Raphael Michel
|
1b02a898a1
|
Fix TypeError in OAuth authorization
|
2023-03-07 10:43:07 +01:00 |
|
Raphael Michel
|
62cbed4891
|
Merge branch 'security-20230306'
|
2023-03-06 14:36:33 +01:00 |
|
Raphael Michel
|
9a90444cca
|
OAuth: Log authorized organizers
|
2023-03-06 14:25:59 +01:00 |
|
Raphael Michel
|
926d334b10
|
[SECURITY] Enforce session validation on oauth authorize endpoint
|
2023-03-06 11:52:01 +01:00 |
|
Raphael Michel
|
ed1dae5fde
|
API: Fix duplicate results when filtering orders
|
2023-03-03 14:36:40 +01:00 |
|
Raphael Michel
|
7d4b575150
|
Ensure total ordering of paginated lists (#3061)
|
2023-02-24 10:51:51 +01:00 |
|
Raphael Michel
|
72aaf24a40
|
Fix failing tests after Stripe provider change
|
2023-02-17 09:58:36 +01:00 |
|
Raphael Michel
|
f09878df9f
|
Add missing refund.done webhooks
|
2023-02-15 11:05:12 +01:00 |
|
Raphael Michel
|
6902725f3c
|
New check-in features (#3022)
|
2023-02-09 09:46:46 +01:00 |
|
Raphael Michel
|
59d46ddded
|
Revert "First steps into pytz deprecation"
This reverts commit e4e7d50659.
|
2023-02-01 13:15:18 +01:00 |
|
Raphael Michel
|
e4e7d50659
|
First steps into pytz deprecation
|
2023-02-01 13:12:24 +01:00 |
|
Raphael Michel
|
57fa29a0e9
|
API: Fix default ordering of check-in list positions
|
2023-01-25 16:36:08 +01:00 |
|
Raphael Michel
|
5d42dc97c2
|
API: Use a more sane default ordering for checkin-list
|
2023-01-25 14:35:20 +01:00 |
|
Raphael Michel
|
3c1f3a26cf
|
Always make explicit which tables to lock (#3058)
Co-authored-by: Richard Schreiber <schreiber@rami.io>
|
2023-01-25 11:44:11 +01:00 |
|
Raphael Michel
|
9dd3b12625
|
Validate image size in pixels at upload time (#3003)
|
2023-01-12 16:30:28 +01:00 |
|
Raphael Michel
|
018c3d70e3
|
API: Allow to set order of check-in lists
|
2023-01-04 18:29:35 +01:00 |
|
Raphael Michel
|
3d9679a144
|
Allow variations to override item meta data (#2965)
|
2022-12-12 12:06:09 +01:00 |
|
Raphael Michel
|
b72dc0ce8e
|
API: Allow to whiteliste fields for the orders resource
|
2022-11-28 10:57:12 +01:00 |
|
Raphael Michel
|
ff153164f8
|
API: Add search parameter for subevents
|
2022-11-24 17:58:18 +01:00 |
|
Raphael Michel
|
9624b1c505
|
Support for external gift cards (#2912)
|
2022-11-23 14:52:56 +01:00 |
|
Raphael Michel
|
a628f605a6
|
Send refund webhooks correctly when refunds are created via API
|
2022-11-14 12:23:49 +01:00 |
|
Raphael Michel
|
9bea383ff0
|
Make all email subjects configurable (#2884)
Co-authored-by: Richard Schreiber <schreiber@rami.io>
|
2022-11-07 15:50:09 +01:00 |
|
Raphael Michel
|
4fb76f1b55
|
API: Fix overriding date_admission during event clone
|
2022-11-04 10:39:21 +01:00 |
|
Raphael Michel
|
bccd7cd1a4
|
API: Fix setting plugins during event creation
|
2022-11-01 18:39:01 +01:00 |
|
Raphael Michel
|
c4d2b0bff7
|
Fix handling of default ticket layouts during event cloning
|
2022-10-27 21:55:08 +02:00 |
|
Raphael Michel
|
4983073172
|
API: Fix crash with deletion of cart positions with add-ons
|
2022-10-25 12:08:58 +02:00 |
|
Raphael Michel
|
c921ca4e65
|
