From 9e6cb6489d4fff0e6f75ee2ff0525115d26d0e7b Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 11:31:44 +0100
Subject: [PATCH 1/6] Create a new fastapi-postgres-gunicorn app

---
 .../fastapi-postgres-gunicorn/Makefile        |  34 ++++++
 .../fastapi-postgres-gunicorn/README.md       |  23 ++++
 sample-apps/fastapi-postgres-gunicorn/app.py  | 105 ++++++++++++++++++
 .../fastapi-postgres-gunicorn/manage.py       |  66 +++++++++++
 .../fastapi-postgres-gunicorn/pyproject.toml  |  25 +++++
 5 files changed, 253 insertions(+)
 create mode 100644 sample-apps/fastapi-postgres-gunicorn/Makefile
 create mode 100644 sample-apps/fastapi-postgres-gunicorn/README.md
 create mode 100644 sample-apps/fastapi-postgres-gunicorn/app.py
 create mode 100755 sample-apps/fastapi-postgres-gunicorn/manage.py
 create mode 100644 sample-apps/fastapi-postgres-gunicorn/pyproject.toml

diff --git a/sample-apps/fastapi-postgres-gunicorn/Makefile b/sample-apps/fastapi-postgres-gunicorn/Makefile
new file mode 100644
index 00000000..251b61b0
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/Makefile
@@ -0,0 +1,34 @@
+.PHONY: install
+install:
+	poetry install
+
+.PHONY: run
+run: install
+	@echo "Running sample app fastapi-postgres-gunicorn with Zen on port 8104"
+	AIKIDO_DEBUG=true AIKIDO_BLOCK=true AIKIDO_TOKEN="AIK_secret_token" \
+	AIKIDO_REALTIME_ENDPOINT="http://localhost:5000/" \
+	AIKIDO_ENDPOINT="http://localhost:5000/" AIKIDO_DISABLE=0 \
+	poetry run uvicorn app:app --host 0.0.0.0 --port 8104 --workers 4
+
+.PHONY: runBenchmark
+runBenchmark: install
+	@echo "Running sample app fastapi-postgres-gunicorn with Zen (benchmark mode) on port 8104"
+	AIKIDO_DEBUG=false AIKIDO_BLOCK=true AIKIDO_TOKEN="AIK_secret_token" \
+	AIKIDO_REALTIME_ENDPOINT="http://localhost:5000/" \
+	AIKIDO_ENDPOINT="http://localhost:5000/" AIKIDO_DISABLE=0 \
+	DONT_ADD_MIDDLEWARE=1 \
+	poetry run uvicorn app:app --host 0.0.0.0 --port 8104 --workers 4
+
+.PHONY: runZenDisabled
+runZenDisabled: install
+	@echo "Running sample app fastapi-postgres-gunicorn without Zen on port 8105"
+	AIKIDO_DISABLE=1 \
+	poetry run uvicorn app:app --host 0.0.0.0 --port 8105 --workers 4
+
+.PHONY: runGunicorn
+runGunicorn: install
+	@echo "Running sample app fastapi-postgres-gunicorn with Gunicorn on port 8104"
+	AIKIDO_DEBUG=true AIKIDO_BLOCK=true AIKIDO_TOKEN="AIK_secret_token" \
+	AIKIDO_REALTIME_ENDPOINT="http://localhost:5000/" \
+	AIKIDO_ENDPOINT="http://localhost:5000/" AIKIDO_DISABLE=0 \
+	python manage.py gunicornserver
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/README.md b/sample-apps/fastapi-postgres-gunicorn/README.md
new file mode 100644
index 00000000..b47c58e2
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/README.md
@@ -0,0 +1,23 @@
+# FastAPI w/ Postgres and Gunicorn Sample app
+It runs **multi-threaded** and **async** with Gunicorn
+
+## Getting started
+Run :
+```bash
+make run # Runs app with zen
+make runZenDisabled # Runs app with zen disabled.
+```
+
+- You'll be able to access the FastAPI Server at : [localhost:8104](http://localhost:8104)
+- To Create a reference test dog use `http://localhost:8104/create/`
+- To Create a reference test dog (with executemany) use `http://localhost:8104/create_many/`
+
+- To test a sql injection enter the following dog name : `Malicious dog', TRUE); -- `
+
+## Running with Gunicorn
+To run with Gunicorn:
+```bash
+python manage.py gunicornserver
+```
+
+This will start the Gunicorn server with Uvicorn workers for optimal async performance.
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/app.py b/sample-apps/fastapi-postgres-gunicorn/app.py
new file mode 100644
index 00000000..5c23a09c
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/app.py
@@ -0,0 +1,105 @@
+import aikido_zen  # Aikido package import
+import os
+
+dont_add_middleware = os.getenv("DONT_ADD_MIDDLEWARE")
+import time
+import asyncpg
+from fastapi import FastAPI, Request, HTTPException
+from fastapi.responses import HTMLResponse, JSONResponse
+from fastapi.templating import Jinja2Templates
+from fastapi.middleware.cors import CORSMiddleware
+
+templates = Jinja2Templates(directory="templates")
+
+app = FastAPI()
+
+# CORS middleware (optional, depending on your needs)
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],  # Adjust this as needed
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+if dont_add_middleware is None or dont_add_middleware.lower() != "1":
+    # Use DONT_ADD_MIDDLEWARE so we don't add this middleware during e.g. benchmarks.
+    import aikido_zen
+    from aikido_zen.middleware import AikidoFastAPIMiddleware  # Aikido package import
+    
+    class SetUserMiddleware:
+        def __init__(self, app):
+            self.app = app
+
+        async def __call__(self, scope, receive, send):
+            aikido_zen.set_user({"id": "user123", "name": "John Doe"})
+            return await self.app(scope, receive, send)
+    
+    app.add_middleware(SetUserMiddleware)
+    app.add_middleware(AikidoFastAPIMiddleware)
+
+async def get_db_connection():
+    return await asyncpg.connect(
+        host="localhost",
+        database="db",
+        user="user",
+        password="password"
+    )
+
+@app.get("/", response_class=HTMLResponse)
+async def homepage(request: Request):
+    conn = await get_db_connection()
+    dogs = await conn.fetch("SELECT * FROM dogs")
+    await conn.close()
+    return templates.TemplateResponse('index.html', {"request": request, "title": 'Homepage', "dogs": dogs})
