Enhance admin security by integrating secure_admin_login from AllAuth and updating settings for new dependencies

backend/server/adventures/admin.py

@@ -3,6 +3,11 @@ from django.contrib import admin
 from django.utils.html import mark_safe
 from .models import Adventure, Checklist, ChecklistItem, Collection, Transportation, Note, AdventureImage, Visit, Category
 from worldtravel.models import Country, Region, VisitedRegion
+from allauth.account.decorators import secure_admin_login
+
+admin.autodiscover()
+admin.site.login = secure_admin_login(admin.site.login)
+
 
 
 class AdventureAdmin(admin.ModelAdmin):

backend/server/main/settings.py

@@ -47,10 +47,13 @@ INSTALLED_APPS = (
     'django.contrib.sites',
     'rest_framework',
     'rest_framework.authtoken',
+    "allauth_ui",
     'allauth',
     'allauth.account',
     'allauth.headless',
     'allauth.socialaccount',
+    "widget_tweaks",
+    "slippers",
     'drf_yasg',
     'corsheaders',
     'adventures',
@@ -119,6 +122,9 @@ USE_L10N = True
 
 USE_TZ = True
 
+ALLAUTH_UI_THEME = "dark"
+SILENCED_SYSTEM_CHECKS = ["slippers.E001"]
+
 # Static files (CSS, JavaScript, Images)
 # https://docs.djangoproject.com/en/1.7/howto/static-files/
 

backend/server/requirements.txt

@@ -13,4 +13,7 @@ whitenoise
 django-resized
 django-geojson
 setuptools
-gunicorn==23.0.0
+gunicorn==23.0.0
+slippers==0.6.2
+django-allauth-ui==1.5.1
+django-widget-tweaks==1.5.0

backend/server/users/admin.py

@@ -1,7 +1,10 @@
 from django.contrib import admin
-
+from allauth.account.decorators import secure_admin_login
 from django.contrib.sessions.models import Session
 
+admin.autodiscover()
+admin.site.login = secure_admin_login(admin.site.login)
+
 class SessionAdmin(admin.ModelAdmin):
     def _session_data(self, obj):
         return obj.get_decoded()

backend/server/worldtravel/admin.py

@@ -1,3 +1,5 @@
 from django.contrib import admin
+from allauth.account.decorators import secure_admin_login
 
-# Register your models here.
+admin.autodiscover()
+admin.site.login = secure_admin_login(admin.site.login)