django-whiteneuron 0.2.48.5__tar.gz → 0.3.0.3__tar.gz

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.48.5
+Version: 0.3.0.3
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=12.1.1
+Requires-Dist: pillow>=12.2.0
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,7 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
-Requires-Dist: cryptography>=46.0.5
+Requires-Dist: cryptography>=46.0.7
 Requires-Dist: pyopenssl==26.0.0
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
@@ -96,7 +96,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.48.3
+- 0.3.0.2
 
 ## Compatibility
 
@@ -107,10 +107,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.48.4 (2026-04-11) — latest
-**Security: Nâng cấp cbor2 5.9.0 và ujson 5.12.0**
-- **Security**: `cbor2` nâng từ `v5.8.0` lên `v5.9.0` — bản vá lỗi và cải thiện encoding/decoding CBOR.
-- **Security**: `ujson` nâng từ `v5.11.0` lên `v5.12.0` — bản vá bảo mật và cải thiện hiệu suất JSON serialization.
+### v0.3.0.3 (2026-04-14) — latest
+**Dependency: Upgrade pillow ≥12.2.0, cryptography ≥46.0.7**
+- **Updated**: `pillow` minimum version bumped from `12.1.1` to `12.2.0` — latest upstream patch.
+- **Updated**: `cryptography` minimum version bumped from `46.0.5` to `46.0.7` — security and bug-fix release.
+
+### v0.3.0.2 (2026-04-13)
+**Hotfix: Loading overlay no longer auto-hides after timeout**
+- **Fixed**: `loading.js` — removed the auto-hide logic that dismissed the overlay after 45 seconds. The overlay now only hides when the server sends back the `wn_loading_done` cookie, or via `pageshow`/`visibilitychange`/`focus` events.
+
+### v0.3.0.1 (2026-04-13)
+**Hotfix: Email signature extracted to standalone file; exclude signature_ceo.html from build**
+- **Fixed**: `TEMPLATE` in `base/utils.py` — replaced hardcoded inline HTML signature with a `{signature}` placeholder; content is now read from `templates/admin/signature.html` at the time `send_email_login` is called.
+- **Added**: `_load_signature()` helper — reads `signature.html` relative to `utils.py`.
+- **Added**: `templates/admin/signature.html` — standalone HTML email signature (CTO).
+- **Added**: `templates/admin/signature_ceo.html` — CEO email signature (local-only, excluded from package build).
+- **Config**: `pyproject.toml` — added `[tool.setuptools.exclude-package-data]` to exclude `signature_ceo.html` from wheel/sdist.
+
+### v0.3.0 (2026-04-13)
+**Feature: File integrity protection — SHA-256 hash verification for ExcelFile & PDFFile**
+- **Added**: `compute_file_hash()` function — computes SHA-256 of a `FieldFile` via direct `storage.open()` to avoid Django internal state issues (works for both in-memory uploads and committed storage files).
+- **Added**: `BaseFile.save()` override — automatically computes and stores SHA-256 hash on every new upload; resets `status='done'` when file is replaced after an error; backfills hash for existing files with no hash.
+- **Added**: `BaseFile.verify_integrity()` — compares live storage hash against stored hash; returns `False` if missing or mismatched.
+- **Added**: `download_file` view — `@login_required` endpoint at `file-management/download/<type>/<pk>/`; enrolls legacy records on first download, blocks tampered files with `403 Forbidden`, marks them `status='error'`.
+- **Added**: `file_management/urls.py` — wired into `base/urls.py`.
+- **Added**: `FileInputNoDownload` widget — extends `UnfoldAdminFileFieldWidget` with a custom template that removes the direct download button; adds `accepted_file_types` support per admin subclass (`.xlsx,.xls,.csv` for Excel; `.pdf` for PDF).
+- **Added**: `BaseFileAdmin` enhancements — `integrity_status`, `hash_display`, `current_hash_display` readonly fields; `verified_download` smart button (primary button when OK, error badge when tampered/missing); `change_view` shows Django error message banner on integrity failure; `get_fieldsets` context-aware layout (auto/upload/new).
+- **Fixed**: `status_view` / `method_view` XSS — replaced f-string + `format_html` pattern with proper `format_html(template, *args)` escaping.
+- **Fixed**: `file.delete(save=False)` in `BaseFile.delete()` — prevents extra `save()` call after file deletion.
+- **Improved**: `accepted_file_types` class attribute on admin subclasses — browser-level file type filtering in upload dialog.
+
+### v0.2.48.4 (2026-04-11)
+**Security: Upgrade cbor2 5.9.0 and ujson 5.12.0**
+- **Security**: `cbor2` upgraded from `v5.8.0` to `v5.9.0` — patch release with bug fixes and improved CBOR encoding/decoding.
+- **Security**: `ujson` upgraded from `v5.11.0` to `v5.12.0` — security patch and improved JSON serialization performance.
 
