forked from CGM_Public/pretix_original
483 lines
22 KiB
Python
483 lines
22 KiB
Python
#
|
|
# This file is part of pretix (Community Edition).
|
|
#
|
|
# Copyright (C) 2014-2020 Raphael Michel and contributors
|
|
# Copyright (C) 2020-2021 rami.io GmbH and contributors
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
# Public License as published by the Free Software Foundation in version 3 of the License.
|
|
#
|
|
# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
|
|
# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
|
|
# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
|
|
# this file, see <https://pretix.eu/about/en/license>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
|
|
# <https://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
# This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of
|
|
# the Apache License 2.0 can be obtained at <http://www.apache.org/licenses/LICENSE-2.0>.
|
|
#
|
|
# This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A
|
|
# full history of changes and contributors is available at <https://github.com/pretix/pretix>.
|
|
#
|
|
# This file contains Apache-licensed contributions copyrighted by: Tobias Kunze
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is
|
|
# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations under the License.
|
|
import re
|
|
import time
|
|
import warnings
|
|
from importlib import import_module
|
|
from urllib.parse import urljoin
|
|
|
|
from django.conf import settings
|
|
from django.contrib.auth import (
|
|
BACKEND_SESSION_KEY, SESSION_KEY, get_user_model, load_backend,
|
|
)
|
|
from django.db.models import Q
|
|
from django.http import Http404, HttpResponseForbidden
|
|
from django.middleware.csrf import rotate_token
|
|
from django.template import loader
|
|
from django.template.response import TemplateResponse
|
|
from django.urls import resolve
|
|
from django.utils.crypto import constant_time_compare
|
|
from django.utils.functional import SimpleLazyObject
|
|
from django.utils.timezone import now
|
|
from django.utils.translation import gettext_lazy as _
|
|
from django_scopes import scope
|
|
|
|
from pretix.base.middleware import LocaleMiddleware
|
|
from pretix.base.models import Customer, Event, Organizer
|
|
from pretix.base.timemachine import time_machine_now_assigned_from_request
|
|
from pretix.helpers.http import redirect_to_url
|
|
from pretix.multidomain.models import KnownDomain
|
|
from pretix.multidomain.urlreverse import (
|
|
build_absolute_uri, get_event_domain, get_organizer_domain,
|
|
)
|
|
from pretix.presale.signals import process_request, process_response
|
|
|
|
SessionStore = import_module(settings.SESSION_ENGINE).SessionStore
|
|
|
|
|
|
def get_customer(request):
|
|
if not hasattr(request, '_cached_customer'):
|
|
session_key = f'customer_auth_id:{request.organizer.pk}'
|
|
hash_session_key = f'customer_auth_hash:{request.organizer.pk}'
|
|
dependency_key = f'customer_auth_session_dependency:{request.organizer.pk}'
|
|
|
|
# By default, we look at the regular django session
|
|
session = request.session
|
|
|
|
# However, if an event uses a custom domain, the event is at a different domain
|
|
# than our actual session cookie. The login state is therefore not determined
|
|
# by our request session, but by the "parent session", the user's session on the
|
|
# organizer level. This approach guarantees e.g. a global logout feature.
|
|
if session.get(dependency_key):
|
|
sparent = SessionStore(session[dependency_key])
|
|
try:
|
|
sparent.load()
|
|
except:
|
|
# parent session no longer exists
|
|
request._cached_customer = None
|
|
return
|
|
else:
|
|
session = sparent
|
|
|
|
with scope(organizer=request.organizer):
|
|
try:
|
|
customer = request.organizer.customers.get(
|
|
Q(provider__isnull=True) | Q(provider__is_active=True),
|
|
is_active=True, is_verified=True,
|
|
pk=session[session_key]
|
|
)
|
|
except (Customer.DoesNotExist, KeyError):
|
|
request._cached_customer = None
|
|
else:
|
|
session_hash = session.get(hash_session_key)
|
|
session_auth_hash = customer.get_session_auth_hash()
|
|
session_hash_verified = session_hash and constant_time_compare(
|
|
session_hash,
|
|
session_auth_hash,
|
|
)
|
|
if not session_hash_verified:
