Files
PyRIGS/RIGS/urls.py
AJ 08171767a0 Port to Django 5.2 (#635)
* Port to Django 5.2

* Pin pluggy to 1.2.0

Any newer and the mystery importlib metadata error appears. Weird! >_>

* Update for premailer changed default

* Update view logic for is_ajax being changed to a template context processor

* Port a few more tests to pytest proper

Having two distinct test flavours is giving me a headache

* Version 1 dockerfile

Makes a VERY big image, I suspect we can optimise this a lot...

* Optimise dockerfile a little lot a bit

* fix(users): change logout link to POST request

* fix(tests): fix some syntax errors in test code

still got lots of failed tests :(

* fix: replace deprecated Django APIs

* ci: update Dockerfile

* ci: update Dockerfile

* fix(dependencies+tests): update EoL/vulnerable dependencies and improve test stability

* Upgrade Python from 3.10 to 3.12
* Update frontend dependencies, replace node-sass with sass

* chore(logging): ignore dangling obj reference warning from pypdf

* ci: update compose.yml for prod deployment

- Add Nginx as a reverse proxy
- Add cert-selfsign.sh for generating self-signed certificates
- Add certbot-issue.sh for Let's Encrypt certificate issuance and renewal
- Add cron-install.sh and cron-uninstall.sh for system cron management
- Add .env.example as an environment variable template

* style: reformat code

* ci: add more sleep trying to pass tests

* ci: ignore browser-based tests during ci testing

* fix: create home for the new user during Dockerfile building

* chore: remove heroku conf file

* fix: RIGS not franken anymore

* fix: restore is_ajax as a boolean and split out the context processor

* test: remove Selenium interaction tests and their CI workarounds

* fix: harden production settings (CSRF origins, env casts, ADMINS) and drop dead debug toolbar code

* deploy: serve static files from nginx, pin PGDATA, and make cert scripts loud on failure

* build: switch .dockerignore to an allowlist

* build: drop unused dependencies, soft-pin the rest and target Python 3.14

* build: move image to Python 3.14 / Node 24 and force DEBUG off

* ci: add dependabot config for uv, npm, docker and actions

* build: narrow Sass deprecation silencing to @import and require Node 24

* build: provide placeholder env for collectstatic now that DEBUG is off in the image

* deploy: add plain-HTTP nginx config for local development and use it in compose

* deploy: remove self-signed cert script

* build: make the image multi-arch with official node and python base images

* ci: lint and test on PRs, build the image on PRs and push it to GHCR on master

* docs: add local running and sample data instructions

* fix: report a form error instead of crashing when big power has no Power MIC

* fix: upgrade pypdf and urllib3 to patched releases

* fix: apply non-breaking npm audit fixes

* fix: strip whitespace in ALLOWED_HOSTS and drop misleading HSTS preload

* deploy: add a pyrigs healthcheck and make nginx wait for it

* build: pin the uv image version

* fix: correct the check-in person picker condition and use BeautifulSoup's string argument

* refactor: replace unique_together with UniqueConstraint

* build: replace pycodestyle with ruff and fix what it found

Removes unused imports and variables, and fixes a few real problems it
surfaced:
- EventCheckIn.active() referenced an undefined name and raised NameError;
  it now returns whether the check-in has no end time
- RIGS.admin defined EventChecklistAdmin twice; the second is now
  PowerTestRecordAdmin
- RIGS/tests/conftest.py used date/timedelta without importing them
- the signal-registering imports in apps.py are kept with noqa

pycodestyle config in setup.cfg is dropped.

* style: format the codebase with ruff

* style: normalise line endings, trailing whitespace and end-of-file newlines

* ci: run ruff and file hygiene through prek, and document it

---------

Co-authored-by: Hang <me@hangxu.me>
Co-authored-by: Joe Banks <joe@jb3.dev>
2026-10-01 23:43:41 +01:00

