WIP

package.json

@@ -23,7 +23,7 @@
     "build": "npm run build:control -s && npm run build:widget -s",
     "build:control": "vite build",
     "build:widget": "vite build src/pretix/static/pretixpresale/widget",
-    "lint:eslint": "eslint src/pretix/static/pretixpresale/widget src/pretix/static/pretixcontrol/js/ui/checkinrules src/pretix/plugins/webcheckin",
+    "lint:eslint": "eslint src/pretix/static/pretixpresale/widget src/pretix/static/pretixcontrol/js/ui/checkinrules src/pretix/plugins/webcheckin src/pretix/plugins/wallet",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {

pyproject.toml

@@ -40,7 +40,7 @@ dependencies = [
   "Django[argon2]==5.2.*",
   "django-bootstrap3==26.1",
   "django-compressor==4.6.0",
-  "django-countries==9.0.*",
+  "django-countries==8.2.*",
   "django-filter==25.1",
   "django-formset-js-improved==0.5.0.5",
   "django-formtools==2.6.1",

setup.cfg

@@ -32,6 +32,7 @@ ignore =
     src/tests/plugins/stripe/*
     src/tests/plugins/sendmail/*
     src/tests/plugins/ticketoutputpdf/*
+    src/tests/plugins/wallet/*
     .*
     CODE_OF_CONDUCT.md
     CONTRIBUTING.md

src/pretix/_base_settings.py

@@ -66,6 +66,7 @@ INSTALLED_APPS = [
     'pretix.plugins.returnurl',
     'pretix.plugins.autocheckin',
     'pretix.plugins.webcheckin',
+    'pretix.plugins.wallet',
     'django_countries',
     'oauth2_provider',
     'phonenumber_field',

src/pretix/base/services/tickets.py

@@ -38,6 +38,7 @@ from pretix.base.settings import PERSON_NAME_SCHEMES
 from pretix.base.signals import register_ticket_outputs
 from pretix.celery_app import app
 from pretix.helpers.database import rolledback_transaction
+from django.db import transaction
 
 logger = logging.getLogger(__name__)
 
@@ -90,36 +91,43 @@ def generate(model: str, pk: int, provider: str):
 class DummyRollbackException(Exception):
     pass
 
+def get_preview_position(event):
+    connection = transaction.get_connection()
+    if not connection.in_atomic_block:
+        raise RuntimeError("get_preview_position needs to be called in a rolledback_transaction")
+    
+    item = event.items.create(name=_("Sample product"), default_price=Decimal('42.23'),
+                                  description=_("Sample product description"))
+    item2 = event.items.create(name=_("Sample workshop"), default_price=Decimal('23.40'))
 
-def preview(event: int, provider: str):
+    from pretix.base.models import Order
+    order = event.orders.create(status=Order.STATUS_PENDING, datetime=now(),
+                                email='sample@pretix.eu',
+                                locale=event.settings.locale,
+                                sales_channel=event.organizer.sales_channels.get(identifier="web"),
+                                expires=now(), code="PREVIEW1234", total=119)
+
+    scheme = PERSON_NAME_SCHEMES[event.settings.name_scheme]
+    sample = {k: str(v) for k, v in scheme['sample'].items()}
+    position = order.positions.create(item=item, attendee_name_parts=sample, price=item.default_price)
+    s = event.subevents.first()
+    order.positions.create(item=item2, attendee_name_parts=sample, price=item.default_price, addon_to=position, subevent=s)
+    order.positions.create(item=item2, attendee_name_parts=sample, price=item.default_price, addon_to=position, subevent=s)
+
+    InvoiceAddress.objects.create(order=order, name_parts=sample, company=_("Sample company"))
+    return position
+
+def preview(event: int, provider: str, provider_arguments: dict = {}):
     event = Event.objects.get(id=event)
 
     with rolledback_transaction(), language(event.settings.locale, event.settings.region):
-        item = event.items.create(name=_("Sample product"), default_price=Decimal('42.23'),
-                                  description=_("Sample product description"))
-        item2 = event.items.create(name=_("Sample workshop"), default_price=Decimal('23.40'))
-
-        from pretix.base.models import Order
-        order = event.orders.create(status=Order.STATUS_PENDING, datetime=now(),
-                                    email='sample@pretix.eu',
-                                    locale=event.settings.locale,
-                                    sales_channel=event.organizer.sales_channels.get(identifier="web"),
-                                    expires=now(), code="PREVIEW1234", total=119)
-
-        scheme = PERSON_NAME_SCHEMES[event.settings.name_scheme]
-        sample = {k: str(v) for k, v in scheme['sample'].items()}
-        p = order.positions.create(item=item, attendee_name_parts=sample, price=item.default_price)
-        s = event.subevents.first()
-        order.positions.create(item=item2, attendee_name_parts=sample, price=item.default_price, addon_to=p, subevent=s)
-        order.positions.create(item=item2, attendee_name_parts=sample, price=item.default_price, addon_to=p, subevent=s)
-
-        InvoiceAddress.objects.create(order=order, name_parts=sample, company=_("Sample company"))
+        p = get_preview_position(event)
 
         responses = register_ticket_outputs.send(event)
         for receiver, response in responses:
             prov = response(event)
             if prov.identifier == provider:
-                return prov.generate(p)
+                return prov.generate(p, **provider_arguments)
 
 
 def get_tickets_for_order(order, base_position=None):

src/pretix/base/templates/error.html

@@ -20,6 +20,6 @@
 <div class="container">
     {% block content %}{% endblock %}
 </div>
-<script src="{% static "pretixbase/js/errors.js" %}"></script>
 </body>
+<script src="{% static "pretixbase/js/errors.js" %}"></script>
 </html>

src/pretix/base/ticketoutput.py

@@ -114,7 +114,7 @@ class BaseTicketOutput:
         If you override this method, make sure that positions that are addons (i.e. ``addon_to``
         is set) are only outputted if the event setting ``ticket_download_addons`` is active.
         Do the same for positions that are non-admission without ``ticket_download_nonadm`` active.
-        If you want, you can just iterate over ``order.positions_with_tickets`` which applies the
+        If you want, you can just iterate over ``self.get_tickets_to_print`` which applies the
         appropriate filters for you.
         """
         with tempfile.TemporaryDirectory() as d:
@@ -192,6 +192,17 @@ class BaseTicketOutput:
         """
         pass
 
+    @property
+    def is_meta(self) -> bool:
+        """
+        Returns whether or whether not this output is a "meta" output that only works as a settings holder
+        and should never be used directly. This is a trick to implement outputs with multiple formats but
+        unified settings.
+
+        .. note:: You should set is_enabled to False for meta outputs.
+        """
+        return False
+
     @property
     def download_button_text(self) -> str:
         """

src/pretix/control/forms/event.py

@@ -945,7 +945,7 @@ class TaxSettingsForm(EventSettingsValidationMixin, SettingsForm):
 class ProviderForm(SettingsForm):
     """
     This is a SettingsForm, but if fields are set to required=True, validation
-    errors are only raised if the payment method is enabled.
+    errors are only raised if the provider is enabled.
     """
 
     def __init__(self, *args, **kwargs):

src/pretix/control/views/event.py

@@ -965,7 +965,7 @@ class TicketSettingsPreview(EventPermissionRequiredMixin, View):
         responses = register_ticket_outputs.send(self.request.event)
         for receiver, response in responses:
             provider = response(self.request.event)
-            if provider.identifier == self.kwargs.get('output'):
+            if provider.identifier == self.kwargs.get('output') and not provider.is_meta:
                 return provider
 
     def get(self, request, *args, **kwargs):
@@ -1068,6 +1068,11 @@ class TicketSettings(EventSettingsViewMixin, EventPermissionRequiredMixin, FormV
         responses = register_ticket_outputs.send(self.request.event)
         for receiver, response in responses:
             provider = response(self.request.event)
+            provider_settings_fields = provider.settings_form_fields
+            provider_settings_content = provider.settings_content_render(self.request)
+            if not provider_settings_fields and not provider_settings_content:
+                continue
+
             provider.form = ProviderForm(
                 obj=self.request.event,
                 settingspref='ticketoutput_%s_' % provider.identifier,
@@ -1077,17 +1082,17 @@ class TicketSettings(EventSettingsViewMixin, EventPermissionRequiredMixin, FormV
             provider.form.fields = OrderedDict(
                 [
                     ('ticketoutput_%s_%s' % (provider.identifier, k), v)
-                    for k, v in provider.settings_form_fields.items()
+                    for k, v in provider_settings_fields.items()
                 ]
             )
-            provider.settings_content = provider.settings_content_render(self.request)
+            provider.settings_content = provider_settings_content
             provider.form.prepare_fields()
 
             provider.evaluated_preview_allowed = True
             if not provider.preview_allowed:
                 provider.evaluated_preview_allowed = False
             else:
-                for k, v in provider.settings_form_fields.items():
+                for k, v in provider_settings_fields.items():
                     if v.required and not self.request.event.settings.get('ticketoutput_%s_%s' % (provider.identifier, k)):
                         provider.evaluated_preview_allowed = False
                         break

src/pretix/control/views/orders.py

@@ -567,6 +567,8 @@ class OrderDetail(OrderView):
         responses = register_ticket_outputs.send(self.request.event)
         for receiver, response in responses:
             provider = response(self.request.event)
+            if provider.is_meta:
+                continue
             buttons.append({
                 'text': provider.download_button_text or 'Ticket',
                 'icon': provider.download_button_icon or 'fa-download',

src/pretix/helpers/models.py

@@ -20,10 +20,12 @@
 # <https://www.gnu.org/licenses/>.
 #
 import copy
+import typing
 
 from django.core.files import File
 from django.db import models
 
+T = typing.TypeVar('T', bound=models.Model)
 
 class Thumbnail(models.Model):
     source = models.CharField(max_length=255)
@@ -45,6 +47,13 @@ def modelcopy(obj: models.Model, **kwargs):
             setattr(n, f.name, copy.deepcopy(val))
     return n
 
+def modelclone(obj: T, **kwargs) -> T:
+    new = copy.copy(obj)
+    new.pk = None
+    new._state.adding = True
+    for k,v in kwargs.items():
+        setattr(new, k, v)
+    return new
 
 # django 5 contains this in django.utils.choices.flatten_choices
 def flatten_choices(choices):

src/pretix/plugins/wallet/__init__.py

@@ -0,0 +1,21 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#

src/pretix/plugins/wallet/api.py

@@ -0,0 +1,87 @@
+from rest_framework import viewsets
+from django.db import transaction
+from .styles import PassLayout, AVAILABLE_STYLES_DICT, AVAILABLE_PLATFORMS
+from .models import WalletLayout, WalletPlatformLayout
+from pretix.api.serializers.i18n import I18nAwareModelSerializer
+from django.core.exceptions import ValidationError
+from django.utils.translation import gettext_lazy as _
+from .views import get_layout_variables
+from rest_framework import serializers
+
+
+class WalletPlatformLayoutSerializer(I18nAwareModelSerializer):
+    platform = serializers.ChoiceField(choices=[p.identifier for p in AVAILABLE_PLATFORMS])
+    style = serializers.CharField(allow_null=True, required=False)
+
+    class Meta:
+        model = WalletPlatformLayout
+        fields = ("platform", "style", "layout")
+
+    def validate_layout(self, value):
+        if not isinstance(value, dict):
+            raise ValidationError(_("Layout must be a dict"))
+        return value
+
+    def validate(self, data):
+        platform = data.get('platform')
+        style = data.get('style')
+        layout = data.get('layout')
+        if platform and style and layout:
+            platform_styles = AVAILABLE_STYLES_DICT[platform]
+
+            if data["style"] not in platform_styles:
+                raise ValidationError(_("Invalid style"))
+            style = platform_styles[data["style"]]
+
+            layout = PassLayout(style=style, layout=data["layout"])
+            context = {"placeholders": get_layout_variables(self.context['event'])}
+            layout.validate(context=context)
+        return data
+
+
+class WalletLayoutSerializer(I18nAwareModelSerializer):
+    platform_layouts = WalletPlatformLayoutSerializer(many=True)
+
+    class Meta:
+        model = WalletLayout
+        fields = ("id", "name", "platform_layouts")
+        read_only_fields = ("id",)
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+
+    def save(self, *args, **kwargs):
+        super().save(*args, **kwargs, event=self.context["event"])
+
+    def update(self, instance, validated_data):
+        platform_layouts = validated_data.pop('platform_layouts')
+        for layout in platform_layouts:
+            if layout['style']:
+                instance.platform_layouts.update_or_create(platform=layout['platform'], defaults=layout)
+        instance.platform_layouts.exclude(platform__in={layout['platform'] for layout in platform_layouts if layout['style'] is not None}).delete()
+        return super().update(instance, validated_data)
+
+
+class WalletLayoutViewSet(viewsets.ModelViewSet):
+    model = WalletLayout
+    queryset = WalletLayout.objects.none()
+    serializer_class = WalletLayoutSerializer
+    permission = "event.settings.general:write"
+
+    def get_queryset(self):
+        return self.request.event.wallet_layouts.all()
+
+    def get_serializer_context(self):
+        ctx = super().get_serializer_context()
+        ctx["event"] = self.request.event
+        return ctx
+
+    @transaction.atomic()
+    def perform_update(self, serializer):
+        super().perform_update(serializer)
+        serializer.instance.log_action(
+            action="pretix.plugins.wallet.layout.changed",
+            user=self.request.user,
+            auth=self.request.auth,
+            data=self.request.data,
+        )

