This commit introduces a comprehensive Kanban board customization system and improves CSRF token configuration for Docker deployments. ## Major Features ### 1. Customizable Kanban Board Columns Add complete kanban column customization system allowing users to define custom workflow states beyond the default columns. **New Components:** - Add KanbanColumn model with full CRUD operations (app/models/kanban_column.py) - Add kanban routes blueprint with admin endpoints (app/routes/kanban.py) - Add kanban column management templates (app/templates/kanban/) - Add migration 019 for kanban_columns table (migrations/) **Features:** - Create unlimited custom columns with unique keys, labels, icons, and colors - Drag-and-drop column reordering with position persistence - Toggle column visibility without deletion - Protected system columns (todo, in_progress, done) prevent accidental deletion - Complete state marking for columns that should mark tasks as done - Real-time updates via SocketIO broadcasts when columns change - Font Awesome icon support (5000+ icons) - Bootstrap color scheme integration - Comprehensive validation and error handling **Integration:** - Update Task model to work with dynamic column statuses (app/models/task.py) - Update task routes to use kanban column API (app/routes/tasks.py) - Update project routes to fetch active columns (app/routes/projects.py) - Add kanban column management links to base template (app/templates/base.html) - Update kanban board templates to render dynamic columns (app/templates/tasks/) - Add cache prevention headers to force fresh column data **API Endpoints:** - GET /api/kanban/columns - Fetch all active columns - POST /api/kanban/columns/reorder - Reorder columns - GET /kanban/columns - Column management interface (admin only) - POST /kanban/columns/create - Create new column (admin only) - POST /kanban/columns/<id>/edit - Edit column (admin only) - POST /kanban/columns/<id>/delete - Delete column (admin only) - POST /kanban/columns/<id>/toggle - Toggle column visibility (admin only) ### 2. Enhanced CSRF Configuration Improve CSRF token configuration and documentation for Docker deployments. **Configuration Updates:** - Add WTF_CSRF_ENABLED environment variable to all docker-compose files - Add WTF_CSRF_TIME_LIMIT environment variable with 1-hour default - Update app/config.py to read CSRF settings from environment - Add SECRET_KEY validation in app/__init__.py to prevent production deployment with default keys **Docker Compose Updates:** - docker-compose.yml: CSRF enabled by default for security testing - docker-compose.remote.yml: CSRF always enabled in production - docker-compose.remote-dev.yml: CSRF enabled with production-like settings - docker-compose.local-test.yml: CSRF can be disabled for local testing - Add helpful comments explaining each CSRF-related environment variable - Update env.example with CSRF configuration examples **Verification Scripts:** - Add scripts/verify_csrf_config.sh for Unix systems - Add scripts/verify_csrf_config.bat for Windows systems - Scripts check SECRET_KEY, CSRF_ENABLED, and CSRF_TIME_LIMIT settings ### 3. Database Initialization Improvements - Update app/__init__.py to run pending migrations on startup - Add automatic kanban column initialization after migrations - Improve error handling and logging during database setup ### 4. Configuration Management - Update app/config.py with new CSRF and kanban-related settings - Add environment variable parsing with sensible defaults - Improve configuration validation and error messages ## Documentation ### New Documentation Files - CUSTOM_KANBAN_README.md: Quick start guide for kanban customization - KANBAN_CUSTOMIZATION.md: Detailed technical documentation - IMPLEMENTATION_SUMMARY.md: Implementation details and architecture - KANBAN_AUTO_REFRESH_COMPLETE.md: Real-time update system documentation - KANBAN_REFRESH_FINAL_FIX.md: Cache and refresh troubleshooting - KANBAN_REFRESH_SOLUTION.md: Technical solution for data freshness - docs/CSRF_CONFIGURATION.md: Comprehensive CSRF setup guide - CSRF_DOCKER_CONFIGURATION_SUMMARY.md: Docker-specific CSRF setup - CSRF_TROUBLESHOOTING.md: Common CSRF issues and solutions - APPLY_KANBAN_MIGRATION.md: Migration application guide - APPLY_FIXES_NOW.md: Quick fix reference - DEBUG_KANBAN_COLUMNS.md: Debugging guide - DIAGNOSIS_STEPS.md: System diagnosis procedures - BROWSER_CACHE_FIX.md: Browser cache troubleshooting - FORCE_NO_CACHE_FIX.md: Cache prevention solutions - SESSION_CLOSE_ERROR_FIX.md: Session handling fixes - QUICK_FIX.md: Quick reference for common fixes ### Updated Documentation - README.md: Add kanban customization feature description - Update project documentation with new features ## Testing ### New Test Files - test_kanban_refresh.py: Test kanban column refresh functionality ## Technical Details **Database Changes:** - New table: kanban_columns with 11 columns - Indexes on: key, position - Default data: 4 system columns (todo, in_progress, review, done) - Support for both SQLite (development) and PostgreSQL (production) **Real-Time Updates:** - SocketIO events: 'kanban_columns_updated' with action type - Automatic page refresh when columns are created/updated/deleted/reordered - Prevents stale data by expiring SQLAlchemy caches after changes **Security:** - Admin-only access to column management - CSRF protection on all column mutation endpoints - API endpoints exempt from CSRF (use JSON and other auth mechanisms) - System column protection prevents data integrity issues - Validation prevents deletion of columns with active tasks **Performance:** - Efficient querying with position-based ordering - Cached column data with cache invalidation on changes - No-cache headers on API responses to prevent stale data - Optimized database indexes for fast lookups ## Breaking Changes None. This is a fully backward-compatible addition. Existing workflows continue to work with the default columns. Custom columns are opt-in via the admin interface. ## Migration Notes 1. Run migration 019 to create kanban_columns table 2. Default columns are initialized automatically on first run 3. No data migration needed for existing tasks 4. Existing task statuses map to new column keys ## Environment Variables New environment variables (all optional with defaults): - WTF_CSRF_ENABLED: Enable/disable CSRF protection (default: true) - WTF_CSRF_TIME_LIMIT: CSRF token expiration in seconds (default: 3600) - SECRET_KEY: Required in production, must be cryptographically secure See env.example for complete configuration reference. ## Deployment Notes
3.9 KiB
Kanban Column Refresh - Diagnosis Steps
Let's figure out exactly what's happening
Please follow these steps and tell me the results:
Step 1: Verify Changes Are Saved to Database
# After creating/editing a column, immediately check the database
docker exec -it timetracker_db_1 psql -U timetracker -d timetracker -c "SELECT id, key, label, position, is_active FROM kanban_columns ORDER BY position;"
Question: Do you see your new/edited column in the database?
- If YES → Changes are saved, it's a caching issue
- If NO → Changes aren't being saved at all
Step 2: Check How You're Viewing Changes
Please describe exactly what you do:
A) Do you:
- Go to
/kanban/columns - Click "Add Column"
- Fill form and submit
- Get redirected back to
/kanban/columns - Don't see the new column ← Problem here?
B) Or do you:
- Go to
/kanban/columns - Click "Add Column"
- Fill form and submit
- See new column on
/kanban/columns✓ - Go to
/tasks - Don't see the new column on kanban board ← Problem here?
C) Or something else?
Step 3: Test Manual Page Refresh
After creating a column:
- Do you see it on
/kanban/columns? (might need to refresh) - Open
/tasksin a NEW tab - Do you see the new column on the kanban board?
Step 4: Check Browser Cache
Press: Ctrl + Shift + R (Windows/Linux)
Or: Cmd + Shift + R (Mac)
This does a hard refresh. Does the column appear now?
Step 5: Check Gunicorn Workers
You might have multiple workers caching independently:
# Check logs when you create a column
docker logs -f timetracker_app_1
Look for:
- "Column created successfully" messages
- Any errors
- Which worker handled the request
Step 6: Test via Python Shell
# Enter container
docker exec -it timetracker_app_1 bash
# Run Python
python3 << 'EOF'
from app import create_app, db
from app.models import KanbanColumn
app = create_app()
with app.app_context():
print("Active columns:")
for col in KanbanColumn.get_active_columns():
print(f" - {col.key}: {col.label}")
EOF
exit
Does this show your new columns?
Step 7: Check if SocketIO is Working
Open browser console (F12) on /tasks page and run:
// Check if socket is connected
if (typeof io !== 'undefined') {
console.log('SocketIO is available');
const socket = io();
socket.on('connect', () => console.log('Socket connected!'));
socket.on('kanban_columns_updated', (data) => console.log('Received update:', data));
} else {
console.log('SocketIO NOT available');
}
Then in another tab, create a column. Do you see "Received update" in console?
Common Scenarios and Solutions
Scenario A: Changes save but don't appear until restart
Cause: Multiple gunicorn workers with separate caches Solution: Add cache-busting parameter to queries
Scenario B: Changes appear on /kanban/columns but not on /tasks
Cause: Browser caching the /tasks page
Solution: Hard refresh or disable cache
Scenario C: Changes don't save at all
Cause: Form validation failing or database error Solution: Check Docker logs for errors
Scenario D: Changes appear after manual refresh
Cause: Page not auto-refreshing as expected Solution: This is actually working - just needs manual refresh
Quick Test
Try this simple test:
- Go to
/kanban/columns - Note the current column count (should be 4)
- Create a new column called "Test123"
- You get redirected back - COUNT THE COLUMNS - is it 5 now?
- If YES: Column was created, just refresh
/tasksto see it - If NO: Column creation is failing
- If YES: Column was created, just refresh
Please Report Back
Tell me:
- Which scenario (A, B, C, or D) matches your issue?
- Results from Step 1 (database check)
- Which behavior (A, B, or C) from Step 2
- Does hard refresh (Step 4) show the column?
- Output from Step 6 (Python shell)
This will help me give you the exact fix you need!