|
|
# If the current secret does not verify the session, try
|
|
# with the fallback secrets and stop when a matching one is
|
|
# found.
|
|
if session_hash and any(
|
|
constant_time_compare(session_hash, fallback_auth_hash)
|
|
for fallback_auth_hash in customer.get_session_auth_fallback_hash()
|
|
):
|
|
request.session.cycle_key()
|
|
request.session[hash_session_key] = session_auth_hash
|
|
session_hash_verified = True
|
|
|
|
if session_hash_verified:
|
|
request._cached_customer = customer
|
|
else:
|
|
session.flush()
|
|
request._cached_customer = None
|
|
|
|
return request._cached_customer
|
|
|
|
|
|
def update_customer_session_auth_hash(request, customer):
|
|
hash_session_key = f'customer_auth_hash:{request.organizer.pk}'
|
|
session_auth_hash = customer.get_session_auth_hash()
|
|
request.session.cycle_key()
|
|
request.session[hash_session_key] = session_auth_hash
|
|
|
|
|
|
def add_customer_to_request(request):
|
|
if 'cross_domain_customer_auth' in request.GET and request.domain_mode in (KnownDomain.MODE_EVENT_DOMAIN, KnownDomain.MODE_ORG_ALT_DOMAIN):
|
|
# The user is logged in on the main domain and now wants to take their session
|
|
# to a event-specific domain. We validate the one time token received via a
|
|
# query parameter and make sure we invalidate it right away. Then, we look up
|
|
# the users session on the main domain and store the dependency between the two
|
|
# sessions.
|
|
otp = re.sub('[^a-zA-Z0-9]', '', request.GET['cross_domain_customer_auth'])
|
|
|
|
otpstore = SessionStore(otp)
|
|
try:
|
|
otpstore.load()
|
|
except:
|
|
pass
|
|
else:
|
|
parent_session_key = otpstore.get(f'customer_cross_domain_auth_{request.organizer.pk}')
|
|
|
|
if parent_session_key: # not already invalidated, expired, …
|
|
# Make sure the OTP can't be used again
|
|
otpstore.delete()
|
|
|
|
sparent = SessionStore(parent_session_key)
|
|
try:
|
|
sparent.load()
|
|
except:
|
|
# parent session no longer exists
|
|
pass
|
|
else:
|
|
dependency_key = f'customer_auth_session_dependency:{request.organizer.pk}'
|
|
session_key = f'customer_auth_id:{request.organizer.pk}'
|
|
request.session[dependency_key] = parent_session_key
|
|
if session_key in request.session:
|
|
del request.session[session_key]
|
|
|
|
request.customer = SimpleLazyObject(lambda: get_customer(request))
|
|
|
|
|
|
def get_customer_auth_time(request):
|
|
auth_time_session_key = f'customer_auth_time:{request.organizer.pk}'
|
|
return request.session.get(auth_time_session_key) or 0
|
|
|
|
|
|
def customer_login(request, customer):
|
|
session_key = f'customer_auth_id:{request.organizer.pk}'
|
|
hash_session_key = f'customer_auth_hash:{request.organizer.pk}'
|
|
auth_time_session_key = f'customer_auth_time:{request.organizer.pk}'
|
|
dependency_key = f'customer_auth_session_dependency:{request.organizer.pk}'
|
|
session_auth_hash = customer.get_session_auth_hash()
|
|
|
|
if session_key in request.session:
|
|
if request.session[session_key] != customer.pk or (
|
|
not constant_time_compare(request.session.get(hash_session_key, ''), session_auth_hash)):
