Commit Graph

327 Commits

Author SHA1 Message Date
Raphael Michel
cda8144ff0 Enforce uniqueness of order codes and ticket secrets (#3988)
* Enforce uniqueness of order codes and ticket secrets

* Fix test cases which created orders with identical codes

---------

Co-authored-by: Mira Weller <weller@rami.io>
2024-04-02 11:07:40 +02:00
Raphael Michel
fa4c29cf23 Check-in: Fix crash on medium scan that is mapped to wrong event (PRETIXEU-9P0) 2024-02-15 14:46:24 +01:00
Raphael Michel
f5e3d4b0bc API: Fix logging of event deletion 2024-02-09 17:27:08 +01:00
Martin Gross
fed5097708 CheckIn: Only run check_rules_qs conditionally on provided boolean 2024-02-05 14:01:42 +01:00
Raphael Michel
b7f0c3cc6c Fix cookie detection 2024-01-25 10:35:26 +01:00
Michael Stapelberg
c5ede32649 API: Prefetch customer in order list view (#3768)
Before this change, each order row needed an additional database query just to
resolve the customer id (integer) to customer identifier (string).

With this change, django does a database JOIN.
2023-12-11 13:02:40 +01:00
Raphael Michel
d6d6b73a38 API: Fix cloning events with meta data (PRETIXEU-9FZ) 2023-12-05 12:57:14 +01:00
Raphael Michel
8a3b313cb6 Check-in: Show more information (#3576)
* Check-in: Show more information

* Add change notes

* Rebase migration

* Add "expand" option to checkinrpc

* REmove accidental file

* Docs fixes

* REbase migration

* Rebase migration

* Fix typo

* REbase migration

* Make web-checkin look more like new android checkin
2023-11-28 14:52:12 +01:00
Raphael Michel
0f709c2275 Device API: Fix RSA encryption crash (PRETIXEU-8Y2) 2023-10-31 10:23:14 +01:00
Raphael Michel
3b64e6046c API: Add endpoints for scheduled exports (#3659)
* API: Add endpoints for scheduled exports