src/pretix/plugins/wallet/apps.py

@@ -0,0 +1,41 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+from django.apps import AppConfig
+from django.utils.translation import gettext_lazy as _
+
+from pretix import __version__ as version
+
+
+class WalletApp(AppConfig):
+    name = 'pretix.plugins.wallet'
+    verbose_name = _("wallet")
+
+    class PretixPluginMeta:
+        name = _("wallet")
+        author = _("the pretix team")
+        version = version
+        category = 'FORMAT'
+        description = _("Issue wallet passes for tickets (e.g. apple wallet, google wallet)")
+
+    def ready(self):
+        from . import signals  # NOQA
+

src/pretix/plugins/wallet/forms.py

@@ -0,0 +1,101 @@
+import logging
+import re
+import subprocess
+import tempfile
+from django import forms
+from django.conf import settings
+from django.core.exceptions import ValidationError
+from django.core.files.uploadedfile import SimpleUploadedFile, UploadedFile
+from django.utils.translation import gettext_lazy as _
+from pretix.control.forms import ClearableBasenameFileInput
+from django.core.files import File
+logger = logging.getLogger(__name__)
+
+
+def validate_rsa_privkey(value: File):
+    value = value.read().strip()
+    if isinstance(value, bytes):
+        value = value.decode()
+    if not value:
+        return
+    if not re.match(r"^-----BEGIN( (RSA |ENCRYPTED )?PRIVATE KEY-----).*-----END\1$", value, re.DOTALL):
+        raise ValidationError(
+            _(
+                "This does not look like an RSA private key in PEM format (it misses the correct begin or end signifiers)"
+            ),
+        )
+
+
+class CertificateFileField(forms.FileField):
+    widget = ClearableBasenameFileInput
+
+    def clean(self, value, *args, **kwargs):
+        value = super().clean(value, *args, **kwargs)
+        if isinstance(value, UploadedFile):
+            value.open("rb")
+            value.seek(0)
+            content = value.read()
+            if (
+                content.startswith(b"-----BEGIN CERTIFICATE-----")
+                and b"-----BEGIN CERTIFICATE-----" in content
+            ):
+                return SimpleUploadedFile("cert.pem", content, "text/plain")
+
+            openssl_cmd = [
+                "openssl",
+                "x509",
+                "-inform",
+                "DER",
+                "-outform",
+                "PEM",
+            ]
+            process = subprocess.Popen(
+                openssl_cmd,
+                stderr=subprocess.PIPE,
+                stdout=subprocess.PIPE,
+                stdin=subprocess.PIPE,
+            )
+            process.stdin.write(content)
+            pem, error = process.communicate()
+            if process.returncode != 0:
+                logger.info("Trying to convert a DER to PEM failed: {}".format(error))
+                raise ValidationError(
+                    _(
+                        "This does not look like a X509 certificate in either PEM or DER format"
+                    ),
+                )
+
+            return SimpleUploadedFile("cert.pem", pem, "text/plain")
+        return value
+
+
+class PNGImageField(forms.FileField):
+    widget = ClearableBasenameFileInput
+
+    def clean(self, value, *args, **kwargs):
+        value = super().clean(value, *args, **kwargs)
+        if isinstance(value, UploadedFile):
+            try:
+                from PIL import Image
+            except ImportError:
+                return value
+
+            value.open("rb")
+            value.seek(0)
+            try:
+                with (
+                    Image.open(value, formats=settings.PILLOW_FORMATS_IMAGE) as im,
+                    tempfile.NamedTemporaryFile("rb", suffix=".png") as tmpfile,
+                ):
+                    im.save(tmpfile.name)
+                    tmpfile.seek(0)
+                    return SimpleUploadedFile(
+                        "picture.png", tmpfile.read(), "image png"
+                    )
+            except IOError:
+                logger.exception("Could not convert image to PNG.")
+                raise ValidationError(
+                    _("The file you uploaded could not be converted to PNG format.")
+                )
+
+        return value

src/pretix/plugins/wallet/migrations/0001_initial.py

@@ -0,0 +1,98 @@
+# Generated by Django 5.2.13 on 2026-05-19 15:39
+
+import django.db.models.deletion
+import pretix.base.models.base
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ("pretixbase", "0297_outgoingmail"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="WalletLayout",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False
+                    ),
+                ),
+                ("name", models.CharField(max_length=190)),
+                (
+                    "event",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="wallet_layouts",
+                        to="pretixbase.event",
+                    ),
+                ),
+            ],
+            options={
+                "abstract": False,
+            },
+            bases=(models.Model, pretix.base.models.base.LoggingMixin),
+        ),
+        migrations.CreateModel(
+            name="WalletLayoutItem",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False
+                    ),
+                ),
+                (
+                    "item",
+                    models.ForeignKey(
+                        null=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="walletlayout_assignments",
+                        to="pretixbase.item",
+                    ),
+                ),
+                (
+                    "layout",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="item_assignments",
+                        to="wallet.walletlayout",
+                    ),
+                ),
+            ],
+            options={
+                "unique_together": {("item", "layout")},
+            },
+        ),
+        migrations.CreateModel(
+            name="WalletPlatformLayout",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False
+                    ),
+                ),
+                ("platform", models.CharField(max_length=10)),
+                ("style", models.CharField(max_length=255)),
+                ("layout", models.JSONField(default=dict)),
+                (
+                    "parent",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="platform_layouts",
+                        to="wallet.walletlayout",
+                    ),
+                ),
+            ],
+            options={
+                "unique_together": {("parent", "platform")},
+            },
+            bases=(models.Model, pretix.base.models.base.LoggingMixin),
+        ),
+    ]

src/pretix/plugins/wallet/migrations/0002_alter_walletlayoutitem_unique_together_and_more.py

@@ -0,0 +1,41 @@
+# Generated by Django 5.2.13 on 2026-06-09 18:04
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("wallet", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.AlterUniqueTogether(
+            name="walletlayoutitem",
+            unique_together=set(),
+        ),
+        migrations.AddField(
+            model_name="walletlayout",
+            name="default",
+            field=models.BooleanField(default=False),
+        ),
+        migrations.AlterField(
+            model_name="walletlayoutitem",
+            name="item",
+            field=models.OneToOneField(
+                null=True,
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="walletlayout",
+                to="pretixbase.item",
+            ),
+        ),
+        migrations.AddConstraint(
+            model_name="walletlayout",
+            constraint=models.UniqueConstraint(
+                models.F("event"),
+                condition=models.Q(("default", True)),
+                name="one_default_wallet_per_event",
+            ),
+        ),
+    ]

src/pretix/plugins/wallet/models.py

@@ -0,0 +1,81 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+from django.db import models
+from django.db.models import constraints, Q
+from django.utils.translation import gettext_lazy as _
+
+from pretix.base.models import LoggedModel
+from django_scopes import ScopedManager
+from django.core.exceptions import ValidationError
+
+from pretix.plugins.wallet.styles import get_style
+from pretix.plugins.wallet.styles.base import PassLayout
+
+
+class WalletLayout(LoggedModel):
+    event = models.ForeignKey(
+        'pretixbase.Event',
+        on_delete=models.CASCADE,
+        related_name='wallet_layouts'
+    )
+    name = models.CharField(
+        max_length=190,
+        verbose_name=_('Name')
+    )
+    default = models.BooleanField(
+        verbose_name=_('Default'),
+        default=False,
+    )
+
+    objects = ScopedManager(organizer='event__organizer')
+
+    class Meta:
+        constraints = [
+            constraints.UniqueConstraint("event", condition=Q(default=True), name="one_default_wallet_per_event")
+        ]
+
+
+class WalletPlatformLayout(LoggedModel):
+    parent = models.ForeignKey(WalletLayout, on_delete=models.CASCADE, related_name="platform_layouts")
+
+    platform = models.CharField(max_length=10)
+    style = models.CharField(max_length=255)
+    layout = models.JSONField(default=dict)
+
+    objects = ScopedManager(organizer='parent__event__organizer')
+
+    class Meta:
+        unique_together = (('parent', 'platform'),)
+
+    @property
+    def pass_layout(self):
+        style = get_style(self.platform, self.style)
+        return PassLayout(style=style, layout=self.layout)
+
+class WalletLayoutItem(models.Model):
+    item = models.OneToOneField('pretixbase.Item', null=True, blank=True, related_name='walletlayout',
+                             on_delete=models.CASCADE)
+    layout = models.ForeignKey(WalletLayout, on_delete=models.CASCADE, related_name='item_assignments')
+
+    def clean(self):
+        if self.item.event != self.layout.event:
+            raise ValidationError("cannot bind layout to item of different event")

src/pretix/plugins/wallet/signals.py

@@ -0,0 +1,37 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+
+from pretix.base.signals import register_ticket_outputs, register_global_settings
+from .ticketoutput import OUTPUTS
+
+def connect_signals():
+    for output in OUTPUTS:
+        # DIY functools.partial to make get_defining_app happy
+        def get_register_func(o):
+            def register(sender, **kwargs):
+                return o
+            return register      
+        register_ticket_outputs.connect(get_register_func(output), dispatch_uid=f"wallet_output_{output.identifier}")
+        if hasattr(output, "get_global_settings"):
+            register_global_settings.connect(output.get_global_settings, dispatch_uid=f"wallet_global_settings_{output.identifier}")
+
+connect_signals()

