Django Expert
Senior Django specialist with deep expertise in Django 5.0, Django REST Framework, and production-grade web applications.
When to Use This Skill
- Building Django web applications or REST APIs
- Designing Django models with proper relationships
- Implementing DRF serializers and viewsets
- Optimizing Django ORM queries
- Setting up authentication (JWT, session)
- Django admin customization
Core Workflow
- Analyze requirements — Identify models, relationships, API endpoints
- Design models — Create models with proper fields, indexes, managers → run
manage.py makemigrations and manage.py migrate; verify schema before proceeding
- Implement views — DRF viewsets or Django 5.0 async views
- Validate endpoints — Confirm each endpoint returns expected status codes with a quick
APITestCase or curl check before adding auth
- Add auth — Permissions, JWT authentication
- Test — Django TestCase, APITestCase
Reference Guide
Load detailed guidance based on context:
| Topic |
Reference |
Load When |
| Models |
references/models-orm.md |
Creating models, ORM queries, optimization |
| Serializers |
references/drf-serializers.md |
DRF serializers, validation |
| ViewSets |
references/viewsets-views.md |
Views, viewsets, async views |
| Authentication |
references/authentication.md |
JWT, permissions, SimpleJWT |
| Testing |
references/testing-django.md |
APITestCase, fixtures, factories |
Minimal Working Example
The snippet below demonstrates the core MUST DO constraints: indexed fields, select_related, serializer validation, and endpoint permissions.
# models.py
from django.db import models
class Article(models.Model):
title = models.CharField(max_length=255, db_index=True)
author = models.ForeignKey(
"auth.User", related_name="articles"
)
published_at = models.DateTimeField(auto_now_add=True, db_index=True)
class Meta:
ordering = ["-published_at"]
indexes = [models.Index(fields=["author", "published_at"])]
def __str__(self):
return self.title
# serializers.py
from rest_framework import serializers
from .models import Article
class ArticleSerializer(serializers.ModelSerializer):
author_username = serializers.CharField(source="author.username", read_only=True)
class Meta:
model = Article
fields = ["id", "title", "author_username", "published_at"]
def validate_title(self, value):
if len(value.strip()) < 3:
raise serializers.ValidationError("Title must be at least 3 characters.")
return value.strip()
# views.py
from rest_framework import viewsets, permissions
from .models import Article
from .serializers import ArticleSerializer
class ArticleViewSet(viewsets.ModelViewSet):
"""
Uses select_related to avoid N+1 on author lookups.
IsAuthenticatedOrReadOnly: safe methods are public, writes require auth.
"""
serializer_class = ArticleSerializer
permission_classes = [permissions.IsAuthenticatedOrReadOnly]
def get_queryset(self):
return Article.objects.select_related("author").all()
def perform_create(self, serializer):
serializer.save(author=self.request.user)
# tests.py
from rest_framework.test import APITestCase
from rest_framework import status
from django.contrib.auth.models import User
class ArticleAPITest(APITestCase):
def setUp(self):
self.user = User.objects.create_user("alice", password="pass")
def test_list_public(self):
res = self.client.get("/api/articles/")
self.assertEqual(res.status_code, status.HTTP_200_OK)
def test_create_requires_auth(self):
res = self.client.post("/api/articles/", {"title": "Test"})
self.assertEqual(res.status_code, status.HTTP_403_FORBIDDEN)
def test_create_authenticated(self):
self.client.force_authenticate(self.user)
res = self.client.post("/api/articles/", {"title": "Hello Django"})
self.assertEqual(res.status_code, status.HTTP_201_CREATED)
Constraints
MUST DO
- Use
select_related/prefetch_related for related objects
- Add database indexes for frequently queried fields
- Use environment variables for secrets
- Implement proper permissions on all endpoints
- Write tests for models and API endpoints
- Use Django's built-in security features (CSRF, etc.)
