Fix/openapi drf spectacular v2 (#420)

* Replace DRF built-in OpenAPI with drf-spectacular

Adds drf-spectacular for OpenAPI schema generation and pins cachetools
and pytz explicitly in Pipfile to prevent transitive dep drops on clean
Docker builds (root cause of the prod outage in #413).

* disable drf-spectacular errors and warnings for prod

* Pin pytz, remove cachetools, regenerate Pipfile.lock from scratch

pytz is a hard runtime dep of pandas but was silently dropped by
pipenv's resolver — same class of bug that caused the #413 outage.
cachetools removed since google-auth 2.49.1 (upgraded transitively via
firebase-admin 7.1.0→7.3.0) no longer imports it.

Author: darrentweng

backend/Pipfile

@@ -49,6 +49,8 @@ pre-commit = "*"
 alt-profanity-check = "*"
 inflection = "*"
 firebase-admin = "*"
+drf-spectacular = "*"
+pytz = "*"
 
 [requires]
 python_version = "3.11"

backend/Pipfile.lock

@@ -52,6 +52,7 @@
     "analytics.apps.AnalyticsConfig",
     "wrapped.apps.WrappedConfig",
     "django_filters",
+    "drf_spectacular",
     "debug_toolbar",
     "gsr_booking",
     "portal",
@@ -156,6 +157,13 @@
         "rest_framework.authentication.BasicAuthentication",
         "accounts.authentication.PlatformAuthentication",
     ],
+    "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema",
+}
+
+SPECTACULAR_SETTINGS = {
+    "TITLE": "Penn Mobile Backend Documentation",
+    "VERSION": "1.0.0",
+    "SERVE_PUBLIC": True,
 }
 
 # Redis for Celery & Caching

backend/pennmobile/settings/base.py

@@ -6,7 +6,7 @@
 from sentry_sdk.types import Event, Hint
 
 from pennmobile.settings.base import *  # noqa: F401, F403
-from pennmobile.settings.base import DOMAINS, REDIS_URL
+from pennmobile.settings.base import DOMAINS, REDIS_URL, SPECTACULAR_SETTINGS
 
 
 DEBUG = False
@@ -50,3 +50,8 @@ def before_send(event: Event, hint: Hint | None) -> Event | None:
         "OPTIONS": {"CLIENT_CLASS": "django_redis.client.DefaultClient"},
     }
 }
+
+SPECTACULAR_SETTINGS = {
+    **SPECTACULAR_SETTINGS,
+    "DISABLE_ERRORS_AND_WARNINGS": True,
+}

backend/pennmobile/settings/production.py

@@ -2,8 +2,7 @@
 from django.contrib import admin
 from django.http import JsonResponse
 from django.urls import include, path
-from django.views.generic import TemplateView
-from rest_framework.schemas import get_schema_view
+from drf_spectacular.views import SpectacularAPIView, SpectacularRedocView, SpectacularSwaggerView
 
 
 urlpatterns = [
@@ -13,18 +12,13 @@
     path("accounts/", include("accounts.urls", namespace="accounts")),
     path("user/", include("user.urls")),
     path("laundry/", include("laundry.urls")),
-    path(
-        "openapi/",
-        get_schema_view(title="Penn Mobile Backend Documentation", public=True),
-        name="openapi-schema",
-    ),
+    path("openapi/", SpectacularAPIView.as_view(), name="openapi-schema"),
     path(
         "documentation/",
-        TemplateView.as_view(
-            template_name="redoc.html", extra_context={"schema_url": "openapi-schema"}
-        ),
+        SpectacularSwaggerView.as_view(url_name="openapi-schema"),
         name="documentation",
     ),
+    path("redoc/", SpectacularRedocView.as_view(url_name="openapi-schema"), name="redoc"),
     path("dining/", include("dining.urls")),
     path("penndata/", include("penndata.urls")),
     path("sublet/", include("sublet.urls")),