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/app.vue

@@ -0,0 +1,148 @@
+<script setup lang="ts">
+import { computed, ref, watchEffect } from "vue";
+import StyleSettings from "./style-settings.vue";
+import Select from "./input/select.vue";
+import Input from "./input/input.vue";
+
+const gettext = (window as any).gettext;
+
+const isLoading = ref<boolean>(true);
+const wallet_layout = ref<Layout | null>(null);
+
+const PLATFORMS: Platforms = JSON.parse(
+    document.querySelector("#platforms")?.textContent ?? "{}",
+);
+const VARIABLES: VariableConfig = JSON.parse(
+    document.querySelector("#variables")?.textContent ?? "{}",
+);
+const LOCALES: Record<string, string> = JSON.parse(
+    document.querySelector("#locales")?.textContent ?? "{}",
+);
+const CSRF_TOKEN =
+    document.querySelector<HTMLInputElement>("input[name=csrfmiddlewaretoken]")
+        ?.value ?? "";
+
+const props = defineProps<{
+    layoutId: string;
+}>();
+
+watchEffect(() => {
+    // TODO: error handling / proper api client
+    isLoading.value = true;
+    fetch(
+        `/api/v1/organizers/demo/events/wallet/walletlayouts/${props.layoutId}/`,
+    )
+        .then((x) => x.json())
+        .then((x) => {
+            wallet_layout.value = x;
+            isLoading.value = false;
+        });
+});
+
+function saveLayout(e: SubmitEvent) {
+    e.preventDefault();
+    isLoading.value = true;
+    // TODO: error handling / proper api client
+    fetch(
+        `/api/v1/organizers/demo/events/wallet/walletlayouts/${props.layoutId}/`,
+        {
+            method: "PUT",
+            headers: {
+                "content-type": "application/json",
+                "X-CSRFToken": CSRF_TOKEN,
+            },
+            body: JSON.stringify(wallet_layout.value),
+        },
+    )
+        .then((x) => x.json())
+        .catch((x) => alert(x))
+        .then((x) => {
+            wallet_layout.value = x;
+            isLoading.value = false;
+        });
+}
+
+function openForm(url: string, data: Record<string, string>) {
+
+    let form = document.createElement("form");
+    form.target = "_blank";
+    form.method = "POST";
+    form.action = url;
+    form.style.display = "none";
+
+    for (var key in data) {
+       var input = document.createElement("input");
+       input.type = "hidden";
+       input.name = key;
+       input.value = data[key];
+       form.appendChild(input);
+    }
+    document.body.appendChild(form);
+    form.submit();
+    document.body.removeChild(form);
+}
+
+
+const currentPlatform = ref(PLATFORMS[0].identifier);
+const currentLayout = computed(() => ({}));
+const platformStyles = computed(() => {
+    for (const platform of PLATFORMS) {
+        if (platform.identifier === currentPlatform.value) {
+            return platform.styles
+        }
+    }
+});
+const platformLayout = computed(() => {
+    for (const layout of wallet_layout.value.platform_layouts) {
+        if (layout.platform === currentPlatform.value) {
+            return layout
+        }
+    }
+    const newLayout = {platform: currentPlatform, style: null, layout: {}};
+    wallet_layout.value.platform_layouts.push(newLayout);
+    return newLayout
+});
+const platformChoices = computed(() => {
+    return [[null, "Do not generate pass"], ...Object.values(platformStyles.value).map(x => [x.identifier, x.name])]
+});
+
+function openPreview(e: SubmitEvent) {
+    e.preventDefault();
+    openForm("../../preview/", {"csrfmiddlewaretoken": CSRF_TOKEN, "platform": currentPlatform.value, "style": platformLayout.value.style, "layout": JSON.stringify(platformLayout.value.layout)})
+}
+</script>
+
+<template lang="pug">
+    // TODO: add :key for all `v-for`s
+    // TODO: i18n textfields
+    // TODO: proper spinner
+    template(v-if="isLoading") {{ gettext("Loading...") }}
+    form(v-else @submit="saveLayout")
+        .form-group
+            Input(label="Name" v-model="wallet_layout.name")
+        nav
+            ul.nav.nav-tabs
+                li(v-for="platform in PLATFORMS" :class="{'active': currentPlatform === platform.identifier}")
+                    a(role="tab" @click="currentPlatform = platform.identifier") {{ platform.name }}
+        .tabbed-form.tab-content
+            .tab-pane.active.row
+                .col-md-8
+                    Select.form-group(label="Style" v-model="platformLayout.style" :choices="platformChoices")
+
+                    StyleSettings(v-if="platformLayout.style" v-model="platformLayout.layout" :style="platformStyles[platformLayout.style]" :variables="VARIABLES" :locales="LOCALES")
+                .col-md-4
+                    .panel.panel-default
+                        .panel-heading Preview
+                        .panel-body
+                            // TODO: Preview
+                            pre
+                                code {{ platformLayout }}
+                            pre(v-if="wallet_layout.style")
+                                code {{ platformStyles[wallet_layout.style] }}
+                            pre
+                                code {{ wallet_layout }}
+        .form-group.submit-group
+            button.btn.btn-lg.btn-default(type="button" @click="openPreview") Preview
+            button.btn.btn-primary.btn-save(type="submit") Submit
+
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/input/i18ninput.vue

@@ -0,0 +1,25 @@
+<script setup lang="ts">
+import { watchEffect } from 'vue'
+
+defineOptions({
+  inheritAttrs: false
+})
+
+const props = defineProps<{
+    errors?: string[],
+    locales: Record<string, string>
+}>();
+
+const modelValue = defineModel<Record<string, string> | string>();
+watchEffect(() => {
+    if (typeof modelValue.value === "string") {
+        const oldVal = modelValue.value;
+        modelValue.value = Object.fromEntries(Object.keys(props.locales).map((x): [string, string] => [x, oldVal]))
+    }
+})
+</script>
+
+<template lang="pug">
+    input.form-control(v-for="(human_readable, locale) in locales" v-model="modelValue[locale]" v-bind="$attrs" :lang="locale" :title="human_readable" :placeholder="human_readable")
+    .help-block(v-if="props.errors" v-for="error in props.errors") {{ error }}
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/input/input.vue

@@ -0,0 +1,20 @@
+<script setup lang="ts">
+import { useId } from 'vue'
+
+defineOptions({
+  inheritAttrs: false
+})
+
+const props = defineProps<{
+	label?: string,
+    errors?: string[],
+}>()
+const modelValue = defineModel<string|null>();
+const id = useId()
+</script>
+
+<template lang="pug">
+    label.control-label(:for="id", v-if="props.label") {{ props.label }}
+    input.form-control(:id="id" v-model="modelValue" v-bind="$attrs")
+    .help-block(v-if="props.errors" v-for="error in props.errors") {{ error }}
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/input/select.vue

@@ -0,0 +1,32 @@
+<script setup lang="ts">
+import { useId, watchEffect } from 'vue'
+
+defineOptions({
+  inheritAttrs: false
+})
+
+const props = defineProps<{
+	label?: string
+	choices: Array<[string, string]>
+    errors?: string[],
+    class: string
+}>()
+const modelValue = defineModel<string|null>();
+const id = useId()
+
+watchEffect(() => {
+    if (props.choices.length === 1) {
+        modelValue.value = props.choices[0][0]
+    } else if (props.choices.length < 1) {
+        modelValue.value = null
+    }
+})
+</script>
+
+<template lang="pug">
+    template(v-if="choices.length >= 1" :class="props.class")
+        label.control-label(v-if="props.label" :for="id") {{ props.label }}
+        select.form-control(:id="id" v-model="modelValue" v-bind="$attrs" required)
+            option(v-for="choice in props.choices" :key="choice[0]" :value="choice[0]") {{ choice[1] }}
+        .help-block(v-if="props.errors" v-for="error in props.errors") {{ error }}
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/placeholder-field-settings.vue

@@ -0,0 +1,80 @@
+<script setup lang="ts">
+import { computed, reactive, watchEffect } from "vue";
+import Select from "./input/select.vue";
+import Input from "./input/input.vue";
+import I18nInput from "./input/i18ninput.vue";
+import TextContent from "./text-content.vue";
+
+const gettext = (window as any).gettext;
+
+const props = defineProps<{
+	fieldgroup: PlaceholderFieldGroupDefinition;
+	overflows: FieldGroupDefinition[];
+	variables: Variables;
+    locales: Record<string, string>;
+}>();
+const fieldConfig = defineModel<PlaceholderFieldGroupConfig>({ required: true });
+
+const overflowOptions = computed((): Array<[string | null, string]> => {
+	if (props.overflows.length) {
+		return [
+			...props.overflows.map((x): [string, string] => [x.identifier, x.name]),
+			[null, "Do not overflow"],
+		];
+	} else {
+		return [];
+	}
+});
+
+function addVariable() {
+	fieldConfig.value.entries.push({ type: "placeholder", label: "" });
+}
+
+watchEffect(() => {
+    if (!fieldConfig.value) {
+        fieldConfig.value = {overflow: null, entries: JSON.parse(JSON.stringify(props.fieldgroup.default_entries))};
+    }
+    if (fieldConfig.value && !fieldConfig.value.entries) {
+        fieldConfig.value.entries = JSON.parse(JSON.stringify(props.fieldgroup.default_entries))
+    }
+});
+</script>
+
+<template lang="pug">
+    .panel.panel-default
+        .panel-heading
+            h3.panel-title {{ fieldgroup.name }}
+        .panel-body(v-if="fieldConfig")
+            .form-group()
+                span.text-muted(v-if="fieldgroup.description") {{ fieldgroup.description }}
+                h4 {{ gettext("Content") }}
+                table.table.table-hover
+                    thead
+                        tr
+                            th.col-md-5(v-if="fieldgroup.labels") {{ gettext('Label') }}
+                            th(:class="'col-md-' + (fieldgroup.labels ? '6' : '11')") {{ gettext('Content') }}
+                            th.col-xs-1
+                    tbody
+                        tr(v-for="n,i in fieldConfig.entries.length" :key="i")
+                            td(v-if="fieldgroup.labels")
+                                .i18n-form-group
+                                    I18nInput(v-model="fieldConfig.entries[n-1].label" :locales="locales")
+                            td
+                                TextContent(v-if='fieldgroup.content_type == "text"'
+                                            v-model="fieldConfig.entries[n-1]"
+                                            :variables="props.variables"
+                                            :locales="locales")
+                                Select(v-else-if='fieldgroup.content_type == "image"'
+                                        v-model="fieldConfig.entries[n-1].content"
+                                        :choices="Object.entries(props.variables).map(([k,v]) => [k, v.label])"
+                                    )
+                            td.text-right
+                                button.btn.btn-danger.form-control-static(type="button" @click="fieldConfig.entries.splice(n-1, 1)")
+                                    i.fa.fa-trash
+                                    span.sr-only {{ gettext('Delete')}}
+
+                button.btn.btn-default(type="button" @click="addVariable")
+                    i.fa.fa-plus
+                    |  {{ gettext("Add field") }}
+            Select(:label="gettext('Overflow to …')" :choices="overflowOptions" v-model="fieldConfig.overflow")
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/predefined-field-settings.vue

@@ -0,0 +1,18 @@
+<script setup lang="ts">
+const gettext = (window as any).gettext;
+
+const props = defineProps<{
+	fieldgroup: FieldGroupDefinition;
+}>();
+const fieldConfig = defineModel<PredefinedFieldGroupConfig>({ required: true });
+
+</script>
+
+<template lang="pug">
+    .panel.panel-default
+        .panel-heading
+            h3.panel-title {{ fieldgroup.name }}
+        .panel-body
+            .form-group
+                span.text-muted These fields appear somewhere and are visible too.
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/style-settings.vue

@@ -0,0 +1,41 @@
+<script setup lang="ts">
+import { computed, watchEffect } from "vue";
+import PlaceholderFieldSettings from "./placeholder-field-settings.vue";
+import PredefinedFieldSettings from "./predefined-field-settings.vue";
+
+const gettext = (window as any).gettext;
+
+const props = defineProps<{
+    variables: VariableConfig
+    style?: Style;
+    locales: Record<string, string>;
+}>();
+
+const layout = defineModel<LayoutData>();
+
+watchEffect(() => {
+    if (layout.value === undefined) {
+        return
+    }
+    if (layout.value.fieldgroups === undefined) {
+        layout.value.fieldgroups = {};
+    }
+});
+</script>
+
+<template lang="pug">
+    h2.h3 {{ gettext("Field Groups") }}
+    template(v-if="props.style && layout.fieldgroups"
+             v-for="(fieldgroup, fieldgroupId) in props.style.fieldgroups")
+        PlaceholderFieldSettings(
+            v-if="fieldgroup.type == 'placeholder'"
+            v-model="layout.fieldgroups[fieldgroup.identifier]"
+            :fieldgroup="fieldgroup"
+            :overflows="props.style.fieldgroups.slice(fieldgroupId + 1).filter(x => x.type == 'placeholder' && x.content_type === fieldgroup.content_type)"
+            :variables="variables[fieldgroup.content_type]"
+            :locales="locales"
+        )
+        PredefinedFieldSettings(v-else-if="fieldgroup.type == 'predefined'"
+                    v-model="layout.fieldgroups[fieldgroup.identifier]"
+                    :fieldgroup="fieldgroup")
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/components/text-content.vue

