forked from CGM_Public/pretix_original
304 lines
11 KiB
Python
304 lines
11 KiB
Python
import json
|
|
import logging
|
|
import string
|
|
|
|
import dateutil.parser
|
|
from django.db import transaction
|
|
from django.db.models import Count, Q
|
|
from django.http import (
|
|
HttpResponseForbidden, HttpResponseNotFound, JsonResponse,
|
|
)
|
|
from django.shortcuts import get_object_or_404
|
|
from django.utils.crypto import get_random_string
|
|
from django.utils.decorators import method_decorator
|
|
from django.utils.timezone import now
|
|
from django.views.decorators.csrf import csrf_exempt
|
|
from django.views.generic import TemplateView, View
|
|
|
|
from pretix.base.models import Checkin, Event, Order, OrderPosition
|
|
from pretix.base.models.event import SubEvent
|
|
from pretix.control.permissions import EventPermissionRequiredMixin
|
|
from pretix.helpers.urls import build_absolute_uri
|
|
from pretix.multidomain.urlreverse import (
|
|
build_absolute_uri as event_absolute_uri,
|
|
)
|
|
|
|
logger = logging.getLogger('pretix.plugins.pretixdroid')
|
|
API_VERSION = 3
|
|
|
|
|
|
class ConfigView(EventPermissionRequiredMixin, TemplateView):
|
|
template_name = 'pretixplugins/pretixdroid/configuration.html'
|
|
permission = 'can_change_orders'
|
|
|
|
def get_context_data(self, **kwargs):
|
|
ctx = super().get_context_data()
|
|
key = self.request.event.settings.get('pretixdroid_key')
|
|
if not key or 'flush_key' in self.request.GET:
|
|
key = get_random_string(length=32,
|
|
allowed_chars=string.ascii_uppercase + string.ascii_lowercase + string.digits)
|
|
self.request.event.settings.set('pretixdroid_key', key)
|
|
|
|
subevent = None
|
|
url = build_absolute_uri('plugins:pretixdroid:api.redeem', kwargs={
|
|
'organizer': self.request.event.organizer.slug,
|
|
'event': self.request.event.slug
|
|
})
|
|
if self.request.event.has_subevents:
|
|
if self.request.GET.get('subevent'):
|
|
subevent = get_object_or_404(SubEvent, event=self.request.event, pk=self.request.GET['subevent'])
|
|
url = build_absolute_uri('plugins:pretixdroid:api.redeem', kwargs={
|
|
'organizer': self.request.event.organizer.slug,
|
|
'event': self.request.event.slug,
|
|
'subevent': subevent.pk
|
|
})
|
|
|
|
ctx['subevent'] = subevent
|
|
|
|
ctx['qrdata'] = json.dumps({
|
|
'version': API_VERSION,
|
|
'url': url[:-7], # the slice removes the redeem/ part at the end
|
|
'key': key,
|
|
})
|
|
return ctx
|
|
|
|
|
|
class ApiView(View):
|
|
|
|
@method_decorator(csrf_exempt)
|
|
def dispatch(self, request, **kwargs):
|
|
try:
|
|
self.event = Event.objects.get(
|
|
slug=self.kwargs['event'],
|
|
organizer__slug=self.kwargs['organizer']
|
|
)
|
|
except Event.DoesNotExist:
|
|
return HttpResponseNotFound('Unknown event')
|
|
|
|
if (not self.event.settings.get('pretixdroid_key')
|
|
or self.event.settings.get('pretixdroid_key') != request.GET.get('key', '-unset-')):
|
|
return HttpResponseForbidden('Invalid key')
|
|
|
|
self.subevent = None
|
|
if self.event.has_subevents:
|
|
if 'subevent' in kwargs:
|
|
self.subevent = get_object_or_404(SubEvent, event=self.event, pk=kwargs['subevent'])
|
|
else:
|
|
return HttpResponseForbidden('No subevent selected.')
|
|
else:
|
|
if 'subevent' in kwargs:
|
|
return HttpResponseForbidden('Subevents not enabled.')
