mirror of
				https://gitlab.crans.org/bde/nk20
				synced 2025-10-31 15:50:03 +01:00 
			
		
		
		
	Compare commits
	
		
			37 Commits
		
	
	
		
			a11e2fee21
			...
			potvieux
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
|  | 9dc11aa016 | ||
|  | ff4353d344 | ||
|  | a90f45bd8b | ||
|  | 10c22ccc53 | ||
|  | 6969cee0f3 | ||
|  | ddeada200b | ||
|  | 8e2b24b2da | ||
|  | bd76c280ec | ||
|  | ca0a95ba9e | ||
|  | 614f76e699 | ||
|  | a5815f0bc7 | ||
|  | 84e9fea15f | ||
|  | b7a660ee40 | ||
|  | b9ebb1718a | ||
|  | 7ba5c76a89 | ||
|  | 702ddb5679 | ||
|  | 93aed87265 | ||
|  | 60355196ce | ||
|  | 9bffb32a5e | ||
|  | 6c63c6417c | ||
|  | 4563b2b640 | ||
|  | 2ec5a0d9ca | ||
|  | 3faf611816 | ||
|  | 2807b6ef44 | ||
|  | d6645900d3 | ||
|  | e35847ebd8 | ||
|  | 57268bc9c2 | ||
|  | ab6c943126 | ||
|  | 5dc5f56ae4 | ||
|  | 81017fc393 | ||
|  | 90e3871934 | ||
|  | 95e07f3148 | ||
|  | 770c748bd9 | ||
|  | 06fa096405 | ||
|  | 182f680507 | ||
|  | 5ceda66ded | ||
|  | 6443d64b69 | 
							
								
								
									
										16
									
								
								README.md
									
									
									
									
									
								
							
							
						
						
									
										16
									
								
								README.md
									
									
									
									
									
								
							| @@ -58,7 +58,13 @@ Bien que cela permette de créer une instance sur toutes les distributions, | |||||||
|     (env)$ ./manage.py createsuperuser  # Création d'un⋅e utilisateur⋅rice initial |     (env)$ ./manage.py createsuperuser  # Création d'un⋅e utilisateur⋅rice initial | ||||||
|     ``` |     ``` | ||||||
|  |  | ||||||
| 6.  Enjoy : | 6. (Optionnel) **Création d'une clé privée OpenID Connect** | ||||||
|  |  | ||||||
|  | Pour activer le support d'OpenID Connect, il faut générer une clé privée, par | ||||||
|  | exemple avec openssl (`openssl genrsa -out oidc.key 4096`), et renseigner son | ||||||
|  | emplacement dans `OIDC_RSA_PRIVATE_KEY` (par défaut `/var/secrets/oidc.key`). | ||||||
|  |  | ||||||
|  | 7.  Enjoy : | ||||||
|  |  | ||||||
|     ```bash |     ```bash | ||||||
|     (env)$ ./manage.py runserver 0.0.0.0:8000 |     (env)$ ./manage.py runserver 0.0.0.0:8000 | ||||||
| @@ -228,7 +234,13 @@ Sinon vous pouvez suivre les étapes décrites ci-dessous. | |||||||
|         (env)$ ./manage.py check # pas de bêtise qui traine |         (env)$ ./manage.py check # pas de bêtise qui traine | ||||||
|         (env)$ ./manage.py migrate |         (env)$ ./manage.py migrate | ||||||
|  |  | ||||||
| 7.  *Enjoy \o/* | 7. **Création d'une clé privée OpenID Connect** | ||||||
|  |  | ||||||
|  | Pour activer le support d'OpenID Connect, il faut générer une clé privée, par | ||||||
|  | exemple avec openssl (`openssl genrsa -out oidc.key 4096`), et renseigner son | ||||||
|  | emplacement dans `OIDC_RSA_PRIVATE_KEY` (par défaut `/var/secrets/oidc.key`). | ||||||
|  |  | ||||||
|  | 8.  *Enjoy \o/* | ||||||
|  |  | ||||||
| ### Installation avec Docker | ### Installation avec Docker | ||||||
|  |  | ||||||
|   | |||||||
| @@ -35,7 +35,7 @@ class GuestAdmin(admin.ModelAdmin): | |||||||
|     """ |     """ | ||||||
|     Admin customisation for Guest |     Admin customisation for Guest | ||||||
|     """ |     """ | ||||||
|     list_display = ('last_name', 'first_name', 'activity', 'inviter') |     list_display = ('last_name', 'first_name', 'school', 'activity', 'inviter') | ||||||
|     form = GuestForm |     form = GuestForm | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
| @@ -51,9 +51,9 @@ class GuestViewSet(ReadProtectedModelViewSet): | |||||||
|     queryset = Guest.objects.order_by('id') |     queryset = Guest.objects.order_by('id') | ||||||
|     serializer_class = GuestSerializer |     serializer_class = GuestSerializer | ||||||
|     filter_backends = [DjangoFilterBackend, RegexSafeSearchFilter] |     filter_backends = [DjangoFilterBackend, RegexSafeSearchFilter] | ||||||
|     filterset_fields = ['activity', 'activity__name', 'last_name', 'first_name', 'inviter', 'inviter__alias__name', |     filterset_fields = ['activity', 'activity__name', 'last_name', 'first_name', 'school', 'inviter', 'inviter__alias__name', | ||||||
|                         'inviter__alias__normalized_name', ] |                         'inviter__alias__normalized_name', ] | ||||||
|     search_fields = ['$activity__name', '$last_name', '$first_name', '$inviter__user__email', '$inviter__alias__name', |     search_fields = ['$activity__name', '$last_name', '$first_name', '$school', '$inviter__user__email', '$inviter__alias__name', | ||||||
|                      '$inviter__alias__normalized_name', ] |                      '$inviter__alias__normalized_name', ] | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
| @@ -107,7 +107,7 @@ class GuestForm(forms.ModelForm): | |||||||
|  |  | ||||||
|     class Meta: |     class Meta: | ||||||
|         model = Guest |         model = Guest | ||||||
|         fields = ('last_name', 'first_name', 'inviter', ) |         fields = ('last_name', 'first_name', 'school', 'inviter', ) | ||||||
|         widgets = { |         widgets = { | ||||||
|             "inviter": Autocomplete( |             "inviter": Autocomplete( | ||||||
|                 NoteUser, |                 NoteUser, | ||||||
|   | |||||||
							
