This is a Todo List Web App designed by Itamar Junior for my BSc in Computing subject Back-End Development, Year 3, Semester 2, 2023.
The app is built with Django and Flask, two popular Python web frameworks, and MongoDB, a NoSQL database that provides great flexibility and scalability.
- Create, read, update, and delete tasks
- Simple and intuitive user interface
- Mobile-friendly design using Bootstrap
- User authentication with sign-in, sign-up, and log out
- Personalized TODO list for each user
- A profile page that shows the total number of tasks for the logged-in user
Client: Bootstrap
Server: Python, Django and Flask, MongoDB hosted in a shared free server
To enhance the security of this web application, the following steps were taken:
- Email validation was added to the sign-up form using the email-validator library to ensure that only valid email addresses can be registered.
- Flask-WTForms was used to protect against cross-site request forgery (CSRF) attacks by adding a CSRF token to all forms.
- Passwords are hashed using the sha256 method of the Werkzeug.security library before being stored in the database to protect against unauthorized access.
- The app uses the Flask-Login library to manage user authentication and sessions. This includes protecting against session hijacking and ensuring that only authenticated users can access certain routes.
- The app uses MongoDB's built-in authentication mechanisms to ensure that only authorized users can access the database.
These steps were taken to ensure that the app is secure and that user data is protected from unauthorized access or manipulation.
Clone this repository to your local machine
Install the necessary dependencies with pip install -r
Run the app with python app.py
Open your web browser and navigate to http://localhost:5000
The app has been tested manually, and the following assertions have been used:
- The app displays the correct number of tasks for each user on the profile page.
- The app only displays the user's tasks on the home page after they have logged in.
- The app successfully creates a new task for the logged-in user and displays it on the TODO page.
- The app allows user to delete their tasks successfully.
- A unit test has been added to test the data entry form of the TODO list application.
- A unit test has been added to test the routes of the TODO list application.
The test_todo_list.py and test_form_todo.py scripts are provided to test the behavior of the Todo list application.
To run the tests, use the following command:
python test_todo_list.py
python test_form_todo.pyFuture improvements to the application could include additional testing, such as testing the database connection or testing edge cases. Additional features could also be added, such as email notifications or reminders for tasks.
This project is open to contributions. If you find any bugs or would like to suggest improvements, please submit a pull request or open an issue.
If you have any questions or comments about this project, please feel free to contact me trought my GitHub profile.