* ADd note to docs
2023-10-27 17:15:53 +02:00
Raphael Michel
4587fed81b API: Allow to filter orders by customer 2023-10-25 13:24:26 +02:00
Raphael Michel
9299ac5813 API: Fix N+1 query in gift card list 2023-10-17 14:55:42 +02:00
Raphael Michel
7545e92373 [SECURITY] Do not allow Pillow to parse EPS files 2023-09-12 11:50:01 +02:00
Raphael Michel
eb04fdf4d2 Check-in rules: New variables (#3521) 2023-09-12 09:43:57 +02:00
Raphael Michel
c842ea597c New locking mechanism (#2408)
Co-authored-by: Richard Schreiber <schreiber@rami.io>
2023-09-11 11:44:50 +02:00
robbi5
231e05f967 API: Add parent event slug to subevent list search (#3567)
Co-authored-by: Raphael Michel <michel@rami.io>
2023-09-06 10:10:04 +02:00
Raphael Michel
b43523ea65 API: Fix order and invoice viewset with staff permissions 2023-09-06 09:38:42 +02:00
Raphael Michel
447370d7b3 API: Fix subevent_before/after on organizer-level order view 2023-09-06 09:38:42 +02:00
Raphael Michel
2e8447486c Improve edge cases in handling of check-in nonces (#3516) 2023-08-30 10:43:24 +02:00
Raphael Michel
8d2224e725 API: Allow organizer-level access of orders and invoices (#3547) 2023-08-28 16:54:42 +02:00
Raphael Michel
f7d4460deb Fix N+1 query issues detected by Sentry 2023-08-26 16:24:03 +02:00
Raphael Michel
721e7549bc Remove forgotten debug statement 2023-08-09 10:34:24 +02:00
Raphael Michel
52023cde09 Reusable Media: Mifare Ultralight AES support (#3335) 2023-07-21 13:45:42 +02:00
Raphael Michel
8e9d0fb723 API: Order position search, add invoice company 2023-07-17 09:37:20 +02:00
robbi5
db7c52ca93 Add OS name and version to stored device information (#3434)
Co-authored-by: Raphael Michel <michel@rami.io>
2023-06-28 09:02:07 +02:00
Raphael Michel
b51ca58820 Add BaseExporter.available_for_user() 2023-06-16 17:35:36 +02:00
Raphael Michel
f8be8296dd Gift cards: Improved support for cross-organizer acceptance (#3311)
Co-authored-by: Martin Gross <martin@pc-coholic.de>
2023-06-15 14:17:40 +02:00
Raphael Michel
002416e435 Add check-in simulator (#3380) 2023-06-13 14:57:24 +02:00
Raphael Michel
635bb94cc4 API: Add date range filters for events and subevents 2023-06-09 15:20:53 +02:00
Richard Schreiber
74e9a4ad2d API: add log_action/webhook for confirmed payments (#3395) 2023-06-09 09:29:32 +02:00
Raphael Michel
bd32b33ba9 Bump Django to 4.1.* (#2989) 2023-06-05 09:56:31 +02:00
Raphael Michel
35350a13d6 Fix #3360 -- Allow to revoke devices before initialized 2023-06-04 18:06:00 +02:00
Phin Wolkwitz
b3298c91c3 Event settings: Extend product metadata (Z#23116647) (#3241)
Co-authored-by: Richard Schreiber <schreiber@rami.io>
Co-authored-by: Raphael Michel <michel@rami.io>
2023-05-26 14:09:41 +02:00
Raphael Michel
02b42bd7ab Check-in: Fix checking in products with add-ons through their medium 2023-05-19 09:28:19 +02:00
Raphael Michel
c0419518c3 GiftCard: Add more information to transactions (#3308) 2023-05-12 09:38:35 +02:00
Raphael Michel
6fac1aeb62 Add new gift card to orderposition relationship (#3291) 2023-05-09 09:54:46 +02:00
Raphael Michel
b0385c8325 API: Allow to find orders using their linked reusable medium (#3258) 2023-04-25 14:53:50 +02:00
Raphael Michel
30a2d853fd Order search: Extend zfill() for invoice numbers beyond 5 digits 2023-04-18 21:45:18 +02:00
Raphael Michel
a3fb10bcb0 API: Fix crash with missing body in some endpoints 2023-04-16 14:10:14 +02:00
Richard Schreiber
63bc6c17c9 Fix isort 2023-04-03 13:43:33 +02:00
Raphael Michel
d0b449ea89 Reusable media (#3131)
Co-authored-by: Martin Gross <gross@rami.io>
2023-04-03 10:45:22 +02:00
Raphael Michel
4c9640561c Increase size of monetary decimal fields 2023-03-16 21:26:37 +01:00
Raphael Michel
ee4081d9c3 API: Allow to filter events by testmode attribute 2023-03-10 16:34:54 +01:00
Raphael Michel
1b02a898a1 Fix TypeError in OAuth authorization 2023-03-07 10:43:07 +01:00
Raphael Michel
62cbed4891 Merge branch 'security-20230306' 2023-03-06 14:36:33 +01:00
Raphael Michel
9a90444cca OAuth: Log authorized organizers 2023-03-06 14:25:59 +01:00
Raphael Michel
926d334b10 [SECURITY] Enforce session validation on oauth authorize endpoint 2023-03-06 11:52:01 +01:00
Raphael Michel
ed1dae5fde API: Fix duplicate results when filtering orders 2023-03-03 14:36:40 +01:00
Raphael Michel
7d4b575150 Ensure total ordering of paginated lists (#3061) 2023-02-24 10:51:51 +01:00
Raphael Michel
72aaf24a40 Fix failing tests after Stripe provider change 2023-02-17 09:58:36 +01:00