
+- [MOJO Decorators Documentation](docs/decorators.md): Describes decorators to enhance Django views with HTTP routing, validation, etc.
+- [Helpers Documentation](docs/helpers.md): Lists various helper utilities for common tasks.
+- [MOJO Metrics Documentation](docs/metrics.md): Details on recording and retrieving metrics using Redis.
+- [Cron Scheduler Documentation](docs/cron.md): Explains task scheduling using a cron syntax.
+
+## Contributing
+
+We welcome contributions! Please create an issue or submit a pull request on the GitHub repository.
+
+## License
+
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.

django_nativemojo-0.1.10/mojo/__init__.py

@@ -0,0 +1,3 @@
+__version__ = "0.1.10"
+
+from mojo.helpers.response import JsonResponse

django_nativemojo-0.1.10/mojo/apps/account/__init__.py

@@ -0,0 +1 @@
+default_app_config = 'account.apps.AppConfig'

django_nativemojo-0.1.10/mojo/apps/account/admin.py

@@ -0,0 +1,91 @@
+from django.contrib import admin
+from django.utils.translation import gettext_lazy as _
+from .models import User, Group, GroupMember
+
+
+class UserAdmin(admin.ModelAdmin):
+    """Custom Admin for the User model"""
+
+    # Fields displayed in the User list in Django Admin
+    list_display = ('username', 'email', 'first_name', 'last_name', 'is_staff', 'is_active', 'last_login', 'id')
+    list_filter = ('is_staff', 'is_active')
+
+    # Fields displayed when viewing/editing a user
+    fieldsets = (
+        (None, {'fields': ('username', 'password')}),
+        (_('Personal Info'), {'fields': ('first_name', 'last_name', 'email', 'phone_number', 'display_name')}),
+        (_('Permissions'), {'fields': ('is_active', 'is_staff', 'is_superuser')}),
+        (_('Important Dates'), {'fields': ('last_login', 'date_joined', 'last_activity')}),
+        (_('Metadata'), {'fields': ('permissions', 'metadata')}),
+    )
+
+    # Fields displayed when adding a new user
+    add_fieldsets = (
+        (None, {
+            'classes': ('wide',),
+            'fields': ('username', 'email', 'password'),
+        }),
+    )
+
+    # Searchable fields in the admin panel
+    search_fields = ('username', 'email', 'first_name', 'last_name')
+    ordering = ('username',)
+
+    # Read-only fields for security
+    readonly_fields = ('last_login', 'date_joined', 'last_activity')
+
+admin.site.register(User, UserAdmin)
+
+
+
+class GroupAdmin(admin.ModelAdmin):
+    """Custom Admin for the Group model"""
+
+    # Fields displayed in the Group list in Django Admin
+    list_display = ('name', 'uuid', 'kind', 'is_active', 'created', 'modified', 'parent', 'id')
+    list_filter = ('is_active', 'kind')
+
+    # Searchable fields
+    search_fields = ('name', 'uuid', 'kind')
+
+    # Read-only fields for security
+    readonly_fields = ('created', 'modified')
+
+    # Fields displayed when viewing/editing a group
+    fieldsets = (
+        (None, {'fields': ('name', 'uuid', 'kind', 'is_active', 'parent')}),
+        ('Metadata', {'fields': ('metadata',)}),
+        ('Timestamps', {'fields': ('created', 'modified')}),
+    )
+
+    autocomplete_fields = ('parent',)
+
+
+admin.site.register(Group, GroupAdmin)
+
+
+
+class GroupMemberAdmin(admin.ModelAdmin):
+    """Custom Admin for the GroupMember model"""
+
+    # Fields displayed in the GroupMember list in Django Admin
+    list_display = ('user', 'group', 'is_active', 'created', 'modified', 'id')
+    list_filter = ('is_active', 'group')
+
+    # Searchable fields
+    search_fields = ('user__username', 'user__email', 'group__name')
+
+    # Read-only fields for security
+    readonly_fields = ('created', 'modified')
+
+    # Fields displayed when viewing/editing a group member
+    fieldsets = (
+        (None, {'fields': ('user', 'group', 'is_active')}),
+        ('Permissions', {'fields': ('permissions',)}),
+        ('Metadata', {'fields': ('metadata',)}),
+        ('Timestamps', {'fields': ('created', 'modified')}),
+    )
+
+    autocomplete_fields = ('group', 'user', )
+
+admin.site.register(GroupMember, GroupMemberAdmin)

django_nativemojo-0.1.10/mojo/apps/account/apps.py

@@ -0,0 +1,16 @@
+from django.apps import AppConfig as BaseAppConfig
+
+class AppConfig(BaseAppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'mojo.apps.account'
+
+    def ready(self):
+        from mojo.helpers.settings import settings
+        if settings.is_app_installed("django.contrib.admin"):
+            self.unregister_apps()
+
+    def unregister_apps(self):
+        from django.contrib import admin
+        from django.contrib.auth.models import Group
+        for model in [Group]:
+            admin.site.unregister(model)