+
+@app.get("/dogpage/{dog_id:int}", response_class=HTMLResponse)
+async def get_dogpage(request: Request, dog_id: int):
+    conn = await get_db_connection()
+    dog = await conn.fetchrow("SELECT * FROM dogs WHERE id = $1", dog_id)
+    await conn.close()
+    if dog is None:
+        raise HTTPException(status_code=404, detail="Dog not found")
+    return templates.TemplateResponse('dogpage.html', {"request": request, "title": 'Dog', "dog": dog, "isAdmin": "Yes" if dog[2] else "No"})
+
+@app.get("/create", response_class=HTMLResponse)
+async def show_create_dog_form(request: Request):
+    return templates.TemplateResponse('create_dog.html', {"request": request})
+
+@app.post("/create")
+async def create_dog(request: Request):
+    data = await request.form()
+    dog_name = data.get('dog_name')
+
+    if not dog_name:
+        return JSONResponse({"error": "dog_name is required"}, status_code=400)
+
+    conn = await get_db_connection()
+    try:
+        await conn.execute("INSERT INTO dogs (dog_name, isAdmin) VALUES ($1, FALSE)", dog_name)
+    finally:
+        await conn.close()
+
+    return JSONResponse({"message": f'Dog {dog_name} created successfully'}, status_code=201)
+
+@app.get("/just")
+async def just():
+    return JSONResponse({"message": "Empty Page"})
+
+@app.get("/test_ratelimiting_1")
+async def just():
+    return JSONResponse({"message": "Empty Page"})
+
+@app.get("/delayed_route")
+async def delayed_route():
+    time.sleep(1/1000)  # Note: This will block the event loop; consider using asyncio.sleep instead
+    return JSONResponse({"message": "Empty Page"})
+
+@app.get("/sync_route")
+def sync_route():
+    data = {"message": "This is a non-async route!"}
+    return JSONResponse(data)
+
+# For gunicorn compatibility
+def create_app():
+    return app
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/manage.py b/sample-apps/fastapi-postgres-gunicorn/manage.py
new file mode 100755
index 00000000..da43cfc0
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/manage.py
@@ -0,0 +1,66 @@
+#!/usr/bin/env python3
+
+import os
+import sys
+from gunicorn.app.base import BaseApplication
+from app import create_app
+
+# Add the current directory to the Python path
+sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+
+class Config:
+    def __init__(self):
+        # Default configuration values
+        self.gunicorn_workers_count = 4  # (2 x $num_cores) + 1
+        self.threads_per_worker = 1
+        self.gunicorn_keepalive = 2
+        self.gunicorn_max_requests = 1000
+        self.gunicorn_max_requests_jitter = 50
+        self.requests_read_timeout = 30
+        self.gunicorn_graceful_timeout = 30
+        self.log_level = "info"
+        self.app_dir = os.path.dirname(os.path.abspath(__file__))
+
+def run_gunicorn_server():
+    # Optimized Gunicorn with UvicornWorker for high-performance async concurrency
+    # Relies on the operating system to provide all of the load balancing
+    # Generally we recommend (2 x $num_cores) + 1 as the number of workers
+
+    config = Config()
+    WORKERS = config.gunicorn_workers_count
+    WORKER_CONNECTIONS = config.threads_per_worker * 100
+
+    class GunicornApplication(BaseApplication):
+        def load_config(self):
+            self.cfg.set("bind", f"unix:{os.path.join(config.app_dir, 'da.sock')}")
+            self.cfg.set("accesslog", "-")
+            self.cfg.set("workers", WORKERS)
+            self.cfg.set("worker_class", "uvicorn.workers.UvicornWorker")
+            self.cfg.set("worker_connections", WORKER_CONNECTIONS)
+            self.cfg.set("loglevel", config.log_level)
+
+            # Performance optimizations
+            self.cfg.set("keepalive", config.gunicorn_keepalive)
+            self.cfg.set("max_requests", config.gunicorn_max_requests)
+            self.cfg.set("max_requests_jitter", config.gunicorn_max_requests_jitter)
+
+            # Timeout optimizations
+            self.cfg.set("timeout", config.requests_read_timeout)
+            self.cfg.set("graceful_timeout", config.gunicorn_graceful_timeout)
+
+        def load(self):
+            return create_app()
+
+        def init(self, parser, opts, args):
+            return
+
+    if __name__ == "__main__":
+        wsgi_server = GunicornApplication()
+        wsgi_server.run()
+
+if __name__ == "__main__":
+    if len(sys.argv) > 1 and sys.argv[1] == "gunicornserver":
+        run_gunicorn_server()
+    else:
+        print("Usage: python manage.py gunicornserver")
+        sys.exit(1)
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/pyproject.toml b/sample-apps/fastapi-postgres-gunicorn/pyproject.toml
new file mode 100644
index 00000000..9b8bb089
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/pyproject.toml
@@ -0,0 +1,25 @@
+[project]
+name = "fastapi-postgres-gunicorn"
+version = "0.1.0"
+description = ""
+requires-python = ">=3.10,<4.0"
+dependencies = [
+    "aikido_zen",
+    "fastapi (>=0.115.0,<0.116.0)",
+    "jinja2 (>=3.1.5,<4.0.0)",
+    "asyncpg (>=0.30.0,<0.31.0)",
+    "cryptography (>=44.0.0,<45.0.0)",
+    "uvicorn (>=0.34.0,<0.35.0)",
+    "python-multipart (>=0.0.20,<0.0.21)",
+    "gunicorn (>=22.0.0,<23.0.0)",
+]
+
+[build-system]
+requires = ["poetry-core>=2.0.0,<3.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+package-mode = false
+
+[tool.poetry.dependencies]
+aikido_zen = { path = "../../", develop = true }
\ No newline at end of file