|
|
|
|
return super().dispatch(request, **kwargs)
|
|
|
|
|
|
class ApiRedeemView(ApiView):
|
|
def post(self, request, **kwargs):
|
|
secret = request.POST.get('secret', '!INVALID!')
|
|
force = request.POST.get('force', 'false') in ('true', 'True')
|
|
nonce = request.POST.get('nonce')
|
|
response = {
|
|
'version': API_VERSION
|
|
}
|
|
|
|
if 'datetime' in request.POST:
|
|
dt = dateutil.parser.parse(request.POST.get('datetime'))
|
|
else:
|
|
dt = now()
|
|
|
|
try:
|
|
with transaction.atomic():
|
|
created = False
|
|
op = OrderPosition.objects.select_related('item', 'variation', 'order', 'addon_to').get(
|
|
order__event=self.event, secret=secret, subevent=self.subevent
|
|
)
|
|
if op.order.status == Order.STATUS_PAID or force:
|
|
ci, created = Checkin.objects.get_or_create(position=op, defaults={
|
|
'datetime': dt,
|
|
'nonce': nonce,
|
|
})
|
|
else:
|
|
response['status'] = 'error'
|
|
response['reason'] = 'unpaid'
|
|
|
|
if 'status' not in response:
|
|
if created or (nonce and nonce == ci.nonce):
|
|
response['status'] = 'ok'
|
|
if created:
|
|
op.order.log_action('pretix.plugins.pretixdroid.scan', data={
|
|
'position': op.id,
|
|
'positionid': op.positionid,
|
|
'first': True,
|
|
'forced': op.order.status != Order.STATUS_PAID,
|
|
'datetime': dt,
|
|
})
|
|
else:
|
|
if force:
|
|
response['status'] = 'ok'
|
|
else:
|
|
response['status'] = 'error'
|
|
response['reason'] = 'already_redeemed'
|
|
op.order.log_action('pretix.plugins.pretixdroid.scan', data={
|
|
'position': op.id,
|
|
'positionid': op.positionid,
|
|
'first': False,
|
|
'forced': force,
|
|
'datetime': dt,
|
|
})
|
|
|
|
response['data'] = {
|
|
'secret': op.secret,
|
|
'order': op.order.code,
|
|
'item': str(op.item),
|
|
'variation': str(op.variation) if op.variation else None,
|
|
'attendee_name': op.attendee_name or (op.addon_to.attendee_name if op.addon_to else ''),
|
|
}
|
|
|
|
except OrderPosition.DoesNotExist:
|
|
response['status'] = 'error'
|
|
response['reason'] = 'unknown_ticket'
|
|
|
|
return JsonResponse(response)
|
|
|
|
|
|
def serialize_op(op):
|
|
name = op.attendee_name
|
|
if not name and op.addon_to:
|
|
name = op.addon_to.attendee_name
|
|
if not name:
|
|
try:
|
|
name = op.order.invoice_address.name
|
|
except:
|
|
pass
|
|
return {
|
|
'secret': op.secret,
|
|
'order': op.order.code,
|
|
'item': str(op.item),
|
|
'item_id': op.item_id,
|
|
'variation': str(op.variation) if op.variation else None,
|
|
'variation_id': op.variation_id,
|
|
'attendee_name': name,
|
|
'attention': op.item.checkin_attention,
|
|
'redeemed': bool(op.checkin_cnt),
|
|
'paid': op.order.status == Order.STATUS_PAID,
|
|
}
|
|
|
|
|
|
class ApiSearchView(ApiView):
|
|
def get(self, request, **kwargs):
|
|
query = request.GET.get('query', '!INVALID!')