@@ -0,0 +1,65 @@
+<script setup lang="ts">
+import { computed, reactive } from 'vue'
+import Select from './input/select.vue'
+import I18nInput from './input/i18ninput.vue'
+
+const gettext = (window as any).gettext
+
+const props = defineProps<{
+	variables: Variables
+    locales: Record<string, string>;
+}>()
+const entry = defineModel<FieldEntry>({ required: true })
+
+const selectChoices = computed(() =>{
+    const choices = Object.entries(props.variables).map(([k,v]): [string, string] => [k, v.label])
+    choices.push(["other", gettext("Other…")])
+    return choices
+});
+
+const selection = computed({
+    get() {
+        if (entry.value.type === 'placeholder') {
+            return entry.value.content
+        } else if (entry.value.type === 'custom') {
+            return "other"
+        } else {
+            throw new Error(`Unknown entry type "${entry.value.type}"`);
+        }
+    },
+    set(newValue) { 
+        if (newValue == "other") {
+            entry.value.type = "custom"
+            entry.value.content = {};
+        } else {
+            entry.value.type = "placeholder"
+            entry.value.content = newValue
+        }
+    }
+})
+
+const textContent = computed({
+    get() {
+        if (entry.value.type === 'placeholder') {
+            return ""
+        } else if (entry.value.type === 'custom') {
+            return entry.value.content
+        } else {
+            throw new Error(`Unknown entry type "${entry.value.type}"`);
+        }
+    },
+    set(newValue) { 
+        entry.value.content = newValue
+    }
+})
+
+</script>
+
+<template lang="pug">
+    .i18n-form-group
+        Select(
+            v-model="selection"
+            :choices="selectChoices"
+        )
+        I18nInput(v-model="textContent" v-if="selection === 'other'" :locales="locales")
+</template>

src/pretix/plugins/wallet/static/pretixplugins/wallet/index.d.ts

@@ -0,0 +1,81 @@
+type BaseFieldGroupDefinition = {
+	type: string;
+	identifier: string;
+	name: string;
+	required: boolean;
+}
+
+type FieldGroupDefinition = PlaceholderFieldGroupDefinition | PredefinedFieldGroupDefinition;
+
+type PlaceholderFieldGroupDefinition = BaseFieldGroupDefinition & {
+	type: 'placeholder';
+	content_type: FieldContentType;
+	default_entries: FieldEntry[];
+	labels: boolean;
+	min_entries: number|null;
+	max_entries: number|null;
+}
+
+type PredefinedFieldGroupDefinition = BaseFieldGroupDefinition & {
+	type: 'predefined';
+}
+
+type I18nString = string | Record<string, string>
+
+type FieldContentType = 'text' | 'image';
+
+type PlaceholderFieldEntry = {
+    type: 'placeholder';
+    label?: I18nString;
+    content?: string;
+}
+
+type ContentFieldEntry = {
+    type: FieldContentType;
+    label?: I18nString;
+    content?: I18nString;
+}
+
+type FieldEntry = PlaceholderFieldEntry | ContentFieldEntry;
+
+type Style = {
+	identifier: string;
+	name: string;
+	fieldgroups: FieldGroupDefinition[];
+};
+
+type Variable = {
+    label: string
+};
+
+type Platform = {
+	identifier: string;
+	name: string;
+	styles: Styles;
+};
+
+type Styles = Record<string, Style>;
+type Variables = Record<string, Variable>;
+type VariableConfig = Record<string, Variables>;
+type Platforms = Record<string, Platform>;
+
+
+type PlaceholderFieldGroupConfig = {
+	entries: Array<FieldEntry>;
+	overflow: string | null;
+};
+
+type PredefinedFieldGroupConfig = {};
+
+type FieldGroupConfig = PlaceholderFieldGroupConfig | PredefinedFieldGroupConfig;
+
+type LayoutData = {
+	fieldgroups: Record<string, FieldGroupConfig>;
+};
+
+type Layout = {
+	name?: string;
+	style?: string;
+	layout?: LayoutData;
+};
+

src/pretix/plugins/wallet/static/pretixplugins/wallet/main.ts

@@ -0,0 +1,13 @@
+import { createApp } from 'vue'
+import App from './components/app.vue'
+
+const mountEl = document.querySelector<HTMLElement>('#editor')!
+const app = createApp(App, mountEl.dataset)
+app.mount(mountEl)
+
+app.config.errorHandler = (error, _vm, info) => {
+	// vue fatals on errors by default, which is a weird choice
+	// https://github.com/vuejs/core/issues/3525
+	// https://github.com/vuejs/router/discussions/2435
+	console.error('[VUE]', info, error)
+}

src/pretix/plugins/wallet/styles/__init__.py

@@ -0,0 +1,27 @@
+from .apple import ApplePlatform, AppleWalletEventTicket
+from .google import GooglePlatform, GoogleWalletEventTicket
+from .base import PassLayout
+
+AVAILABLE_PLATFORMS = [ApplePlatform, GooglePlatform]
+
+AVAILABLE_STYLES = {
+    "apple": [AppleWalletEventTicket()],
+    "google": [
+        GoogleWalletEventTicket()
+    ],
+}
+
+AVAILABLE_STYLES_DICT = {
+    plat: {s.identifier: s for s in styls} for plat, styls in AVAILABLE_STYLES.items()
+}
+
+# TODO? move to models?
+def get_platform(identifier: str):
+    for platform in AVAILABLE_PLATFORMS:
+        if platform.identifier == identifier:
+            return platform
+        
+def get_style(platform: str, identifier: str):
+    return AVAILABLE_STYLES_DICT.get(platform, {}).get(identifier)
+
+__all__ = ["AVAILABLE_PLATFORMS", "AVAILABLE_STYLES", "PassLayout"]

src/pretix/plugins/wallet/styles/apple.py

@@ -0,0 +1,293 @@
+from .base import (
+    FieldEntryType,
+    ImageFieldGroup,
+    PlaceholderFieldGroup,
+    PredefinedFieldGroup,
+    TextFieldGroup,
+    WalletPlatform,
+    PassStyle,
+    PlaceholderFieldEntry,
+    PassLayout,
+)
+from django.utils.translation import gettext as _
+from i18nfield.strings import LazyI18nString
+import io
+import hashlib
+import zipfile
+import cryptography
+import cryptography.x509
+import cryptography.hazmat.primitives.serialization.pkcs7
+import json
+from django.contrib.staticfiles import finders
+from pretix.base.models import OrderPosition
+from django.utils.encoding import force_bytes
+
+class ApplePlatform(WalletPlatform):
+    identifier = "apple"
+    name = _("Apple")
+
+    @classmethod
+    def generate(cls, layout: PassLayout, op: OrderPosition):
+        from ..views import get_layout_variables
+
+        order = op.order
+        event = order.event
+        filename = "{}-{}.pkpass".format(order.event.slug, order.code)
+
+        ticket = str(op.item.name)
+        if op.variation:
+            ticket += " - " + str(op.variation)
+
+        serialNumber = "%s-%s-%s-%d" % (
+            order.event.organizer.slug,
+            order.event.slug,
+            order.code,
+            op.pk,
+        )
+        breakpoint()
+        context = {
+            "placeholders": get_layout_variables(op.order.event),
+            "evaluation_context": [op, order, order.event],
+            "ca_certificate": order.event.settings.wallet_apple_ca_certificate.read(),
+            "certificate": order.event.settings.wallet_apple_certificate.read(),
+            "key": order.event.settings.wallet_apple_key.read(),
+            "password": order.event.settings.wallet_apple_key_password,
+            "description": _("Ticket for {event} ({product})").format(  # TODO: i18n
+                event=event.name, product=ticket
+            ),
+            "organizationName": event.organizer.name,
+            "passTypeIdentifier": order.event.settings.wallet_apple_pass_type_id,
+            "teamIdentifier": order.event.settings.wallet_apple_team_id,
+            "serialNumber": serialNumber,
+            "locales": event.settings.locales,
+        }
+
+        data = layout.generate(context)
+        return filename, "application/vnd.apple.pkpass", data
+
+
+class StringResource:
+    # mapping string in default event locale -> LazyI18nString
+    entries: dict[str, LazyI18nString]
+    locales: set[str]
+
+    def __init__(self, locales):
+        self.entries = {}
+        self.locales = set(locales)
+
+    def add_entry(self, key: str, value: LazyI18nString):
+        if key in self.entries:
+            raise ValueError(f"{key} already exists in this StringResource")
+        self.entries[key] = value
+
+    def escape(self, string):
+        return string.translate(
+            str.maketrans({'"': '\\"', "\r": "\\r", "\n": "\\n", "\\": "\\\\"})
+        )
+
+    def generate_resource(self, language):
+        output = ""
+        for key, entry in self.entries.items():
+            output += (
+                f'"{self.escape(key)}" = "{self.escape(entry.localize(language))}";\n'
+            )
+        return output.strip()
+
+    def generate(self):
+        return {language: self.generate_resource(language) for language in self.locales}
+
+
+class SignedZipFile:
+    """Generates a zip-file with manifest and signature as apple expects a pkpass file to be"""
+
+    def __init__(self, ca_certificate: str | bytes, certificate: str | bytes, key: str | bytes, password):
+        self.ca_certificate = cryptography.x509.load_pem_x509_certificate(
+            force_bytes(ca_certificate)
+        )
+        self.certificate = cryptography.x509.load_pem_x509_certificate(force_bytes(certificate))
+        self.key = cryptography.hazmat.primitives.serialization.load_pem_private_key(
+            force_bytes(key), force_bytes(password) if password else None
+        )
+        self.password = password
+
+        self.file = io.BytesIO()
+        self.zip_file = zipfile.ZipFile(self.file, "w")
+        self.manifest = {}
+
+    def sign(self, data: bytes):
+        return (
+            cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder()
+            .set_data(data)
+            .add_signer(
+                self.certificate,
+                self.key,
+                cryptography.hazmat.primitives.hashes.SHA256(),
+            )
+            .add_certificate(self.ca_certificate)
+            .sign(
+                cryptography.hazmat.primitives.serialization.Encoding.DER,
+                [
+                    cryptography.hazmat.primitives.serialization.pkcs7.PKCS7Options.Binary,
+                    cryptography.hazmat.primitives.serialization.pkcs7.PKCS7Options.DetachedSignature,
+                ],
+            )
+        )
+
+    def finish(self):
+        manifest = json.dumps(self.manifest).encode()
+        signature = self.sign(manifest)
+        self.add_file("manifest.json", manifest)
+        self.add_file("signature", signature)
+        self.zip_file.close()
+        return self.file.getvalue()
+
+    def add_file(self, filename: str, content: str | bytes):
+        if isinstance(content, str):
+            content = content.encode()
+
+        with self.zip_file.open(filename, "w") as f:
+            f.write(content)
+        self.manifest[filename] = hashlib.sha1(content).hexdigest()
+
+
+class AppleWalletStyle(PassStyle):
+    def pass_content(self, fields, strings):
+        raise NotImplementedError()
+
+    def generate_pass_json(self, fields, context, strings):
+        def add_from_context(key):
+            value = context.get(key)
+            if not value:
+                raise ValueError(f"{key} must be set to a truthy value")
+            return value
+
+        pass_json = {
+            "formatVersion": 1,
+            "description": add_from_context("description"),
+            "organizationName": add_from_context("organizationName"),
+            "passTypeIdentifier": add_from_context("passTypeIdentifier"),
+            "teamIdentifier": add_from_context("teamIdentifier"),
+            "serialNumber": add_from_context("serialNumber"),
+            **self.pass_content(fields, strings),
+        }
+        return pass_json
+
+    def generate(self, layout, context):
+        for key in ["ca_certificate", "certificate", "key", "password", "locales"]:
+            if key not in context:
+                raise ValueError(f"{key} missing from context")
+
+        fields = self.get_pass_fields(layout, context)
+
+        pkpass = SignedZipFile(
+            context["ca_certificate"],
+            context["certificate"],
+            context["key"],
+            context["password"],
+        )
+        strings = StringResource(locales=context["locales"])
+
+        pass_json = self.generate_pass_json(fields, context, strings)
+        print(pass_json)
+        if fields["logo"]:
+            logo = fields["logo"][0]["value"]
+        else:
+            logo = open(finders.find("pretix_passbook/logo.png"), "rb")
+
+        if fields["icon"]:
+            icon = fields["icon"][0]["value"]
+        else:
+            icon = open(finders.find("pretix_passbook/icon.png"), "rb")
+
+        pkpass.add_file("icon.png", icon.read())
+        pkpass.add_file("logo.png", logo.read())
+
+        for lang, content in strings.generate().items():
+            pkpass.add_file(f"{lang}.lproj/pass.strings", content)
+        pkpass.add_file("pass.json", json.dumps(pass_json))
+        return pkpass.finish()
+
+
+class AppleWalletEventTicket(AppleWalletStyle):
+    identifier = "event_1"
+    name = _("Event Ticket Layout 1")
+    fieldgroups = [
+        ImageFieldGroup(
+            identifier="icon",
+            name=_("Icon"),
+            min_entries=0,
+            max_entries=1,
+            labels=False,
+            default_entries=[
+                PlaceholderFieldEntry(
+                    content="poweredby",
+                )
+            ],
+        ),
+        ImageFieldGroup(
+            identifier="logo",
+            name=_("Logo"),
+            min_entries=0,
+            max_entries=1,
+            labels=False,
+            default_entries=[
+                PlaceholderFieldEntry(
+                    content="poweredby",
+                )
+            ],
+        ),
+        TextFieldGroup(
+            identifier="primary",
+            name=_("Primary"),
+            min_entries=1,
+            max_entries=1,
+            default_entries=[
+                PlaceholderFieldEntry(
+                    label=LazyI18nString({"de": "Tickettyp", "en": "Ticket type"}),
+                    content="item",
+                )
+            ],  # TODO: support Lazyi18nproxy here
+            description=_("These fields appear prominently featured on the pass."),
+        ),
+        TextFieldGroup(
+            identifier="secondary", name=_("Secondary"), max_entries=4
+        ),  # TODO: validation of max field count if combined "Coupons, store cards, and generic passes with a square barcode can have a total of up to four secondary and auxiliary fields, combined."
+        TextFieldGroup(
+            identifier="headers", name=_("Header"), max_entries=3
+        ),
+        TextFieldGroup(identifier="auxillary", name=_("Auxillary"), max_entries=4),
+        TextFieldGroup(identifier="back", name=_("Back")),
+    ]
+    # preview_image = "apple/event_ticket.svg"
+
+    def convert_fields(self, strings, fields, prefix):
+        converted = []
+        for i, f in enumerate(fields):
+            converted_field = {**f, "key": f"{prefix}-{i}"}
+            if "label" in converted_field and isinstance(
+                converted_field["label"], LazyI18nString
+            ):
+                strings.add_entry(f"{prefix}-{i}-label", converted_field["label"])
+                converted_field["label"] = f"{prefix}-{i}-label"
+
+            if isinstance(converted_field["value"], LazyI18nString):
+                strings.add_entry(f"{prefix}-{i}-value", converted_field["value"])
+                converted_field["value"] = f"{prefix}-{i}-value"
+            converted.append(converted_field)
+        return converted
+
+    def pass_content(self, fields, strings):
+        return {
+            "eventTicket": {
+                "primaryFields": self.convert_fields(
+                    strings, fields["primary"], "primary"
+                ),
+                "secondaryFields": self.convert_fields(
+                    strings, fields["secondary"], "secondary"
+                ),
+                "auxillaryFields": self.convert_fields(
+                    strings, fields["auxillary"], "auxillary"
+                ),
+                "backFields": self.convert_fields(strings, fields["back"], "back"),
+            }
+        }

