import datetime from decimal import Decimal from bs4 import BeautifulSoup from django.test import TestCase from django.utils.timezone import now from pretix.base.models import ( Event, Item, ItemCategory, ItemVariation, Order, OrderPosition, Organizer, Question, Quota, ) from pretix.base.services.invoices import generate_invoice class OrdersTest(TestCase): def setUp(self): super().setUp() self.orga = Organizer.objects.create(name='CCC', slug='ccc') self.event = Event.objects.create( organizer=self.orga, name='30C3', slug='30c3', date_from=datetime.datetime(2013, 12, 26, tzinfo=datetime.timezone.utc), plugins='pretix.plugins.stripe,pretix.plugins.banktransfer,tests.testdummy', live=True ) self.event.settings.set('payment_banktransfer__enabled', True) self.event.settings.set('ticketoutput_testdummy__enabled', True) self.category = ItemCategory.objects.create(event=self.event, name="Everything", position=0) self.quota_shirts = Quota.objects.create(event=self.event, name='Shirts', size=2) self.shirt = Item.objects.create(event=self.event, name='T-Shirt', category=self.category, default_price=12) self.quota_shirts.items.add(self.shirt) self.shirt_red = ItemVariation.objects.create(item=self.shirt, default_price=14, value="Red") var2 = ItemVariation.objects.create(item=self.shirt, value="Blue") self.quota_shirts.variations.add(self.shirt_red) self.quota_shirts.variations.add(var2) self.quota_tickets = Quota.objects.create(event=self.event, name='Tickets', size=5) self.ticket = Item.objects.create(event=self.event, name='Early-bird ticket', category=self.category, default_price=23, admission=True) self.quota_tickets.items.add(self.ticket) self.event.settings.set('attendee_names_asked', True) self.question = Question.objects.create(question='Foo', type=Question.TYPE_STRING, event=self.event, required=False) self.ticket.questions.add(self.question) self.order = Order.objects.create( status=Order.STATUS_PENDING, event=self.event, email='admin@localhost', datetime=now() - datetime.timedelta(days=3), expires=now() + datetime.timedelta(days=11), total=Decimal("23"), payment_provider='banktransfer', locale='en' ) self.ticket_pos = OrderPosition.objects.create( order=self.order, item=self.ticket, variation=None, price=Decimal("14"), attendee_name="Peter" ) self.not_my_order = Order.objects.create( status=Order.STATUS_PENDING, event=self.event, email='user@localhost', datetime=now() - datetime.timedelta(days=3), expires=now() + datetime.timedelta(days=11), total=Decimal("23") ) def test_unknown_order(self): response = self.client.get( '/%s/%s/order/ABCDE/123/' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/123/' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/ABCDE/123/pay' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/123/pay' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/ABCDE/123/pay/confirm' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/123/pay/confirm' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/ABCDE/123/modify' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/123/modify' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/ABCDE/123/cancel' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/123/cancel' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 response = self.client.post( '/%s/%s/order/ABCDE/123/cancel/do' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.post( '/%s/%s/order/%s/123/cancel/do' % (self.orga.slug, self.event.slug, self.not_my_order.code) ) assert response.status_code == 404 def test_orders_detail(self): response = self.client.get( '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret) ) assert response.status_code == 200 doc = BeautifulSoup(response.rendered_content) assert len(doc.select(".cart-row")) > 0 assert "pending" in doc.select(".label-warning")[0].text.lower() def test_orders_modify_invalid(self): self.order.status = Order.STATUS_REFUNDED self.order.save() self.client.get( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret) ) self.order = Order.objects.get(id=self.order.id) assert self.order.status == Order.STATUS_REFUNDED def test_orders_modify_attendee_optional(self): self.event.settings.set('attendee_names_asked', True) self.event.settings.set('attendee_names_required', False) response = self.client.get( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret)) doc = BeautifulSoup(response.rendered_content) self.assertEqual(len(doc.select('input[name=%s-attendee_name]' % self.ticket_pos.id)), 1) # Not all fields filled out, expect success response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-attendee_name' % self.ticket_pos.id: '', }, follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) self.ticket_pos = OrderPosition.objects.get(id=self.ticket_pos.id) assert self.ticket_pos.attendee_name in (None, '') def test_orders_modify_attendee_required(self): self.event.settings.set('attendee_names_asked', True) self.event.settings.set('attendee_names_required', True) response = self.client.get( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret)) doc = BeautifulSoup(response.rendered_content) self.assertEqual(len(doc.select('input[name=%s-attendee_name]' % self.ticket_pos.id)), 1) # Not all required fields filled out, expect failure response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-attendee_name' % self.ticket_pos.id: '', }, follow=True) doc = BeautifulSoup(response.rendered_content) self.assertGreaterEqual(len(doc.select('.has-error')), 1) response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-attendee_name' % self.ticket_pos.id: 'Peter', }, follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) self.ticket_pos = OrderPosition.objects.get(id=self.ticket_pos.id) assert self.ticket_pos.attendee_name == 'Peter' def