Raphael Michel
03d3c389da
Fix #1674 -- Change spelling of e-mail to email ( #4636 )
...
* Fix #1674 -- Change spelling of e-mail to email
* Conflicts and word list
* Add MobilePay to wordlist
* fix usage in tests
2024-11-18 17:21:29 +01:00
Raphael Michel
6cc9529d9a
Authentication: Support for fallback secret keys in get_session_auth_hash ( #4481 )
...
* Authentication: Support for fallback secret keys in get_session_auth_hash
* Update src/pretix/presale/utils.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
---------
Co-authored-by: Richard Schreiber <schreiber@rami.io >
2024-10-07 16:58:37 +02:00
Raphael Michel
32d6ded003
Stricten password validation to match PCI DSS requirements ( #4467 )
...
* Stricten password validation to match PCI DSS requirements
* Review fix
* Fix a file header
2024-09-17 13:29:17 +02:00
Mira
9a807df158
Fix pretix_event_access (custom domain) sessions for staff users ( #4158 )
2024-05-21 13:26:12 +02:00
Raphael Michel
a3139944f6
Send notifications about login with new client or country ( #4032 )
...
* Send notifications about login with new client or country
* Rebase migration
* Remove immediately
* Fix isort
* Text update
2024-04-03 11:19:20 +02:00
Raphael Michel
57738f19bf
Update webauthn requirement from ==0.4.* to ==2.0.* ( #3880 )
...
* Get rid of unmaintained dependency python-u2flib-server
* Update webauthn requirement from ==0.4.* to ==2.0.*
* Fix tests
* Update src/pretix/control/views/auth.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
* Update src/pretix/control/views/auth.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
* Update src/pretix/control/views/user.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
* Update src/pretix/control/views/user.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
* Update src/pretix/control/views/user.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
---------
Co-authored-by: Richard Schreiber <schreiber@rami.io >
2024-02-14 13:27:24 +01:00
Raphael Michel
86b28b9b53
Get rid of unmaintained dependency python-u2flib-server ( #3879 )
2024-02-12 13:03:56 +01:00
Raphael Michel
0d1ebf4e58
API: Add RPC-style check-in endpoints to support multi-event scan ( #2719 )
2022-07-19 16:43:03 +02:00
Raphael Michel
a9b0651345
Add convenience redirect from /control/events/-/-/feature to real event ( #2501 )
2022-03-01 15:48:25 +01:00
Raphael Michel
d7acd2b6bf
Refs #2465 -- Introduce unique identifiers for authentication backends ( #2466 )
2022-02-23 10:16:35 +01:00
ser8phin
169a6c51b4
Add check to force users to change password ( #2284 )
2021-11-11 11:10:33 +01:00
Raphael Michel
a93287207b
pretix Community Edition moves to AGPLv3-based license ( #2023 )
2021-04-12 10:33:47 +02:00
Felix Rindt
77f76195c8
isort 5.0 config/docs ( #1736 )
2020-07-30 17:57:26 +02:00
Raphael Michel
af23d6e4bf
Upgrade to Django 3.0 and other dependencies ( #1568 )
...
* Upgrade Django to 3.0 and other dependencies to recent versions
* Fix otp version contsraint
* Remove six dependency
* Resolve some warnings
* Fix failing tests
* Update django-countries
* Resolve all RemovedInDjango31Warnings in test suite
* Run isort
* Fix import
* Update PostgreSQL version on travis
2020-03-23 15:02:20 +01:00
Raphael Michel
027a785ab5
Log out other sessions after email or 2FA changes
2020-03-22 11:04:51 +01:00
Raphael Michel
ac2df35db6
Allow configuring cross-organizer acceptance
2019-10-17 16:04:22 +02:00
Raphael Michel
8a6a515b6a
Refs #775 -- Pluggable authentication backends ( #1447 )
...
* Drag-and-drop: Force csrf_token to be present
* Rough design
* Missing file
* b.visble
* Forms
* Docs
* Tests
* Fix variable
2019-10-17 09:11:03 +02:00
Raphael Michel
2c4ee3b3c7
Replace U2F with WebAuthn ( #1392 )
...
* Replace U2F with WebAuthn
* Imports
* Fix backwards compatibility
* Add explanatory comment
* Fix tests
2019-09-10 09:58:31 +02:00
Raphael Michel
e3a4ec93fc
Fix user log that always shows empty
2019-08-30 13:01:35 +02:00
Raphael Michel
4bae824a03
Add user argument to email_filter
2019-08-30 11:02:59 +02:00
Raphael Michel
d85ddb5bda
Integrate django-scopes ( #1319 )
...
* Install django-scopes
* Fix tests.api
* Update tasks and cronjobs
* Fix remaining tests
* Remove unused import
* Fix tests after rebase
* Disable scopes for get_Events_with_any_permission
* Disable scopes for a management command
2019-06-17 10:46:55 +02:00
Raphael Michel
6d1dea7922
Upgrade to Django 2.2 and modern DRF and py.test ( #1246 )
...