src/pretix/plugins/wallet/styles/base.py

@@ -0,0 +1,344 @@
+import enum
+from i18nfield.strings import LazyI18nString
+import jsonschema
+from django.core.exceptions import ValidationError
+
+class WalletPlatform:
+    identifier: str
+    name: str
+
+
+class FieldGroupType(enum.Enum):
+    PLACEHOLDER = "placeholder"
+    PREDEFINED = "predefined"
+
+
+class FieldGroup:
+    type: FieldGroupType
+    identifier: str
+    name: str
+    description: str
+    required: bool = False
+
+    def __init__(self, identifier: str, name: str, description=None, required=False):
+        self.identifier = identifier
+        self.name = name
+        self.required = required
+        self.description = description or ""
+
+    def layout_schema(
+        self,
+        remaining_fields: list["FieldGroup"],
+        context: dict,
+    ) -> dict:
+        raise NotImplemented()
+
+    def asdict(self):
+        return {
+            "type": self.type.value,
+            "identifier": self.identifier,
+            "name": self.name,
+            "description": self.description,
+            "required": self.required,
+        }
+
+
+class FieldContentType(enum.Enum):
+    IMAGE = "image"
+    TEXT = "text"
+
+
+class FieldEntryType(enum.Enum):
+    CUSTOM = "custom"
+    PLACEHOLDER = "placeholder"
+
+
+class FieldEntry[T]:
+    type: FieldEntryType
+    label: LazyI18nString | None
+    content: T
+
+    def __init__(
+        self, type: FieldEntryType, content: T, label: LazyI18nString | None = None
+    ):
+        self.type = type
+        self.label = label
+        self.content = content
+
+    def asdict(self) -> dict:
+        return {"type": self.type.value, "content": self.content, "label": self.label.data if self.label else None}
+
+class PlaceholderFieldEntry(FieldEntry[str]):
+    type = FieldEntryType.PLACEHOLDER
+    label: LazyI18nString | None
+    content: str
+
+    def __init__(
+        self, content: str, label: LazyI18nString | None = None
+    ):
+        self.label = label
+        self.content = content
+
+
+class CustomFieldEntry(FieldEntry[LazyI18nString]):
+    type: FieldEntryType
+    label: LazyI18nString | None
+    content: LazyI18nString
+
+    def asdict(self) -> dict:
+        return {"type": self.type.value, "content": self.content.data, "label": self.label.data if self.label else None}
+
+
+
+class PredefinedFieldGroup(FieldGroup):
+    type = FieldGroupType.PREDEFINED
+
+    def layout_schema(
+        self,
+        remaining_fields: list["FieldGroup"],
+        context: dict,
+    ):
+        return {
+            "type": "object"
+        }
+
+class PlaceholderFieldGroup(FieldGroup):
+    type = FieldGroupType.PLACEHOLDER
+    content_type: FieldContentType
+    default_entries: list[FieldEntry]
+    labels: bool
+    min_entries: int | None
+    max_entries: int | None
+
+    def __init__(
+        self,
+        identifier: str,
+        name: str,
+        content_type: FieldContentType,
+        description: str=None,
+        required=False,
+        default_entries=None,
+        min_entries=None,
+        max_entries=None,
+        labels=True,
+    ):
+        super().__init__(identifier, name, description, required)
+        self.content_type = content_type
+        self.default_entries = default_entries or []
+        self.min_entries = min_entries
+        self.max_entries = max_entries
+        self.labels = labels
+
+        if self.required and (self.min_entries is None or self.min_entries < 1):
+            self.min_entries = 1
+
+    def asdict(self):
+        return {
+            **super().asdict(),
+            "content_type": self.content_type.value,
+            "default_entries": [x.asdict() for x in self.default_entries],
+            "labels": self.labels,
+            "min_entries": self.min_entries,
+            "max_entries": self.max_entries,
+        }
+
+    def layout_schema(
+        self,
+        remaining_fields: list["FieldGroup"],
+        context: dict,
+    ):
+        placeholders = list(context.get("placeholders", {}).get(self.content_type.value, {}).keys())
+        return {
+            "type": "object",
+            "properties": {
+                "entries": self.entries_schema(placeholders=placeholders),
+                "overflow": {
+                    "anyOf": [
+                        {"type": "null"},
+                        {
+                            "type": "string",
+                            "enum": [
+                                f.identifier
+                                for f in remaining_fields
+                                if isinstance(f, PlaceholderFieldGroup)
+                                and f.content_type == self.content_type
+                            ],
+                        },
+                    ]
+                },
+            },
+            "required": ["entries"],
+        }
+
+    def entries_schema(self, placeholders: list[str]):
+        baseprops = {}
+        if self.labels:
+            baseprops["label"] = {"$ref": "#/$defs/I18nString"}
+
+        schema = {
+            "type": "array",
+            "items": {
+                "type": "object",
+                "anyOf": [
+                    {
+                        "properties": {
+                            **baseprops,
+                            "type": {"const": "placeholder"},
+                            "content": {"enum": placeholders},
+                        }
+                    },
+                    {
+                        "properties": {
+                            **baseprops,
+                            "type": {"const": "custom"},
+                            "content": {"$ref": "#/$defs/I18nString"},
+                        }
+                    },
+                ],
+                "required": ["type", "content"],
+            },
+        }
+        if self.labels:
+            schema["items"]["required"].append("label")
+        if self.min_entries is not None:
+            schema["minItems"] = self.min_entries
+        # max_entries is not enforced here, as the layout can have more fields than that (null-fields are removed, rest is overspilled)
+        return schema
+
+
+
+class TextFieldGroup(PlaceholderFieldGroup):
+    content_type = FieldContentType.TEXT
+
+    def __init__(self, **kwargs):
+        super().__init__(content_type=self.content_type, **kwargs)
+
+
+class ImageFieldGroup(PlaceholderFieldGroup):
+    content_type = FieldContentType.IMAGE
+
+    def __init__(self, **kwargs):
+        super().__init__(content_type=self.content_type, **kwargs)
+
+
+class PassStyle:
+    identifier: str  # unique within platform
+    name: str
+    # order here limits in what order users can configure field "overspilling" (if too many fields are defined, where should the rest go) -> can only go down in the list
+    # we evaluate the fields in this order, so they overspill in this order as well (fields from primary are appended to the overspilling field before fields from secondary are etc)
+
+    fieldgroups: list[FieldGroup]
+
+    def asdict(self):
+        return {
+            "identifier": self.identifier,
+            "name": self.name,
+            "fieldgroups": [x.asdict() for x in self.fieldgroups],
+        }
+
+    def layout_schema(self, context):
+        schema = {
+            "$schema": "https://json-schema.org/draft/2020-12/schema",
+            # TODO: $id
+            "title": self.name,
+            "type": "object",
+            "properties": {
+                "fieldgroups": {
+                    "description": "Layout Field Groups",
+                    "type": "object",
+                    "properties": {
+                        group.identifier: group.layout_schema(
+                            context=context, remaining_fields=self.fieldgroups[i:]
+                        )
+                        for (i, group) in enumerate(self.fieldgroups)
+                    },
+                    "required": [
+                        group.identifier for group in self.fieldgroups if group.required
+                    ],
+                }
+            },
+            "$defs": {
+                "I18nString": {
+                    "oneOf": [
+                        {"type": "string"},
+                        {"type": "object", "additionalProperties": {"type": "string"}},
+                    ]
+                }
+            },
+        }
+        if any(group.required for group in self.fieldgroups):
+            schema["required"] = ["fieldgroups"]
+
+        return schema
+
+    def generate(self, layout, context):
+        raise NotImplementedError()
+
+    def render_placeholder(self, context, content_type, content):
+        placeholder = (
+            context.get("placeholders")
+            .get(content_type, {})
+            .get(content)
+        )
+        if placeholder:
+            placeholder_value = placeholder["evaluate"](
+                *context.get("evaluation_context", [])
+            )
+            if placeholder_value:
+                return placeholder["label"], placeholder_value
+
+        return None, None
+
+    def get_pass_fields(self, layout, context):
+        fields = {}
+        for group in self.fieldgroups:
+            if isinstance(group, PredefinedFieldGroup):
+                pass
+            elif isinstance(group, PlaceholderFieldGroup):
+                group_fields = fields.get(group.identifier, [])
+                if group.identifier in layout["fieldgroups"]:
+                    for field in layout["fieldgroups"][group.identifier]["entries"]:
+                        field_entry = {}
+                        if group.labels:
+                            field_entry["label"] = LazyI18nString(field["label"])
+                        if field["type"] == FieldEntryType.PLACEHOLDER.value:
+                            label, field_entry["value"] = self.render_placeholder(context, group.content_type.value, field['content'])
+                            if group.labels and not str(field_entry['label']) and label:
+                                field_entry['label'] = LazyI18nString(label)
+
+                        elif field["type"] == FieldEntryType.CUSTOM.value:
+                            field_entry["value"] = LazyI18nString(field["content"])
+                        if "value" in field_entry and field_entry["value"]:
+                            group_fields.append(field_entry)
+                if group.min_entries and len(group_fields) < group.min_entries:
+                    raise ValueError(
+                        f"Group {group.identifier} needs at least {group.min_entries} entries, but only {len(group_fields)} were provided"
+                    )
+                fields[group.identifier] = group_fields[: group.max_entries]
+                if (overflow_group := layout["fieldgroups"][group.identifier]['overflow']):
+                    fields.setdefault(overflow_group, [])
+                    fields[overflow_group] += group_fields[group.max_entries:]
+            else:
+                raise ValueError("Unknown field group")
+        return fields
+
+
+class PassLayout:
+    style: PassStyle
+    layout: dict
+
+    def __init__(self, style, layout):
+        self.style = style
+        self.layout = layout
+
+    def validate(self, context):
+        schema = self.style.layout_schema(context)
+        try:
+            jsonschema.validate(self.layout, schema)
+        except jsonschema.ValidationError as e:
+            raise ValidationError("Invalid layout: {}".format(str(e)))
+
+    def generate(self, context):
+        # TODO: how to handle nonexisting placeholders here?
+        self.validate(context)
+        return self.style.generate(self.layout, context)

