start project

2026-09-04 12:52:21 +03:30
parent a464e550c9
commit 212074c5f5
40 changed files with 2804 additions and 164 deletions
@@ -19,8 +19,14 @@ psycopg[binary]~=3.2.3
 djangorestframework-simplejwt~=5.3.1
 argon2-cffi~=23.1.0

-# API schema & interactive documentation
+# API schema & interactive documentation.
+# The sidecar ships the Swagger UI / ReDoc bundles as static files.  Without
+# it drf-spectacular points the browser at cdn.jsdelivr.net, which the CSP in
+# frontend/nginx.conf ("script-src 'self'") blocks, leaving a blank page - and
+# the CDN URL is pinned to "@latest", which is a supply-chain risk in its own
+# right.  Self-hosting fixes both and lets the docs work air-gapped.
 drf-spectacular~=0.27.2
+drf-spectacular-sidecar~=2026.9.1

 # Cross origin access for the SPA
 django-cors-headers~=4.4.0