API: Fix crash when sorting orderpositions by attendee name
|
2022-10-19 15:32:29 +02:00 |
|
Raphael Michel
|
38969747f4
|
API: New implementation for cart creation (#2833)
|
2022-10-10 12:59:38 +02:00 |
|
Raphael Michel
|
60cdfe4029
|
Allow organizer-level exports with separate permission and no event selection
|
2022-10-05 10:36:57 +02:00 |
|
Raphael Michel
|
8fb38d8838
|
API: Add new /device/info endpoint
|
2022-09-21 10:22:41 +02:00 |
|
Raphael Michel
|
62f7bd4fa5
|
Iterate cdb564970 to a fix that actually tackles the root cause
|
2022-09-12 12:57:58 +02:00 |
|
Martin Gross
|
cdb5649709
|
API: Explicitly call order.create_transactions() on Order Position PATCH/updates (PRETIXEU-766)
|
2022-08-26 17:06:08 +02:00 |
|
Michael Stapelberg
|
5a8c567d02
|
API: allow setting password when creating customer (#2758)
Co-authored-by: Raphael Michel <michel@rami.io>
|
2022-08-16 14:40:24 +02:00 |
|
Raphael Michel
|
b06e98ace4
|
API: Add endpoints to trigger data shredders (#2731)
|
2022-07-25 18:34:40 +02:00 |
|
Michael Stapelberg
|
0d407ce36f
|
API: Allow to send activation email when creating customers (#2729)
Co-authored-by: Raphael Michel <michel@rami.io>
|
2022-07-25 12:16:48 +02:00 |
|
Raphael Michel
|
157484b42a
|
Revert accidental commit "Make new functionality optional"
This reverts commit af7d32462873fbbfc3a44a06424bd3c941c3b5f2.
|
2022-07-25 11:53:23 +02:00 |
|
Raphael Michel
|
839585a3a9
|
Make new functionality optional
|
2022-07-25 11:52:32 +02:00 |
|
Raphael Michel
|
9101b5b69d
|
API: Fix high load in pdf_data endpoints if addons are in use
|
2022-07-22 17:43:03 +02:00 |
|
Raphael Michel
|
f6fa9b4b16
|
Fix high query load in pdf_data endpoints
|
2022-07-22 17:12:07 +02:00 |
|
Raphael Michel
|
0d1ebf4e58
|
API: Add RPC-style check-in endpoints to support multi-event scan (#2719)
|
2022-07-19 16:43:03 +02:00 |
|
Raphael Michel
|
32ab7c3d4f
|
API: Consistency with other subevent filters
|
2022-07-14 09:21:56 +02:00 |
|
Raphael Michel
|
8c63659050
|
API: Allow to filter quota list for multiple subevents
|
2022-07-13 16:29:30 +02:00 |
|
Raphael Michel
|
129e831e06
|
Add option to scan add-on based on its parent position's secret (#2705)
|
2022-07-06 10:32:05 +02:00 |
|
Raphael Michel
|
39f7bfe16f
|
[SECURITY] Add untrusted_input flag to ticket redemption API
|
2022-07-05 14:42:58 +02:00 |
|
Raphael Michel
|
9b7088f7fc
|
Reduce number of SQL queries in API order creation
|
2022-06-13 12:05:14 +02:00 |
|
Raphael Michel
|
2e0be8c801
|
Allow to filter subevents by sales channel
|
2022-05-27 18:17:56 +02:00 |
|
Raphael Michel
|
3790d04ed2
|
Add experimental API call to query idempotency logs
|
2022-05-25 13:00:31 +02:00 |
|
Raphael Michel
|
6c7f76fe96
|
Orders API: Allow downloading tickets for pending orders (#2657)
Co-authored-by: Richard Schreiber <wiffbi@gmail.com>
|
2022-05-19 09:58:06 +02:00 |
|
Raphael Michel
|
08590f9d98
|
Explicitly store whether checkins were offline (#2617)
|
2022-05-17 14:32:14 +02:00 |
|
Raphael Michel
|
2fcd6bb3f5
|
API: Support creating cart positions with vouchers (#2635)
|
2022-05-10 12:19:04 +02:00 |
|