remove venv from repo

.env

@@ -0,0 +1,11 @@
+# .env file
+DATABASE_URL=postgresql://postgres.sgctwsjvgrvbcjyvwprg:yash9897422911@aws-1-ap-southeast-1.pooler.supabase.com:6543/postgres
+SUPABASE_URL=https://sgctwsjvgrvbcjyvwprg.supabase.co
+SUPABASE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InNnY3R3c2p2Z3J2YmNqeXZ3cHJnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA3MzgzMDcsImV4cCI6MjA4NjMxNDMwN30.OlcoyXaDu1Hn6xApQAsjO0XeW2klcvJRp-4Elnx_OBg
+SUPABASE_JWT_SECRET=ktkcGAWLUzVmgUdJFfyGROURYbyS9efKJU1dZXEzLRLuNkY8DX3HISRFvwosh3LSsuRbCtUI69eCYAI2UTcpug==
+SECRET_KEY=django-insecure-change-me-later-for-production
+DEBUG=True
+ALLOWED_HOSTS=*
+
+SENDGRID_API_KEY=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
+DEFAULT_FROM_EMAIL=codewithyash124@gmail.com

ai_assistant/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

ai_assistant/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class AiAssistantConfig(AppConfig):
+    name = 'ai_assistant'

ai_assistant/models.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

ai_assistant/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

ai_assistant/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.

aureon_backend/asgi.py

@@ -0,0 +1,16 @@
+"""
+ASGI config for aureon_backend project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'aureon_backend.settings')
+
+application = get_asgi_application()

aureon_backend/settings.py

@@ -0,0 +1,170 @@
+# backend/aureon_backend/settings.py
+
+import os
+from pathlib import Path
+import dj_database_url
+from dotenv import load_dotenv
+
+load_dotenv()
+
+BASE_DIR = Path(__file__).resolve().parent.parent
+SECRET_KEY = os.getenv('SECRET_KEY', 'django-insecure-default-key')
+DEBUG = os.getenv('DEBUG', 'True') == 'True'
+ALLOWED_HOSTS = ['*']
+
+INSTALLED_APPS = [
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'rest_framework',
+    'corsheaders',
+    'users',
+    'finance',
+    'ai_assistant',
+    'importer',
+]
+
+MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+ROOT_URLCONF = 'aureon_backend.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.debug',
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'aureon_backend.wsgi.application'
+
+DATABASES = {
+    'default': dj_database_url.config(
+        default=os.getenv('DATABASE_URL'),
+        conn_max_age=600,
+        conn_health_checks=True,
+        ssl_require=True,
+    )
+}
+
+AUTH_PASSWORD_VALIDATORS = [
+    {'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator'},
+    {'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator'},
+    {'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator'},
+    {'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator'},
+]
+
+LANGUAGE_CODE = 'en-us'
+TIME_ZONE = 'UTC'
+USE_I18N = True
+USE_TZ = True
+STATIC_URL = 'static/'
+DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
+
+AUTH_USER_MODEL = 'users.User'
+
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': [
+        'users.authentication.SupabaseAuthentication',
+    ],
+    'DEFAULT_PERMISSION_CLASSES': [
+        'rest_framework.permissions.IsAuthenticated',
+    ],
+    'EXCEPTION_HANDLER': 'rest_framework.views.exception_handler',
+}
+
+# Supabase Configuration
+SUPABASE_URL = os.getenv('SUPABASE_URL')
+SUPABASE_KEY = os.getenv('SUPABASE_KEY')
+SUPABASE_JWT_SECRET = os.getenv('SUPABASE_JWT_SECRET')  # Optional - only needed for HS256
+
+# CORS Configuration
+CORS_ALLOW_ALL_ORIGINS = True
+CORS_ALLOW_CREDENTIALS = True
+CORS_ALLOW_HEADERS = [
+    'accept',
+    'accept-encoding',
+    'authorization',
+    'content-type',
+    'dnt',
+    'origin',
+    'user-agent',
+    'x-csrftoken',
+    'x-requested-with',
+]
+CORS_ALLOW_METHODS = [
+    'DELETE',
+    'GET',
+    'OPTIONS',
+    'PATCH',
+    'POST',
+    'PUT',
+]
+
+# CSRF Settings
+CSRF_TRUSTED_ORIGINS = ['http://localhost:5173', 'http://127.0.0.1:5173']
+CSRF_COOKIE_SECURE = False
+CSRF_COOKIE_HTTPONLY = False
+
+# Cache Configuration (required for JWKS key caching)
+CACHES = {
+    'default': {
+        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
+        'LOCATION': 'unique-snowflake',
+        'TIMEOUT': 3600,  # 1 hour
+        'OPTIONS': {
+            'MAX_ENTRIES': 1000
+        }
+    }
+}
+
+# Email Settings (SendGrid)
+EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
+EMAIL_HOST = 'smtp.sendgrid.net'
+EMAIL_PORT = 587
+EMAIL_USE_TLS = True
+EMAIL_HOST_USER = 'apikey'
+EMAIL_HOST_PASSWORD = os.getenv('SENDGRID_API_KEY', '')
+DEFAULT_FROM_EMAIL = os.getenv('DEFAULT_FROM_EMAIL', 'noreply@aureon.com')
+
+# Logging Configuration
+LOGGING = {
+    'version': 1,
+    'disable_existing_loggers': False,
+    'handlers': {
+        'console': {
+            'class': 'logging.StreamHandler',
+        },
+    },
+    'root': {
+        'handlers': ['console'],
+        'level': 'INFO',
+    },
+    'loggers': {
+        'django': {
+            'handlers': ['console'],
+            'level': 'INFO',
+            'propagate': False,
+        },
+    },
+}