 ### v0.2.48.3 (2026-04-10)
 **Improve: Notification list — DaisyUI badge display, search field verbose names**
@@ -119,9 +149,9 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Fixed**: `get_verbose_name_field` now traverses `__`-separated lookup paths (e.g. `user__username`) to resolve proper verbose names for all search fields in `search_help_text`.
 
 ### v0.2.48.2 (2026-04-10)
-**Security: Nâng cấp django 5.2.13 và thêm pyOpenSSL 26.0.0**
-- **Security**: `django` lower bound nâng từ `>=5.2.12` lên `>=5.2.13` — bản vá bảo mật mới nhất của Django.
-- **Security**: `pyopenssl==26.0.0` thêm vào explicit dependencies — đảm bảo phiên bản mới nhất của pyOpenSSL được sử dụng, vá các lỗ hổng tiềm ẩn trong TLS/SSL handling.
+**Security: Upgrade django 5.2.13 and add pyOpenSSL 26.0.0**
+- **Security**: `django` lower bound raised from `>=5.2.12` to `>=5.2.13` — latest Django security patch.
+- **Security**: `pyopenssl==26.0.0` added as an explicit dependency — ensures the latest version of pyOpenSSL is used, patching potential vulnerabilities in TLS/SSL handling.
 
 ### v0.2.48.1 (2026-04-06)
 **Fix: Duplicate history entries in change history panel**

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/README.md

@@ -11,7 +11,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.48.3
+- 0.3.0.2
 