								
								
									
										18
									
								
								apps/activity/migrations/0006_guest_school.py
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										18
									
								
								apps/activity/migrations/0006_guest_school.py
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,18 @@ | |||||||
|  | # Generated by Django 4.2.20 on 2025-03-25 09:58 | ||||||
|  |  | ||||||
|  | from django.db import migrations, models | ||||||
|  |  | ||||||
|  |  | ||||||
|  | class Migration(migrations.Migration): | ||||||
|  |     dependencies = [ | ||||||
|  |         ("activity", "0005_alter_opener_options_alter_opener_opener"), | ||||||
|  |     ] | ||||||
|  |  | ||||||
|  |     operations = [ | ||||||
|  |         migrations.AddField( | ||||||
|  |             model_name="guest", | ||||||
|  |             name="school", | ||||||
|  |             field=models.CharField(default="", max_length=255, verbose_name="school"), | ||||||
|  |             preserve_default=False, | ||||||
|  |         ), | ||||||
|  |     ] | ||||||
| @@ -201,7 +201,8 @@ class Entry(models.Model): | |||||||
|     def save(self, *args, **kwargs): |     def save(self, *args, **kwargs): | ||||||
|         qs = Entry.objects.filter(~Q(pk=self.pk), activity=self.activity, note=self.note, guest=self.guest) |         qs = Entry.objects.filter(~Q(pk=self.pk), activity=self.activity, note=self.note, guest=self.guest) | ||||||
|         if qs.exists(): |         if qs.exists(): | ||||||
|             raise ValidationError(_("Already entered on ") + _("{:%Y-%m-%d %H:%M:%S}").format(qs.get().time, )) |             raise ValidationError(_("Already entered on ") | ||||||
|  |                                   + _("{:%Y-%m-%d %H:%M:%S}").format(timezone.localtime(qs.get().time), )) | ||||||
|  |  | ||||||
|         if self.guest: |         if self.guest: | ||||||
|             self.note = self.guest.inviter |             self.note = self.guest.inviter | ||||||
| @@ -247,6 +248,11 @@ class Guest(models.Model): | |||||||
|         verbose_name=_("first name"), |         verbose_name=_("first name"), | ||||||
|     ) |     ) | ||||||
|  |  | ||||||
|  |     school = models.CharField( | ||||||
|  |         max_length=255, | ||||||
|  |         verbose_name=_("school"), | ||||||
|  |     ) | ||||||
|  |  | ||||||
|     inviter = models.ForeignKey( |     inviter = models.ForeignKey( | ||||||
|         NoteUser, |         NoteUser, | ||||||
|         on_delete=models.PROTECT, |         on_delete=models.PROTECT, | ||||||
|   | |||||||
| @@ -1,6 +1,8 @@ | |||||||
| # Copyright (C) 2018-2025 by BDE ENS Paris-Saclay | # Copyright (C) 2018-2025 by BDE ENS Paris-Saclay | ||||||
| # SPDX-License-Identifier: GPL-3.0-or-later | # SPDX-License-Identifier: GPL-3.0-or-later | ||||||
|  |  | ||||||
|  | import datetime | ||||||
|  |  | ||||||
| from django.utils import timezone | from django.utils import timezone | ||||||
| from django.utils.html import escape | from django.utils.html import escape | ||||||
| from django.utils.safestring import mark_safe | from django.utils.safestring import mark_safe | ||||||
| @@ -51,11 +53,11 @@ class GuestTable(tables.Table): | |||||||
|         } |         } | ||||||
|         model = Guest |         model = Guest | ||||||
|         template_name = 'django_tables2/bootstrap4.html' |         template_name = 'django_tables2/bootstrap4.html' | ||||||
|         fields = ("last_name", "first_name", "inviter", ) |         fields = ("last_name", "first_name", "inviter", "school") | ||||||
|  |  | ||||||
|     def render_entry(self, record): |     def render_entry(self, record): | ||||||
|         if record.has_entry: |         if record.has_entry: | ||||||