270 lines
10 KiB
Python

from django.contrib.auth.decorators import login_required
from django.urls import path, re_path
from django.views.decorators.clickjacking import xframe_options_exempt
from django.views.generic import RedirectView
from PyRIGS.decorators import api_key_required, has_oembed, permission_required_with_403
from . import views
urlpatterns = [
# People
path("people/", permission_required_with_403("RIGS.view_person")(views.PersonList.as_view()), name="person_list"),
path(
"people/add/",
permission_required_with_403("RIGS.add_person")(views.PersonCreate.as_view()),
name="person_create",
),
path(
"people/<int:pk>/",
permission_required_with_403("RIGS.view_person")(views.PersonDetail.as_view()),
name="person_detail",
),
path(
"people/<int:pk>/edit/",
permission_required_with_403("RIGS.change_person")(views.PersonUpdate.as_view()),
name="person_update",
),
# Organisations
path(
"organisations/",
permission_required_with_403("RIGS.view_organisation")(views.OrganisationList.as_view()),
name="organisation_list",
),
path(
"organisations/add/",
permission_required_with_403("RIGS.add_organisation")(views.OrganisationCreate.as_view()),
name="organisation_create",
),
path(
"organisations/<int:pk>/",
permission_required_with_403("RIGS.view_organisation")(views.OrganisationDetail.as_view()),
name="organisation_detail",
),
path(
"organisations/<int:pk>/edit/",
permission_required_with_403("RIGS.change_organisation")(views.OrganisationUpdate.as_view()),
name="organisation_update",
),
# Venues
path("venues/", permission_required_with_403("RIGS.view_venue")(views.VenueList.as_view()), name="venue_list"),
path(
"venues/add/", permission_required_with_403("RIGS.add_venue")(views.VenueCreate.as_view()), name="venue_create"
),
path(
"venues/<int:pk>/",
permission_required_with_403("RIGS.view_venue")(views.VenueDetail.as_view()),
name="venue_detail",
),
path(
"venues/<int:pk>/edit/",
permission_required_with_403("RIGS.change_venue")(views.VenueUpdate.as_view()),
name="venue_update",
),
# Rigboard
path("rigboard/", login_required(views.RigboardIndex.as_view()), name="rigboard"),
path("rigboard/calendar/", login_required()(views.WebCalendar.as_view()), name="web_calendar"),
re_path(
r"^rigboard/calendar/(?P<view>(month|week|day))/$",
login_required()(views.WebCalendar.as_view()),
name="web_calendar",
),
re_path(
r"^rigboard/calendar/(?P<view>(month|week|day))/(?P<date>(\d{4}-\d{2}-\d{2}))/$",
login_required()(views.WebCalendar.as_view()),
name="web_calendar",
),
path("rigboard/archive/", RedirectView.as_view(permanent=True, pattern_name="event_archive")),
path("event/<int:pk>/", has_oembed(oembed_view="event_oembed")(views.EventDetail.as_view()), name="event_detail"),
path(
"event/create/",
permission_required_with_403("RIGS.add_event")(views.EventCreate.as_view()),
name="event_create",
),
path("event/archive/", login_required()(views.EventArchive.as_view()), name="event_archive"),
path(
"event/<int:pk>/embed/",
xframe_options_exempt(login_required(login_url="/user/login/embed/")(views.EventEmbed.as_view())),
name="event_embed",
),
path("event/<int:pk>/oembed_json/", views.EventOEmbed.as_view(), name="event_oembed"),
path(
"event/<int:pk>/print/",
permission_required_with_403("RIGS.view_event")(views.EventPrint.as_view()),
name="event_print",
),
path(
"event/<int:pk>/edit/",
permission_required_with_403("RIGS.change_event")(views.EventUpdate.as_view()),
name="event_update",
),
path(
"event/<int:pk>/duplicate/",
permission_required_with_403("RIGS.add_event")(views.EventDuplicate.as_view()),
name="event_duplicate",
),
# Event H&S
path("event/hs/", permission_required_with_403("RIGS.view_riskassessment")(views.HSList.as_view()), name="hs_list"),
path(
"event/<int:pk>/ra/",
permission_required_with_403("RIGS.add_riskassessment")(views.EventRiskAssessmentCreate.as_view()),
name="event_ra",
),
path("event/ra/<int:pk>/", login_required(views.EventRiskAssessmentDetail.as_view()), name="ra_detail"),
path(
"event/ra/<int:pk>/edit/",
permission_required_with_403("RIGS.change_riskassessment")(views.EventRiskAssessmentEdit.as_view()),
name="ra_edit",
),
path(
"event/ra/<int:pk>/review/",
permission_required_with_403("RIGS.review_riskassessment")(views.MarkReviewed.as_view()),
name="ra_review",
kwargs={"model": "RiskAssessment"},
),
path(
"event/ra/<int:pk>/print/",
permission_required_with_403("RIGS.view_riskassessment")(views.RAPrint.as_view()),
name="ra_print",
),
path(
"event/<int:pk>/checklist/",
permission_required_with_403("RIGS.add_eventchecklist")(views.EventChecklistCreate.as_view()),
name="event_ec",
