Raphael Michel
b8669503fa
Only allow restricting payment countries if invoice address is obligatory
2018-10-31 15:21:26 +01:00
Raphael Michel
c8cc527aee
OrderChangeManager: Do not mark order pending when adjusting price to actual payment
2018-10-31 10:42:44 +01:00
Raphael Michel
df2d8925ed
Prevent some race conditions
2018-10-29 17:27:12 +01:00
Raphael Michel
16983826fb
Allow to store structured invoice addresses
2018-10-24 01:37:18 +02:00
Raphael Michel
6e4750336b
Fix test case for previous commit
2018-10-12 11:44:46 +02:00
Raphael Michel
0dbcfdc5ac
Allow to enable ticket downloads for pending orders
2018-10-03 12:15:43 +02:00
Raphael Michel
f848561d25
Expose log details for admins
2018-10-01 14:13:44 +02:00
Raphael Michel
0369deb72d
Fix permission for access to root event resource
2018-09-27 10:01:57 +02:00
Raphael Michel
63ba393c12
Proper permission handling and testing
2018-09-25 12:29:05 +02:00
Raphael Michel
ec58ab07b6
Add tests for control
2018-09-25 10:28:07 +02:00
Raphael Michel
1ba4047b1b
API-level tests
2018-09-25 10:28:07 +02:00
Raphael Michel
ee951a7448
API: Add subevent list on organizer level
2018-09-24 12:59:44 +02:00
Raphael Michel
e815cce143
Event list API: Add filters
2018-09-24 12:36:12 +02:00
Raphael Michel
06d9c48ed4
Allow to restrict payment methods by invoice address country
2018-09-19 16:10:40 +02:00
Raphael Michel
5b5025c776
Allow to manually revert check-ins on a check-in list
2018-09-11 15:21:22 +02:00
Raphael Michel
e47dd3058b
Adjust tests to error messages
2018-09-11 09:02:08 +02:00
Raphael Michel
0a2cd208b2
Fix invalid tests
2018-09-03 16:55:04 +02:00
Raphael Michel
678a936897
Fix #999 -- Clarify definition of overpaid
2018-09-03 16:30:23 +02:00
Raphael Michel
7c72ca089b
Do not allow to mark an order as unpaid
2018-09-03 15:41:18 +02:00
Raphael Michel
21530f315f
Properly restrict refunds to full payment amount
2018-09-03 15:41:05 +02:00
Raphael Michel
27bb3a948b
Fix descending sorting of subevents
2018-08-31 12:22:31 +02:00
Raphael Michel
d789beddd0
Fix ValueError on change of payment method
...
Fixes Sentry issue PRETIXEU-KX
2018-08-31 11:15:59 +02:00
Lukas Bockstaller
a643abe293
Prevent email enumeration ( #1000 )
...
Here is my attempt to prevent user enumeration.
I've made the following changes:
**Application:**
- replaces success and failure messages in the form with two (with/without redis) information messages
- adds logging for attempted password resets of unknown users
- adds logging for failing emails
**Tests:**
- test_unknown asserts a redirect instead of a ok
- adds test_email_reset_twice_redis to assert the correct logging of a twice reset email
- adds a FakeRedis class similiar to the one implemented in test_metrics.py. I could refactor them into the testutils folder if prefered.
Please excuse the commit mess. I am currently fighting with my tooling.