 ## Compatibility
 
@@ -22,10 +22,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.48.4 (2026-04-11) — latest
-**Security: Nâng cấp cbor2 5.9.0 và ujson 5.12.0**
-- **Security**: `cbor2` nâng từ `v5.8.0` lên `v5.9.0` — bản vá lỗi và cải thiện encoding/decoding CBOR.
-- **Security**: `ujson` nâng từ `v5.11.0` lên `v5.12.0` — bản vá bảo mật và cải thiện hiệu suất JSON serialization.
+### v0.3.0.3 (2026-04-14) — latest
+**Dependency: Upgrade pillow ≥12.2.0, cryptography ≥46.0.7**
+- **Updated**: `pillow` minimum version bumped from `12.1.1` to `12.2.0` — latest upstream patch.
+- **Updated**: `cryptography` minimum version bumped from `46.0.5` to `46.0.7` — security and bug-fix release.
+
+### v0.3.0.2 (2026-04-13)
+**Hotfix: Loading overlay no longer auto-hides after timeout**
+- **Fixed**: `loading.js` — removed the auto-hide logic that dismissed the overlay after 45 seconds. The overlay now only hides when the server sends back the `wn_loading_done` cookie, or via `pageshow`/`visibilitychange`/`focus` events.
+
+### v0.3.0.1 (2026-04-13)
+**Hotfix: Email signature extracted to standalone file; exclude signature_ceo.html from build**
+- **Fixed**: `TEMPLATE` in `base/utils.py` — replaced hardcoded inline HTML signature with a `{signature}` placeholder; content is now read from `templates/admin/signature.html` at the time `send_email_login` is called.
+- **Added**: `_load_signature()` helper — reads `signature.html` relative to `utils.py`.
+- **Added**: `templates/admin/signature.html` — standalone HTML email signature (CTO).
+- **Added**: `templates/admin/signature_ceo.html` — CEO email signature (local-only, excluded from package build).
+- **Config**: `pyproject.toml` — added `[tool.setuptools.exclude-package-data]` to exclude `signature_ceo.html` from wheel/sdist.
+
+### v0.3.0 (2026-04-13)
+**Feature: File integrity protection — SHA-256 hash verification for ExcelFile & PDFFile**
+- **Added**: `compute_file_hash()` function — computes SHA-256 of a `FieldFile` via direct `storage.open()` to avoid Django internal state issues (works for both in-memory uploads and committed storage files).
+- **Added**: `BaseFile.save()` override — automatically computes and stores SHA-256 hash on every new upload; resets `status='done'` when file is replaced after an error; backfills hash for existing files with no hash.
+- **Added**: `BaseFile.verify_integrity()` — compares live storage hash against stored hash; returns `False` if missing or mismatched.
+- **Added**: `download_file` view — `@login_required` endpoint at `file-management/download/<type>/<pk>/`; enrolls legacy records on first download, blocks tampered files with `403 Forbidden`, marks them `status='error'`.
+- **Added**: `file_management/urls.py` — wired into `base/urls.py`.
+- **Added**: `FileInputNoDownload` widget — extends `UnfoldAdminFileFieldWidget` with a custom template that removes the direct download button; adds `accepted_file_types` support per admin subclass (`.xlsx,.xls,.csv` for Excel; `.pdf` for PDF).
+- **Added**: `BaseFileAdmin` enhancements — `integrity_status`, `hash_display`, `current_hash_display` readonly fields; `verified_download` smart button (primary button when OK, error badge when tampered/missing); `change_view` shows Django error message banner on integrity failure; `get_fieldsets` context-aware layout (auto/upload/new).
+- **Fixed**: `status_view` / `method_view` XSS — replaced f-string + `format_html` pattern with proper `format_html(template, *args)` escaping.
+- **Fixed**: `file.delete(save=False)` in `BaseFile.delete()` — prevents extra `save()` call after file deletion.
+- **Improved**: `accepted_file_types` class attribute on admin subclasses — browser-level file type filtering in upload dialog.
+
+### v0.2.48.4 (2026-04-11)
+**Security: Upgrade cbor2 5.9.0 and ujson 5.12.0**
+- **Security**: `cbor2` upgraded from `v5.8.0` to `v5.9.0` — patch release with bug fixes and improved CBOR encoding/decoding.
+- **Security**: `ujson` upgraded from `v5.11.0` to `v5.12.0` — security patch and improved JSON serialization performance.
 
 ### v0.2.48.3 (2026-04-10)
 **Improve: Notification list — DaisyUI badge display, search field verbose names**
@@ -34,9 +64,9 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Fixed**: `get_verbose_name_field` now traverses `__`-separated lookup paths (e.g. `user__username`) to resolve proper verbose names for all search fields in `search_help_text`.
 
 ### v0.2.48.2 (2026-04-10)
-**Security: Nâng cấp django 5.2.13 và thêm pyOpenSSL 26.0.0**
-- **Security**: `django` lower bound nâng từ `>=5.2.12` lên `>=5.2.13` — bản vá bảo mật mới nhất của Django.
-- **Security**: `pyopenssl==26.0.0` thêm vào explicit dependencies — đảm bảo phiên bản mới nhất của pyOpenSSL được sử dụng, vá các lỗ hổng tiềm ẩn trong TLS/SSL handling.
+**Security: Upgrade django 5.2.13 and add pyOpenSSL 26.0.0**
+- **Security**: `django` lower bound raised from `>=5.2.12` to `>=5.2.13` — latest Django security patch.
+- **Security**: `pyopenssl==26.0.0` added as an explicit dependency — ensures the latest version of pyOpenSSL is used, patching potential vulnerabilities in TLS/SSL handling.
 