test_orders_questions_optional(self): self.event.settings.set('attendee_names_asked', False) self.event.settings.set('attendee_names_required', False) response = self.client.get( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret)) doc = BeautifulSoup(response.rendered_content) self.assertEqual(len(doc.select('input[name=%s-question_%s]' % ( self.ticket_pos.id, self.question.id))), 1) # Not all fields filled out, expect success response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-question_%s' % (self.ticket_pos.id, self.question.id): '', }, follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) assert not self.ticket_pos.answers.filter(question=self.question).exists() def test_orders_questions_required(self): self.event.settings.set('attendee_names_asked', False) self.event.settings.set('attendee_names_required', False) self.question.required = True self.question.save() response = self.client.get('/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret)) doc = BeautifulSoup(response.rendered_content) self.assertEqual(len(doc.select('input[name=%s-question_%s]' % ( self.ticket_pos.id, self.question.id))), 1) # Not all required fields filled out, expect failure response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-question_%s' % (self.ticket_pos.id, self.question.id): '', }, follow=True) doc = BeautifulSoup(response.rendered_content) self.assertGreaterEqual(len(doc.select('.has-error')), 1) response = self.client.post( '/%s/%s/order/%s/%s/modify' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { '%s-question_%s' % (self.ticket_pos.id, self.question.id): 'ABC', }, follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) assert self.ticket_pos.answers.get(question=self.question).answer == 'ABC' def test_orders_cancel_invalid(self): self.order.status = Order.STATUS_PAID self.order.save() r = self.client.post( '/%s/%s/order/%s/%s/cancel' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { }, follow=True) assert 'btn-danger' not in r.rendered_content self.client.post( '/%s/%s/order/%s/%s/cancel/do' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { }, follow=True) self.order.refresh_from_db() assert self.order.status == Order.STATUS_PAID def test_orders_cancel(self): response = self.client.get( '/%s/%s/order/%s/%s/cancel' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret) ) assert response.status_code == 200 response = self.client.post( '/%s/%s/order/%s/%s/cancel/do' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { }, follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) self.order.refresh_from_db() assert self.order.status == Order.STATUS_CANCELED def test_orders_cancel_forbidden(self): self.event.settings.set('cancel_allow_user', False) self.client.post( '/%s/%s/order/%s/%s/cancel/do' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), { }, follow=True) self.order.refresh_from_db() assert self.order.status == Order.STATUS_PENDING def test_invoice_create_notallowed(self): self.event.settings.set('invoice_generate', 'no') response = self.client.post( '/%s/%s/order/%s/%s/invoice' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), {}, follow=True) assert 'alert-danger' in response.rendered_content def test_invoice_create_duplicate(self): self.event.settings.set('invoice_generate', 'user') generate_invoice(self.order) response = self.client.post( '/%s/%s/order/%s/%s/invoice' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), {}, follow=True) assert 'alert-danger' in response.rendered_content def test_invoice_create_wrong_secret(self): self.event.settings.set('invoice_generate', 'user') generate_invoice(self.order) response = self.client.post( '/%s/%s/order/%s/%s/invoice' % (self.orga.slug, self.event.slug, self.order.code, '1234'), {}) assert 404 == response.status_code def test_invoice_create_ok(self): self.event.settings.set('invoice_generate', 'user') response = self.client.post( '/%s/%s/order/%s/%s/invoice' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), {}, follow=True) assert 'alert-success' in response.rendered_content assert self.order.invoices.exists() def test_orders_download(self): self.event.settings.set('ticket_download', True) del self.event.settings['ticket_download_date'] response = self.client.get( '/%s/%s/order/%s/%s/download/pdf' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), follow=True) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) response = self.client.get( '/%s/%s/order/ABC/123/download/testdummy' % (self.orga.slug, self.event.slug) ) assert response.status_code == 404 response = self.client.get( '/%s/%s/order/%s/%s/download/testdummy' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), follow=True ) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) self.order.status = Order.STATUS_PAID self.order.save() response = self.client.get( '/%s/%s/order/%s/%s/download/testdummy' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), ) assert response.status_code == 302 self.event.settings.set('ticket_download_date', now() + datetime.timedelta(days=1)) response = self.client.get( '/%s/%s/order/%s/%s/download/testdummy' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), follow=True ) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200) del self.event.settings['ticket_download_date'] response = self.client.get( '/%s/%s/order/%s/%s/download/testdummy' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), ) assert response.status_code == 302 self.event.settings.set('ticket_download', False) response = self.client.get( '/%s/%s/order/%s/%s/download/testdummy' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), follow=True ) self.assertRedirects(response, '/%s/%s/order/%s/%s/' % (self.orga.slug, self.event.slug, self.order.code, self.order.secret), target_status_code=200)