* Upgrade django and stuff
* Update to Django 2.2 and recent versions of similar packages
* Provide explicit orderings to all models used in paginated queries
* Resolve naive datetime warnings in test suite
* Deal with deprecation warnings
* Fix sqlparse version
2019-04-07 14:09:49 +01:00
Raphael Michel
06eddb2c6d
Self-service refund form ( #1135 )
...
* Auto-refund
* Add missing template
* Notification for requested refund
* Model-level tests
* Add front-end tests
* Default to notify
2019-01-18 17:24:42 +01:00
Raphael Michel
94be46ffdb
Fix #978 -- Allow to split names ( #1049 )
...
- [x] attendee names
- [x] Invoice address names
- [x] Data migration
- [x] API serializers
- [x] orderposition
- [x] cartposition
- [x] invoiceaddress
- [x] checkinlistposition
- [x] position API search
- [x] invoice API search
- [x] business/individual required toggle
- [x] Split columns in CSV exports
- [x] ticket editor
- [x] shredder
- [x] ticket/invoice sample data
- [x] order search
- [x] Handle changed naming scheme
- [x] tests
- [x] make use in:
- [x] Boabee
- [x] Certificate download order
- [x] Badge download order
- [x] Ticket download order
- [x] Document new MySQL requirement
- [x] Plugins
2018-11-05 15:43:21 +01:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
69d10489b8
Implement OAuth2 provider ( #927 )
...
- [x] Application management
- [x] Link
- [ ] Tests
- [x] Authorize flow
- [x] Tests
- [x] Refresh token handling
- [x] Tests
- [x] Revocation endpoint
- [x] Tests
- [x] Mitigate: https://github.com/jazzband/django-oauth-toolkit/issues/585
- [x] API authenticator / permission driver
- [x] Test
- [x] Enforce organizer restriction
- [x] Tests
- [x] Enforce scope restriction
- [x] Tests
- [x] Show current applications to user
- [x] Revoke
- [x] Tests
- [x] Log new authorizations
- [x] notify user
- [x] Ensure other grant types are not available
- [x] Documentation
- [x] check if revoking access toking, then refreshing gets rid of organizer constraint
- [x] Show logentry foo
2018-06-05 12:58:04 +02:00
Jakob Schnell
1689925508
Fix #707 -- Setup automated spell-checking for translations ( #896 )
...
This will:
* set up potypo
* add wordlists, edgecases and phrases
* fix english typos across the codebase
* fix german typos and translation
2018-05-27 11:59:10 +02:00
Raphael Michel
ce68f52ca0
Add badge printing capabilities ( #868 )
...
Add badge printing capabilities
2018-04-22 12:02:51 +02:00
Raphael Michel
a284e0c2f7
Add auditable superuser mode ( #824 )
...
* Remove is_superuser everywhere
* Session handling
* List of sessions, relative timeout
* Absolute timeout
* Optionally pseudo-force audit comments
* Fix failing tests
* Add tests
* Add docs
* Rebsae migration
* Typos
* Fix tests
2018-03-28 14:16:58 +02:00
Raphael Michel
3a713541a2
User management UI for system administrators
2018-01-29 12:25:11 +01:00
Raphael Michel
128203800c
Implement notifications for admin users ( #700 )
...
* First stab at notification settings
* Add "global" setting for notification levels
* Trigger notification task
* Get users with permission for event
* Actually send notification emails
* More notifications
* Allow to turn off notifications
* Link in email to pause all notifications
* Add NotificationType to wordlist
* Add notification tests
* Add documentation
* Rebase fixes
2017-12-14 22:06:08 +01:00
Raphael Michel
d93ad8044a
Add method User.get_events_with_permission
2017-10-13 15:56:40 +02:00
Raphael Michel
c719adf235
Fix typo in method name
2017-05-03 17:11:55 +02:00
Raphael Michel
d08a0bdb00
Refs #39 -- New concept of "teams" ( #478 )
...
* New models
* CRUD UI
* UI for adding/removing team members
* Log display for teams
* Fix invitations, move frontend
* Drop old models (incomplete)
* Drop more old stuff
* Drop even more old stuff
* Fix tests
* Fix permission test
* flake8 fix
* Add tests fore the new code
* Rebase migrations
2017-05-03 16:55:37 +02:00
Raphael Michel
0acee0e362
Get rid of User.givenname and User.familyname
2017-01-07 16:35:04 +01:00
Raphael Michel
067b80cd3c
Account history view
2016-10-09 12:59:43 +02:00
Raphael Michel
f82b5ddaae
Account security notifications via email
2016-10-09 12:59:43 +02:00
Raphael Michel
d7719d0bc7
2FA: Login via U2F
2016-10-09 12:59:43 +02:00
Raphael Michel
2f24af824e
2FA: Support for adding TOTP-based devices
2016-10-09 12:59:43 +02:00
Tobias Kunze
bfc721978d
Fixed minor documentation errors and mistakes ( #151 )
2016-07-14 20:01:38 +02:00
Raphael Michel
58b85819bc
Added logging for all basic operations
2015-12-12 22:53:11 +01:00
Raphael Michel
79ad8b40ed
Added python3.5-style type annotations to pretix.base
2015-11-04 23:39:59 +01:00
Raphael Michel
1dfdf7e4f4
Re-organized models into multiple files
2015-10-19 18:26:48 +02:00