Commit Graph

26 Commits

Author SHA1 Message Date
Raphael Michel
6af2d38a98 Add __Host- prefix to CSRF and session cookie, remove cookie_domain (#3831)
* Add __Host- prefix to CSRF and session cookie, remove cookie_domain

* Fix tests
2024-01-25 09:45:56 +01:00
Raphael Michel
bd32b33ba9 Bump Django to 4.1.* (#2989) 2023-06-05 09:56:31 +02:00
Raphael Michel
bdb0a176da Bring back status code 400 for unknown domains 2022-08-08 10:20:32 +02:00
Raphael Michel
345a05e4ae Improve error message on mismatching host header on new installations 2022-08-08 10:19:32 +02:00
Raphael Michel
a93287207b pretix Community Edition moves to AGPLv3-based license (#2023) 2021-04-12 10:33:47 +02:00
Raphael Michel
939a38d53b Fix subsequent issue on event level domains 2020-06-04 20:32:21 +02:00
Raphael Michel
a57280004e Fix another multidomain issue 2020-06-04 20:15:26 +02:00
Raphael Michel
ce896cec8f Fix bug in previosu commit 2020-06-04 19:05:07 +02:00
Raphael Michel
cd5f6b66a1 Do not cache event/organizer instance in multi domain middleware (might be harmful) 2020-06-04 18:33:15 +02:00
Raphael Michel
7e9c9beace Allow to use a custom domain per event (#1617)
* Drop support for maindomain_urls/subdomain_urls in plugins

* Allow to use a custom domain per event

* Fix bug when manually saving domains

* Fix custom domains in debugging

* Fix middleware

* Fix middleware again, update docs
2020-03-23 13:03:14 +01:00
Raphael Michel
d46278f04f Set cookies with SameSite=None if possible (#1509) 2019-12-03 14:50:18 +01:00
Raphael Michel
6d1dea7922 Upgrade to Django 2.2 and modern DRF and py.test (#1246)
* Upgrade django and stuff

* Update to Django 2.2 and recent versions of similar packages

* Provide explicit orderings to all models used in paginated queries

* Resolve naive datetime warnings in test suite

* Deal with deprecation warnings

* Fix sqlparse version
2019-04-07 14:09:49 +01:00
Tobias Kunze
51c6d60760 Use http_date instead of cookie_date (#1042)
http_date is deprecated as of Django 2.1
2018-10-09 10:50:25 +02:00
Raphael Michel
afd766999c Upgrade to Django 2.1 (#710)
* Upgrade to Django 2.0

* more models

* i18n foo

* Update setup.py

* Fix Sentry exception PRETIXEU-JC

* Enforce slug uniqueness

* Import sorting

* Upgrade to Django 2.1

* Travis config

* Try to fix PostgreSQL failure

* Smaller test matrix

* staticfiles→static

* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
b8225bd206 Stop creating an empty session on first request 2018-03-10 14:19:28 +01:00
Raphael Michel
ab2084692d Cache organizer instance by domain 2017-10-18 10:27:57 +02:00
Raphael Michel
43b5140754 New handling of plugin URLs (#609) 2017-08-29 10:01:50 +03:00
Raphael Michel
bf5ea81b40 Ignore style in tests, change import order 2017-06-01 13:28:11 +02:00
Raphael Michel
50eb518d41 Remove debugging output 2016-11-08 17:27:39 +01:00
Raphael Michel
6adcf4bc7c Use more caching in multidomain module 2016-11-08 16:03:06 +01:00
Raphael Michel
5aa3ff0616 Require a session to be present at all times, not just in pretix.presale views 2016-11-03 15:32:06 +01:00
Raphael Michel
965428e422 Django 1.10: New-style middlewares 2016-09-27 10:00:03 +02:00
Raphael Michel
e51029f9f7 Added two docstrings 2015-11-09 21:14:20 +01:00
Raphael Michel
6c9e8ae3a7 Fixed cookie domain behaviour 2015-11-09 21:13:02 +01:00
Raphael Michel
0b4cae07c4 Splitted URL configuration for main and subdomains 2015-10-21 18:16:17 +02:00
Raphael Michel
3fa0cfb077 Added multi-domain capabilities 2015-10-18 14:01:28 +02:00