Profiles and Media

Goal

This snapshot advances Rivermouth Dispatch by teaching you to show author profiles and accept constrained avatar uploads.

Every numbered folder is a complete app. Run this stage independently, then compare it with the previous folder.

Prerequisites

Use Python 3.11+, a terminal, and Docker for Postgres stages. You should recognize functions, modules, and HTTP verbs.

Port 8001 must be free. Copy .env.example before starting database stages.

• Python 3 and pip/venv
• A code editor and terminal
• Docker from part 4 onward

Concepts

Upload endpoints must check content type and size, generate safe filenames, and store paths—not user-supplied names.

Keep request handling thin: routes accept input, services/models enforce rules, and Jinja templates escape output by default.

Walkthrough

Protect profile editing, allowlist display name and bio, and serve uploads from a static mount.

Read the example, then open the matching snapshot. The repository includes the surrounding setup and error handling.

data = await image.read()
if len(data) > 2 * 1024 * 1024:
    raise HTTPException(400, 'Image too large')

Run and verify

Enter 08-Profiles-And-Media, create a virtualenv, install requirements, copy .env.example when present, and start Uvicorn on port 8001.

Open http://127.0.0.1:8001. Watch the terminal for validation and database errors.

docker compose up -d
git clone https://github.com/michaeldunga1/fcc-fastapi-blog.git
cd fcc-fastapi-blog/08-Profiles-And-Media
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
uvicorn main:app --reload --port 8001

Troubleshooting

If no file arrives, confirm enctype=multipart/form-data and the field name.

Import errors usually mean the virtualenv is inactive or you installed packages in another snapshot. For Postgres failures, confirm Docker and the rivermouth_NN database name.

• Read the first error first
• Restart after environment changes
• Never commit .env or .venv

Try this

Upload a valid image, then reject a text file.

Test a happy path and one invalid or unauthorized request.

• Make one small change
• Test it in the browser
• Compare with the next snapshot only after it works