),
path("event/checklist/<int:pk>/", login_required(views.EventChecklistDetail.as_view()), name="ec_detail"),
path(
"event/checklist/<int:pk>/edit/",
permission_required_with_403("RIGS.change_eventchecklist")(views.EventChecklistEdit.as_view()),
name="ec_edit",
),
path(
"event/checklist/<int:pk>/review/",
permission_required_with_403("RIGS.review_eventchecklist")(views.MarkReviewed.as_view()),
name="ec_review",
kwargs={"model": "EventChecklist"},
),
path(
"event/<int:pk>/power/",
permission_required_with_403("RIGS.add_powertestrecord")(views.PowerTestCreate.as_view()),
name="event_pt",
),
path("event/power/<int:pk>/", login_required(views.PowerTestDetail.as_view()), name="pt_detail"),
path(
"event/power/<int:pk>/edit/",
permission_required_with_403("RIGS.change_powertestrecord")(views.PowerTestEdit.as_view()),
name="pt_edit",
),
path(
"event/power/<int:pk>/review/",
permission_required_with_403("RIGS.review_power")(views.MarkReviewed.as_view()),
name="pt_review",
kwargs={"model": "PowerTestRecord"},
),
path(
"event/power/<int:pk>/print/",
permission_required_with_403("RIGS.view_powertestrecord")(views.PowerPrint.as_view()),
name="pt_print",
),
path("event/<int:pk>/checkin/", login_required(views.EventCheckIn.as_view()), name="event_checkin"),
path("event/checkout/", login_required(views.EventCheckOut.as_view()), name="event_checkout"),
path("event/<int:pk>/checkin/edit/", login_required(views.EventCheckInEdit.as_view()), name="edit_checkin"),
path(
"event/<int:pk>/checkin/add/",
login_required(views.EventCheckInOverride.as_view()),
name="event_checkin_override",
),
path(
"event/<int:pk>/thread/",
permission_required_with_403("RIGS.change_event")(views.CreateForumThread.as_view()),
name="event_thread",
),
path("event/webhook/", views.RecieveForumWebhook.as_view(), name="webhook_recieve"),
# Finance
path(
"invoice/",
permission_required_with_403("RIGS.view_invoice")(views.InvoiceDashboard.as_view()),
name="invoice_dashboard",
),
path(
"invoice/outstanding",
permission_required_with_403("RIGS.view_invoice")(views.InvoiceOutstanding.as_view()),
name="invoice_list",
),
path(
"invoice/archive/",
permission_required_with_403("RIGS.view_invoice")(views.InvoiceArchive.as_view()),
name="invoice_archive",
),
path(
"invoice/waiting/",
permission_required_with_403("RIGS.add_invoice")(views.InvoiceWaiting.as_view()),
name="invoice_waiting",
),
path(
"event/<int:pk>/invoice/",
permission_required_with_403("RIGS.add_invoice")(views.InvoiceEvent.as_view()),
name="invoice_event",
),
path(
"event/<int:pk>/invoice/void",
permission_required_with_403("RIGS.add_invoice")(views.InvoiceEvent.as_view()),
name="invoice_event_void",
kwargs={"void": True},
),
path(
"invoice/<int:pk>/",
permission_required_with_403("RIGS.view_invoice")(views.InvoiceDetail.as_view()),
name="invoice_detail",
),
path(
"invoice/<int:pk>/print/",
permission_required_with_403("RIGS.view_invoice")(views.InvoicePrint.as_view()),
name="invoice_print",
),
path(
"invoice/<int:pk>/void/",
permission_required_with_403("RIGS.change_invoice")(views.InvoiceVoid.as_view()),
name="invoice_void",
),
path(
"invoice/<int:pk>/delete/",
permission_required_with_403("RIGS.change_invoice")(views.InvoiceDelete.as_view()),
name="invoice_delete",
),
path(
"payment/create/",
permission_required_with_403("RIGS.add_payment")(views.PaymentCreate.as_view()),
name="payment_create",
),
path(
"payment/<int:pk>/delete/",
permission_required_with_403("RIGS.add_payment")(views.PaymentDelete.as_view()),
name="payment_delete",
),
# Client event authorisation
path(
"event/<pk>/auth/",
permission_required_with_403("RIGS.change_event")(views.EventAuthorisationRequest.as_view()),
name="event_authorise_request",
),
path(
"event/<int:pk>/auth/preview/",
permission_required_with_403("RIGS.change_event")(views.EventAuthoriseRequestEmailPreview.as_view()),
name="event_authorise_preview",
),
re_path(r"^event/(?P<pk>\d+)/(?P<hmac>[-:\w]+)/$", views.EventAuthorise.as_view(), name="event_authorise"),
re_path(
r"^event/(?P<pk>\d+)/(?P<hmac>[-:\w]+)/preview/$",
views.EventAuthorise.as_view(preview=True),
name="event_authorise_form_preview",
),
# ICS Calendar - API key authentication
re_path(
r"^ical/(?P<api_pk>\d+)/(?P<api_key>\w+)/rigs.ics$", api_key_required(views.CalendarICS()), name="ics_calendar"
),
# Legacy URLs
path("rig/show/<int:pk>/", RedirectView.as_view(permanent=True, pattern_name="event_detail")),
path("bookings/", RedirectView.as_view(permanent=True, pattern_name="rigboard")),
path("bookings/past/", RedirectView.as_view(permanent=True, pattern_name="event_archive")),
]