fix

core/settings.py

@@ -1,6 +1,7 @@
-from dotenv import load_dotenv
-import os
 from pathlib import Path
+import os
+from dotenv import load_dotenv
+from datetime import timedelta
 
 # Cargar variables desde el archivo .env
 load_dotenv()
@@ -8,9 +9,19 @@ load_dotenv()
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
 
+# SECURITY WARNING: keep the secret key used in production secret!
 SECRET_KEY = os.getenv('SECRET_KEY', 'django-insecure-change-me-for-production')
+
+# SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = os.getenv('DEBUG', 'True').lower() == 'true'
 
+# Constants from .env
+DB_NAME = os.getenv('DB_NAME')
+DB_USER = os.getenv('DB_USER')
+DB_PASSWORD = os.getenv('DB_PASSWORD')
+DB_HOST = os.getenv('DB_HOST')
+DB_PORT = os.getenv('DB_PORT')
+
 ALLOWED_HOSTS = [
     'v-encore-lab.com', 
     'dev.v-encore-lab.com', 
@@ -18,9 +29,12 @@ ALLOWED_HOSTS = [
     'localhost', 
     '127.0.0.1',
     'django_app_dev',
-    'django_app_master'
+    'django_app_master',
+    'rest_framework',
+    'rest_framework.authtoken'
 ]
 
+# Application definition
 INSTALLED_APPS = [
     'django.contrib.admin',
     'django.contrib.auth',
@@ -28,11 +42,16 @@ INSTALLED_APPS = [
     'django.contrib.sessions',
     'django.contrib.messages',
     'django.contrib.staticfiles',
+    'rest_framework',
+    'rest_framework.authtoken',
     'apps.promociones',
+    'apps.backend_admin',
     'apps.common',
+    'corsheaders',
 ]
 
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware', 
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
@@ -62,26 +81,17 @@ TEMPLATES = [
 
 WSGI_APPLICATION = 'core.wsgi.application'
 
-# Para desarrollo local: SQLite
-if DEBUG:
-    DATABASES = {
-        'default': {
-            'ENGINE': 'django.db.backends.sqlite3',
-            'NAME': BASE_DIR / 'db.sqlite3',
-        }
-    }
-else:
-    # Producción: PostgreSQL desde .env
-    DATABASES = {
-        'default': {
-            'ENGINE': 'django.db.backends.postgresql',
-            'NAME': os.getenv('DB_NAME'),
-            'USER': os.getenv('DB_USER'),
-            'PASSWORD': os.getenv('DB_PASSWORD'),
-            'HOST': os.getenv('DB_HOST'),
-            'PORT': os.getenv('DB_PORT'),
-        }
+# Database
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.postgresql',
+        'NAME': DB_NAME,
+        'USER': DB_USER,
+        'PASSWORD': DB_PASSWORD,
+        'HOST': DB_HOST, 
+        'PORT': DB_PORT,
     }
+}
 
 # Internationalization
 LANGUAGE_CODE = 'es-es'
@@ -89,13 +99,36 @@ TIME_ZONE = 'Europe/Madrid'
 USE_I18N = True
 USE_TZ = True
 
-# Static files
+# Static files (CSS, JavaScript, Images)
 STATIC_URL = '/static/'
 STATIC_ROOT = BASE_DIR / 'staticfiles'
 
 DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
-# Logging básico
+# REST Framework
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'rest_framework_simplejwt.authentication.JWTAuthentication',
+    ),
+    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.permissions.IsAuthenticated',
+    ),
+}
+
+SIMPLE_JWT = {
+    "ACCESS_TOKEN_LIFETIME": timedelta(hours=1),
+    "REFRESH_TOKEN_LIFETIME": timedelta(days=1),
+}
+
+# CORS
+CORS_ALLOW_ALL_ORIGINS = True
+CSRF_TRUSTED_ORIGINS = [
+    'chrome-extension://amknoiejhlmhancpahfcfcfhllgkpbld',
+    'http://localhost:8000',
+    'http://127.0.0.1:8000',
+]
+
+# Logging
 LOGGING = {
     'version': 1,
     'disable_existing_loggers': False,

core/urls.py

@@ -1,7 +1,10 @@
 from django.urls import path, include
+from django.urls import path, include
+from apps.backend_admin import views as admin_views
 
 urlpatterns = [
-    # Redirigimos todas las peticiones de /api/promociones/ a nuestra app
-    path('api/promociones/', include('apps.promociones.urls')),
-    path('admin/', include('apps.backend_admin.urls')), # El tuyo
-]
+    path('admin/', include('apps.backend_admin.urls')),
+    # AÑADE ESTA LÍNEA AQUÍ PARA QUE SEA UNA RUTA PRINCIPAL:
+    path('promociones/', include('apps.promociones.urls')), 
+    path('api/token/', admin_views.api_token, name='token_obtain_pair'),
+]