 ### v0.2.48.1 (2026-04-06)
 **Fix: Duplicate history entries in change history panel**

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/django_whiteneuron.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.48.5
+Version: 0.3.0.3
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=12.1.1
+Requires-Dist: pillow>=12.2.0
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,7 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
-Requires-Dist: cryptography>=46.0.5
+Requires-Dist: cryptography>=46.0.7
 Requires-Dist: pyopenssl==26.0.0
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
@@ -96,7 +96,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.48.3
+- 0.3.0.2
 
 ## Compatibility
 
@@ -107,10 +107,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.48.4 (2026-04-11) — latest
-**Security: Nâng cấp cbor2 5.9.0 và ujson 5.12.0**
-- **Security**: `cbor2` nâng từ `v5.8.0` lên `v5.9.0` — bản vá lỗi và cải thiện encoding/decoding CBOR.
-- **Security**: `ujson` nâng từ `v5.11.0` lên `v5.12.0` — bản vá bảo mật và cải thiện hiệu suất JSON serialization.
+### v0.3.0.3 (2026-04-14) — latest
+**Dependency: Upgrade pillow ≥12.2.0, cryptography ≥46.0.7**
+- **Updated**: `pillow` minimum version bumped from `12.1.1` to `12.2.0` — latest upstream patch.
+- **Updated**: `cryptography` minimum version bumped from `46.0.5` to `46.0.7` — security and bug-fix release.
+
+### v0.3.0.2 (2026-04-13)
+**Hotfix: Loading overlay no longer auto-hides after timeout**
+- **Fixed**: `loading.js` — removed the auto-hide logic that dismissed the overlay after 45 seconds. The overlay now only hides when the server sends back the `wn_loading_done` cookie, or via `pageshow`/`visibilitychange`/`focus` events.
+
+### v0.3.0.1 (2026-04-13)
+**Hotfix: Email signature extracted to standalone file; exclude signature_ceo.html from build**
+- **Fixed**: `TEMPLATE` in `base/utils.py` — replaced hardcoded inline HTML signature with a `{signature}` placeholder; content is now read from `templates/admin/signature.html` at the time `send_email_login` is called.
+- **Added**: `_load_signature()` helper — reads `signature.html` relative to `utils.py`.
+- **Added**: `templates/admin/signature.html` — standalone HTML email signature (CTO).
+- **Added**: `templates/admin/signature_ceo.html` — CEO email signature (local-only, excluded from package build).
+- **Config**: `pyproject.toml` — added `[tool.setuptools.exclude-package-data]` to exclude `signature_ceo.html` from wheel/sdist.
+
+### v0.3.0 (2026-04-13)
+**Feature: File integrity protection — SHA-256 hash verification for ExcelFile & PDFFile**
+- **Added**: `compute_file_hash()` function — computes SHA-256 of a `FieldFile` via direct `storage.open()` to avoid Django internal state issues (works for both in-memory uploads and committed storage files).
+- **Added**: `BaseFile.save()` override — automatically computes and stores SHA-256 hash on every new upload; resets `status='done'` when file is replaced after an error; backfills hash for existing files with no hash.
+- **Added**: `BaseFile.verify_integrity()` — compares live storage hash against stored hash; returns `False` if missing or mismatched.
+- **Added**: `download_file` view — `@login_required` endpoint at `file-management/download/<type>/<pk>/`; enrolls legacy records on first download, blocks tampered files with `403 Forbidden`, marks them `status='error'`.
+- **Added**: `file_management/urls.py` — wired into `base/urls.py`.
+- **Added**: `FileInputNoDownload` widget — extends `UnfoldAdminFileFieldWidget` with a custom template that removes the direct download button; adds `accepted_file_types` support per admin subclass (`.xlsx,.xls,.csv` for Excel; `.pdf` for PDF).
+- **Added**: `BaseFileAdmin` enhancements — `integrity_status`, `hash_display`, `current_hash_display` readonly fields; `verified_download` smart button (primary button when OK, error badge when tampered/missing); `change_view` shows Django error message banner on integrity failure; `get_fieldsets` context-aware layout (auto/upload/new).
+- **Fixed**: `status_view` / `method_view` XSS — replaced f-string + `format_html` pattern with proper `format_html(template, *args)` escaping.
+- **Fixed**: `file.delete(save=False)` in `BaseFile.delete()` — prevents extra `save()` call after file deletion.
+- **Improved**: `accepted_file_types` class attribute on admin subclasses — browser-level file type filtering in upload dialog.
+
+### v0.2.48.4 (2026-04-11)
+**Security: Upgrade cbor2 5.9.0 and ujson 5.12.0**
+- **Security**: `cbor2` upgraded from `v5.8.0` to `v5.9.0` — patch release with bug fixes and improved CBOR encoding/decoding.
+- **Security**: `ujson` upgraded from `v5.11.0` to `v5.12.0` — security patch and improved JSON serialization performance.
 