django_nativemojo-0.1.10/mojo/apps/account/migrations/0001_initial.py

@@ -0,0 +1,77 @@
+# Generated by Django 4.2.21 on 2025-05-29 21:29
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+import mojo.models.rest
+import uuid
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='User',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now_add=True)),
+                ('last_activity', models.DateTimeField(db_index=True, default=None, null=True)),
+                ('uuid', models.UUIDField(db_index=True, default=uuid.uuid4, editable=False)),
+                ('username', models.TextField(unique=True)),
+                ('email', models.EmailField(max_length=254, unique=True)),
+                ('phone_number', models.CharField(blank=True, default=None, max_length=32, null=True)),
+                ('display_name', models.CharField(blank=True, default=None, max_length=80, null=True)),
+                ('auth_key', models.TextField(default=None, null=True)),
+                ('onetime_code', models.TextField(default=None, null=True)),
+                ('permissions', models.JSONField(blank=True, default=dict)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('first_name', models.CharField(default='', max_length=80)),
+                ('last_name', models.CharField(default='', max_length=80)),
+                ('is_active', models.BooleanField(default=True)),
+                ('is_staff', models.BooleanField(default=False)),
+                ('is_superuser', models.BooleanField(default=False)),
+                ('date_joined', models.DateTimeField(auto_now_add=True)),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='Group',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('name', models.CharField(max_length=200)),
+                ('uuid', models.CharField(db_index=True, default=None, max_length=200, null=True)),
+                ('is_active', models.BooleanField(db_index=True, default=True)),
+                ('kind', models.CharField(db_index=True, default='group', max_length=80)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('parent', models.ForeignKey(default=None, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='groups', to='account.group')),
+            ],
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='GroupMember',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('is_active', models.BooleanField(db_index=True, default=True)),
+                ('permissions', models.JSONField(blank=True, default=dict)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('group', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='members', to='account.group')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='members', to=settings.AUTH_USER_MODEL)),
+            ],
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+    ]

django_nativemojo-0.1.10/mojo/apps/account/migrations/0002_user_is_email_verified_user_is_phone_verified.py

@@ -0,0 +1,23 @@
+# Generated by Django 4.2.21 on 2025-06-04 02:13
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('account', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='user',
+            name='is_email_verified',
+            field=models.BooleanField(default=False),
+        ),
+        migrations.AddField(
+            model_name='user',
+            name='is_phone_verified',
+            field=models.BooleanField(default=False),
+        ),
+    ]

django_nativemojo-0.1.10/mojo/apps/account/migrations/0003_group_mojo_secrets_user_mojo_secrets.py

@@ -0,0 +1,23 @@
+# Generated by Django 4.2.21 on 2025-06-04 19:19
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('account', '0002_user_is_email_verified_user_is_phone_verified'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='group',
+            name='mojo_secrets',
+            field=models.TextField(blank=True, default=None, null=True),
+        ),
+        migrations.AddField(
+            model_name='user',
+            name='mojo_secrets',
+            field=models.TextField(blank=True, default=None, null=True),
+        ),
+    ]

django_nativemojo-0.1.10/mojo/apps/account/models/__init__.py

@@ -0,0 +1,3 @@
+from .group import Group
+from .user import User
+from .member import GroupMember

django_nativemojo-0.1.10/mojo/apps/account/models/group.py

@@ -0,0 +1,98 @@
+from django.db import models
+from mojo.models import MojoModel, MojoSecrets
+from mojo.helpers import dates
+
+
+
+class Group(MojoSecrets, MojoModel):
+    """
+    Group model.
+    """
+    created = models.DateTimeField(auto_now_add=True, editable=False)
+    modified = models.DateTimeField(auto_now=True, db_index=True)
+
+    name = models.CharField(max_length=200)
+    uuid = models.CharField(max_length=200, null=True, default=None, db_index=True)
+    is_active = models.BooleanField(default=True, db_index=True)
+    kind = models.CharField(max_length=80, default="group", db_index=True)
+
+    parent = models.ForeignKey("account.Group", null=True, related_name="groups",
+        default=None, on_delete=models.CASCADE)
+
+    # JSON-based metadata field
+    metadata = models.JSONField(default=dict, blank=True)
+
+    class RestMeta:
+        SEARCH_FIELDS = ["name"]
+        VIEW_PERMS = ["view_groups", "manage_groups"]
+        SAVE_PERMS = ["manage_groups"]
+        LIST_DEFAULT_FILTERS = {
+            "is_active": True
+        }
+        GRAPHS = {
+            "basic": {
+                "fields": [
+                    'id',
+                    'name',
+                    'created',
+                    'modified',
+                    'is_active',
+                    'kind',
+                ]
+            },
+            "default": {
+                "fields": [
+                    'id',
+                    'name',
+                    'created',
+                    'modified',
+                    'is_active',
+                    'kind',
+                    'parent',
+                    'metadata'
+                ]
+            },
+            "graphs": {
+                "parent": "basic"
+            }
+        }
+
+    @property
+    def timezone(self):
+        return self.metadata.get("timezone", "America/Los_Angeles")
+
+    def get_local_day(self, dt_utc=None):
+        return dates.get_local_day(self.timezone, dt_utc)
+
+    def get_local_time(self, dt_utc):
+        return dates.get_local_time(self.timezone, dt_utc)
+
+    def __str__(self):
+        return self.name
+
+    def has_permission(self, user):
+        from mojo.account.models.member import GroupMember
+        return GroupMember.objects.filter(user=user).last()
+
+    def member_has_permission(self, user, perms, check_user=True):
+        if check_user and user.has_permission(perms):
+            return True
+        ms = self.has_permission(user)
+        if ms is not None:
+            return ms.has_permission(perms)
+        return False
+
+    def get_metadata(self):
+        # converts our local metadata into an objict
+        self.metadata = self.jsonfield_as_objict("metadata")
+        return self.metadata
+
+    def get_member_for_user(self, user):
+        return self.members.filter(user=user).last()
+
+    @classmethod
+    def on_rest_handle_list(cls, request):
+        if cls.rest_check_permission(request, "VIEW_PERMS"):
+            return cls.on_rest_list(request)
+        group_ids = request.user.members.values_list('group__id', flat=True)
+        return cls.on_rest_list(request, cls.objects.filter(id__in=group_ids))

