MIKI BLOG

2026-02-10

When the Celery Worker Broke My Auth Design, I Settled on API Keys

I discovered that Celery workers lack request.user and session data, rendering OAuth2, JWT, and session auth ineffective. By introducing API keys linked to users, I solved both authentication and identification, and gained operational benefits like easy key management, rotation, and user‑based billing.

#django #celery #oauth2 #backend +3

2026-02-02

When to Use simple_tag in Django Templates

Explore when to use simple_tag in Django templates. Learn the criteria for separating view logic from template formatting, avoid ORM in tags, and see practical examples. This guide clarifies responsibilities, improves maintainability, and boosts performance.

#django #simple_tag #template tags #view vs template +1

2026-01-26

How to Use Django’s LocMemCache (Local Memory Cache) and Its Features

Django’s LocMemCache stores data in the process’s RAM, offering a fast, thread‑safe, per‑process cache without external servers. Learn its setup, pros and cons, and when it’s best suited for development or testing scenarios.

#django #locmemcache #cache #local-memory-cache +2

2026-01-26

Mastering DRF Throttling: Setup, Application, and Customization

A comprehensive guide to DRF throttling—covering global and view‑specific settings, ScopedRateThrottle, custom throttles, Redis caching, and proxy‑aware IP handling—to boost API performance and security.

#django #drf #throttling #api rate limiting +3

2026-01-23

Extracting URLs in Django Templates: `request.path` vs `path_info` vs `get_full_path` vs `build_absolute_uri`

A concise guide to retrieving the current URL in Django templates. It compares request.path, request.path_info, request.get_full_path(), and request.build_absolute_uri(), explaining when to use each for active navigation, redirects, canonical URLs, and more, with deployment‑specific cautions.

#django #url #request-path #template +3

2026-01-15

Understanding Pillow’s `open()`, `verify()`, and `load()` from a Security Perspective

Explore how Pillow’s `open()`, `verify()`, and `load()` methods affect image‑upload security. Learn practical strategies—policy checks, corruption filtering, and safe re‑encoding—to mitigate decoding risks and prevent DoS attacks.

#django #security #pillow #verify +3

2026-01-14

Let Nginx Handle File Delivery in Django with X‑Accel‑Redirect

When Django streams files directly, the app server can become a bottleneck. By using X‑Accel‑Redirect, Django handles permission checks while Nginx streams the file, boosting performance and security—especially for large files or high‑concurrency downloads. This guide explains the best practices.

#django #security #nginx #x-accel-redirect +2

2026-01-13

Django Image Upload Security Guide: Efficiently Preventing Server Crashes

A practical guide for Django‑based web services to secure image uploads while avoiding resource waste. Learn how to perform low‑cost size, MIME, and resolution checks, then re‑encode files on the server to strip metadata and prevent DoS or malicious payloads. Follow the checklist and code examples for a robust solution.

#django #security #drf #pillow +3

2026-01-13

Handling Homonyms in Django Internationalization: Avoiding the "Polish" Tragedy with Contextual Markers

This guide explains how to resolve translation conflicts in Django when the same word has multiple meanings. By using template `{% translate "…" context "…" %}` and Python `pgettext`, `pgettext_lazy`, `npgettext`, you add `msgctxt` to .po files, improving translation quality and maintainability.

#django #i18n #gettext #translation +3

2026-01-05

Clearing Up the gettext vs gettext_lazy Confusion in Django (Understanding When Translation Happens)

Clear up the confusion between Django’s `gettext` and `gettext_lazy`. Learn when to translate immediately versus lazily, avoid common pitfalls with module constants, model fields, and form labels, and master tools like `format_lazy` and `force_str` for robust i18n implementation.

#django #python #i18n #gettext_lazy +3

2025-12-22

Relearning Django from Scratch: A Roadmap Starting with HTTP

Relearn Django from scratch by starting with HTTP basics and a roadmap. Master Function-Based Views first, then move to Class-Based Views and Django REST Framework while understanding the request–response cycle. Practical tips for beginners and intermediates.

#django #cbv #fbv #web development +3

2025-12-11

ORM, @property, and Celery Debugging: Encrypted Fields and FieldDoesNotExist Issues

Fix FieldDoesNotExist errors caused by wrapping encrypted fields with @property in Django models. Learn why this issue occurs, how it creates silent bugs in Celery retry logic, and explore solutions using custom model fields.

#django #orm #celery #debugging

2025-12-10

Understanding the Difference Between _, __, and . in Django ORM: When to Use user_id, user.id, or user__id?

A clear guide to the often‑confusing `_`, `__`, and `.` symbols in Django ORM. It explains the real‑world meaning of `user_id`, `user.id`, and `user__id`, covers performance implications, and offers practical tips to avoid N+1 queries and unnecessary JOINs.

#django #orm #performance #foreignkey +1

2025-12-09

Ensuring Server‑to‑Server Integrity with HMAC Signatures in Django/DRF

Learn how to secure server‑to‑server communication in Django/DRF with HMAC signatures—covering key sharing, timestamp protection, replay attack mitigation, and practical mixin and authentication class implementations for robust, tamper‑proof requests.

#django #hmac #drf #server-to-server authentication +1

2025-12-04

Lightweight Docker Images with Django and Tailwind CSS: A Multi‑Stage Build Strategy

Learn how to keep your Django + Tailwind CSS Docker images lightweight by using a three‑stage multi‑stage build. Node.js is confined to the build phase, leaving a pure Python runtime for production, which reduces image size and improves security.

#django #python #docker #image optimization +3

All Posts