MUST NOT DO
- Use raw SQL without parameterization
- Skip database migrations
- Store secrets in settings.py
- Use DEBUG=True in production
- Trust user input without validation
- Ignore query optimization
Output Templates
When implementing Django features, provide:
- Model definitions with indexes
- Serializers with validation
- ViewSet or views with permissions
- Brief note on query optimization
Knowledge Reference
Django 5.0, DRF, async views, ORM, QuerySet, select_related, prefetch_related, SimpleJWT, django-filter, drf-spectacular, pytest-django
1---2name: django-expert3description: Use when building Django web applications or REST APIs with Django REST Framework. Invoke when working with settings.py, models.py, manage.py, or any Django project file. Creates Django models with proper indexes, optimizes ORM queries using select_related/prefetch_related, builds DRF serializers and viewsets, and configures JWT authentication. Trigger terms: Django, DRF, Django REST Framework, Django ORM, Django model, serializer, viewset, Python web.4license: MIT5---67# Django Expert89Senior Django specialist with deep expertise in Django 5.0, Django REST Framework, and production-grade web applications.1011## When to Use This Skill1213- Building Django web applications or REST APIs14- Designing Django models with proper relationships15- Implementing DRF serializers and viewsets16- Optimizing Django ORM queries17- Setting up authentication (JWT, session)18- Django admin customization1920## Core Workflow21221. **Analyze requirements** — Identify models, relationships, API endpoints232. **Design models** — Create models with proper fields, indexes, managers → run `manage.py makemigrations` and `manage.py migrate`; verify schema before proceeding243. **Implement views** — DRF viewsets or Django 5.0 async views254. **Validate endpoints** — Confirm each endpoint returns expected status codes with a quick `APITestCase` or `curl` check before adding auth265. **Add auth** — Permissions, JWT authentication276. **Test** — Django TestCase, APITestCase2829## Reference Guide3031Load detailed guidance based on context:3233| Topic | Reference | Load When |34|-------|-----------|-----------|35| Models | `references/models-orm.md` | Creating models, ORM queries, optimization |36| Serializers | `references/drf-serializers.md` | DRF serializers, validation |37| ViewSets | `references/viewsets-views.md` | Views, viewsets, async views |38| Authentication | `references/authentication.md` | JWT, permissions, SimpleJWT |39| Testing | `references/testing-django.md` | APITestCase, fixtures, factories |4041## Minimal Working Example4243The snippet below demonstrates the core MUST DO constraints: indexed fields, `select_related`, serializer validation, and endpoint permissions.4445```python46# models.py47from django.db import models4849class Article(models.Model):50 title = models.CharField(max_length=255, db_index=True)51 author = models.ForeignKey(52 "auth.User", on_delete=models.CASCADE, related_name="articles"53 )54 published_at = models.DateTimeField(auto_now_add=True, db_index=True)5556 class Meta:57 ordering = ["-published_at"]58 indexes = [models.Index(fields=["author", "published_at"])]5960 def __str__(self):61 return self.title626364# serializers.py65from rest_framework import serializers66from .models import Article6768class ArticleSerializer(serializers.ModelSerializer):69 author_username = serializers.CharField(source="author.username", read_only=True)7071 class Meta:72 model = Article73 fields = ["id", "title", "author_username", "published_at"]7475 def validate_title(self, value):76 if len(value.strip()) < 3:77 raise serializers.ValidationError("Title must be at least 3 characters.")78 return value.strip()798081# views.py82from rest_framework import viewsets, permissions83from .models import Article84from .serializers import ArticleSerializer8586class ArticleViewSet(viewsets.ModelViewSet):87 """88 Uses select_related to avoid N+1 on author lookups.89 IsAuthenticatedOrReadOnly: safe methods are public, writes require auth.90 """91 serializer_class = ArticleSerializer92 permission_classes = [permissions.IsAuthenticatedOrReadOnly]9394 def get_queryset(self):95 return Article.objects.select_related("author").all()9697 def perform_create(self, serializer):98 serializer.save(author=self.request.user)99```100101```python102# tests.py103from rest_framework.test import APITestCase104from rest_framework import status105from django.contrib.auth.models import User106107class ArticleAPITest(APITestCase):108 def setUp(self):109 self.user = User.objects.create_user("alice", password="pass")110111 def test_list_public(self):112 res = self.client.get("/api/articles/")113 self.assertEqual(res.status_code, status.HTTP_200_OK)114115 def test_create_requires_auth(self):116 res = self.client.post("/api/articles/", {"title": "Test"})117 self.assertEqual(res.status_code, status.HTTP_403_FORBIDDEN)118119 def test_create_authenticated(self):120 self.client.force_authenticate(self.user)121 res = self.client.post("/api/articles/", {"title": "Hello Django"})122 self.assertEqual(res.status_code, status.HTTP_201_CREATED)123```124125## Constraints126127### MUST DO128- Use `select_related`/`prefetch_related` for related objects129- Add database indexes for frequently queried fields130- Use environment variables for secrets131- Implement proper permissions on all endpoints132- Write tests for models and API endpoints133- Use Django's built-in security features (CSRF, etc.)134135### MUST NOT DO136- Use raw SQL without parameterization137- Skip database migrations138- Store secrets in settings.py139- Use DEBUG=True in production140- Trust user input without validation141- Ignore query optimization142143## Output Templates144145When implementing Django features, provide:1461. Model definitions with indexes1472. Serializers with validation1483. ViewSet or views with permissions1494. Brief note on query optimization150151## Knowledge Reference152153Django 5.0, DRF, async views, ORM, QuerySet, select_related, prefetch_related, SimpleJWT, django-filter, drf-spectacular, pytest-django