From eb518bf073ecd2db5826132e969ea187ef6dd376 Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 11:44:15 +0100
Subject: [PATCH 2/6] Create shared-template folder

---
 sample-apps/shared-templates/README.md        | 24 +++++++++
 .../shared-templates/common/create_dog.html   | 17 ++++++
 .../shared-templates/common/dogpage.html      | 25 +++++++++
 .../shared-templates/common/index.html        | 48 +++++++++++++++++
 sample-apps/shared-templates/mongo/auth.html  | 53 +++++++++++++++++++
 .../shared-templates/mongo/create_dog.html    | 19 +++++++
 .../shared-templates/mongo/dogpage.html       | 25 +++++++++
 sample-apps/shared-templates/mongo/index.html | 48 +++++++++++++++++
 8 files changed, 259 insertions(+)
 create mode 100644 sample-apps/shared-templates/README.md
 create mode 100644 sample-apps/shared-templates/common/create_dog.html
 create mode 100644 sample-apps/shared-templates/common/dogpage.html
 create mode 100644 sample-apps/shared-templates/common/index.html
 create mode 100644 sample-apps/shared-templates/mongo/auth.html
 create mode 100644 sample-apps/shared-templates/mongo/create_dog.html
 create mode 100644 sample-apps/shared-templates/mongo/dogpage.html
 create mode 100644 sample-apps/shared-templates/mongo/index.html