|             return str(_("Entered on ") + str(_("{:%Y-%m-%d %H:%M:%S}").format(record.entry.time, ))) |             return str(_("Entered on ") + str(_("{:%Y-%m-%d %H:%M:%S}").format(timezone.localtime(record.entry.time)))) | ||||||
|         return mark_safe('<button id="{id}" class="btn btn-danger btn-sm" onclick="remove_guest(this.id)"> ' |         return mark_safe('<button id="{id}" class="btn btn-danger btn-sm" onclick="remove_guest(this.id)"> ' | ||||||
|                          '{delete_trans}</button>'.format(id=record.id, delete_trans=_("remove").capitalize())) |                          '{delete_trans}</button>'.format(id=record.id, delete_trans=_("remove").capitalize())) | ||||||
|  |  | ||||||
| @@ -77,6 +79,9 @@ def get_row_class(record): | |||||||
|             c += " table-info" |             c += " table-info" | ||||||
|         elif record.note.balance < 0: |         elif record.note.balance < 0: | ||||||
|             c += " table-danger" |             c += " table-danger" | ||||||
|  |         # MODE VIEUXCON=ON | ||||||
|  |         if (datetime.datetime.utcnow().timestamp() - record.note.created_at.timestamp()) > 3600 * 24 * 365 * 2.5: | ||||||
|  |             c += " font-weight-bold underline" | ||||||
|     return c |     return c | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
| @@ -50,6 +50,7 @@ class TestActivities(TestCase): | |||||||
|             inviter=self.user.note, |             inviter=self.user.note, | ||||||
|             last_name="GUEST", |             last_name="GUEST", | ||||||
|             first_name="Guest", |             first_name="Guest", | ||||||
|  |             school="School", | ||||||
|         ) |         ) | ||||||
|  |  | ||||||
|     def test_activity_list(self): |     def test_activity_list(self): | ||||||
| @@ -156,6 +157,7 @@ class TestActivities(TestCase): | |||||||
|             inviter=self.user.note.id, |             inviter=self.user.note.id, | ||||||
|             last_name="GUEST2", |             last_name="GUEST2", | ||||||
|             first_name="Guest", |             first_name="Guest", | ||||||
|  |             school="School", | ||||||
|         )) |         )) | ||||||
|         self.assertEqual(response.status_code, 200) |         self.assertEqual(response.status_code, 200) | ||||||
|  |  | ||||||
| @@ -167,6 +169,7 @@ class TestActivities(TestCase): | |||||||
|             inviter=self.user.note.id, |             inviter=self.user.note.id, | ||||||
|             last_name="GUEST2", |             last_name="GUEST2", | ||||||
|             first_name="Guest", |             first_name="Guest", | ||||||
|  |             school="School", | ||||||
|         )) |         )) | ||||||
|         self.assertRedirects(response, reverse("activity:activity_detail", args=(self.activity.pk,)), 302, 200) |         self.assertRedirects(response, reverse("activity:activity_detail", args=(self.activity.pk,)), 302, 200) | ||||||
|  |  | ||||||
| @@ -200,6 +203,7 @@ class TestActivityAPI(TestAPI): | |||||||
|             inviter=self.user.note, |             inviter=self.user.note, | ||||||
|             last_name="GUEST", |             last_name="GUEST", | ||||||
|             first_name="Guest", |             first_name="Guest", | ||||||
|  |             school="School", | ||||||
|         ) |         ) | ||||||
|  |  | ||||||
|         self.entry = Entry.objects.create( |         self.entry = Entry.objects.create( | ||||||
|   | |||||||
| @@ -168,6 +168,7 @@ class ActivityInviteView(ProtectQuerysetMixin, ProtectedCreateView): | |||||||
|             activity=activity, |             activity=activity, | ||||||
|             first_name="", |             first_name="", | ||||||
|             last_name="", |             last_name="", | ||||||
|  |             school="", | ||||||
|             inviter=self.request.user.note, |             inviter=self.request.user.note, | ||||||
