Allow changing ticket secret via API (Z#23188201) (#4989)

This commit is contained in:
luelista
2025-04-07 13:49:19 +02:00
committed by GitHub
parent 1bbefddc11
commit 277a5bffa8
4 changed files with 52 additions and 1 deletions

View File

@@ -1468,6 +1468,31 @@ def test_position_update_change_price_and_tax_rule(token_client, organizer, even
assert op.tax_rule == tr
@pytest.mark.django_db
def test_position_update_secret(token_client, organizer, event, order, item):
with scopes_disabled():
order.positions.create(item=item, price=Decimal('23.00'), secret='alreadyused')
p = order.positions.first()
psw = p.web_secret
resp = token_client.patch(
'/api/v1/organizers/{}/events/{}/orderpositions/{}/'.format(
organizer.slug, event.slug, p.pk,
), format='json', data={'secret': 'nobodyknows'}
)
assert resp.status_code == 200
p.refresh_from_db()
with scopes_disabled():
assert 'nobodyknows' == p.secret
assert psw == p.web_secret
resp = token_client.patch(
'/api/v1/organizers/{}/events/{}/orderpositions/{}/'.format(
organizer.slug, event.slug, p.pk,
), format='json', data={'secret': 'alreadyused'}
)
assert resp.status_code == 400
@pytest.mark.django_db
def test_position_add_simple(token_client, organizer, event, order, quota, item):
with scopes_disabled():