2018-08-31 10:28:39 +02:00
Raphael Michel
35ddf6790e
Add mark_refunded parameter to refund creation
2018-08-21 15:48:22 +02:00
Raphael Michel
bf9ce68d8b
Fix test for free to paid
2018-08-17 09:18:05 +02:00
Raphael Michel
673a4e6805
Fix locale-dependent test
2018-08-14 18:48:13 +02:00
Raphael Michel
f60a99c357
Tests
2018-08-14 11:31:41 +02:00
Raphael Michel
248b94c296
Approvals
2018-08-14 10:46:55 +02:00
Raphael Michel
a01edecaef
Fix incorrect test
2018-08-13 18:10:43 +02:00
Raphael Michel
779756f1ab
API: Allow to delete order positions
2018-08-13 18:09:10 +02:00
Raphael Michel
5d68a5133e
Add pseudonymization_id filter to API
2018-08-13 08:55:57 +02:00
Raphael Michel
c702814203
Do not use deepcopy on models
2018-08-07 15:45:22 +02:00
Raphael Michel
4dd3952c19
Fix waiting list tests
2018-08-07 11:36:19 +02:00
Raphael Michel
1e26b5c5f1
Add test case for working list priority
2018-08-07 10:56:48 +02:00
Raphael Michel
67897dfcc0
Fix #406 -- Allow moving waiting list entries to the top or bottom
2018-08-07 10:53:07 +02:00
Raphael Michel
47afe01721
Improve waiting list filters
2018-08-07 10:28:37 +02:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
18a378976b
Fix #571 -- Partial payments and refunds
2018-08-06 12:24:36 +02:00
Raphael Michel
0cfcadf5fa
Fix test cases
2018-08-05 12:52:00 +02:00
Raphael Michel
332af5d21b
Fix #815 -- Add configurable minimum/maximum amount for payment methods
2018-06-19 18:00:33 +02:00
Raphael Michel
ff9d480b6e
Orders API: Improve validation errors
2018-06-13 11:08:54 +02:00
Raphael Michel
5d7931fcaf
API: CartPositions ( #948 )
2018-06-11 13:18:37 +02:00
Raphael Michel
e3450baeb3
Fix #549 -- Multiple PDF ticket layouts ( #938 )
...
- [x] Data model
- [x] CRUD
- [x] Editor
- [x] Migration from old settings
- [x] Clone files when copying events
- [x] badges?
- [x] Actual ticket output
- [x] Default layout on event creation
- [x] Link well from ticketing settings
- [x] Tests
- [x] Shipping plugin
- [x] Migration
- [x] Settings
- [x] Create default
- [x] API
2018-06-06 15:27:55 +02:00
Raphael Michel
69d10489b8
Implement OAuth2 provider ( #927 )
...
- [x] Application management
- [x] Link
- [ ] Tests
- [x] Authorize flow
- [x] Tests
- [x] Refresh token handling
- [x] Tests
- [x] Revocation endpoint
- [x] Tests
- [x] Mitigate: https://github.com/jazzband/django-oauth-toolkit/issues/585
- [x] API authenticator / permission driver
- [x] Test
- [x] Enforce organizer restriction
- [x] Tests
- [x] Enforce scope restriction
- [x] Tests
- [x] Show current applications to user
- [x] Revoke
- [x] Tests
- [x] Log new authorizations
- [x] notify user
- [x] Ensure other grant types are not available
- [x] Documentation
- [x] check if revoking access toking, then refreshing gets rid of organizer constraint
- [x] Show logentry foo
2018-06-05 12:58:04 +02:00
Raphael Michel
11ff81f852
Fix 85420602 and add tests
2018-06-01 13:40:08 +02:00
Raphael Michel
42c9e21d04
Refs #654 -- API call to mark order as refunded
2018-06-01 10:38:34 +02:00
Felix Rindt
6fe02f156a
Fix #898 -- Add setting to configure subevent ordering on frontpage ( #906 )
...
Fixes #898 .
2018-05-31 12:28:44 +02:00
Raphael Michel
eb6063cc2d
Add QR codes for pseudonymization ID
2018-05-28 17:02:56 +02:00
Raphael Michel
9d2d8684b6
Fix widget test
2018-05-27 12:03:06 +02:00
Raphael Michel
fa326eba6f
Introduce original price ( #905 )
...
* Introduce original price
* Rebase and styling
* Widget
2018-05-18 22:48:38 +02:00