AuthFlow – Complete Django Authentication System

AuthFlow is a plug-and-play authentication module for Django with web auth (allauth), JWT API, email verification, password reset, profile management, role-based permissions, and social login (Google, GitHub).

Landing page

Login	Sign Up

Dashboard

• Backend: Python 3.12, Django 5, Django REST Framework
• Frontend: Django Templates, TailwindCSS, DaisyUI, Alpine.js
• Auth: django-allauth, djangorestframework-simplejwt
• Database: PostgreSQL (or SQLite for dev)
• Dev Tools: Docker, Black, Ruff, pytest

1. Clone and create virtual environment:

python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate
pip install -r requirements/dev.txt

2. Copy environment file and configure:

cp .env.example .env
# Edit .env - SECRET_KEY and DATABASE_URL (leave empty for SQLite)

3. Run migrations:

python manage.py migrate

4. Build CSS (Tailwind + DaisyUI):

npm install
npm run build:css

5. Create superuser and run server:

python manage.py createsuperuser
python manage.py runserver

cp .env.example .env
docker-compose up --build

• Django: http://localhost:8000
• PostgreSQL runs in the background

• User Registration: Name, email, password (signup, login, logout)
• Email Verification: Mandatory verification before dashboard access
• Password Reset: Request link, set new password
• Profile: Update name, email, avatar at /profile/
• Settings: Change password at /profile/settings/
• Social Login: Google, GitHub (configure OAuth apps)
• Role-Based Permissions: admin, staff, user; admin manages users at /profile/manage/users/
• JWT API: /api/login/, /api/register/, /api/user/, /api/token/refresh/
• Dashboard: /dashboard/ (requires verified email)

curl -X POST http://localhost:8000/api/register/ \
  -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","name":"User","password":"securepass123"}'

curl -X POST http://localhost:8000/api/login/ \
  -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","password":"securepass123"}'

1. Copy apps/accounts, apps/core, apps/dashboard, apps/api into your project.

2. Add to INSTALLED_APPS:

INSTALLED_APPS = [
    # ...
    "rest_framework",
    "rest_framework_simplejwt",
    "allauth",
    "allauth.account",
    "allauth.socialaccount",
    "allauth.socialaccount.providers.google",
    "allauth.socialaccount.providers.github",
    "corsheaders",
    "apps.core",
    "apps.accounts",
    "apps.dashboard",
    "apps.api",
]

3. Set AUTH_USER_MODEL = "accounts.User" (only for new projects).

4. Include URLs:

urlpatterns = [
    path("accounts/", include("allauth.urls")),
    path("api/", include("apps.api.urls")),
    path("dashboard/", include("apps.dashboard.urls")),
    path("profile/", include("apps.accounts.urls")),
]

5. Copy required settings from config/settings/base.py (allauth, JWT, etc.).

6. Run migrations, configure .env, copy templates and static files.

1. Create OAuth 2.0 credentials in Google Cloud Console.
2. Add authorized redirect URI: http://localhost:8000/accounts/google/login/callback/
3. Set .env or settings:

SOCIALACCOUNT_PROVIDERS = {
    "google": {
        "APP": {
            "client_id": "your-client-id",
            "secret": "your-secret",
        }
    }
}

1. Create OAuth App in GitHub Developer Settings.
2. Callback URL: http://localhost:8000/accounts/github/login/callback/
3. Configure client ID and secret in settings/Admin.

pytest
pytest -v --cov  # with coverage

black .
ruff check .

authflow/
├── config/           # Django project config
├── apps/
│   ├── accounts/     # User model, allauth, profile
│   ├── core/         # Landing page
│   ├── dashboard/    # Dashboard views
│   └── api/          # JWT endpoints
├── templates/
│   ├── components/   # Navbar, forms, cards, alerts, modals
│   ├── account/      # allauth overrides
│   └── pages/        # landing, dashboard, profile, settings
├── static/
├── tests/
├── Dockerfile
├── docker-compose.yml
└── requirements/

MIT