diff --git a/sample-apps/shared-templates/README.md b/sample-apps/shared-templates/README.md
new file mode 100644
index 00000000..a8382e17
--- /dev/null
+++ b/sample-apps/shared-templates/README.md
@@ -0,0 +1,24 @@
+# Shared Templates
+
+## Structure
+- `common/` - SQL databases (MySQL, PostgreSQL, MSSQL, ClickHouse)
+- `mongo/` - MongoDB applications
+
+## Usage
+Templates in sample apps are symlinks to shared templates here.
+
+## Modifying Templates
+Edit files in this directory - changes apply to all apps using them.
+
+## Apps Using Shared Templates
+**Common (SQL)**: flask-*, fastapi-*, starlette-*, quart-* apps
+**Mongo**: flask-mongo, quart-mongo
+
+## Quick Checks
+```bash
+# Verify symlinks work
+cat sample-apps/flask-mysql/templates/index.html
+
+# Find all symlinks
+find sample-apps -name "*.html" -type l
+```
\ No newline at end of file
diff --git a/sample-apps/shared-templates/common/create_dog.html b/sample-apps/shared-templates/common/create_dog.html
new file mode 100644
index 00000000..fe26d428
--- /dev/null
+++ b/sample-apps/shared-templates/common/create_dog.html
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Create Dog</title>
+</head>
+<body>
+    <h1>Create a Dog</h1>
+    <form action="/create" method="post">
+        <label for="dog_name">Dog Name:</label>
+        <input type="text" id="dog_name" name="dog_name" required>
+        <button type="submit">Create Dog</button>
+    </form>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/common/dogpage.html b/sample-apps/shared-templates/common/dogpage.html
new file mode 100644
index 00000000..7edb9f80
--- /dev/null
+++ b/sample-apps/shared-templates/common/dogpage.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>{{ title }}</title>
+    <style>
+        body {
+            font-family: sans-serif;
+        }
+        h1 {
+            font-family: monospace;
+            text-align: center;
+            border: 1px solid black;
+            border-left: none;
+            border-right: none;
+            margin: 4px;
+        }
+    </style>
+</head>
+<body>
+    <h1>{{ title }}</h1>
+    <p><em>Name :</em> {{dog[1]}}</p>
+    <p><em>Is admin dog? </em>{{ isAdmin }}</p>
+    <p><em>ID :</em> {{dog[0]}}</p>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/common/index.html b/sample-apps/shared-templates/common/index.html
new file mode 100644
index 00000000..5425a36f
--- /dev/null
+++ b/sample-apps/shared-templates/common/index.html
@@ -0,0 +1,48 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>{{ title }}</title>
+    <style>
+        body {
+            font-family: sans-serif;
+        }
+        /* Style for the list */
+        ul {
+            list-style-type:disc;
+        }
+
+        /* Style for list items */
+        li {
+            margin-bottom: 10px;
+        }
+
+        /* Style for links */
+        a {
+            text-decoration: none;
+            color: #48507f;
+        }
+
+        /* Hover effect for links */
+        a:hover {
+            color: #007bff;
+        }
+        h1 {
+            font-family: monospace;
+            text-align: center;
+            border: 1px solid black;
+            border-left: none;
+            border-right: none;
+            margin: 4px;
+        }
+    </style>
+</head>
+<body>
+    <h1>{{ title }}</h1>
+    <h2>List</h2>
+    <ul>
+        {% for dog in dogs %}
+            <li><a href="/dogpage/{{ dog[0] }}">{{ dog[1] }}</a></li>
+        {% endfor %}
+    </ul>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/mongo/auth.html b/sample-apps/shared-templates/mongo/auth.html
new file mode 100644
index 00000000..76ff1681
--- /dev/null
+++ b/sample-apps/shared-templates/mongo/auth.html
@@ -0,0 +1,53 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Login</title>
+    <script>
+        function submitForm(inject) {
+            var dogName = document.getElementById('dog_name').value;
+            var dogPswd = document.getElementById('pswd').value;
+            var statusElement = document.getElementById('status');
+            if(inject)
+                var data = { "dog_name": dogName, "pswd": { "$ne": "" } };
+            else
+                var data = { "dog_name": dogName, "pswd": dogPswd };
+
+
+            fetch('/auth', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify(data)
+            })
+            .then(response => {
+                if (response.ok) {
+                    return response.text();
+                }
+                statusElement.innerText = "Network response was not ok."
+                throw new Error('Network response was not ok.');
+            })
+            .then(data => {
+                statusElement.innerText = data
+                console.log(data);
+            })
+            .catch(error => {
+                console.error('Error:', error);
+            });
+        }
+    </script>
+</head>
+<body>
+    <h1>Log In</h1>
+    <label for="dog_name">Dog Name:</label>
+    <input type="text" id="dog_name" name="dog_name" required><br/>
+    <label for="pswd">Dog Password:</label>
+    <input type="password" id="pswd" name="pswd" required><br/>
+    <button onclick="submitForm(false)">Login</button>
+    <button onclick="submitForm(true)">Login (with NoSQL injection)</button>
+    <p>Status: <span id="status"></span></p>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/mongo/create_dog.html b/sample-apps/shared-templates/mongo/create_dog.html
new file mode 100644
index 00000000..1a4240d6
--- /dev/null
+++ b/sample-apps/shared-templates/mongo/create_dog.html
@@ -0,0 +1,19 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Create Dog</title>
+</head>
+<body>
+    <h1>Create a Dog</h1>
+    <form action="/create" method="post">
+        <label for="dog_name">Dog Name:</label>
+        <input type="text" id="dog_name" name="dog_name" required>
+        <label for="password">Password:</label>
+        <input type="password" id="pswd" name="pswd" required>
+        <button type="submit">Create Dog</button>
+    </form>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/mongo/dogpage.html b/sample-apps/shared-templates/mongo/dogpage.html
new file mode 100644
index 00000000..607995a5
--- /dev/null
+++ b/sample-apps/shared-templates/mongo/dogpage.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>{{ title }}</title>
+    <style>
+        body {
+            font-family: sans-serif;
+        }
+        h1 {
+            font-family: monospace;
+            text-align: center;
+            border: 1px solid black;
+            border-left: none;
+            border-right: none;
+            margin: 4px;
+        }
+    </style>
+</head>
+<body>
+    <h1>{{ title }}</h1>
+    <p><em>Name :</em> {{dog.dog_name }}</p>
+    <p><em>Password (You normally don't know this) : </em>{{ dog.pswd }}</p>
+    <p><em>Id :</em> {{dog._id}}</p>
+</body>
+</html>
diff --git a/sample-apps/shared-templates/mongo/index.html b/sample-apps/shared-templates/mongo/index.html
new file mode 100644
index 00000000..5b66a06e
--- /dev/null
+++ b/sample-apps/shared-templates/mongo/index.html
@@ -0,0 +1,48 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>{{ title }}</title>
+    <style>
+        body {
+            font-family: sans-serif;
+        }
+        /* Style for the list */
+        ul {
+            list-style-type:disc;
+        }
+
+        /* Style for list items */
+        li {
+            margin-bottom: 10px;
+        }
+
+        /* Style for links */
+        a {
+            text-decoration: none;
+            color: #48507f;
+        }
+
+        /* Hover effect for links */
+        a:hover {
+            color: #007bff;
+        }
+        h1 {
+            font-family: monospace;
+            text-align: center;
+            border: 1px solid black;
+            border-left: none;
+            border-right: none;
+            margin: 4px;
+        }
+    </style>
+</head>
+<body>
+    <h1>{{ title }}</h1>
+    <h2>List</h2>
+    <ul>
+        {% for dog in dogs %}
+            <li><a href="/dogpage/{{ dog._id }}">{{ dog.dog_name }}</a></li>
+        {% endfor %}
+    </ul>
+</body>
+</html>