 ### v0.2.48.3 (2026-04-10)
 **Improve: Notification list — DaisyUI badge display, search field verbose names**
@@ -119,9 +149,9 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Fixed**: `get_verbose_name_field` now traverses `__`-separated lookup paths (e.g. `user__username`) to resolve proper verbose names for all search fields in `search_help_text`.
 
 ### v0.2.48.2 (2026-04-10)
-**Security: Nâng cấp django 5.2.13 và thêm pyOpenSSL 26.0.0**
-- **Security**: `django` lower bound nâng từ `>=5.2.12` lên `>=5.2.13` — bản vá bảo mật mới nhất của Django.
-- **Security**: `pyopenssl==26.0.0` thêm vào explicit dependencies — đảm bảo phiên bản mới nhất của pyOpenSSL được sử dụng, vá các lỗ hổng tiềm ẩn trong TLS/SSL handling.
+**Security: Upgrade django 5.2.13 and add pyOpenSSL 26.0.0**
+- **Security**: `django` lower bound raised from `>=5.2.12` to `>=5.2.13` — latest Django security patch.
+- **Security**: `pyopenssl==26.0.0` added as an explicit dependency — ensures the latest version of pyOpenSSL is used, patching potential vulnerabilities in TLS/SSL handling.
 
 ### v0.2.48.1 (2026-04-06)
 **Fix: Duplicate history entries in change history panel**

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/django_whiteneuron.egg-info/SOURCES.txt

@@ -91,11 +91,13 @@ whiteneuron/file_management/admin.py
 whiteneuron/file_management/apps.py
 whiteneuron/file_management/models.py
 whiteneuron/file_management/tests.py
+whiteneuron/file_management/urls.py
 whiteneuron/file_management/utils.py
 whiteneuron/file_management/views.py
 whiteneuron/file_management/migrations/0001_initial.py
 whiteneuron/file_management/migrations/0002_alter_excelfile_options_alter_pdffile_options_and_more.py
 whiteneuron/file_management/migrations/0003_alter_excelfile_created_at_and_more.py
+whiteneuron/file_management/migrations/0004_excelfile_hash_pdffile_hash.py
 whiteneuron/file_management/migrations/__init__.py
 whiteneuron/locale/vi/LC_MESSAGES/django.mo
 whiteneuron/locale/vi/LC_MESSAGES/django.po
@@ -163,6 +165,7 @@ whiteneuron/templates/admin/index.html
 whiteneuron/templates/admin/login.html
 whiteneuron/templates/admin/login_after.html
 whiteneuron/templates/admin/search_form.html
+whiteneuron/templates/admin/signature.html
 whiteneuron/templates/admin/submit_line.html
 whiteneuron/templates/admin/wn_change_form.html
 whiteneuron/templates/admin/wn_history_panel.html
@@ -173,6 +176,7 @@ whiteneuron/templates/admin/base/userprofile_change_form.html
 whiteneuron/templates/admin/feedbacks/feedback_change_form.html
 whiteneuron/templates/base/forms/wysiwyg.html
 whiteneuron/templates/base/forms/helpers/toolbar.html
+whiteneuron/templates/file_management/widgets/clearable_file_input_no_download.html
 whiteneuron/templates/unfold/helpers/account_links.html
 whiteneuron/templates/unfold/helpers/app_list_badge.html
 whiteneuron/templates/unfold/helpers/field_password.html