src/pretix/plugins/wallet/styles/google.py

@@ -0,0 +1,20 @@
+from .base import PassStyle, PredefinedFieldGroup, TextFieldGroup, WalletPlatform
+from django.utils.translation import gettext_lazy as _
+
+class GooglePlatform(WalletPlatform):
+    identifier = "google"
+    name = _("Google")
+
+
+class GoogleWalletStyle(PassStyle):
+    platform = GooglePlatform
+
+
+class GoogleWalletEventTicket(PassStyle):
+    identifier = "event"
+    name = "Event Ticket"
+    platform = GooglePlatform
+    fieldgroups = [
+        PredefinedFieldGroup(identifier="seating", name=_("Seating")),
+        TextFieldGroup(identifier="qrcode", name=_("QR-Code"), labels=False),
+    ]

src/pretix/plugins/wallet/templates/pretixplugins/wallet/create.html

@@ -0,0 +1,35 @@
+{% extends "pretixcontrol/event/base.html" %}
+{% load i18n %}
+{% load money %}
+{% load bootstrap3 %}
+{% load vite %}
+{% load static %}
+{% load compress %}
+
+
+{% block title %}{% trans "Wallet layouts" %}{% endblock %}
+
+{% block content %}
+    <h1>{% trans "New layout" %}</h1>
+    <form action="" method="post" class="form-horizontal">
+        {% csrf_token %}
+        {% bootstrap_form form layout="control" %}
+        <div class="form-group">
+            <label class="col-md-3 control-label">
+                {% trans "Ticket design" %}
+            </label>
+            <div class="col-md-9 form-control-static">
+                <p>
+                    {% blocktrans trimmed %}
+                        You can modify the design after you saved this page.
+                    {% endblocktrans %}
+                </p>
+            </div>
+        </div>
+        <div class="form-group submit-group">
+            <button type="submit" class="btn btn-primary btn-save">
+                {% trans "Save" %}
+            </button>
+        </div>
+    </form>
+{% endblock %}

src/pretix/plugins/wallet/templates/pretixplugins/wallet/delete.html

@@ -0,0 +1,19 @@
+{% extends "pretixcontrol/event/base.html" %}
+{% load i18n %}
+{% load bootstrap3 %}
+{% block title %}{% trans "Wallet layout" %}{% endblock %}
+{% block content %}
+    <h1>{% trans "Wallet layout" %}</h1>
+    <form action="" method="post" class="form-horizontal">
+        {% csrf_token %}
+        <p>{% blocktrans with name=object.name %}Are you sure you want to delete <strong>"{{ name }}"</strong>?{% endblocktrans %}</p>
+        <div class="form-group submit-group">
+            <a href="{% url "plugins:wallet:index" organizer=request.event.organizer.slug event=request.event.slug %}" class="btn btn-default btn-cancel">
+                {% trans "Cancel" %}
+            </a>
+            <button type="submit" class="btn btn-danger btn-save">
+                {% trans "Delete" %}
+            </button>
+        </div>
+    </form>
+{% endblock %}

src/pretix/plugins/wallet/templates/pretixplugins/wallet/edit.html

@@ -0,0 +1,21 @@
+{% extends "pretixcontrol/event/base.html" %}
+{% load i18n %}
+{% load money %}
+{% load bootstrap3 %}
+{% load vite %}
+{% load static %}
+{% load compress %}
+
+
+{% block title %}{% trans "Wallet layouts" %}{% endblock %}
+
+{% block content %}
+    <h1>{% trans "Edit layout" %}</h1>
+    {{ platforms|json_script:"platforms" }}
+    {{ variables|json_script:"variables" }}
+    {{ locales|json_script:"locales" }}
+    <div id="editor" data-layout-id="{{ object.pk }}"></div>
+    {% vite_hmr %}
+    {% vite_asset "src/pretix/plugins/wallet/static/pretixplugins/wallet/main.ts" %}
+    {% csrf_token %}
+{% endblock %}

src/pretix/plugins/wallet/templates/pretixplugins/wallet/layout_list.html

@@ -0,0 +1,74 @@
+{% extends "pretixcontrol/event/base.html" %}
+{% load i18n %}
+{% load money %}
+{% load wallet %}
+{% block title %}{% trans "Wallet layouts" %}{% endblock %}
+{% block content %}
+    <h1>{% trans "Wallet layouts" %}</h1>
+    {% if object_list|length == 0 %}
+        <div class="empty-collection">
+            <p>
+                {% blocktrans trimmed %}
+                    You haven't created any layouts yet.
+                {% endblocktrans %}
+            </p>
+
+            {% if "event.settings.general:write" in request.eventpermset %}
+                <a href="{% url "plugins:wallet:add" organizer=request.event.organizer.slug event=request.event.slug %}"
+                        class="btn btn-primary btn-lg"><i class="fa fa-plus"></i> {% trans "Create a new layout" %}
+                </a>
+            {% endif %}
+        </div>
+    {% else %}
+        <div class="table-responsive">
+            <table class="table table-hover table-quotas">
+                <thead>
+                <tr>
+                    <th>{% trans "Name" %}</th>
+                    <th>{% trans "Default" %}</th>
+                    <th class="action-col-2"></th>
+                </tr>
+                </thead>
+                <tbody>
+                {% for l in object_list %}
+                    <tr>
+                        <td>
+                            {% if "can_change_event_settings" in request.eventpermset %}
+                                <strong><a href="{% url "plugins:wallet:edit" organizer=request.event.organizer.slug event=request.event.slug layout=l.id %}">
+                                    {{ l.name }}
+                                </a></strong>
+                            {% else %}
+                                <strong>{{ l.name }}</strong>
+                            {% endif %}
+                        </td>
+                        <td>
+                            {% if l.default %}
+                                <span class="text-success">
+                                    <span class="fa fa-check"></span>
+                                    {% trans "Default" %}
+                                </span>
+                            {% elif "can_change_event_settings" in request.eventpermset %}
+                                <form class="form-inline" method="post"
+                                        action="{% url "plugins:wallet:default" organizer=request.event.organizer.slug event=request.event.slug layout=l.id %}">
+                                    {% csrf_token %}
+                                    <button class="btn btn-default btn-sm">
+                                        {% trans "Make default" %}
+                                    </button>
+                                </form>
+                            {% endif %}
+                        </td>
+                        <td class="text-right flip">
+                            {% if "can_change_event_settings" in request.eventpermset %}
+                                <a href="{% url "plugins:wallet:edit" organizer=request.event.organizer.slug event=request.event.slug layout=l.id %}" class="btn btn-default btn-sm"><i class="fa fa-edit"></i></a>
+                                <a href="{% url "plugins:wallet:add" organizer=request.event.organizer.slug event=request.event.slug %}?copy_from={{ l.id }}"
+                                        class="btn btn-default btn-sm" title="{% trans "Clone" %}" data-toggle="tooltip"><i class="fa fa-copy"></i></a>
+                                <a href="{% url "plugins:wallet:delete" organizer=request.event.organizer.slug event=request.event.slug layout=l.id %}" class="btn btn-danger btn-sm"><i class="fa fa-trash"></i></a>
+                            {% endif %}
+                        </td>
+                    </tr>
+                {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    {% endif %}
+{% endblock %}

src/pretix/plugins/wallet/templates/pretixplugins/wallet/settings_content.html

@@ -0,0 +1,8 @@
+{% load i18n %}
+<p>
+    <a class="btn btn-primary btn-lg" target="_blank"
+            href="{% url "plugins:wallet:index" organizer=request.organizer.slug event=request.event.slug %}">
+        <span class="fa fa-paint-brush"></span>
+        {% trans "Edit layouts" %}
+    </a>
+</p>

src/pretix/plugins/wallet/templatetags/wallet.py

@@ -0,0 +1,10 @@
+from django import template
+
+from ..models import WalletLayout
+
+register = template.Library()
+
+
+@register.filter
+def platform_layouts(platform, event):
+    return WalletLayout.objects.filter(event=event, platform=platform.identifier)

src/pretix/plugins/wallet/ticketoutput.py

@@ -0,0 +1,162 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+import logging
+from django.utils.translation import gettext_lazy as _
+from pretix.base.ticketoutput import BaseTicketOutput
+from pretix.base.models import Event
+from pretix.base.settings import SettingsSandbox
+from django.template.loader import render_to_string
+from django.shortcuts import get_object_or_404
+from .styles import AVAILABLE_STYLES_DICT
+from .styles.base import PassLayout, WalletPlatform
+from .styles.apple import ApplePlatform
+from .styles.google import GooglePlatform
+from collections import OrderedDict
+from .models import WalletLayout
+from .views import get_layout_variables
+from django import forms
+from .forms import CertificateFileField, validate_rsa_privkey
+from pretix.control.forms import ClearableBasenameFileInput
+
+logger = logging.getLogger("pretix.plugins.wallet")
+
+
+class WalletSettingsHolder(BaseTicketOutput):
+    identifier = "wallet"
+    verbose_name = _("Wallet Output")
+
+    is_meta = True
+    is_enabled = False
+    preview_allowed = (
+        False  # TODO: implement own preview view or hide button for meta-outputs
+    )
+
+    def settings_content_render(self, request) -> str:
+        return render_to_string(
+            "pretixplugins/wallet/settings_content.html", {"request": request}
+        )
+
+
+class WalletOutput(BaseTicketOutput):
+    settings_form_fields = []
+    platform: WalletPlatform
+
+    def __init__(self, event: Event):
+        super().__init__(event)
+        self.settings = SettingsSandbox(
+            "ticketoutput", WalletSettingsHolder.identifier, event
+        )
+
+    def generate(self, op):
+        if hasattr(op.item, "walletlayout"):
+            wallet_layout = op.item.walletlayout
+        else:
+            wallet_layout = op.event.wallet_layouts.get(default=True)
+        platform_layout = get_object_or_404(wallet_layout.platform_layouts, platform=self.platform.identifier)
+        return self.platform.generate(platform_layout.pass_layout, op)
+
+
+class GoogleWalletTicketOutput(WalletOutput):
+    identifier = "wallet_google"
+    verbose_name = _("Google")
+    download_button_text = "Add to Google Wallet"
+    platform = GooglePlatform
+
+
+class AppleWalletTicketOutput(WalletOutput):
+    identifier = "wallet_apple"
+    verbose_name = _("Apple")
+    download_button_text = "Add to Apple Wallet"
+    platform = ApplePlatform
+
+    def get_global_settings(sender, **kwargs):
+        return OrderedDict(
+            [
+                (
+                    "wallet_apple_team_id",
+                    forms.CharField(
+                        label=_("Apple Wallet Pass team ID"),
+                        required=False,
+                    ),
+                ),
+                (
+                    "wallet_apple_pass_type_id",
+                    forms.CharField(
+                        label=_("Apple Wallet Pass type"),
+                        required=False,
+                    ),
+                ),
+                (
+                    "wallet_apple_certificate",
+                    CertificateFileField(
+                        label=_("Apple Wallet Pass certificate file"),
+                        required=False,
+                    ),
+                ),
+                (
+                    "wallet_apple_ca_certificate",
+                    CertificateFileField(
+                        label=_("Apple Wallet Pass CA Certificate"),
+                        help_text=_(
+                            "You can download the current CA certificate from apple at "
+                            "https://www.apple.com/certificateauthority/AppleWWDRCAG4.cer"
+                        ),
+                        required=False,
+                    ),
+                ),
+                (
+                    "wallet_apple_key",
+                    forms.FileField(
+                        label=_("Apple Wallet Pass secret key"),
+                        required=False,
+                        validators=[validate_rsa_privkey],
+                        widget=ClearableBasenameFileInput
+                    ),
+                ),
+                (
+                    "wallet_apple_key_password",
+                    forms.CharField(
+                        label=_("Apple Wallet Pass key password"),
+                        widget=forms.PasswordInput(render_value=True),
+                        required=False,
+                        help_text=_(
+                            "Optional, only necessary if the key entered above requires a password to use."
+                        ),
+                    ),
+                ),
+            ]
+        )
+
+
+# settings_hierarkey.add_default("wallet_apple_certificate_file", None, File)
+# settings_hierarkey.add_default("wallet_apple_wwdr_certificate_file", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_background", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_background2x", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_background3x", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_icon", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_icon2x", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_icon3x", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_logo", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_logo2x", None, File)
+# settings_hierarkey.add_default("ticketoutput_wallet_apple_logo3x", None, File)
+
+OUTPUTS = [WalletSettingsHolder, GoogleWalletTicketOutput, AppleWalletTicketOutput]