From 498de87d2758e40fa6572e9987478003000dc3be Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 11:44:27 +0100
Subject: [PATCH 3/6] make fastapi app use these shared templates

---
 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html | 1 +
 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html    | 1 +
 sample-apps/fastapi-postgres-gunicorn/templates/index.html      | 1 +
 3 files changed, 3 insertions(+)
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/index.html

diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html b/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
new file mode 120000
index 00000000..b0a077e0
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
@@ -0,0 +1 @@
+../../shared-templates/common/create_dog.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html b/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
new file mode 120000
index 00000000..0cc02fe0
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
@@ -0,0 +1 @@
+../../shared-templates/common/dogpage.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/index.html b/sample-apps/fastapi-postgres-gunicorn/templates/index.html
new file mode 120000
index 00000000..6fd9490c
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/index.html
@@ -0,0 +1 @@
+../../shared-templates/common/index.html
\ No newline at end of file

From 40e2e74a7a9be091914fea6b9fd682a4421de954 Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 15:53:32 +0100
Subject: [PATCH 4/6] Revert "Create shared-template folder"

This reverts commit eb518bf073ecd2db5826132e969ea187ef6dd376.
---
 sample-apps/shared-templates/README.md        | 24 ---------
 .../shared-templates/common/create_dog.html   | 17 ------
 .../shared-templates/common/dogpage.html      | 25 ---------
 .../shared-templates/common/index.html        | 48 -----------------
 sample-apps/shared-templates/mongo/auth.html  | 53 -------------------
 .../shared-templates/mongo/create_dog.html    | 19 -------
 .../shared-templates/mongo/dogpage.html       | 25 ---------
 sample-apps/shared-templates/mongo/index.html | 48 -----------------
 8 files changed, 259 deletions(-)
 delete mode 100644 sample-apps/shared-templates/README.md
 delete mode 100644 sample-apps/shared-templates/common/create_dog.html
 delete mode 100644 sample-apps/shared-templates/common/dogpage.html
 delete mode 100644 sample-apps/shared-templates/common/index.html
 delete mode 100644 sample-apps/shared-templates/mongo/auth.html
 delete mode 100644 sample-apps/shared-templates/mongo/create_dog.html
 delete mode 100644 sample-apps/shared-templates/mongo/dogpage.html
 delete mode 100644 sample-apps/shared-templates/mongo/index.html

