EnFloTech Internal Platform Django 6.1 + React 19 PostgreSQL & Azure Blob Sandboxed Runtime

EnFloTech App Portal Hub

The centralized runtime host, catalog, and launchpad for employee-built operational applications, engineering calculators, and AI-assisted prototypes across EnFloTech (Pty) Ltd. Built with hybrid Django SSR, React 19 islands, enterprise Microsoft Entra ID authentication, hardened sandboxing, and persistent JSON data bridges.

Browse Applications Publish Application Sign In Sign Up
⚡

1-Step Packaging & Inspection

Drag-and-drop single-file HTML or ZIP bundles. The static inspector extracts capabilities, detects IndexedDB/localStorage usage, and auto-classifies complexity tiers (MICRO_APP vs COMPLEX_SYSTEM).

🛡️

Zero-Trust Sandboxed Runner

Hosted apps execute inside a hardened <iframe sandbox> with an opaque null origin and route-scoped CSP. Portal authentication tokens, session cookies, and CSRF secrets remain entirely inaccessible.

💾

Persistence Bridge & DB Shim

The injected storage shim provides window.enflotechDB and mirrors localStorage changes over an authenticated postMessage relay, persisting JSONB records with non-destructive versioning.

📋

Engineering Brief Generator

Seamlessly graduate successful prototypes into production-grade systems with one-click generation of PROTOTYPE_BRIEF.md architectural specifications and machine-readable intake.json schemas.

🚩 Feature Flags (django-waffle)

Live Demo

Ship dark features, perform gradual departmental rollouts, or execute instant kill-switches with zero third-party SaaS latency or cost.

Status of sample_feature_flag:
INACTIVE Flag is disabled

Fallback content rendered when sample_feature_flag is turned off. Toggle it anytime via the Django Admin or CLI.

Template Tag: {% flag "sample_feature_flag" %}

🔐 Identity & RBAC (django-allauth)

Custom User

Unified identity with Microsoft Entra ID SSO, email-first authentication (accounts.CustomUser), and granular departmental authorization.

Current Session State:
Anonymous Guest

You are browsing as an unauthenticated guest. Sign in to access departmental tools and publish new applications:

Log In Sign Up
Identity Provider: Microsoft Entra ID & Local Email Auth

🛡️ Lockout Defense (django-axes)

Brute-Force Shield

Monitors and rate-limits login endpoints against credential stuffing and automated password guessing across IP and User-Agent combinations.

Active Security Policies:
  • Failure Limit: 5 attempts
  • Cool-off Window: 1 hour(s)
  • Reset on Success: Enabled
  • Lockout Target: IP + User-Agent
Compliance: Automatic defense without manual IP blocking.

Supported Departmental Ecosystems

The EnFloTech Portal enables custom operational workflows, calculations, and compliance tools tailored to the specific needs of each operational division:

Quality (QA/QC)

ISO 3834-2 welding quality management, inspection reporting hubs, non-conformance logging, and compliance dashboards.

Engineering

Weld heat input calculators, pressure vessel and structural stress utilities, design validation tools, and technical formulas.

Draughting & Design

Drawing register viewers, CAD revision checklists, BOM cross-reference lookups, and specification sheet generation.

Fabrication

Shop floor routing, cutting plan optimization, weld sequence tracking, and assembly progress checklists.

Stores & Logistics

Material test certificate tracking, welding consumable issue registers, stock reorder calculators, and dispatch manifests.

Project Management

Project milestone trackers, customer deliverable schedules, resource allocation boards, and progress summaries.

IT & Operations

Global catalog administration, user access control, Azure Blob Storage management, and prototype graduation reviews.

Platform Architecture & Technical Specifications

Subsystem EnFloTech Portal Architecture Design Rationale & Security Benefit
Frontend Architecture Django SSR + React 19 Islands Combines rapid server-rendered templates with zero-friction Vite HMR and dynamic interactive React islands where needed.
Runtime Sandboxing Opaque Origin Sandbox Iframe Enforces sandbox="allow-scripts allow-forms allow-popups allow-downloads" with no allow-same-origin, isolating cookies and tokens.
Storage & Persistence Azure Blob + AppDataRecord JSONB Stores application bundle assets in Azure Blob Storage while providing relational JSONB persistence via window.enflotechDB postMessage bridge.
Authentication & RBAC Microsoft Entra ID + CustomUser Enterprise single sign-on backed by 7-department role-based access control and IT administrator overrides.
Brute-Force Protection django-axes Lockout Automatic rate limiting and IP/User-Agent monitoring on all authentication endpoints without manual firewall rules.
Feature Management django-waffle Flags Enforces percentage-based canary rollouts, dark releases, and instant production kill-switches without redeployment.