|
|
# To avoid reusing another user's session, create a new, empty
|
|
# session if the existing session corresponds to a different
|
|
# authenticated user.
|
|
request.session.flush()
|
|
else:
|
|
request.session.cycle_key()
|
|
|
|
request.session.pop(dependency_key, None)
|
|
request.session[session_key] = customer.pk
|
|
request.session[hash_session_key] = session_auth_hash
|
|
request.session[auth_time_session_key] = int(time.time())
|
|
request.customer = customer
|
|
|
|
customer.last_login = now()
|
|
customer.save(update_fields=['last_login'])
|
|
|
|
rotate_token(request)
|
|
|
|
|
|
def customer_logout(request):
|
|
session_key = f'customer_auth_id:{request.organizer.pk}'
|
|
hash_session_key = f'customer_auth_hash:{request.organizer.pk}'
|
|
auth_time_session_key = f'customer_auth_time:{request.organizer.pk}'
|
|
dependency_key = f'customer_auth_session_dependency:{request.organizer.pk}'
|
|
|
|
# Remove dependency on parent session
|
|
request.session.pop(dependency_key, None)
|
|
# We do not remove the actual parent session as we have no way of e.g. cycling its ID.
|
|
# Instead, LogoutView will redirect the user to the logout of the parent session.
|
|
|
|
# Remove user session
|
|
customer_id = request.session.pop(session_key, None)
|
|
request.session.pop(hash_session_key, None)
|
|
request.session.pop(auth_time_session_key, None)
|
|
|
|
# Remove carts tied to this user
|
|
carts = request.session.get('carts', {})
|
|
for k, v in list(carts.items()):
|
|
if v.get('customer') == customer_id:
|
|
carts.pop(k)
|
|
request.session['carts'] = carts
|
|
|
|
# Cycle session key and CSRF token
|
|
request.session.cycle_key()
|
|
rotate_token(request)
|
|
|
|
request.customer = None
|
|
request._cached_customer = None
|
|
|
|
|
|
def _get_user_from_session_data(sessiondata):
|
|
if SESSION_KEY not in sessiondata:
|
|
return None
|
|
user_id = get_user_model()._meta.pk.to_python(sessiondata[SESSION_KEY])
|
|
backend_path = sessiondata[BACKEND_SESSION_KEY]
|
|
if backend_path in settings.AUTHENTICATION_BACKENDS:
|
|
backend = load_backend(backend_path)
|
|
user = backend.get_user(user_id)
|
|
return user
|
|
|
|
|
|
@scope(organizer=None)
|
|
def _detect_event(request, require_live=True, require_plugin=None):
|
|
|
|
if hasattr(request, '_event_detected'):
|
|
return
|
|
|
|
db = 'default'
|
|
if request.method == 'GET':
|
|
db = settings.DATABASE_REPLICA
|
|
|
|
url = resolve(request.path_info)
|
|
|
|
request_domain_mode = getattr(request, 'domain_mode', 'system')
|
|
try:
|
|
if request_domain_mode == KnownDomain.MODE_EVENT_DOMAIN:
|
|
# We are on an event's custom domain
|
|
pass
|
|
elif request_domain_mode in (KnownDomain.MODE_ORG_DOMAIN, KnownDomain.MODE_ORG_ALT_DOMAIN):
|
|
# We are on an organizer's custom domain
|
|
if 'organizer' in url.kwargs and url.kwargs['organizer']:
|
|
if url.kwargs['organizer'] != request.organizer.slug:
|
|
raise Http404(_('The selected event was not found.'))
