# # This file is part of pretix (Community Edition). # # Copyright (C) 2014-2020 Raphael Michel and contributors # Copyright (C) 2020-2021 rami.io GmbH and contributors # # This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General # Public License as published by the Free Software Foundation in version 3 of the License. # # ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are # applicable granting you additional permissions and placing additional restrictions on your usage of this software. # Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive # this file, see . # # This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied # warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more # details. # # You should have received a copy of the GNU Affero General Public License along with this program. If not, see # . # # This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of # the Apache License 2.0 can be obtained at . # # This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A # full history of changes and contributors is available at . # # This file contains Apache-licensed contributions copyrighted by: FlaviaBastos, Tobias Kunze, jasonwaiting@live.hk # # Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is # distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations under the License. from django.conf.urls import include, url from django.views.decorators.csrf import csrf_exempt import pretix.presale.views.cart import pretix.presale.views.checkout import pretix.presale.views.customer import pretix.presale.views.event import pretix.presale.views.locale import pretix.presale.views.order import pretix.presale.views.organizer import pretix.presale.views.robots import pretix.presale.views.theme import pretix.presale.views.user import pretix.presale.views.waiting import pretix.presale.views.widget # This is not a valid Django URL configuration, as the final # configuration is done by the pretix.multidomain package. frame_wrapped_urls = [ url(r'^cart/remove$', pretix.presale.views.cart.CartRemove.as_view(), name='event.cart.remove'), url(r'^cart/voucher$', pretix.presale.views.cart.CartApplyVoucher.as_view(), name='event.cart.voucher'), url(r'^cart/clear$', pretix.presale.views.cart.CartClear.as_view(), name='event.cart.clear'), url(r'^cart/answer/(?P[^/]+)/$', pretix.presale.views.cart.AnswerDownload.as_view(), name='event.cart.download.answer'), url(r'^checkout/start$', pretix.presale.views.checkout.CheckoutView.as_view(), name='event.checkout.start'), url(r'^checkout/(?P[^/]+)/$', pretix.presale.views.checkout.CheckoutView.as_view(), name='event.checkout'), url(r'^redeem/?$', pretix.presale.views.cart.RedeemView.as_view(), name='event.redeem'), url(r'^seatingframe/$', pretix.presale.views.event.SeatingPlanView.as_view(), name='event.seatingplan'), url(r'^(?P[0-9]+)/seatingframe/$', pretix.presale.views.event.SeatingPlanView.as_view(), name='event.seatingplan'), url(r'^(?P[0-9]+)/$', pretix.presale.views.event.EventIndex.as_view(), name='event.index'), url(r'^waitinglist', pretix.presale.views.waiting.WaitingView.as_view(), name='event.waitinglist'), url(r'^$', pretix.presale.views.event.EventIndex.as_view(), name='event.index'), ] event_patterns = [ # Cart/checkout patterns are a bit more complicated, as they should have simple URLs like cart/clear in normal # cases, but need to have versions with unguessable URLs like w/8l4Y83XNonjLxoBb/cart/clear to be used in widget # mode. This is required to prevent all clickjacking and CSRF attacks that would otherwise be possible. # First, we define the normal version. The docstring of get_or_create_cart_id() has more information on this. url(r'', include(frame_wrapped_urls)), # Second, the widget version url(r'w/(?P[a-zA-Z0-9]{16})/', include(frame_wrapped_urls)), # Third, a fake version that is defined like the first (and never gets called), but makes reversing URLs easier url(r'(?P[_]{0})', include(frame_wrapped_urls)), # CartAdd goes extra since it also gets a csrf_exempt decorator in one of the cases url(r'^cart/add$', pretix.presale.views.cart.CartAdd.as_view(), name='event.cart.add'), url(r'^(?P[_]{0})cart/add$', pretix.presale.views.cart.CartAdd.as_view(), name='event.cart.add'), url(r'w/(?P[a-zA-Z0-9]{16})/cart/add', csrf_exempt(pretix.presale.views.cart.CartAdd.as_view()), name='event.cart.add'), url(r'unlock/(?P[a-z0-9]{64})/$', pretix.presale.views.user.UnlockHashView.as_view(), name='event.payment.unlock'), url(r'resend/$', pretix.presale.views.user.ResendLinkView.as_view(), name='event.resend_link'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/open/(?P[a-z0-9]+)/$', pretix.presale.views.order.OrderOpen.as_view(), name='event.order.open'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/$', pretix.presale.views.order.OrderDetails.as_view(), name='event.order'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/invoice$', pretix.presale.views.order.OrderInvoiceCreate.as_view(), name='event.order.geninvoice'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/