diff --git a/sample-apps/shared-templates/README.md b/sample-apps/shared-templates/README.md
deleted file mode 100644
index a8382e17..00000000
--- a/sample-apps/shared-templates/README.md
+++ /dev/null
@@ -1,24 +0,0 @@
-# Shared Templates
-
-## Structure
-- `common/` - SQL databases (MySQL, PostgreSQL, MSSQL, ClickHouse)
-- `mongo/` - MongoDB applications
-
-## Usage
-Templates in sample apps are symlinks to shared templates here.
-
-## Modifying Templates
-Edit files in this directory - changes apply to all apps using them.
-
-## Apps Using Shared Templates
-**Common (SQL)**: flask-*, fastapi-*, starlette-*, quart-* apps
-**Mongo**: flask-mongo, quart-mongo
-
-## Quick Checks
-```bash
-# Verify symlinks work
-cat sample-apps/flask-mysql/templates/index.html
-
-# Find all symlinks
-find sample-apps -name "*.html" -type l
-```
\ No newline at end of file
diff --git a/sample-apps/shared-templates/common/create_dog.html b/sample-apps/shared-templates/common/create_dog.html
deleted file mode 100644
index fe26d428..00000000
--- a/sample-apps/shared-templates/common/create_dog.html
+++ /dev/null
@@ -1,17 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Create Dog</title>
-</head>
-<body>
-    <h1>Create a Dog</h1>
-    <form action="/create" method="post">
-        <label for="dog_name">Dog Name:</label>
-        <input type="text" id="dog_name" name="dog_name" required>
-        <button type="submit">Create Dog</button>
-    </form>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/common/dogpage.html b/sample-apps/shared-templates/common/dogpage.html
deleted file mode 100644
index 7edb9f80..00000000
--- a/sample-apps/shared-templates/common/dogpage.html
+++ /dev/null
@@ -1,25 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>{{ title }}</title>
-    <style>
-        body {
-            font-family: sans-serif;
-        }
-        h1 {
-            font-family: monospace;
-            text-align: center;
-            border: 1px solid black;
-            border-left: none;
-            border-right: none;
-            margin: 4px;
-        }
-    </style>
-</head>
-<body>
-    <h1>{{ title }}</h1>
-    <p><em>Name :</em> {{dog[1]}}</p>
-    <p><em>Is admin dog? </em>{{ isAdmin }}</p>
-    <p><em>ID :</em> {{dog[0]}}</p>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/common/index.html b/sample-apps/shared-templates/common/index.html
deleted file mode 100644
index 5425a36f..00000000
--- a/sample-apps/shared-templates/common/index.html
+++ /dev/null
@@ -1,48 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>{{ title }}</title>
-    <style>
-        body {
-            font-family: sans-serif;
-        }
-        /* Style for the list */
-        ul {
-            list-style-type:disc;
-        }
-
-        /* Style for list items */
-        li {
-            margin-bottom: 10px;
-        }
-
-        /* Style for links */
-        a {
-            text-decoration: none;
-            color: #48507f;
-        }
-
-        /* Hover effect for links */
-        a:hover {
-            color: #007bff;
-        }
-        h1 {
-            font-family: monospace;
-            text-align: center;
-            border: 1px solid black;
-            border-left: none;
-            border-right: none;
-            margin: 4px;
-        }
-    </style>
-</head>
-<body>
-    <h1>{{ title }}</h1>
-    <h2>List</h2>
-    <ul>
-        {% for dog in dogs %}
-            <li><a href="/dogpage/{{ dog[0] }}">{{ dog[1] }}</a></li>
-        {% endfor %}
-    </ul>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/mongo/auth.html b/sample-apps/shared-templates/mongo/auth.html
deleted file mode 100644
index 76ff1681..00000000
--- a/sample-apps/shared-templates/mongo/auth.html
+++ /dev/null
@@ -1,53 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Login</title>
-    <script>
-        function submitForm(inject) {
-            var dogName = document.getElementById('dog_name').value;
-            var dogPswd = document.getElementById('pswd').value;
-            var statusElement = document.getElementById('status');
-            if(inject)