src/pretix/plugins/wallet/urls.py

@@ -0,0 +1,50 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+from django.urls import re_path
+from pretix.api.urls import event_router
+
+from .views import (
+    LayoutEditorView,
+    LayoutCreateView,
+    LayoutListView,
+    LayoutPreviewView,
+    LayoutSetDefault,
+    LayoutDelete
+)
+from .api import WalletLayoutViewSet
+
+urlpatterns = [
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/$',
+        LayoutListView.as_view(), name='index'),
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/add/$',
+        LayoutCreateView.as_view(), name='add'),
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/edit/(?P<layout>[^/]+)/$',
+        LayoutEditorView.as_view(), name='edit'),
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/preview/$',
+        LayoutPreviewView.as_view(), name='preview'),
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/default/(?P<layout>[^/]+)/$', # TODO
+        LayoutSetDefault.as_view(), name='default'),
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/wallet/delete/(?P<layout>[^/]+)/$', # TODO
+        LayoutDelete.as_view(), name='delete'),
+]
+
+event_router.register('walletlayouts', WalletLayoutViewSet)

src/pretix/plugins/wallet/views.py

@@ -0,0 +1,215 @@
+import copy
+import json
+from typing import Any
+
+from django.db import transaction
+from django import forms
+from django.core.exceptions import BadRequest
+from django.db.models.query import QuerySet
+from django.urls import reverse
+from django.http import HttpResponse, HttpResponseRedirect
+from django.utils.translation import gettext_lazy as _
+from django.views.generic import CreateView, DetailView, ListView, DeleteView, View
+from pretix.base.i18n import language
+from pretix.base.pdf import get_images, get_variables
+from pretix.base.services.tickets import get_preview_position
+from pretix.control.permissions import EventPermissionRequiredMixin
+from django.conf import settings
+from django.shortcuts import redirect
+from pretix.helpers.database import rolledback_transaction
+from pretix.helpers.models import modelclone
+from .models import WalletLayout
+from .styles import AVAILABLE_STYLES, AVAILABLE_PLATFORMS, AVAILABLE_STYLES_DICT, PassLayout
+from django.contrib import messages
+from django.contrib.staticfiles import finders
+from django.utils.functional import cached_property
+
+def get_layout_variables(event):
+    return {
+        "text": get_variables(event),
+        "image": get_images(event)
+        | {"poweredby": {"label": _("pretix-Logo"), "evaluate": lambda *_: open(finders.find("pretix_passbook/logo.png"), "rb")},
+           "poweredby_icon": {"label": _("pretix-Icon"), "evaluate": lambda *_: open(finders.find("pretix_passbook/icon.png"), "rb")}},  # TODO: image upload
+    }
+
+
+def get_editor_variables(event):
+    return {
+        t: {
+            vid: {"label": v.get("label"), "editor_sample": v.get("editor_sample")}
+            for vid, v in vs.items()
+        }
+        for t, vs in get_layout_variables(event).items()
+    }
+
+class WalletLayoutMixin:
+    model = WalletLayout
+    permission = "event.settings.general:write"
+    pk_url_kwarg = "layout"
+    context_object_name = "layouts"
+
+    def get_queryset(self):
+        return self.request.event.wallet_layouts.all()
+
+class LayoutListView(WalletLayoutMixin, EventPermissionRequiredMixin, ListView):
+    template_name = "pretixplugins/wallet/layout_list.html"
+
+
+class LayoutDetailView(WalletLayoutMixin, EventPermissionRequiredMixin, DetailView):
+    pass
+
+
+class LayoutEditorView(LayoutDetailView):
+    template_name = "pretixplugins/wallet/edit.html"
+
+    def get_context_data(self, **kwargs) -> dict[str, Any]:
+        context = super().get_context_data(**kwargs)
+        context['platforms'] = [{
+                "identifier": platform.identifier,
+                "name": platform.name,
+                "styles": {
+                    style.identifier: style.asdict() for style in AVAILABLE_STYLES.get(platform.identifier)
+                }
+            } for platform in AVAILABLE_PLATFORMS
+        ]
+        # context["styles"] = {
+        #     style.identifier: style.asdict() for style in self.get_platform_styles()
+        # }
+        context["variables"] = get_editor_variables(self.request.event)
+        context["locales"] = {
+            l: dict(settings.LANGUAGES).get(l, l)
+            for l in self.request.event.settings.get("locales")
+        }
+
+        return context
+
+
+class WalletLayoutCreateForm(forms.ModelForm):
+    class Meta:
+        model = WalletLayout
+        fields = ("name",)
+
+    def __init__(self, *args, event, **kwargs):
+        super().__init__(*args, **kwargs)
+        self.event = event
+
+    def save(self, *args, **kwargs) -> Any:
+        self.instance.event = self.event
+        return super().save(*args, **kwargs)
+
+
+class LayoutCreateView(WalletLayoutMixin, EventPermissionRequiredMixin, CreateView):
+    template_name = "pretixplugins/wallet/create.html"
+    form_class = WalletLayoutCreateForm
+    permission = "event.settings.general:write"
+
+    def form_valid(self, form):
+        self.object = form.save()
+        if self.copy_from:
+            for pl in self.copy_from.platform_layouts.all():
+                modelclone(pl, parent=self.object).save()
+        return HttpResponseRedirect(self.get_success_url())
+    
+    def get_form_kwargs(self) -> dict[str, Any]:
+        kwargs = super().get_form_kwargs()
+        kwargs["event"] = self.request.event
+
+        if self.copy_from:
+            kwargs['instance'] = modelclone(self.copy_from, default=False)
+            kwargs.setdefault('initial', {})
+            
+        return kwargs
+
+    def get_success_url(self) -> str:
+        return reverse(
+            "plugins:wallet:edit",
+            kwargs={
+                "organizer": self.request.event.organizer.slug,
+                "event": self.request.event.slug,
+                "layout": self.object.pk,
+            },
+        )
+
+    @cached_property
+    def copy_from(self) -> WalletLayout | None:
+        if self.request.GET.get("copy_from"):
+            try:
+                return self.get_queryset().get(pk=self.request.GET.get("copy_from"))
+            except WalletLayout.DoesNotExist:
+                pass
+
+class LayoutPreviewView(EventPermissionRequiredMixin, View):
+    permission = "event.settings.general:write"
+
+    def post(self, request, **kwargs):
+        event = request.event
+        platform_id = request.POST.get("platform")
+        style_id = request.POST.get("style")
+        layout = request.POST.get("layout")
+
+        platform = None
+        for p in AVAILABLE_PLATFORMS:
+            if p.identifier == platform_id:
+                platform = p
+        if not platform:
+            raise BadRequest("Unknown platform")
+        if style_id not in AVAILABLE_STYLES_DICT[platform_id]:
+            raise BadRequest("Unknown style")
+        style = AVAILABLE_STYLES_DICT[platform_id][style_id]
+
+        layout = json.loads(layout)
+        with rolledback_transaction(), language(request.event.settings.locale, request.event.settings.region):
+            p = get_preview_position(request.event)
+            layout = PassLayout(style=style, layout=layout)
+            context = {"placeholders": get_layout_variables(event)}
+            layout.validate(context=context)
+
+            fname, mimet, data = platform.generate(layout, p)
+            resp = HttpResponse(data, content_type=mimet)
+            ftype = fname.split(".")[-1]
+            resp['Content-Disposition'] = 'attachment; filename="ticket-preview.{}"'.format(ftype)
+            return resp
+        
+
+
+class LayoutSetDefault(LayoutDetailView):
+    @transaction.atomic
+    def post(self, request, *args, **kwargs):
+        obj = self.get_object()
+        request.event.wallet_layouts.exclude(pk=obj.pk).update(default=False)
+        obj.default = True
+        obj.save(update_fields=['default'])
+        messages.success(self.request, _('Your changes have been saved.'))
+        return redirect(self.get_success_url())
+
+    def get_success_url(self) -> str:
+        return reverse('plugins:wallet:index', kwargs={
+            'organizer': self.request.event.organizer.slug,
+            'event': self.request.event.slug,
+        })
+
+
+
+class LayoutDelete(WalletLayoutMixin, DeleteView):
+    template_name = 'pretixplugins/wallet/delete.html'
+
+    def get_success_url(self) -> str:
+        return reverse('plugins:wallet:index', kwargs={
+            'organizer': self.request.event.organizer.slug,
+            'event': self.request.event.slug,
+        })
+
+    @transaction.atomic
+    def form_valid(self, form):
+        self.object = self.get_object()
+        self.object.log_action(action='pretix.plugins.wallet.layout.deleted', user=self.request.user)
+        self.object.delete()
+
+        if not self.request.event.wallet_layouts.filter(default=True).exists():
+            f = self.request.event.wallet_layouts.first()
+            if f:
+                f.default = True
+                f.save(update_fields=['default'])
+
+        messages.success(self.request, _('The selected layout been deleted.'))
+        return redirect(self.get_success_url())

