wemake-services/django-modern-rest

We already set auth=None for them, but security= must also be disabled for the consistency.

Currently this example shows how to protect a view with CSRF: django-modern-rest/dmr/.agents/skills/dmr/references/security.md Lines 117 to 176 in 1cb33fb ### Wrap Django middleware with `wrap_middleware` to keep OpenAPI docs and validation `wrap_middleware` ensures middleware responses are documented in OpenAPI schema and subject to response validation. Wrong: ```python from django.views.decorators.csrf import csrf_protect from dmr import Controller from dmr.plugins.msgspec imp

We should state that using concrete_views is better than implementing your own views that do not change anything. Add this to the dmr skill.

What's wrong? The per-file content types a model declares disappear from the schema as soon as the component gets a default value. These two controllers differ only in that default: class _FileModel(pydantic.BaseModel): content_type: Literal['text/plain'] size: int class _Files(pydantic.BaseModel): first_file: _FileModel second_file: _FileModel class _Required(Controller[PydanticSerializer]): parsers = (MultiPartParser(),) def post(self, parsed_file_metadata: FileMetadata[_Files]) -> str: ... class _Optional(Controller[PydanticSerializer]): parsers = (MultiPartParser(),) def post( self, parsed_file_metadata: FileMetadata[_Files | None] = None, ) -> str: ... requestBody.content['multipart/form-data'] for each: _Required "encoding": {"first_file": {"contentType": "text/plain"}, "second_file": {"contentType": "text/plain"}} _Optional no "encoding" key at all The schema itself is fine — first_file and

When an operation has a tag in @modify(tags=...) and its Router has the same tag in Router(tags=...), the generated OpenAPI operation lists the tag twice. UIs like Scalar then show every operation twice, once per tag entry. from dmr import Controller, modify from dmr.openapi import build_schema from dmr.plugins.pydantic import PydanticSerializer from dmr.routing import Router, path class UserController(Controller[PydanticSerializer]): @modify(tags=['Users']) def get(self) -> str: return 'ok' users = Router('/users', [path('/all', UserController.as_view(), name='users')], tags=['Users']) api = Router('api') api.include(users, namespace='users') schema = build_schema(api) print(schema.paths['/api/users/all'].get.tags) # ['Users', 'Users'] Expected: ['Users']. The router tags and the endpoint tags should be merged without duplicates. This looks related to the change for #1299, which now propagates router metadata to included routes. django-modern-rest 0.15.0 Django