Commit graph

55 commits

Author SHA1 Message Date
987f46767f Enable gzip & fix favicon
modified:   Caddyfile
2022-06-29 14:03:41 -04:00
35da09bf3c w00t this Caddyfile was able to work in development!
modified:   .gitignore
	new file:   Caddyfile
2022-06-29 13:19:01 -04:00
36930dffdd implements ask-for-on-demand-tls for testing Caddy.
modified:   README.rst
	modified:   make_post_sell/routes.py
	modified:   make_post_sell/views/misc.py
2022-06-29 10:27:23 -04:00
3c189c2192 Stop swallowing errors on markdown preview endpoint.
modified:   make_post_sell/views/misc.py
2022-06-28 15:18:36 -04:00
be73a16228 Merge branch 'implement-shop-user-roles' into 'master'
shop user roles: owners, editors, members
shop user roles: owners, editors, members

Huge pull requests.

In this PR we implement role based authorization by extending the "user shop" table to include a new field for tracking a rudimentary role id integer.

For now the integers are from 0,1,2

0 == owner (root) 1 == editor (virtual assistant) 2 == member (viewer)

For now the member role doesn't provide any additional behavior but could be added to a future enhancement.

We have now separated out privileged views into requiring the user to be part of the owner role or editor role depending on the route.

We have created a new route called shop_users & it works for adding or removing new users into the active shop. As such for example, only users with owner access may access the new shop_users view and as such only they can add or remove users from the shop.
2022-06-28 17:28:31 +00:00
259b090825 shop user roles: owners, editors, members
shop user roles: owners, editors, members

Huge pull requests.

In this PR we implement role based authorization by extending the "user shop" table to include a new field for tracking a rudimentary role id integer.

For now the integers are from 0,1,2

0 == owner (root) 1 == editor (virtual assistant) 2 == member (viewer)

For now the member role doesn't provide any additional behavior but could be added to a future enhancement.

We have now separated out privileged views into requiring the user to be part of the owner role or editor role depending on the route.

We have created a new route called shop_users & it works for adding or removing new users into the active shop. As such for example, only users with owner access may access the new shop_users view and as such only they can add or remove users from the shop.
2022-06-28 17:28:31 +00:00
7364aca910 modified: make_post_sell/lib/mail_messages.py
modified:   make_post_sell/lib/render.py
2022-06-19 09:18:27 -04:00
36d5175ea2 Merge branch 'develop' into 'master'
commit test to hamper brute force code breaking

See merge request engineering/make-post-sell/make_post_sell!5
2022-06-11 13:08:40 +00:00
f0970d54e8 commit test to hamper brute force code breaking 2022-06-11 13:08:40 +00:00
0899dc756c Update .gitlab-ci.yml file 2022-06-10 23:35:39 +00:00
58cf0ad6c1 try to use a child pipeline to fix artifact link race condition.
new file:   .gitlab-ci.deploy.yml
	modified:   .gitlab-ci.yml
2022-06-10 19:27:13 -04:00
1ceeba80a9 Merge branch 'rjb-throttle-verification-challenge-attempts' into 'master'
Rjb throttle verification challenge attempts

See merge request engineering/make-post-sell/make_post_sell!4
2022-06-10 00:59:48 +00:00
a24c342f30 Rjb throttle verification challenge attempts 2022-06-10 00:59:48 +00:00
50746f74a5 bump... 2022-06-09 19:57:00 +00:00
62ecc43ae2 Merge branch 'rjb-email-verify-refactor-to-six-digits' into 'master'
WIP -  challenge codes verification

See merge request engineering/make-post-sell/make_post_sell!3
2022-06-09 19:34:02 +00:00
e4f6952a5f completed the feature I think.
modified:   make_post_sell/templates/join-or-log-in.j2
	modified:   make_post_sell/templates/verification-challenge.j2
	modified:   make_post_sell/views/authentication.py
2022-06-09 15:30:29 -04:00
41d7b643b6 Update .gitlab-ci.yml file 2022-06-09 19:04:02 +00:00
5bfa5dd4a0 Update .gitlab-ci.yml file 2022-06-09 18:54:18 +00:00
470bdfb0bf Update .gitlab-ci.yml file 2022-06-09 18:46:42 +00:00
51c97c292f Fix tests!
modified:   make_post_sell/tests/test_functional.py
	modified:   make_post_sell/tests/test_models.py
2022-06-09 13:41:32 -04:00
2b6fab9461 It's happening! Seems to work.
I do think we need some mechanism to throttle the speed of attempts
to prevent brute force. This would be a separate PR.