src/tests/plugins/wallet/test_apple.py

@@ -0,0 +1,186 @@
+from pretix.plugins.wallet.styles.apple import SignedZipFile, StringResource, AppleWalletEventTicket
+from django.utils.translation import gettext as _
+import pytest
+from i18nfield.strings import LazyI18nString
+from cryptography.hazmat.primitives.asymmetric import rsa
+from cryptography.hazmat.primitives import serialization, hashes
+from cryptography import x509
+import datetime
+import io
+import zipfile
+import json
+import jsonschema
+
+
+@pytest.fixture
+def pkpass_context():
+    key_pw = b"TESTPW"
+    now = datetime.datetime.now()
+    ca_key = rsa.generate_private_key(public_exponent=65537, key_size=4096)
+    ca_cert = (
+        x509.CertificateBuilder()
+        .subject_name(
+            x509.Name([x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "TTDR")])
+        )
+        .issuer_name(
+            x509.Name([x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "ROOT Inc.")])
+        )
+        .public_key(ca_key.public_key())
+        .serial_number(1)
+        .not_valid_before(now)
+        .not_valid_after(now + datetime.timedelta(days=365))
+        .sign(ca_key, hashes.SHA256())
+    )
+
+    key = rsa.generate_private_key(public_exponent=65537, key_size=4096)
+    cert = (
+        x509.CertificateBuilder()
+        .subject_name(
+            x509.Name(
+                [x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "UID=pass.test.test")]
+            )
+        )
+        .issuer_name(
+            x509.Name([x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "TTDR")])
+        )
+        .public_key(key.public_key())
+        .serial_number(2)
+        .not_valid_before(now)
+        .not_valid_after(now + datetime.timedelta(days=365))
+        .sign(ca_key, hashes.SHA256())
+    )
+
+    ca_cert_pem = cert.public_bytes(encoding=serialization.Encoding.PEM)
+    cert_pem = cert.public_bytes(encoding=serialization.Encoding.PEM)
+    key_pem = key.private_bytes(
+        encoding=serialization.Encoding.PEM,
+        format=serialization.PrivateFormat.TraditionalOpenSSL,
+        encryption_algorithm=serialization.BestAvailableEncryption(key_pw),
+    )
+    return {
+        "ca_certificate": ca_cert_pem,
+        "certificate": cert_pem,
+        "key": key_pem,
+        "password": key_pw,
+    }
+
+
+def test_signed_zip(pkpass_context):
+    pkpass = SignedZipFile(**pkpass_context)
+    generated_pass = pkpass.finish()
+
+    with zipfile.ZipFile(io.BytesIO(generated_pass), "r") as zip_file:
+        assert set(zip_file.namelist()) == {"manifest.json", "signature"}
+        with zip_file.open("manifest.json") as f:
+            manifest = json.load(f)
+        assert manifest == {}
+
+        with zip_file.open("signature") as f:
+            signature = f.read()
+
+        assert signature
+
+    pkpass = SignedZipFile(**pkpass_context)
+    pkpass.add_file("test", b"test content")
+    generated_pass = pkpass.finish()
+
+    with zipfile.ZipFile(io.BytesIO(generated_pass), "r") as zip_file:
+        assert set(zip_file.namelist()) == {"test", "manifest.json", "signature"}
+        with zip_file.open("manifest.json") as f:
+            manifest = json.load(f)
+        assert manifest == {"test": "1eebdf4fdc9fc7bf283031b93f9aef3338de9052"}
+
+        with zip_file.open("signature") as f:
+            signature = f.read()
+
+        assert signature
+
+    pkpass = SignedZipFile(**pkpass_context)
+    pkpass.add_file("test/test", "test content")
+    generated_pass = pkpass.finish()
+
+    with zipfile.ZipFile(io.BytesIO(generated_pass), "r") as zip_file:
+        assert set(zip_file.namelist()) == {"test/test", "manifest.json", "signature"}
+        with zip_file.open("manifest.json") as f:
+            manifest = json.load(f)
+        assert manifest == {"test/test": "1eebdf4fdc9fc7bf283031b93f9aef3338de9052"}
+
+        with zip_file.open("signature") as f:
+            signature = f.read()
+
+        assert signature
+
+
+def test_stringresource_minimal():
+    resource = StringResource(locales=["de", "en"])
+    resource.add_entry("TEST", LazyI18nString({"de": "test-de", "en": "test-en"}))
+    stringfiles = resource.generate()
+
+    assert stringfiles.keys() == {"de", "en"}
+    assert stringfiles["de"] == '"TEST" = "test-de";'
+    assert stringfiles["en"] == '"TEST" = "test-en";'
+
+
+@pytest.mark.parametrize(
+    "input,output",
+    [
+        ['te"st', 'te\\"st'],
+        ["te\rst", "te\\rst"],
+        ["te\nst", "te\\nst"],
+        ["te\r\nst", "te\\r\\nst"],
+        ["te\r\nst", "te\\r\\nst"],
+        ["te\\st", "te\\\\st"],
+    ],
+)
+def test_stringresource_escaping(input, output):
+    resource = StringResource(locales=["en"])
+    resource.add_entry("TEST", LazyI18nString({"en": input}))
+    stringfiles = resource.generate()
+
+    assert stringfiles.keys() == {"en"}
+    assert stringfiles["en"] == f'"TEST" = "{output}";'
+
+    resource = StringResource(locales=["en"])
+    resource.add_entry(input, LazyI18nString({"en": "test"}))
+    stringfiles = resource.generate()
+
+    assert stringfiles.keys() == {"en"}
+    assert stringfiles["en"] == f'"{output}" = "test";'
+
+
+
+def test_stringresource_additional_locale():
+    resource = StringResource(locales=["de", "en", "fr"])
+    resource.add_entry("TEST", LazyI18nString({"de": "test-de", "en": "test-en"}))
+    stringfiles = resource.generate()
+
+    assert stringfiles.keys() == {"de", "en", "fr"}
+    assert stringfiles["de"] == '"TEST" = "test-de";'
+    assert stringfiles["en"] == '"TEST" = "test-en";'
+    assert stringfiles["fr"] == '"TEST" = "test-en";'
+
+def test_generate_pass_json():
+    context = {
+        "placeholders": {
+            "text": {"test_placeholder": {"evaluate": lambda: "test placeholder"}}
+        },
+        "description": "Ticket for Test",
+        "organizationName": "TestOrg",
+        "serialNumber": "1",
+        "passTypeIdentifier": "pass.test.test",
+        "teamIdentifier": "ABCDEF123456"
+    }
+    layout = {"fieldgroups": {"primary": {"entries": [{"type": "placeholder", "label": "test", "content": "test_placeholder"}, {"type": "text", "label": {"de":"test-de", "en": "test-en"}, "content": "test content"}]}}}
+    style = AppleWalletEventTicket()
+    schema = style.layout_schema(context)
+    jsonschema.validate(schema, layout)
+
+    result = style.generate_pass_json(layout, context)
+
+    required_fields = ["description", "formatVersion", "organizationName", "passTypeIdentifier", "serialNumber", "teamIdentifier"]
+    for field in required_fields:
+        assert field in result
+
+    assert result['formatVersion'] == 1
+
+    breakpoint()

src/tests/plugins/wallet/test_wallet.py

@@ -0,0 +1,336 @@
+from pretix.plugins.wallet.styles.base import (
+    PassStyle,
+    PredefinedFieldGroup,
+    WalletPlatform,
+    PlaceholderFieldGroup,
+    FieldContentType,
+    PassLayout,
+    FieldGroupType,
+    FieldEntryType,
+)
+from django.utils.translation import gettext as _
+import jsonschema
+import pytest
+from i18nfield.strings import LazyI18nString
+from cryptography.hazmat.primitives.asymmetric import rsa
+from cryptography.hazmat.primitives import serialization, hashes
+from cryptography import x509
+import datetime
+import io
+import zipfile
+import json
+
+
+class WalletTestPlatform(WalletPlatform):
+    identifier = "test_platform"
+    name = _("Test Wallet Platform")
+
+
+class MinimalTestStyle(PassStyle):
+    platform = WalletTestPlatform
+    identifier = "test_style"
+    name = _("Test Wallet Style")
+    fieldgroups = []
+
+
+class TicketTestStyle(PassStyle):
+    platform = WalletTestPlatform
+    identifier = "test_ticket"
+    name = _("Test Wallet Style Ticket")
+    fieldgroups = [
+        PlaceholderFieldGroup(
+            identifier="text1",
+            name=_("Text 1"),
+            content_type=FieldContentType.TEXT,
+            required=True,
+        ),
+        PlaceholderFieldGroup(
+            identifier="text2",
+            name=_("Text 2"),
+            content_type=FieldContentType.TEXT,
+            required=False,
+            labels=False,
+        ),
+        PlaceholderFieldGroup(
+            identifier="image1",
+            name=_("Image 1"),
+            content_type=FieldContentType.IMAGE,
+            required=False,
+            labels=False,
+        ),
+    ]
+
+    def generate(self, layout, context):
+        output = f"Generated Pass: {self.name}\n\n"
+        for group in self.fieldgroups:
+            if group.identifier in layout["fieldgroups"]:
+                output += f"Group: {group.name}\n"
+                if isinstance(group, PredefinedFieldGroup):
+                    output += "PREDEFINED\n"
+                elif isinstance(group, PlaceholderFieldGroup):
+                    for field in layout["fieldgroups"][group.identifier]["entries"]:
+                        if group.labels:
+                            label = LazyI18nString(field["label"])
+                            output += f"{label}: "
+                        if field["type"] == FieldEntryType.PLACEHOLDER.value:
+                            placeholder = (
+                                context.get("placeholders")
+                                .get(group.content_type.value, {})
+                                .get(field["content"])
+                            )
+                            if placeholder:
+                                output += placeholder["evaluate"](
+                                    *context.get("evaluation_context", [])
+                                )
+                            else:
+                                output += f"UNKNOWN: {field['content']}"
+                        elif field["type"] == FieldEntryType.TEXT.value:
+                            output += str(LazyI18nString(field["content"]))
+                        elif field["type"] == FieldEntryType.IMAGE.value:
+                            output += f"<IMG>{field['content']}</IMG>"
+                        output += "\n"
+                else:
+                    raise ValueError("Unknown field group")
+                output += "\n"
+        return output
+
+
+@pytest.fixture
+def layout_context():
+    return {
+        "placeholders": {
+            "text": {"test_placeholder": {"evaluate": lambda: "test placeholder"}}
+        }
+    }
+
+
+def test_schema_generation_minimal():
+    style = MinimalTestStyle()
+    context = {}
+    schema = style.layout_schema(context)
+    assert isinstance(schema, dict)
+    assert "properties" in schema
+    assert "fieldgroups" in schema["properties"]
+
+    jsonschema.validate({}, schema)
+    jsonschema.validate({"fieldgroups": {}}, schema)
+
+
+def test_schema_ticket_generation(layout_context):
+    style = TicketTestStyle()
+    schema = style.layout_schema(layout_context)
+    assert isinstance(schema, dict)
+    assert "properties" in schema
+    assert "fieldgroups" in schema["properties"]
+
+
+@pytest.mark.parametrize(
+    "layout",
+    [
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": "test",
+                            "content": "test_placeholder",
+                        }
+                    ]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": {"de": "test-de", "en": "test-en"},
+                            "content": "test_placeholder",
+                        }
+                    ]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {"type": "text", "label": "test", "content": "test content"}
+                    ]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": {"de": "test-de", "en": "test-en"},
+                            "content": "test_placeholder",
+                        },
+                        {"type": "text", "label": "test", "content": "test content"},
+                    ]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": {"de": "test-de", "en": "test-en"},
+                            "content": "test_placeholder",
+                        },
+                        {"type": "text", "label": "test", "content": "test content"},
+                    ],
+                    "overflow": "text2",
+                }
+            }
+        },
+    ],
+)
+def test_schema_ticket_valid(layout_context, layout):
+    style = TicketTestStyle()
+    schema = style.layout_schema(layout_context)
+
+    jsonschema.validate(layout, schema)
+
+
+@pytest.mark.parametrize(
+    "layout",
+    [
+        {},
+        {"fieldgroups": {}},
+        {"fieldgroups": {"text1": {}}},
+        {"fieldgroups": {"text1": {"entries": []}}},
+        {"fieldgroups": {"text1": {"overflow": "test"}}},
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [{"type": "placeholder", "content": "test_placeholder"}]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": [],
+                            "content": "test_placeholder",
+                        }
+                    ]
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {"entries": [{"type": "text", "content": "test content"}]}
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": "test",
+                            "content": "test_placeholder",
+                        }
+                    ],
+                    "overflow": "invalid_group",
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": "test",
+                            "content": "test_placeholder",
+                        }
+                    ],
+                    "overflow": "image1",
+                }
+            }
+        },
+        {
+            "fieldgroups": {
+                "text1": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": "test",
+                            "content": "test_placeholder",
+                        }
+                    ],
+                },
+                "text2": {
+                    "entries": [
+                        {
+                            "type": "placeholder",
+                            "label": "test",
+                            "content": "test_placeholder",
+                        }
+                    ],
+                    "overflow": "text1",
+                },
+            }
+        },
+    ],
+)
+def test_schema_ticket_invalid(layout_context, layout):
+    style = TicketTestStyle()
+    schema = style.layout_schema(layout_context)
+
+    with pytest.raises(jsonschema.ValidationError):
+        jsonschema.validate(layout, schema)
+
+
+def test_style_representation():
+    style = TicketTestStyle()
+    style_dict = style.asdict()
+    assert style_dict["platform"] == "test_platform"
+    assert style_dict["identifier"] == "test_ticket"
+    assert style_dict["name"] == _("Test Wallet Style Ticket")
+
+    assert style_dict["fieldgroups"][0]["identifier"] == "text1"
+    assert style_dict["fieldgroups"][0]["name"] == "Text 1"
+    assert style_dict["fieldgroups"][0]["content_type"] == "text"
+    assert style_dict["fieldgroups"][0]["labels"] == True
+    assert style_dict["fieldgroups"][0]["required"] == True
+
+
+def test_layout_generate(layout_context):
+    style = TicketTestStyle()
+    layout = {
+        "fieldgroups": {
+            "text1": {
+                "entries": [
+                    {
+                        "type": "placeholder",
+                        "label": {"de": "test-de", "en": "test-en"},
+                        "content": "test_placeholder",
+                    },
+                    {"type": "text", "label": "test", "content": "test content"},
+                ],
+                "overflow": "text2",
+            }
+        }
+    }
+
+    pass_layout = PassLayout(style, layout)
+    generated_pass = pass_layout.generate(layout_context)
+
+    assert (
+        generated_pass
+        == "Generated Pass: Test Wallet Style Ticket\n\nGroup: Text 1\ntest-en: test placeholder\ntest: test content\n\n"
+    )
+