Application powering https://mentoring.mozilla.com

Перейти к файлу

Dustin J. Mitchell 26457f8b31 add pycodestyle checks		2021-01-22 09:56:55 -05:00
frontend	Bump node-notifier from 8.0.0 to 8.0.1 in /frontend	2021-01-08 10:33:24 -05:00
mentoring	add pycodestyle checks	2021-01-22 09:56:55 -05:00
static/images	add the mentor-ship	2020-10-16 18:29:15 +00:00
.gitignore	add some project-maintenance files, including LICENSE	2021-01-15 19:13:15 -05:00
.taskcluster.yml	add pycodestyle checks	2021-01-22 09:56:55 -05:00
CODE_OF_CONDUCT.md	add some project-maintenance files, including LICENSE	2021-01-15 19:13:15 -05:00
CONTRIBUTING.md	Set up distinct Development and Production configs	2021-01-22 09:56:55 -05:00
LICENSE	add some project-maintenance files, including LICENSE	2021-01-15 19:13:15 -05:00
Mentorship_Diecut.pdf	Add original artwork	2020-10-19 15:10:38 -04:00
README.md	add some project-maintenance files, including LICENSE	2021-01-15 19:13:15 -05:00
manage.py	switch to using django-configurations	2021-01-22 09:56:55 -05:00
requirements.txt	switch to using django-configurations	2021-01-22 09:56:55 -05:00
setup.cfg	add pycodestyle checks	2021-01-22 09:56:55 -05:00

README.md

mentoring

This is the app behind the Mozilla Mentoring Program

Structure

mentoring - main Django project
- enrollment - app handling participant enrollment
- participants - app handling participant data
- pairs - app handling pairing
- frontend - app to render the frontend
frontend - main React project

Authentication

This app uses Mozilla's SSO for authentication. It requires an Auth0 client be created, with

Algorithm RS256
Redirect URI of https://<hostname>/oidc/callback/ (note the trailing /)
At least the Mozilla AD connection enabled ("Allowing Mozilla LDAP with MFA")

Set OIDC_RP_CLIENT_ID OIDC_RP_CLIENT_SECRET using the resulting credentials.

The UI automatically redirects to the sign-in URL. There is no way to interact with the UI without first signing in. Signing in creates a Django user and remaining authentication is performed using a Django session.

Members of groups listed in STAFF_GROUPS have "staff" access to the app. This includes access to the REST API (/api) and the Django administration panel (/admin/). Those who are not staff have access only to the enrollment form.