aureon_backend/urls.py

@@ -0,0 +1,9 @@
+# backend/aureon_backend/urls.py
+from django.contrib import admin
+from django.urls import path, include
+
+urlpatterns = [
+    path('admin/', admin.site.urls),
+    path('api/auth/', include('users.urls')),    # This creates /api/auth/me/
+    # path('api/finance/', include('finance.urls')), # We will uncomment this later
+]

aureon_backend/wsgi.py

@@ -0,0 +1,16 @@
+"""
+WSGI config for aureon_backend project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'aureon_backend.settings')
+
+application = get_wsgi_application()

debug_token.py

@@ -0,0 +1,152 @@
+# backend/debug_token.py
+"""
+Run this script to debug JWT token issues:
+python debug_token.py
+
+This will help you understand what's in your token and verify your JWT secret.
+"""
+
+import jwt
+import json
+import sys
+import os
+
+# Add the parent directory to the path so we can import settings
+sys.path.append(os.path.dirname(os.path.abspath(__file__)))
+
+# Try to load Django settings
+try:
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'aureon_backend.settings')
+    import django
+    django.setup()
+    from django.conf import settings
+    SUPABASE_JWT_SECRET = settings.SUPABASE_JWT_SECRET
+    print(f"✅ Loaded JWT_SECRET from Django settings")
+    print(f"   JWT_SECRET (first 20 chars): {SUPABASE_JWT_SECRET[:20]}...")
+except Exception as e:
+    print(f"⚠️  Could not load Django settings: {e}")
+    print(f"   Please enter your JWT_SECRET manually below")
+    SUPABASE_JWT_SECRET = None
+
+print("\n" + "="*60)
+print("SUPABASE JWT TOKEN DEBUGGER")
+print("="*60)
+
+# Get token from user
+print("\nPaste your Supabase token here:")
+print("(You can get it from localStorage in your browser console)")
+print("localStorage.getItem('supabase_token')")
+print()
+token = input("Token: ").strip()
+
+if not token:
+    print("❌ No token provided!")
+    sys.exit(1)
+
+print("\n" + "-"*60)
+print("STEP 1: Decode Header (unverified)")
+print("-"*60)
+
+try:
+    header = jwt.get_unverified_header(token)
+    print("✅ Token Header:")
+    print(json.dumps(header, indent=2))
+    algorithm = header.get('alg', 'UNKNOWN')
+    print(f"\n🔍 Algorithm: {algorithm}")
+except Exception as e:
+    print(f"❌ Could not decode header: {e}")
+    sys.exit(1)
+
+print("\n" + "-"*60)
+print("STEP 2: Decode Payload (unverified)")
+print("-"*60)
+
+try:
+    # Decode without verification to see the contents
+    payload = jwt.decode(token, options={"verify_signature": False})
+    print("✅ Token Payload:")
+    print(json.dumps(payload, indent=2))
+    
+    print(f"\n🔍 Key Information:")
+    print(f"   User ID (sub): {payload.get('sub', 'NOT FOUND')}")
+    print(f"   Email: {payload.get('email', 'NOT FOUND')}")
+    print(f"   Audience: {payload.get('aud', 'NOT FOUND')}")
+    print(f"   Issuer: {payload.get('iss', 'NOT FOUND')}")
+    
+    # Check expiration
+    import time
+    exp = payload.get('exp')
+    if exp:
+        exp_date = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime(exp))
+        is_expired = exp < time.time()
+        print(f"   Expires: {exp_date} {'(EXPIRED!)' if is_expired else '(valid)'}")
+    
+except Exception as e:
+    print(f"❌ Could not decode payload: {e}")
+    sys.exit(1)
+
+print("\n" + "-"*60)
+print("STEP 3: Verify Signature")
+print("-"*60)
+
+if not SUPABASE_JWT_SECRET:
+    print("Enter your SUPABASE_JWT_SECRET:")
+    SUPABASE_JWT_SECRET = input("JWT_SECRET: ").strip()
+
+if not SUPABASE_JWT_SECRET:
+    print("⚠️  No JWT_SECRET provided - skipping verification")
+else:
+    try:
+        # Try to decode with verification
+        verified_payload = jwt.decode(
+            token,
+            SUPABASE_JWT_SECRET,
+            algorithms=[algorithm],
+            audience="authenticated"
+        )
+        print("✅ Signature verification PASSED!")
+        print("   Your JWT_SECRET is CORRECT!")
+        
+    except jwt.InvalidSignatureError:
+        print("❌ Signature verification FAILED!")
+        print("   Your JWT_SECRET is WRONG!")
+        print("\n   How to find the correct JWT_SECRET:")
+        print("   1. Go to your Supabase Dashboard")
+        print("   2. Settings → API")
+        print("   3. Look for 'JWT Secret' (NOT the service key)")
+        print("   4. Copy that value to your .env file as SUPABASE_JWT_SECRET")
+        
+    except jwt.ExpiredSignatureError:
+        print("❌ Token has EXPIRED!")
+        print("   Solution: Logout and login again to get a new token")
+        
+    except jwt.InvalidAudienceError:
+        print("❌ Invalid audience!")
+        print("   The token audience doesn't match 'authenticated'")
+        
+    except jwt.InvalidAlgorithmError as e:
+        print(f"❌ Algorithm error: {e}")
+        print(f"   The token uses {algorithm} but it's not allowed")
+        
+    except Exception as e:
+        print(f"❌ Verification error: {type(e).__name__}: {e}")
+
+print("\n" + "="*60)
+print("SUMMARY")
+print("="*60)
+
+print(f"\n✓ Token structure: Valid")
+print(f"✓ Algorithm: {algorithm}")
+print(f"✓ User ID present: {'Yes' if payload.get('sub') else 'No'}")
+print(f"✓ Email present: {'Yes' if payload.get('email') else 'No'}")
+
+if SUPABASE_JWT_SECRET:
+    print(f"\nNext steps:")
+    print(f"1. Make sure backend/aureon_backend/settings.py uses:")
+    print(f"   algorithms=['{algorithm}']")
+    print(f"2. Make sure your .env has the correct JWT_SECRET")
+    print(f"3. Restart Django server")
+else:
+    print(f"\n⚠️  Could not verify signature - JWT_SECRET not provided")
+
+print("\n")

finance/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

finance/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class FinanceConfig(AppConfig):
+    name = 'finance'

finance/models.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

finance/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

finance/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.