-                var data = { "dog_name": dogName, "pswd": { "$ne": "" } };
-            else
-                var data = { "dog_name": dogName, "pswd": dogPswd };
-
-
-            fetch('/auth', {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json'
-                },
-                body: JSON.stringify(data)
-            })
-            .then(response => {
-                if (response.ok) {
-                    return response.text();
-                }
-                statusElement.innerText = "Network response was not ok."
-                throw new Error('Network response was not ok.');
-            })
-            .then(data => {
-                statusElement.innerText = data
-                console.log(data);
-            })
-            .catch(error => {
-                console.error('Error:', error);
-            });
-        }
-    </script>
-</head>
-<body>
-    <h1>Log In</h1>
-    <label for="dog_name">Dog Name:</label>
-    <input type="text" id="dog_name" name="dog_name" required><br/>
-    <label for="pswd">Dog Password:</label>
-    <input type="password" id="pswd" name="pswd" required><br/>
-    <button onclick="submitForm(false)">Login</button>
-    <button onclick="submitForm(true)">Login (with NoSQL injection)</button>
-    <p>Status: <span id="status"></span></p>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/mongo/create_dog.html b/sample-apps/shared-templates/mongo/create_dog.html
deleted file mode 100644
index 1a4240d6..00000000
--- a/sample-apps/shared-templates/mongo/create_dog.html
+++ /dev/null
@@ -1,19 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Create Dog</title>
-</head>
-<body>
-    <h1>Create a Dog</h1>
-    <form action="/create" method="post">
-        <label for="dog_name">Dog Name:</label>
-        <input type="text" id="dog_name" name="dog_name" required>
-        <label for="password">Password:</label>
-        <input type="password" id="pswd" name="pswd" required>
-        <button type="submit">Create Dog</button>
-    </form>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/mongo/dogpage.html b/sample-apps/shared-templates/mongo/dogpage.html
deleted file mode 100644
index 607995a5..00000000
--- a/sample-apps/shared-templates/mongo/dogpage.html
+++ /dev/null
@@ -1,25 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>{{ title }}</title>
-    <style>
-        body {
-            font-family: sans-serif;
-        }
-        h1 {
-            font-family: monospace;
-            text-align: center;
-            border: 1px solid black;
-            border-left: none;
-            border-right: none;
-            margin: 4px;
-        }
-    </style>
-</head>
-<body>
-    <h1>{{ title }}</h1>
-    <p><em>Name :</em> {{dog.dog_name }}</p>
-    <p><em>Password (You normally don't know this) : </em>{{ dog.pswd }}</p>
-    <p><em>Id :</em> {{dog._id}}</p>
-</body>
-</html>
diff --git a/sample-apps/shared-templates/mongo/index.html b/sample-apps/shared-templates/mongo/index.html
deleted file mode 100644
index 5b66a06e..00000000
--- a/sample-apps/shared-templates/mongo/index.html
+++ /dev/null
@@ -1,48 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>{{ title }}</title>
-    <style>
-        body {
-            font-family: sans-serif;
-        }
-        /* Style for the list */
-        ul {
-            list-style-type:disc;
-        }
-
-        /* Style for list items */
-        li {
-            margin-bottom: 10px;
-        }
-
-        /* Style for links */
-        a {
-            text-decoration: none;
-            color: #48507f;
-        }
-
-        /* Hover effect for links */
-        a:hover {
-            color: #007bff;
-        }
-        h1 {
-            font-family: monospace;
-            text-align: center;
-            border: 1px solid black;
-            border-left: none;
-            border-right: none;
-            margin: 4px;
-        }
-    </style>
-</head>
-<body>
-    <h1>{{ title }}</h1>
-    <h2>List</h2>
-    <ul>
-        {% for dog in dogs %}
-            <li><a href="/dogpage/{{ dog._id }}">{{ dog.dog_name }}</a></li>
-        {% endfor %}
-    </ul>
-</body>
-</html>

