Template
westfarn
f3e34f5099
## Summary - Closes #9. Port shop-gated buyer accounts (register/login/profile, password reset, order history), purchase-gated reviews, and Stripe customer ids. Cards stay on Stripe. - Slim public contact form to email + interest + message. Shipping tracking status, scan events, paste-in numbers, and EasyPost webhook when FEATURE_SHIPPING is on. - Add template-neutral `seed_demo` (generic SKUs, demo shoppers, guest orders, tracking stubs). Prod refused. `--reset` deletes tagged demo rows after invoices. ## Test plan - [ ] `cd site && uv run python manage.py test` (173 tests passed locally) - [ ] Shop on: `/account/register`, login, profile, password reset, claim guest orders by email - [ ] Shop off: `/account/` URLs absent; Sign in / Account links hidden - [ ] Checkout as logged-in buyer stores `Order.user` and Stripe customer id; product review only after paid purchase - [ ] Shipping on: portal paste-in tracking + EasyPost webhook updates status; shipping off: orders still work without tracking UI - [ ] `seed_demo` refused in prod; `--reset` rebuilds tagged catalog/shoppers without deleting staff invoices Reviewed-on: #10
28 lines
905 B
Python
28 lines
905 B
Python
from django.shortcuts import redirect
|
|
|
|
|
|
class PortalStaffMiddleware:
|
|
"""Keep customer accounts out of the staff portal. Webhooks stay public."""
|
|
|
|
PORTAL_PREFIX = "/portal/"
|
|
WEBHOOK_INFIX = "/webhooks/"
|
|
|
|
def __init__(self, get_response):
|
|
self.get_response = get_response
|
|
|
|
def __call__(self, request):
|
|
path = request.path
|
|
if path.startswith(self.PORTAL_PREFIX) and self.WEBHOOK_INFIX not in path:
|
|
user = getattr(request, "user", None)
|
|
if (
|
|
user is not None
|
|
and getattr(user, "is_authenticated", False)
|
|
and not getattr(user, "is_staff", False)
|
|
):
|
|
from django.apps import apps
|
|
|
|
if apps.is_installed("shop"):
|
|
return redirect("account:home")
|
|
return redirect("public:home")
|
|
return self.get_response(request)
|