|
|
response = {
|
|
'version': API_VERSION
|
|
}
|
|
|
|
if len(query) >= 4:
|
|
ops = OrderPosition.objects.select_related('item', 'variation', 'order', 'addon_to', 'order__invoice_address').filter(
|
|
Q(order__event=self.event)
|
|
& Q(
|
|
Q(secret__istartswith=query) | Q(attendee_name__icontains=query) | Q(order__code__istartswith=query)
|
|
| Q(order__invoice_address__name__icontains=query)
|
|
)
|
|
& Q(subevent=self.subevent)
|
|
).annotate(checkin_cnt=Count('checkins'))[:25]
|
|
|
|
response['results'] = [serialize_op(op) for op in ops]
|
|
else:
|
|
response['results'] = []
|
|
|
|
return JsonResponse(response)
|
|
|
|
|
|
class ApiDownloadView(ApiView):
|
|
def get(self, request, **kwargs):
|
|
response = {
|
|
'version': API_VERSION
|
|
}
|
|
|
|
ops = OrderPosition.objects.select_related('item', 'variation', 'order', 'addon_to').filter(
|
|
Q(order__event=self.event) & Q(subevent=self.subevent)
|
|
).annotate(checkin_cnt=Count('checkins'))
|
|
response['results'] = [serialize_op(op) for op in ops]
|
|
|
|
return JsonResponse(response)
|
|
|
|
|
|
class ApiStatusView(ApiView):
|
|
def get(self, request, **kwargs):
|
|
ev = self.subevent or self.event
|
|
response = {
|
|
'version': API_VERSION,
|
|
'event': {
|
|
'name': str(ev.name),
|
|
'slug': self.event.slug,
|
|
'organizer': {
|
|
'name': str(self.event.organizer),
|
|
'slug': self.event.organizer.slug
|
|
},
|
|
'subevent': self.subevent.pk if self.subevent else str(self.event),
|
|
'date_from': ev.date_from,
|
|
'date_to': ev.date_to,
|
|
'timezone': self.event.settings.timezone,
|
|
'url': event_absolute_uri(self.event, 'presale:event.index')
|
|
},
|
|
'checkins': Checkin.objects.filter(
|
|
position__order__event=self.event, position__subevent=self.subevent
|
|
).count(),
|
|
'total': OrderPosition.objects.filter(
|
|
order__event=self.event, order__status=Order.STATUS_PAID, subevent=self.subevent
|
|
).count()
|
|
}
|
|
|
|
op_by_item = {
|
|
p['item']: p['cnt']
|
|
for p in OrderPosition.objects.filter(
|
|
order__event=self.event,
|
|
order__status=Order.STATUS_PAID,
|
|
subevent=self.subevent
|
|
).order_by().values('item').annotate(cnt=Count('id'))
|
|
}
|
|
op_by_variation = {
|
|
p['variation']: p['cnt']
|
|
for p in OrderPosition.objects.filter(
|
|
order__event=self.event,
|
|
order__status=Order.STATUS_PAID,
|
|
subevent=self.subevent
|
|
).order_by().values('variation').annotate(cnt=Count('id'))
|
|
}
|
|
c_by_item = {
|
|
p['position__item']: p['cnt']
|
|
for p in Checkin.objects.filter(
|
|
position__order__event=self.event,
|
|
position__order__status=Order.STATUS_PAID,
|
|
position__subevent=self.subevent
|
|
).order_by().values('position__item').annotate(cnt=Count('id'))
|
|
}
|
|
c_by_variation = {
|
|
p['position__variation']: p['cnt']
|
|
for p in Checkin.objects.filter(
|
|
position__order__event=self.event,
|
|
position__order__status=Order.STATUS_PAID,
|
|
position__subevent=self.subevent
|
|
).order_by().values('position__variation').annotate(cnt=Count('id'))
|
|
}
|
|
|
|
response['items'] = []
|
|
for item in self.event.items.order_by('pk').prefetch_related('variations'):
|
|
i = {
|
|
'id': item.pk,
|
|
'name': str(item),
|
|
'admission': item.admission,
|
|
'checkins': c_by_item.get(item.pk, 0),
|
|
'total': op_by_item.get(item.pk, 0),
|
|
'variations': []
|
|
}
|
|
for var in item.variations.all():
|
|
i['variations'].append({
|
|
'id': var.pk,
|
|
'name': str(var),
|
|
'checkins': c_by_variation.get(var.pk, 0),
|
|
'total': op_by_variation.get(var.pk, 0),
|
|
})
|
|
response['items'].append(i)
|
|
|
|
return JsonResponse(response)
|