django_nativemojo-0.1.10/mojo/apps/account/models/member.py

@@ -0,0 +1,95 @@
+from django.db import models
+from mojo.models import MojoModel
+from mojo import errors as merrors
+from mojo.helpers.settings import settings
+
+MEMBER_PERMS_PROTECTION = settings.get("MEMBER_PERMS_PROTECTION", {})
+
+
+class GroupMember(models.Model, MojoModel):
+    """
+    A member of a group
+    """
+    created = models.DateTimeField(auto_now_add=True, editable=False)
+    modified = models.DateTimeField(auto_now=True, db_index=True)
+    user = models.ForeignKey(
+        "account.User",related_name="members",
+        on_delete=models.CASCADE)
+    group = models.ForeignKey(
+        "account.Group", related_name="members",
+        on_delete=models.CASCADE)
+    is_active = models.BooleanField(default=True, db_index=True)
+    # JSON-based permissions field
+    permissions = models.JSONField(default=dict, blank=True)
+    # JSON-based metadata field
+    metadata = models.JSONField(default=dict, blank=True)
+
+    class RestMeta:
+        VIEW_PERMS = ["view_groups", "manage_groups"]
+        SAVE_PERMS = ["manage_groups"]
+        LIST_DEFAULT_FILTERS = {
+            "is_active": True
+        }
+        GRAPHS = {
+            "default": {
+                "fields": [
+                    'id',
+                    'name',
+                    'created',
+                    'modified',
+                    'is_active',
+                    'permissions',
+                    'metadata'
+                ],
+                "graphs": {
+                    "user": "basic",
+                    "group": "basic"
+                }
+            }
+        }
+
+    def __str__(self):
+        return f"{self.user.username}@{self.group.name}"
+
+    def can_change_permission(self, perm, value, request):
+        if request.user.has_permission(["manage_groups", "manage_users"]):
+            return True
+        req_member = self.group.get_member_for_user(request.user)
+        if req_member is not None:
+            if perm in MEMBER_PERMS_PROTECTION:
+                return req_member.has_permission(MEMBER_PERMS_PROTECTION[perm])
+            return req_member.has_permission(["manage_group", "manage_members"])
+        return False
+
+    def set_permissions(self, value, request):
+            if not isinstance(value, dict):
+                return
+            for perm, perm_value in value.items():
+                if not self.can_change_permission(perm, perm_value, request):
+                    raise merrors.PermissionDeniedException()
+                if bool(perm_value):
+                    self.add_permission(perm)
+                else:
+                    self.remove_permission(perm)
+
+    def has_permission(self, perm_key):
+        """Check if user has a specific permission in JSON field."""
+        if isinstance(perm_key, list):
+            for pk in perm_key:
+                if self.has_permission(pk):
+                    return True
+            return False
+        if perm_key == "all":
+            return True
+        return self.permissions.get(perm_key, False)
+
+    def add_permission(self, perm_key, value=True):
+        """Dynamically add a permission."""
+        self.permissions[perm_key] = value
+        self.save()
+
+    def remove_permission(self, perm_key):
+        """Remove a permission."""
+        if perm_key in self.permissions:
+            del self.permissions[perm_key]
+            self.save()

django_nativemojo-0.1.10/mojo/apps/account/models/pkey.py

@@ -0,0 +1,18 @@
+from django.db import models
+
+class Passkey(models.Model):
+    user = models.ForeignKey(
+        "account.User",related_name="members",
+        on_delete=models.CASCADE)
+    token = models.TextField()
+
+    credential_id = models.CharField(max_length=255, unique=True)
+    rp_id = models.CharField(max_length=255, null=False, db_index=True)
+    is_enabled = models.BooleanField(default=True, db_index=True)
+
+    created = models.DateTimeField(auto_now_add=True)
+    modified = models.DateTimeField(auto_now=True)
+    last_used = models.DateTimeField(null=True, blank=True, default=None)
+
+    def __str__(self):
+        return f"{self.user.username} - {self.credential_id} - {self.rp_id}"