change$', pretix.presale.views.order.OrderChange.as_view(), name='event.order.change'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/cancel$', pretix.presale.views.order.OrderCancel.as_view(), name='event.order.cancel'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/cancel/do$', pretix.presale.views.order.OrderCancelDo.as_view(), name='event.order.cancel.do'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/modify$', pretix.presale.views.order.OrderModify.as_view(), name='event.order.modify'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/pay/(?P[0-9]+)/$', pretix.presale.views.order.OrderPaymentStart.as_view(), name='event.order.pay'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/pay/(?P[0-9]+)/confirm$', pretix.presale.views.order.OrderPaymentConfirm.as_view(), name='event.order.pay.confirm'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/pay/(?P[0-9]+)/complete$', pretix.presale.views.order.OrderPaymentComplete.as_view(), name='event.order.pay.complete'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/pay/change', pretix.presale.views.order.OrderPayChangeMethod.as_view(), name='event.order.pay.change'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/answer/(?P[^/]+)/$', pretix.presale.views.order.AnswerDownload.as_view(), name='event.order.download.answer'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/download/(?P[^/]+)$', pretix.presale.views.order.OrderDownload.as_view(), name='event.order.download.combined'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/download/(?P[0-9]+)/(?P[^/]+)$', pretix.presale.views.order.OrderDownload.as_view(), name='event.order.download'), url(r'^order/(?P[^/]+)/(?P[A-Za-z0-9]+)/invoice/(?P[0-9]+)$', pretix.presale.views.order.InvoiceDownload.as_view(), name='event.invoice.download'), url(r'^ticket/(?P[^/]+)/(?P\d+)/(?P[A-Za-z0-9]+)/$', pretix.presale.views.order.OrderPositionDetails.as_view(), name='event.order.position'), url(r'^ticket/(?P[^/]+)/(?P\d+)/(?P[A-Za-z0-9]+)/download/(?P[0-9]+)/(?P[^/]+)$', pretix.presale.views.order.OrderPositionDownload.as_view(), name='event.order.position.download'), url(r'^ical/?$', pretix.presale.views.event.EventIcalDownload.as_view(), name='event.ical.download'), url(r'^ical/(?P[0-9]+)/$', pretix.presale.views.event.EventIcalDownload.as_view(), name='event.ical.download'), url(r'^auth/$', pretix.presale.views.event.EventAuth.as_view(), name='event.auth'), url(r'^widget/product_list$', pretix.presale.views.widget.WidgetAPIProductList.as_view(), name='event.widget.productlist'), url(r'^widget/v1.css$', pretix.presale.views.widget.widget_css, name='event.widget.css'), url(r'^(?P\d+)/widget/product_list$', pretix.presale.views.widget.WidgetAPIProductList.as_view(), name='event.widget.productlist'), ] organizer_patterns = [ url(r'^$', pretix.presale.views.organizer.OrganizerIndex.as_view(), name='organizer.index'), url(r'^events/ical/$', pretix.presale.views.organizer.OrganizerIcalDownload.as_view(), name='organizer.ical'), url(r'^widget/product_list$', pretix.presale.views.widget.WidgetAPIProductList.as_view(), name='organizer.widget.productlist'), url(r'^widget/v1.css$', pretix.presale.views.widget.widget_css, name='organizer.widget.css'), url(r'^account/login$', pretix.presale.views.customer.LoginView.as_view(), name='organizer.customer.login'), url(r'^account/logout$', pretix.presale.views.customer.LogoutView.as_view(), name='organizer.customer.logout'), url(r'^account/register$', pretix.presale.views.customer.RegistrationView.as_view(), name='organizer.customer.register'), url(r'^account/pwreset$', pretix.presale.views.customer.ResetPasswordView.as_view(), name='organizer.customer.resetpw'), url(r'^account/pwrecover$', pretix.presale.views.customer.SetPasswordView.as_view(), name='organizer.customer.recoverpw'), url(r'^account/activate$', pretix.presale.views.customer.SetPasswordView.as_view(), name='organizer.customer.activate'), url(r'^account/password$', pretix.presale.views.customer.ChangePasswordView.as_view(), name='organizer.customer.password'), url(r'^account/change$', pretix.presale.views.customer.ChangeInformationView.as_view(), name='organizer.customer.change'), url(r'^account/confirmchange$', pretix.presale.views.customer.ConfirmChangeView.as_view(), name='organizer.customer.change.confirm'), url(r'^account/membership/(?P\d+)/$', pretix.presale.views.customer.MembershipUsageView.as_view(), name='organizer.customer.membership'), url(r'^account/$', pretix.presale.views.customer.ProfileView.as_view(), name='organizer.customer.profile'), ] locale_patterns = [ url(r'^locale/set$', pretix.presale.views.locale.LocaleSet.as_view(), name='locale.set'), url(r'^robots.txt$', pretix.presale.views.robots.robots_txt, name='robots.txt'), url(r'^browserconfig.xml$', pretix.presale.views.theme.browserconfig_xml, name='browserconfig.xml'), url(r'^site.webmanifest$', pretix.presale.views.theme.webmanifest, name='site.webmanifest'), url(r'^widget/v1\.(?P[a-zA-Z0-9_\-]+)\.js$', pretix.presale.views.widget.widget_js, name='widget.js'), ]