Raphael Michel
4b2f25ce8a
Add testmode for gift cards
2019-10-17 18:05:04 +02:00
Raphael Michel
b3e6f44027
Add double-spend safeguard
2019-10-17 16:04:22 +02:00
Raphael Michel
b07d9d167d
Add an API
2019-10-17 16:04:22 +02:00
Raphael Michel
93089d87e3
Add support for reserved seating ( #1228 )
...
* Initial work on seating
* Add seat guids
* Add product_list_top
* CartAdd: Ignore item when a seat is passed
* Cart display
* product_list_top → render_seating_plan
* Render seating plan in voucher redemption
* Fix failing tests
* Add tests for extending cart positions with seats
* Add subevent_forms to docs
* Update schema, migrations
* Dealing with expired orders
* steps to order change
* Change order positions
* Allow to add seats
* tests for ocm
* Fix things after rebase
* Seating plans API
* Add more tests for cart behaviour
* Widget support
* Adjust widget tests
* Re-enable CSP
* Update schema
* Api: position.seat
* Add guid to word list
* API: (sub)event.seating_plan
* Vali fixes
* Fix api
* Fix reference in test
* Fix test for real
2019-06-25 11:00:03 +02:00
Raphael Michel
30f0318de6
API: Add stable and configurable filtering to events and organizers endpoints
2019-06-03 10:19:16 +02:00
Raphael Michel
1ba4047b1b
API-level tests
2018-09-25 10:28:07 +02:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
69d10489b8
Implement OAuth2 provider ( #927 )
...
- [x] Application management
- [x] Link
- [ ] Tests
- [x] Authorize flow
- [x] Tests
- [x] Refresh token handling
- [x] Tests
- [x] Revocation endpoint
- [x] Tests
- [x] Mitigate: https://github.com/jazzband/django-oauth-toolkit/issues/585
- [x] API authenticator / permission driver
- [x] Test
- [x] Enforce organizer restriction
- [x] Tests
- [x] Enforce scope restriction
- [x] Tests
- [x] Show current applications to user
- [x] Revoke
- [x] Tests
- [x] Log new authorizations
- [x] notify user
- [x] Ensure other grant types are not available
- [x] Documentation
- [x] check if revoking access toking, then refreshing gets rid of organizer constraint
- [x] Show logentry foo
2018-06-05 12:58:04 +02:00
Raphael Michel
a284e0c2f7
Add auditable superuser mode ( #824 )
...
* Remove is_superuser everywhere
* Session handling
* List of sessions, relative timeout
* Absolute timeout
* Optionally pseudo-force audit comments
* Fix failing tests
* Add tests
* Add docs
* Rebsae migration
* Typos
* Fix tests
2018-03-28 14:16:58 +02:00
Raphael Michel
b2d4bea1d0
Refs #314 -- Read-only REST API ( #513 )
...
* initial commit
* API auth
* Hierarchical URLs
* Add session auth
* Strong hierarchy
* Add filters
* Add i18n fields, questions
* More viewsets and serializers
* Ticket download
* Add OrderPosition serializer
* View-level permissions
* More tests
* More tests
* Add basic API docs
* Add REST API to docs frontpage
* Tests for order endpoints
* Add invoice tests
* Voucher and waitinglist tests
* Doc draft
* order docs
* Docs on all viewsets
* Disable DRF docs, style sphinx, style browsable API
* Fix tests
* deprecated imports
* Test foo
* Attendee names
* Fix migration problems
* Remove browsable API, plugin integration
* Doc fixes
2017-06-19 11:16:04 +02:00