|
|
path = "/" + request.get_full_path().split("/", 2)[-1]
|
|
return redirect_to_url(path)
|
|
|
|
request.organizer = request.organizer
|
|
if 'event' in url.kwargs:
|
|
request.event = request.organizer.events.using(db).get(
|
|
slug=url.kwargs['event'],
|
|
organizer=request.organizer,
|
|
)
|
|
|
|
# If this event has a custom domain or is not available on this alt domain, send the user there
|
|
domain, domainmode = get_event_domain(request.event, fallback=False, return_mode=True)
|
|
if not domain and request_domain_mode == KnownDomain.MODE_ORG_ALT_DOMAIN:
|
|
path = request.get_full_path().split("/", 2)[-1]
|
|
r = redirect_to_url(build_absolute_uri(request.event, "presale:event.index") + path)
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
elif domain and domain != request.host:
|
|
if request.port and request.port not in (80, 443):
|
|
domain = '%s:%d' % (domain, request.port)
|
|
if domainmode == KnownDomain.MODE_EVENT_DOMAIN:
|
|
path = request.get_full_path().split("/", 2)[-1]
|
|
else:
|
|
path = request.get_full_path()
|
|
r = redirect_to_url(urljoin('%s://%s' % (request.scheme, domain), path))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
else:
|
|
# We are on our main domain
|
|
if 'event' in url.kwargs and 'organizer' in url.kwargs:
|
|
request.event = Event.objects\
|
|
.select_related('organizer')\
|
|
.using(db)\
|
|
.get(
|
|
slug=url.kwargs['event'],
|
|
organizer__slug=url.kwargs['organizer']
|
|
)
|
|
request.organizer = request.event.organizer
|
|
|
|
# If this event has a custom domain, send the user there
|
|
domain, domainmode = get_event_domain(request.event, fallback=False, return_mode=True)
|
|
if domain:
|
|
if request.port and request.port not in (80, 443):
|
|
domain = '%s:%d' % (domain, request.port)
|
|
if domainmode == KnownDomain.MODE_EVENT_DOMAIN:
|
|
path = request.get_full_path().split("/", 3)[-1]
|
|
else:
|
|
path = request.get_full_path().split("/", 2)[-1]
|
|
r = redirect_to_url(urljoin('%s://%s' % (request.scheme, domain), path))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
elif 'organizer' in url.kwargs:
|
|
request.organizer = Organizer.objects.using(db).get(
|
|
slug=url.kwargs['organizer']
|
|
)
|
|
else:
|
|
raise Http404()
|
|
|
|
# If this organizer has a custom domain, send the user there
|
|
domain = get_organizer_domain(request.organizer)
|
|
if domain:
|
|
if request.port and request.port not in (80, 443):
|
|
domain = '%s:%d' % (domain, request.port)
|
|
path = request.get_full_path().split("/", 2)[-1]
|
|
r = redirect_to_url(urljoin('%s://%s' % (request.scheme, domain), path))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
|
|
if not hasattr(request, 'customer'):
|
|
add_customer_to_request(request)
|
|
|
|
if hasattr(request, 'event'):
|
|
# Restrict locales to the ones available for this event
|
|
LocaleMiddleware(NotImplementedError).process_request(request)
|
|
|
|
if require_live and (request.event.testmode or not request.event.live):
|
|
can_access = (
|
|
url.url_name == 'event.auth'
|
|
or (
|
|
request.user.is_authenticated
|
|
and request.user.has_event_permission(request.organizer, request.event, request=request)
|
|
)
|
|
)
|
|
if not can_access and 'pretix_event_access_{}'.format(request.event.pk) in request.session:
|
|
parent_session_key = request.session.get('pretix_event_access_{}'.format(request.event.pk))
|
|
sparent = SessionStore(parent_session_key)
|
|
try:
|
|
parentdata = sparent.load()
|
|
except:
|
|
pass
|
|
else:
|
|
user = _get_user_from_session_data(parentdata)
|
|
if user and user.is_authenticated and user.has_event_permission(
|
|
request.organizer, request.event, session_key=parent_session_key):
|
|
can_access = True
|
|
request.event_access_user = user
|
|
request.event_access_parent_session_key = parent_session_key
|
|
|
|
if not can_access and not request.event.live:
|
|
# Directly construct view instead of just calling `raise` since this case is so common that we
|
|
# don't want it to show in our log files.
|
|
template = loader.get_template("pretixpresale/event/offline.html")
|
|
return HttpResponseForbidden(
|
|
template.render(request=request)
|
|
)
|
|
|
|
if require_plugin:
|
|
is_core = any(require_plugin.startswith(m) for m in settings.CORE_MODULES)
|
|
if require_plugin not in request.event.get_plugins() and not is_core:
|
|
raise Http404(_('This feature is not enabled.'))