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/django_whiteneuron.egg-info/requires.txt

@@ -13,7 +13,7 @@ markdown>=3.7
 openai>=1.58.1
 openpyxl>=3.1.5
 pandas>=2.2.3
-pillow>=12.1.1
+pillow>=12.2.0
 python-dotenv>=1.0.1
 redis>=5.2.1
 sentry-sdk==2.28.0
@@ -29,7 +29,7 @@ django-ckeditor-5>=0.2.18
 django-cors-headers>=4.3.0
 django-unfold>=0.85.0
 djangoql>=0.18.1
-cryptography>=46.0.5
+cryptography>=46.0.7
 pyopenssl==26.0.0
 
 [dev]

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "django-whiteneuron"
-version = "0.2.48.5"
+version = "0.3.0.3"
 description = "A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold."
 authors = [
     {name = "White Neuron", email = "anhnt@whiteneuron.ai"}
@@ -24,7 +24,7 @@ dependencies = [
     "openai>=1.58.1",
     "openpyxl>=3.1.5",
     "pandas>=2.2.3",
-    "pillow>=12.1.1",
+    "pillow>=12.2.0",
     "python-dotenv>=1.0.1",
     "redis>=5.2.1",
     "sentry-sdk==2.28.0",
@@ -40,7 +40,7 @@ dependencies = [
     'django-cors-headers>=4.3.0',
     "django-unfold>=0.85.0",
     "djangoql>=0.18.1",
-    "cryptography>=46.0.5",
+    "cryptography>=46.0.7",
     "pyopenssl==26.0.0",
 ]
 requires-python = ">=3.11"
@@ -75,6 +75,11 @@ include = ["whiteneuron*"]
     "locale/**/*",
 ]
 
+[tool.setuptools.exclude-package-data]
+"whiteneuron" = [
+    "templates/admin/signature_ceo.html",
+]
+
 [project.optional-dependencies]
 dev = ["pytest", "black", "flake8", "pre-commit"]
 

{django_whiteneuron-0.2.48.5 → django_whiteneuron-0.3.0.3}/whiteneuron/base/urls.py

@@ -24,4 +24,5 @@ urlpatterns += [
     path("base/guest-login/", GuestLoginView.as_view(), name="guest_login"),
     # path("i18n/", include("django.conf.urls.i18n")),
     path("ckeditor5/", include('django_ckeditor_5.urls')),
+    path("file-management/", include('whiteneuron.file_management.urls')),
 ]