From aca4cdd3971503a03a18009132f56c2e2f24cb32 Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 15:53:42 +0100
Subject: [PATCH 5/6] Revert "make fastapi app use these shared templates"

This reverts commit 498de87d2758e40fa6572e9987478003000dc3be.
---
 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html | 1 -
 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html    | 1 -
 sample-apps/fastapi-postgres-gunicorn/templates/index.html      | 1 -
 3 files changed, 3 deletions(-)
 delete mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
 delete mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
 delete mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/index.html

diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html b/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
deleted file mode 120000
index b0a077e0..00000000
--- a/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
+++ /dev/null
@@ -1 +0,0 @@
-../../shared-templates/common/create_dog.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html b/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
deleted file mode 120000
index 0cc02fe0..00000000
--- a/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
+++ /dev/null
@@ -1 +0,0 @@
-../../shared-templates/common/dogpage.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/index.html b/sample-apps/fastapi-postgres-gunicorn/templates/index.html
deleted file mode 120000
index 6fd9490c..00000000
--- a/sample-apps/fastapi-postgres-gunicorn/templates/index.html
+++ /dev/null
@@ -1 +0,0 @@
-../../shared-templates/common/index.html
\ No newline at end of file

From a7e4c2da934b67093bd616dbc5ef4f7c514945cb Mon Sep 17 00:00:00 2001
From: BitterPanda <bitterpanda@proton.me>
Date: Mon, 15 Dec 2025 15:55:23 +0100
Subject: [PATCH 6/6] Add templates for fastapi app from shared-templates

---
 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html | 1 +
 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html    | 1 +
 sample-apps/fastapi-postgres-gunicorn/templates/index.html      | 1 +
 3 files changed, 3 insertions(+)
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
 create mode 120000 sample-apps/fastapi-postgres-gunicorn/templates/index.html

diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html b/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
new file mode 120000
index 00000000..21988c9e
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/create_dog.html
@@ -0,0 +1 @@
+../../shared-templates/postgres/create_dog.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html b/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
new file mode 120000
index 00000000..369e4aad
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/dogpage.html
@@ -0,0 +1 @@
+../../shared-templates/postgres/dogpage.html
\ No newline at end of file
diff --git a/sample-apps/fastapi-postgres-gunicorn/templates/index.html b/sample-apps/fastapi-postgres-gunicorn/templates/index.html
new file mode 120000
index 00000000..43aa4ca3
--- /dev/null
+++ b/sample-apps/fastapi-postgres-gunicorn/templates/index.html
@@ -0,0 +1 @@
+../../shared-templates/postgres/index.html
\ No newline at end of file