|
|
|
|
for receiver, response in process_request.send(request.event, request=request):
|
|
if response:
|
|
return response
|
|
elif hasattr(request, 'organizer'):
|
|
# Restrict locales to the ones available for this organizer
|
|
LocaleMiddleware(NotImplementedError).process_request(request)
|
|
|
|
except Event.DoesNotExist:
|
|
try:
|
|
if hasattr(request, 'organizer_domain'):
|
|
# Redirect for case-insensitive event slug
|
|
event = request.organizer.events.get(
|
|
slug__iexact=url.kwargs['event'],
|
|
organizer=request.organizer,
|
|
)
|
|
pathparts = request.get_full_path().split('/')
|
|
pathparts[1] = event.slug
|
|
r = redirect_to_url('/'.join(pathparts))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
else:
|
|
if 'event' in url.kwargs and 'organizer' in url.kwargs:
|
|
# Redirect for case-insensitive event or organizer slug
|
|
event = Event.objects.select_related('organizer').get(
|
|
slug__iexact=url.kwargs['event'],
|
|
organizer__slug__iexact=url.kwargs['organizer']
|
|
)
|
|
pathparts = request.get_full_path().split('/')
|
|
pathparts[1] = event.organizer.slug
|
|
pathparts[2] = event.slug
|
|
r = redirect_to_url('/'.join(pathparts))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
except Event.DoesNotExist:
|
|
raise Http404(_('The selected event was not found.'))
|
|
raise Http404(_('The selected event was not found.'))
|
|
except Organizer.DoesNotExist:
|
|
if 'organizer' in url.kwargs:
|
|
# Redirect for case-insensitive organizer slug
|
|
try:
|
|
organizer = Organizer.objects.get(
|
|
slug__iexact=url.kwargs['organizer']
|
|
)
|
|
except Organizer.DoesNotExist:
|
|
raise Http404(_('The selected organizer was not found.'))
|
|
pathparts = request.get_full_path().split('/')
|
|
pathparts[1] = organizer.slug
|
|
r = redirect_to_url('/'.join(pathparts))
|
|
r['Access-Control-Allow-Origin'] = '*'
|
|
return r
|
|
raise Http404(_('The selected organizer was not found.'))
|
|
|
|
request._event_detected = True
|
|
|
|
|
|
def _event_view(function=None, require_live=True, require_plugin=None):
|
|
def event_view_wrapper(func, require_live=require_live):
|
|
def wrap(request, *args, **kwargs):
|
|
ret = _detect_event(request, require_live=require_live, require_plugin=require_plugin)
|
|
if ret:
|
|
return ret
|
|
else:
|
|
with scope(organizer=getattr(request, 'organizer', None)), \
|
|
time_machine_now_assigned_from_request(request):
|
|
if not hasattr(request, 'sales_channel') and hasattr(request, 'organizer'):
|
|
# The environ lookup is only relevant during unit testing
|
|
request.sales_channel = request.organizer.sales_channels.get(
|
|
identifier=request.environ.get('PRETIX_SALES_CHANNEL', 'web')
|
|
)
|
|
|
|
response = func(request=request, *args, **kwargs)
|
|
if getattr(request, 'event', None):
|
|
for receiver, r in process_response.send(request.event, request=request, response=response):
|
|
response = r
|
|
|
|
if isinstance(response, TemplateResponse):
|
|
response = response.render()
|
|
|
|
return response
|
|
|
|
for attrname in dir(func):
|
|
# Preserve flags like csrf_exempt
|
|
if not attrname.startswith('__'):
|
|
setattr(wrap, attrname, getattr(func, attrname))
|
|
return wrap
|
|
|
|
if function:
|
|
return event_view_wrapper(function, require_live=require_live)
|
|
return event_view_wrapper
|
|
|
|
|
|
def event_view(function=None, require_live=True):
|
|
warnings.warn('The event_view decorator is deprecated since it will be automatically applied by the URL routing '
|
|
'layer when you use event_urls.',
|
|
DeprecationWarning, stacklevel=2)
|
|
|
|
def noop(fn):
|
|
return fn
|
|
|
|
return function or noop
|