Raphael Michel
4ea4189e6d
Allow team admins to require two-factor authentication ( #4034 )
...
* Allow team admins to require two-factor authentication
* Add API tests
* Improve logic
* ADd button tooltip
2024-04-02 17:15:16 +02:00
Raphael Michel
f3f42a8a42
Login: Add logging for incorrect JS hostnames
2024-04-02 11:34:43 +02:00
Kian Cross
fabe476397
Fix redirect loop caused when both 2fa and password change are forced ( #3787 )
2023-12-29 16:02:23 +01:00
Raphael Michel
12a898476e
Replace redirect() with redirect_to_url() if we don't need Django's resolution
2023-12-08 15:38:50 +01:00
Raphael Michel
8212bb5875
Fix setting up webauthn with required 2FA
2023-04-16 17:24:58 +02:00
Raphael Michel
926d334b10
[SECURITY] Enforce session validation on oauth authorize endpoint
2023-03-06 11:52:01 +01:00
Raphael Michel
a9b0651345
Add convenience redirect from /control/events/-/-/feature to real event ( #2501 )
2022-03-01 15:48:25 +01:00
Raphael Michel
6b4adccee5
Bump django-hijack to 3.1.*
2021-12-20 09:51:52 +01:00
ser8phin
169a6c51b4
Add check to force users to change password ( #2284 )
2021-11-11 11:10:33 +01:00
Raphael Michel
a93287207b
pretix Community Edition moves to AGPLv3-based license ( #2023 )
2021-04-12 10:33:47 +02:00
Raphael Michel
af23d6e4bf
Upgrade to Django 3.0 and other dependencies ( #1568 )
...
* Upgrade Django to 3.0 and other dependencies to recent versions
* Fix otp version contsraint
* Remove six dependency
* Resolve some warnings
* Fix failing tests
* Update django-countries
* Resolve all RemovedInDjango31Warnings in test suite
* Run isort
* Fix import
* Update PostgreSQL version on travis
2020-03-23 15:02:20 +01:00
Martin Gross
0a1429ed60
Add setting for enforcing 2FA ( #1259 )
...
* Add setting for enforcing 2FA
* Changes after code-review
* Add Test-Cases for Obligatory 2FA
2019-06-17 17:08:27 +02:00
Raphael Michel
d85ddb5bda
Integrate django-scopes ( #1319 )
...
* Install django-scopes
* Fix tests.api
* Update tasks and cronjobs
* Fix remaining tests
* Remove unused import
* Fix tests after rebase
* Disable scopes for get_Events_with_any_permission
* Disable scopes for a management command
2019-06-17 10:46:55 +02:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
30f8afca85
Fix logout on reauth page
2018-04-26 19:31:14 +02:00
Raphael Michel
a284e0c2f7
Add auditable superuser mode ( #824 )
...
* Remove is_superuser everywhere
* Session handling
* List of sessions, relative timeout
* Absolute timeout
* Optionally pseudo-force audit comments
* Fix failing tests
* Add tests
* Add docs
* Rebsae migration
* Typos
* Fix tests
2018-03-28 14:16:58 +02:00
Raphael Michel
072f2a0ee9
Pin sessions to the user agent in use
2018-02-19 13:02:55 +01:00
Raphael Michel
128203800c
Implement notifications for admin users ( #700 )
...
* First stab at notification settings
* Add "global" setting for notification levels
* Trigger notification task
* Get users with permission for event
* Actually send notification emails
* More notifications
* Allow to turn off notifications
* Link in email to pause all notifications
* Add NotificationType to wordlist
* Add notification tests
* Add documentation
* Rebase fixes
2017-12-14 22:06:08 +01:00
Raphael Michel
f6b1bd9fe8
[SECURITY] Fix handling of session timeouts
2017-11-25 19:18:40 +01:00
Raphael Michel
a2a88cfafa
Fix tests after meta-data merge
2017-09-04 22:09:30 +02:00
Raphael Michel
2f15d410fe
Add optional timeouts for backend sessions
2017-09-04 19:50:32 +02:00
Raphael Michel
0cecc168b6
Autocompletion in event selection
2017-06-05 19:28:52 +02:00
Raphael Michel
c719adf235
Fix typo in method name
2017-05-03 17:11:55 +02:00
Raphael Michel
d08a0bdb00
Refs #39 -- New concept of "teams" ( #478 )
...
* New models
* CRUD UI
* UI for adding/removing team members
* Log display for teams
* Fix invitations, move frontend
* Drop old models (incomplete)
* Drop more old stuff
* Drop even more old stuff
* Fix tests
* Fix permission test
* flake8 fix
* Add tests fore the new code
* Rebase migrations
2017-05-03 16:55:37 +02:00
Tobias Kunze
3e26a4d9cc
Allow superusers to view any event ( #377 )
2017-01-17 16:54:13 +01:00
Raphael Michel
c7676cd17a
Refs #39 -- Add permission editor for organizers
2017-01-07 14:10:31 +01:00
Raphael Michel
d134dcf6a9
Added team invitations
2017-01-07 13:05:36 +01:00
Raphael Michel
67de7150e5
Built-in support for sentry
2017-01-04 21:04:47 +01:00
Raphael Michel
6adcf4bc7c
Use more caching in multidomain module
2016-11-08 16:03:06 +01:00
Raphael Michel
68a9f98f23
2FA: Login using a TOTP token
2016-10-09 12:59:43 +02:00
Raphael Michel
3e318d0dcf
Django 1.10: User.is_authenticated is now a property
2016-09-27 10:25:20 +02:00
Raphael Michel
965428e422
Django 1.10: New-style middlewares
2016-09-27 10:00:03 +02:00
Raphael Michel
03a56f81ca
Added documentation on custom views
2016-07-26 12:16:09 +02:00
Raphael Michel
d133d2abff
Removed CleanerVersion layer [backwards-incompatible!]
2015-12-12 13:08:33 +01:00
Raphael Michel
3fa0cfb077
Added multi-domain capabilities
2015-10-18 14:01:28 +02:00
Raphael Michel
c47008cc18
Added password reset to control.auth
2015-10-04 13:52:08 +02:00
Raphael Michel
8e965bcd6d
Fixed redirections and errors
2015-09-17 23:54:22 +02:00
Raphael Michel
c8830cc880
Added custom error pages
2015-09-17 23:44:07 +02:00
Raphael Michel
e828d711bd
Used isort to order all import statements
2015-07-19 20:46:34 +02:00
Raphael Michel
7d3e2ec7f2
Refs #39 -- Hide links from users without permission
2015-06-23 19:46:50 +02:00
Raphael Michel
1cea51eb10
Added basic global registration
2015-06-15 22:36:47 +02:00
Raphael Michel
14d1a12a91
Basic creating, editing and updating of organizers
2015-05-24 13:58:30 +02:00
Raphael Michel
d658303da3
Try to make pretix compatible with SCRIPT_NAME
...
Remove unnecessary resolve() calls
2015-05-20 18:17:08 +02:00
Raphael Michel
9ec25d708b
Allow import bank data from CSV files
2015-03-21 22:03:39 +01:00
Raphael Michel
077413f41c
Restructure our python module. A lot.
2015-02-14 17:55:13 +01:00