TaskFlow

A modern, production-ready task management platform built with FastAPI, SQLite, and DaisyUI. TaskFlow combines powerful features with a beautiful SaaS-style interface for the ultimate productivity experience.

✨ Features

Core Features

• Smart Categories - Organize tasks with custom categories, colors, and icons
• Priority Management - High, Medium, Low, and None priority levels
• Due Dates & Deadlines - Set due dates and track overdue tasks
• Advanced Search - Full-text search across titles and descriptions
• Powerful Filtering - Filter by category, priority, and completion status
• Bulk Operations - Select and manage multiple tasks at once
• Archive System - Archive completed tasks to keep dashboard clean
• Real-time Statistics - Track total, pending, completed, and overdue tasks
• Keyboard Shortcuts - Power user features (/ for search, N for new task)
• Pin Tasks - Pin important tasks to the top

Security & Authentication

• Secure Authentication - Registration, login, logout with session management
• Argon2id Password Hashing - Industry-standard password security
• CSRF Protection - Token-based protection for all state-changing operations
• Session Management - Secure, httponly cookies with configurable expiration
• Security Headers - CSP, X-Frame-Options, X-XSS-Protection, and more
• Rate Limiting - Protection against brute force attacks
• Input Validation - Pydantic models with strict validation
• SQL Injection Prevention - Parameterized queries only

UI/UX

• Professional SaaS Design - Modern gradient interface with smooth animations
• Responsive Layout - Works beautifully on desktop, tablet, and mobile
• Dark Sidebar Navigation - Easy access to categories and statistics
• Modal Dialogs - Clean forms for adding tasks and categories
• Hover Effects - Smooth transitions and visual feedback
• Empty States - Helpful messages when no tasks exist
• Professional Landing Page - Marketing page showcasing features

📋 Prerequisites

• Python 3.11 or higher
• pip

🚀 Quick Start

1. Clone the repository

git clone https://github.com/marketcalls/taskflow.git
cd taskflow

2. Create a virtual environment

# Windows
python -m venv venv
venv\Scripts\activate

# Unix/macOS
python -m venv venv
source venv/bin/activate

3. Install dependencies

pip install -r requirements.txt

4. Set up environment variables

Copy the .env.example file to .env:

# Windows
copy .env.example .env

# Unix/macOS
cp .env.example .env

Generate a secure secret key:

python -c "import secrets; print(secrets.token_urlsafe(32))"

Edit .env and replace your-secret-key-here-minimum-32-characters-long with the generated key.

5. Run the application

# Development server with auto-reload
python main.py

# Or use uvicorn directly
uvicorn main:app --reload

The application will be available at http://localhost:8000

📖 Usage

1. Navigate to http://localhost:8000
2. You'll see the professional landing page
3. Click "Get Started" to register a new account
4. Login with your credentials
5. You'll be redirected to the /dashboard where you can:
   • Create tasks with priorities, due dates, and categories
   • Organize tasks into custom categories with colors
   • Search for tasks instantly
   • Filter by category, priority, or status
   • Bulk select and manage multiple tasks
   • Archive completed tasks
   • View statistics about your productivity
   • Use keyboard shortcuts for faster workflow

⌨️ Keyboard Shortcuts

• / - Focus search bar
• N - Create new task
• Esc - Close modals

🎯 API Endpoints

Pages

• GET / - Home page (redirects to landing)
• GET /landing - Landing page
• GET /login - Login page
• GET /register - Registration page
• GET /dashboard - Dashboard (requires authentication)

Authentication

• POST /api/auth/register - Register new user
• POST /api/auth/login - Login user
• POST /api/auth/logout - Logout user

Tasks

• POST /api/todos/ - Create new task
• POST /api/todos/{id}/toggle - Toggle task completion
• POST /api/todos/{id}/archive - Archive task
• POST /api/todos/{id}/delete - Delete task
• POST /api/todos/{id}/update - Update task
• POST /api/todos/bulk - Bulk operations on multiple tasks
• GET /api/todos/stats - Get user statistics

Categories

• POST /api/categories/ - Create new category
• GET /api/categories/api - Get all categories (JSON)
• POST /api/categories/{id}/update - Update category
• POST /api/categories/{id}/delete - Delete category