	modified:   models/user.py
	modified:   templates/join-or-log-in.j2
	modified:   templates/verification-challenge.j2
	modified:   views/authentication.py
2022-06-09 13:06:20 -04:00
8042bb863e rough edges - verification challenge codes working
modified:   lib/mail.py
	modified:   lib/mail_messages.py
	modified:   models/user.py
	modified:   routes.py
	modified:   templates/join-or-log-in.j2
	new file:   templates/verification-challenge.j2
	modified:   views/authentication.py
2022-06-09 10:56:49 -04:00
e189c32658 Update .gitlab-ci.yml file 2022-06-07 12:12:23 +00:00
3132da631e Update .gitlab-ci.yml file 2022-06-07 12:06:39 +00:00
15a33b79f0 another test
modified:   README.rst
2022-06-06 19:36:58 -04:00
283dfefc6c Update README.rst 2022-06-06 23:12:21 +00:00
aa051792d5 Merge branch 'rjb-issue-6' into 'master'
only display products for active shop.

See merge request engineering/make-post-sell/make_post_sell!2
2022-06-06 22:56:49 +00:00
f8f54b83f2 only display products for active shop. 2022-06-06 22:56:49 +00:00
8b7c89f222 Update .gitlab-ci.yml file 2022-06-06 18:34:22 +00:00
18cae142ea Update .gitlab-ci.yml file 2022-06-06 18:32:55 +00:00
0f8e20d879 Update .gitlab-ci.yml file 2022-06-06 18:31:46 +00:00
058e970d33 Merge branch 'develop-95983' into 'master'
update views/shop.py make newly created shop active

Closes #5

See merge request engineering/make-post-sell/make_post_sell!1
2022-06-03 23:43:23 +00:00
65d0690401 update views/shop.py make newly created shop active 2022-06-03 21:38:56 +00:00
3b02ee1086 Update .gitlab-ci.yml file 2022-06-03 18:40:13 +00:00
af705be588 Update .gitlab-ci.yml file 2022-06-03 18:37:06 +00:00
0e3cf61776 Update .gitlab-ci.yml file 2022-06-03 18:36:02 +00:00
1943b093ca Update .gitlab-ci.yml file 2022-06-03 18:26:26 +00:00
de22dae86d modified: make_post_sell/static/favicon.ico 2022-05-31 12:26:01 -04:00
e841b80d9c disable dkim for dev envs
modified:   development.ini
2022-05-31 11:47:46 -04:00
8a6b5ebb7d custom saas ribbon & logo configured from ini
modified:   development.ini
	new file:   make_post_sell/static/memopoly.png
	modified:   make_post_sell/templates/base.j2
	modified:   make_post_sell/templates/snippets/ribbon.j2
2022-05-31 11:45:55 -04:00
501210861c fix is_saas_domain to work for both apex & www
modified:   make_post_sell/request_methods.py
2022-05-30 12:02:23 -04:00
603e892d4f install pynacl for ed dkim support
modified:   journal.rst
	modified:   requirements.py3.txt
	modified:   requirements.txt
2022-05-28 17:35:57 -04:00
aabcc6e13b modified: journal.rst 2022-05-26 18:03:42 -04:00
bd586ff02e pynacl
modified:   requirements.txt
2022-05-26 17:01:13 -04:00
579df0809b configure dkim_signing_algorithm
modified:   .gitignore
	modified:   development.ini
2022-05-26 16:47:59 -04:00
d484a2cc98 enable extras for dkimpy for ed25519 support
modified:   requirements.txt
2022-05-26 14:58:00 -04:00
00317c85ae modified: Makefile 2022-05-25 18:08:20 -04:00
4111a4eaed trying to fix tarbal local of build 2022-05-25 12:48:57 -04:00
459ae6f77b move virtualenv to /opt/make_post_sell
modified:   .gitlab-ci.yml
2022-05-25 11:22:20 -04:00
4142476f7e try it out.
modified:   make_post_sell/models/product.py
	modified:   make_post_sell/models/shop.py
	modified:   make_post_sell/models/user.py
	new file:   make_post_sell/scripts/alembic/versions/c263b4fba9e7_new_ux_columns.py
	deleted:    make_post_sell/static/css/alerts.css
	modified:   make_post_sell/static/css/common.css
	deleted:    make_post_sell/static/css/lib.css
	deleted:    make_post_sell/static/css/mps.css
	modified:   make_post_sell/templates/base.j2
	modified:   make_post_sell/templates/cart.j2
	modified:   make_post_sell/templates/product_edit.j2
	modified:   make_post_sell/templates/shop_settings.j2
	modified:   make_post_sell/templates/snippets/search.j2
	modified:   make_post_sell/templates/user_settings.j2
	modified:   make_post_sell/views/shop.py
	modified:   requirements.txt
2022-04-29 11:54:57 -04:00