generated from westfarn/web_django_template
westfarn
dd37a2a268
## Summary - Slim the public contact form to email, interest, and message. Name, phone, and address live on the customer profile instead. - Customers can register, sign in, save shipping details, and view order history. Logged-in checkout creates a Stripe Customer and saves cards on Stripe (`setup_future_usage`); we only store `stripe_customer_id`. - Shipment tracking: EasyPost tracker lookup + webhook, plus paste-in numbers from Pirate Ship/Shippo. Customers see carrier status on their orders; `dispatch_due` refreshes open shipments. - Product reviews (1–5) only after a paid/fulfilled purchase of that product. Fixes #7 ## Test plan - [ ] Contact form submits with only email + message; extra name/phone/address fields are ignored - [ ] Register, sign in, save profile (name/phone/shipping) - [ ] Guest checkout still works; after signup, prior orders with that email show in history - [ ] Logged-in checkout prefills shipping and does not collect card data locally - [ ] Portal: buy label or paste a Pirate Ship tracking number, confirm status/events; customer order page shows tracking - [ ] Product page: non-buyers cannot review; buyers can leave one 1–5 star review - [ ] Non-staff users hitting `/portal/` redirect to `/account/` Reviewed-on: #8
53 lines
1.5 KiB
Python
53 lines
1.5 KiB
Python
from django.conf import settings
|
|
from django.shortcuts import redirect
|
|
|
|
|
|
class UnderConstructionMiddleware:
|
|
"""
|
|
When SITE_UNDER_CONSTRUCTION is true, redirect public traffic to the holding page.
|
|
|
|
Exempt: health, static/media, admin, auth login/logout, SMS webhook, and the
|
|
under-construction page itself (so notify-me POSTs work).
|
|
"""
|
|
|
|
EXEMPT_PREFIXES = (
|
|
"/healthz",
|
|
"/static/",
|
|
"/media/",
|
|
"/admin/",
|
|
"/accounts/login",
|
|
"/accounts/logout",
|
|
"/account/login",
|
|
"/account/logout",
|
|
"/account/register",
|
|
"/account/password-reset",
|
|
"/under-construction",
|
|
"/portal/messaging/webhooks/",
|
|
"/unsubscribe/",
|
|
"/api/address-suggest",
|
|
"/robots.txt",
|
|
"/sitemap.xml",
|
|
)
|
|
|
|
def __init__(self, get_response):
|
|
self.get_response = get_response
|
|
|
|
def __call__(self, request):
|
|
if settings.SITE_UNDER_CONSTRUCTION and not self._is_exempt(request):
|
|
return redirect("public:under_construction")
|
|
return self.get_response(request)
|
|
|
|
def _is_exempt(self, request) -> bool:
|
|
path = request.path
|
|
if any(path.startswith(prefix) for prefix in self.EXEMPT_PREFIXES):
|
|
return True
|
|
user = getattr(request, "user", None)
|
|
if (
|
|
user is not None
|
|
and getattr(user, "is_authenticated", False)
|
|
and getattr(user, "is_staff", False)
|
|
and path.startswith("/portal/")
|
|
):
|
|
return True
|
|
return False
|