Health

• GET /health - Health check endpoint

📁 Project Structure

fastapi_test/
├── app/
│   ├── api/
│   │   ├── endpoints/
│   │   │   ├── auth.py          # Authentication endpoints
│   │   │   ├── todos.py         # Task CRUD endpoints
│   │   │   └── categories.py   # Category endpoints
│   │   ├── pages.py             # Page route handlers
│   │   └── landing.py           # Landing page route
│   ├── core/
│   │   ├── config.py            # Configuration management
│   │   ├── dependencies.py      # FastAPI dependencies
│   │   └── security.py          # Security utilities
│   ├── db/
│   │   └── database.py          # Database connection and setup
│   ├── middleware/
│   │   ├── security.py          # Security headers middleware
│   │   └── session.py           # Session middleware
│   ├── models/
│   │   ├── todo.py              # Task model
│   │   ├── user.py              # User model
│   │   └── category.py          # Category model
│   ├── schemas/
│   │   ├── todo.py              # Task Pydantic schemas
│   │   ├── user.py              # User Pydantic schemas
│   │   └── category.py          # Category Pydantic schemas
│   └── services/
│       ├── todo_service.py      # Task business logic
│       ├── user_service.py      # User business logic
│       └── category_service.py  # Category business logic
├── templates/
│   ├── base.html                # Base template
│   ├── dashboard.html           # Main dashboard (SaaS UI)
│   ├── landing.html             # Landing page
│   ├── index.html               # Home redirect
│   ├── login.html               # Login page
│   └── register.html            # Register page
├── static/                       # Static files (CSS, JS)
├── tests/                        # Test files
├── main.py                       # Application entry point
├── requirements.txt              # Python dependencies
├── .env.example                 # Environment variables example
├── ENHANCEMENTS.md              # Feature documentation
└── README.md                    # This file

🔒 Security Features

• Password Hashing: Argon2id with secure parameters (time_cost=2, memory_cost=65536)
• CSRF Protection: Token-based protection for all state-changing operations
• Session Management: Secure, httponly cookies with configurable expiration (1 hour default)
• Security Headers:
  • Content Security Policy (CSP)
  • X-Content-Type-Options: nosniff
  • X-Frame-Options: DENY
  • X-XSS-Protection
  • Referrer-Policy
• Rate Limiting: Protection against brute force attacks using slowapi
• Input Validation: Pydantic models with strict type checking and validation
• SQL Injection Prevention: Parameterized queries exclusively
• Activity Logging: Track all user actions for audit trails

💾 Database Schema

TaskFlow uses SQLite with the following tables:

• users - User accounts with authentication data
• categories - Custom categories with colors and icons
• todos - Tasks with priorities, due dates, and status
• activity_log - User activity tracking

All tables have proper indexes for optimal query performance.

🎨 Design System

Colors

• Primary: Purple gradient (#667EEA to #764BA2)
• Success: Green (#10B981)
• Warning: Orange (#F59E0B)
• Error: Red (#EF4444)
• Info: Blue (#3B82F6)

Priority Colors

• High: Red border (#EF4444)
• Medium: Orange border (#F59E0B)
• Low: Blue border (#3B82F6)
• None: Gray border (#9CA3AF)

🛠️ Development

Run tests

pytest

Code formatting

black .

Linting

ruff .

Type checking

mypy .

Database Reset

To reset the database (deletes all data):

rm todo_app.db
python main.py

🚀 Production Deployment

For production deployment:

1. Set DEBUG=False in .env
2. Generate a new strong SECRET_KEY
3. Use a production ASGI server (uvicorn with multiple workers)
4. Set up HTTPS and update security settings
5. Configure proper CORS origins
6. Set up database backups
7. Configure logging and monitoring

Example production command:

uvicorn main:app --host 0.0.0.0 --port 8000 --workers 4

📊 Statistics

• 2000+ lines of production-ready code
• 15+ major features
• 4 database tables with proper relationships
• 20+ API endpoints
• Professional SaaS-style UI
• 100% CSRF protected
• Full input validation
• Activity logging on all actions

📝 License

MIT License - See LICENSE file for details

Copyright (c) 2025 Marketcalls

🎯 What Makes TaskFlow Different?

✅ Production Ready - Not a simple todo app, but a full SaaS platform ✅ Beautiful UI - Professional gradient design that rivals paid products ✅ Feature Rich - Categories, priorities, due dates, search, filters, bulk ops ✅ Secure - Enterprise-grade security with Argon2id, CSRF, rate limiting ✅ Fast - Optimized queries with proper indexing ✅ Modern Stack - FastAPI, SQLite, DaisyUI, Tailwind CSS ✅ Well Architected - Clean separation of concerns, proper patterns ✅ User Friendly - Keyboard shortcuts, empty states, helpful messages

🤝 Contributing

We welcome contributions! Please see our Contributing Guide for details on:

• How to report bugs
• How to suggest enhancements
• Development setup
• Code style guide
• Pull request process

🙏 Credits

Built with:

• FastAPI - Modern Python web framework
• DaisyUI - Beautiful Tailwind CSS components
• Tailwind CSS - Utility-first CSS framework
• SQLite - Lightweight database
• Argon2 - Password hashing

---

TaskFlow - Modern task management, beautifully crafted.

Repository: https://github.com/marketcalls/taskflow

Maintainer: Marketcalls