django_whiteneuron-0.3.0.3/whiteneuron/base/utils.py

@@ -0,0 +1,165 @@
+from django.utils import timezone
+from .models import User, UserActivity
+from django.contrib.auth.models import Group
+
+# count time run function
+def timeit(func):
+    import time
+    def wrapper(*args, **kwargs):
+        start = time.time()
+        result = func(*args, **kwargs)
+        # print(f"{func.__name__} run in {time.time()-start} seconds")
+        return result
+    return wrapper
+
+from django.utils import timezone
+from django.core.exceptions import FieldDoesNotExist
+
+def base_badge_callback(request, model, filter_kwargs=None):
+    today = timezone.localtime().replace(hour=0, minute=0, second=0, microsecond=0)
+
+    # try:
+    #     model._meta.get_field("is_deleted")
+    #     model._meta.get_field("deleted_at")
+    #     has_soft_delete = True
+    # except FieldDoesNotExist:
+    #     has_soft_delete = False
+
+    # if has_soft_delete:
+    #     number_update = model.objects.filter(
+    #         is_deleted=False,
+    #         updated_at__gte=today,
+    #     ).count()
+        
+    #     number_delete= getattr(model, 'objects_all', model.objects).filter(is_deleted=True,deleted_at__gte= timezone.localtime().replace(hour=0, minute=0, second=0, microsecond=0)).count()
+    #     print("model:",model.__name__,"number_delete:",number_delete)
+
+    #     c = number_update - number_delete
+    # else:
+    #     c = model.objects.filter(
+    #         updated_at__gte=today,
+    #     ).count()
+
+    c = getattr(model, 'objects_all', model.objects)
+    if hasattr(model, 'updated_at'):
+        c = c.filter(
+          updated_at__gte=today,
+        )
+    elif hasattr(model, 'created_at'):
+        c = c.filter(
+          created_at__gte=today,
+        )
+        
+    if filter_kwargs:
+        c = c.filter(**filter_kwargs).count()
+    else:        
+        c = c.count()
+    return c
+
+
+def user_badge_callback(request):
+    return base_badge_callback(request, User)
+
+def useractivity_badge_callback(request):
+    c= UserActivity.objects.filter(timestamp__gte= timezone.now().replace(hour=0, minute=0, second=0, microsecond=0)).count()
+    if c==0:
+        return ''
+    return f"{c}"
+
+def user_badge_callback(request):
+    return base_badge_callback(request, User)
+
+def group_badge_callback(request):
+    return 0
+
+def app_badge_callback(request):
+    from django.conf import settings
+    try:
+        navigation = settings.UNFOLD.get('SIDEBAR', {}).get('navigation', [])
+        return sum(
+            1 for section in navigation for item in section.get('items', [])
+            if item.get('title') and item.get('link') and '/base/app/' not in str(item.get('link'))
+        )
+    except Exception:
+        return 0
+
+def is_guest_user(user):
+    if not user or not user.is_authenticated:
+        return True
+    if user.username.lower() == "guest":
+        return True
+    return user.groups.filter(name__in=["Khách thăm", "Guest", "guest"]).exists()
+
+
+def permission_callback(request):
+    return False
+
+def permission_superuser_callback(request):
+    return request.user.is_superuser
+
+def permission_admin_callback(request):
+    if request.user.is_superuser:
+        return True
+    return request.user.groups.filter(name='Quản trị viên').exists()
+
+def permission_non_guest_callback(request):
+    return not is_guest_user(request.user)
+
+def permission_viewer_callback(request):
+    return True
+
+
+import os as _os
+
+def _load_signature():
+    sig_path = _os.path.normpath(
+        _os.path.join(_os.path.dirname(__file__), '..', 'templates', 'admin', 'signature.html')
+    )
+    with open(sig_path, 'r', encoding='utf-8') as f:
+        return f.read()
+
+
+TEMPLATE="""
+Chào {username},
+<br />
+Bạn đã được cấp quyền truy cập vào <b>{system_name}</b>. Dưới đây là thông tin
+đăng nhập của bạn:
+<br />
+<b> Tên đăng nhập: {username} </b>
+<br />
+<b> Mật khẩu tạm thời: {password} </b>
+<br />
+<b> Lưu ý: </b> Bạn sẽ được yêu cầu thay đổi mật khẩu sau lần đăng nhập đầu tiên
+để đảm bảo an toàn cho thông tin cá nhân và tài khoản của bạn.
+<br />
+<br />
+Để đăng nhập, vui lòng truy cập <a href="{url}">đường dẫn trang đăng nhập</a> và
+nhập thông tin trên.
+<br />
+Nếu bạn gặp bất kỳ vấn đề nào trong quá trình đăng nhập, đừng ngần ngại liên hệ
+với bộ phận hỗ trợ kỹ thuật của chúng tôi.
+<br />
+Trân trọng,
+<br />
+{signature}
+"""
+
+from django.conf import settings
+from .models import Mail
+def send_email_login(username, password, receiver, is_reset=False):
+    global TEMPLATE
+    SUBJECT = "Đặt lại mật khẩu hệ thống" if is_reset else "Thông tin đăng nhập hệ thống"
+    SYSTEM_NAME= settings.NAME
+    URL= settings.URL
+    subject= SUBJECT
+    template= TEMPLATE
+    system_name= SYSTEM_NAME
+    context= template.format(username= username, password= password, url= URL, system_name= system_name, signature= _load_signature())
+    mail= Mail.objects.create(subject= subject, content= context, receiver= receiver)
+    mail.send()
+    return mail.is_sent()
+
+def make_random_password():
+    import random
+    import string
+    return ''.join(random.choices(string.ascii_letters + string.digits, k=8))