Django & FastAPI Backend Online Training

SQLAlchemy 2.0 paradigm shift, DeclarativeBase, mapped_column, Mapped type annotations, and model mapping.

relationship(), foreign keys, back_populates, cascade options, lazy='select', lazy='joined', lazy='selectin', and avoiding the N+1 problem.

create_async_engine, async_sessionmaker, AsyncSession, select(), where(), filter(), order_by(), and scalar() execution.

Initializing Alembic, alembic.ini, env.py, generating migrations (revision --autogenerate), upgrade, downgrade, and migration best practices.

Constructing a full asynchronous database access layer for an enterprise schema with Alembic automated migrations.

Model-View-Template (MVT) pattern, django-admin, manage.py, settings.py, split settings for environments, and app creation.

Model fields, primary keys, foreign keys (CASCADE, PROTECT, SET_NULL), ManyToManyField, OneToOneField, Meta class, and database constraints.

filter(), exclude(), get(), order_by(), values(), values_list(), annotate(), aggregate(), select_related() (JOIN), and prefetch_related().

ModelAdmin, list_display, list_filter, search_fields, list_editable, inlines (TabularInline), and custom admin actions.

path(), re_path(), View, TemplateView, ListView, DetailView, CreateView, Django Forms, and CSRF protection.

Building an internal company portal with role-differentiated dashboards, optimized QuerySets, and custom Django Admin.

REST architectural constraints, HTTP verbs, status codes, content negotiation, Request and Response objects.

ModelSerializer, fields, read_only_fields, validate_<field>(), validate() object-level checks, nested serializers, and write-enabled nested relations.

APIView, generic views (ListCreateAPIView, RetrieveUpdateDestroyAPIView), ModelViewSet, ReadOnlyModelViewSet, and DefaultRouter.

SessionAuthentication, TokenAuthentication, JWT integration, IsAuthenticated, IsAdminUser, custom BasePermission, and AnonRateThrottle.

django-filter integration, DjangoFilterBackend, SearchFilter, OrderingFilter, PageNumberPagination, and LimitOffsetPagination.

Building Project 2: Role-based JWT authentication, full employee CRUD, department management, multi-parameter filtering, and React frontend integration.

WSGI vs ASGI, event-loop execution, Uvicorn server, FastAPI application lifecycle, and performance benchmarks.

Type declarations in path, Query() metadata, Path() validation, Header(), Cookie(), and HTTP status code conventions.

BaseModel, Field(), custom validators (@field_validator, @model_validator), nested schemas, and response_model filtering.

Why DI matters, Depends(), database session injection, authenticated user extraction, hierarchical sub-dependencies, and yield dependencies for cleanup.

CORSMiddleware, custom ASGI middleware, error handling with HTTPException and custom exception handlers, Swagger UI (/docs), and ReDoc (/redoc).

Constructing a standalone async FastAPI service using Pydantic v2, dependency injection, and automatic Swagger docs.

Symmetric vs asymmetric encryption, salting, bcrypt, Argon2 password hashing algorithms, and passlib.

Header, Payload, Signature, claims (sub, exp, iat), access tokens vs refresh tokens, token revocation strategies, and PyJWT.

OAuth2PasswordBearer, token generation endpoint, extracting and validating tokens in request dependencies, and returning 401 Unauthorized.

Roles (Admin, Manager, User), permissions matrix, declarative permission decorators, and row-level tenancy enforcement.

HttpOnly, Secure, SameSite cookie attributes, preventing XSS and CSRF, and Google OAuth2 social login integration.

Implementing an enterprise auth service with access token refresh rotation, Redis blacklist, and RBAC guards.

Broken Object Level Authorization (BOLA), Broken Function Level Authorization (BFLA), Unrestricted Resource Consumption, and Security Misconfiguration.

Strict Pydantic schemas, regex validation, sanitizing HTML outputs, preventing Mass Assignment vulnerabilities, and payload size limits.

Content Security Policy (CSP), Strict-Transport-Security (HSTS), X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.

IP-based and user-based throttling, slowloris defense, Redis token bucket algorithms, and Cloudflare/WAF overview.

Static Application Security Testing (SAST) with Bandit, dependency vulnerability scanning with pip-audit and Snyk, and secret leak detection with git-secrets.

Conducting a security penetration test on a vulnerable API, identifying BOLA flaws, and remediating all vulnerabilities to pass automated security audits.

Single-threaded event loop, in-memory persistence (RDB, AOF), CLI usage, and connection from Python with redis-py.

Strings (key-value, counters), Hashes (storing objects), Lists (queues), Sets (unique tags), and Sorted Sets (leaderboards, rate limiters).

Cache hit/miss workflows, TTL (Time-To-Live), cache invalidation techniques, cache stampede prevention, and dogpiling mitigation.

SETNX distributed lock pattern, Redlock algorithm, token bucket rate limiting, and session store integration.

Implementing an intelligent caching middleware in FastAPI reducing database query load by 85% with automated TTL invalidation.

Message broker, task queue, Celery workers, result backend, task serialization, and concurrency models (prefork, eventlet, gevent).

@shared_task decorator, calling tasks with .delay() and .apply_async(), passing primitives vs IDs, and retrieving task status from AsyncResult.

Automatic task retries with exponential backoff (retry_backoff=True), max_retries, custom retry exceptions, and handling poison pills.

Complex orchestration with s(), chain (sequential execution), group (parallel execution), and chord (parallel with callback).

Crontab schedules, periodic tasks configuration, Celery Beat daemon, django-celery-beat database scheduler, and Flower task monitoring.

Building Project 3: S3 presigned uploads, background media resizing with Pillow, Celery task workers, and scheduled publishing via Celery Beat.

Designing the order lifecycle, state machines, atomic reservation with Redis, and timeout cleanups.

Kafka producer configuration, topic partitioning, payment processing listener, and idempotency keys.

Benchmarking FastAPI microservices under 5,000 concurrent virtual users, finding bottlenecks, and tuning connection pools.

Refactoring and defending the complete Project 4 codebase with automated PyTest coverage and Docker deployment.