|         ) |         ) | ||||||
|  |  | ||||||
| @@ -263,13 +264,22 @@ class ActivityEntryView(LoginRequiredMixin, SingleTableMixin, TemplateView): | |||||||
|                                          balance=F("note__balance")) |                                          balance=F("note__balance")) | ||||||
|  |  | ||||||
|         # Keep only users that have a note |         # Keep only users that have a note | ||||||
|         note_qs = note_qs.filter(note__noteuser__isnull=False) |         note_qs = note_qs.filter(note__noteuser__isnull=False).exclude(note__inactivity_reason='forced') | ||||||
|  |  | ||||||
|         # Keep only valid members |         if activity.activity_type.name != "Pot Vieux": | ||||||
|  |             # Keep only members | ||||||
|             note_qs = note_qs.filter( |             note_qs = note_qs.filter( | ||||||
|                 note__noteuser__user__memberships__club=activity.attendees_club, |                 note__noteuser__user__memberships__club=activity.attendees_club, | ||||||
|                 note__noteuser__user__memberships__date_start__lte=timezone.now(), |                 note__noteuser__user__memberships__date_start__lte=timezone.now(), | ||||||
|             note__noteuser__user__memberships__date_end__gte=timezone.now()).exclude(note__inactivity_reason='forced') |                 note__noteuser__user__memberships__date_end__gte=timezone.now(), | ||||||
|  |             ) | ||||||
|  |  | ||||||
|  |         # Keep only valid members | ||||||
|  | #        note_qs = note_qs.filter( | ||||||
|  | #            note__noteuser__user__memberships__club=activity.attendees_club, | ||||||
|  | #            note__noteuser__user__memberships__date_start__lte=timezone.now(), | ||||||
|  | #            note__noteuser__user__memberships__date_end__gte=timezone.now(), | ||||||
|  | #       ) | ||||||
|  |  | ||||||
|         # Filter with permission backend |         # Filter with permission backend | ||||||
|         note_qs = note_qs.filter(PermissionBackend.filter_queryset(self.request, Alias, "view")) |         note_qs = note_qs.filter(PermissionBackend.filter_queryset(self.request, Alias, "view")) | ||||||
|   | |||||||
| @@ -23,7 +23,7 @@ from .models import Profile, Club, Membership | |||||||
| class CustomAuthenticationForm(AuthenticationForm): | class CustomAuthenticationForm(AuthenticationForm): | ||||||
|     permission_mask = forms.ModelChoiceField( |     permission_mask = forms.ModelChoiceField( | ||||||
|         label=_("Permission mask"), |         label=_("Permission mask"), | ||||||
|         queryset=PermissionMask.objects.order_by("rank"), |         queryset=PermissionMask.objects.order_by("-rank"), | ||||||
|         empty_label=None, |         empty_label=None, | ||||||
|     ) |     ) | ||||||
|  |  | ||||||
|   | |||||||
| @@ -20,11 +20,13 @@ SPDX-License-Identifier: GPL-3.0-or-later | |||||||
|       </form> |       </form> | ||||||
|     </div> |     </div> | ||||||
|     <!-- MODAL TO CROP THE IMAGE --> |     <!-- MODAL TO CROP THE IMAGE --> | ||||||
|     <div class="modal fade" id="modalCrop"> |     <div class="modal fade" id="modalCrop" data-backdrop="static"> | ||||||
|       <div class="modal-dialog"> |       <div class="modal-dialog"> | ||||||
|         <div class="modal-content"> |         <div class="modal-content"> | ||||||
|           <div class="modal-body"> |             <div class="modal-body-wrapper" style="width: 500px; height: 500px; padding: 16px;"> | ||||||
|             <img src="" id="modal-image" style="max-width: 100%;"> |               <div class="modal-body" style="width: 100%; height: 100%; padding: 0"> | ||||||
|  |                 <img src="" id="modal-image" style="display: block; max-width: 100%;"> | ||||||
|  |               </div> | ||||||
|             </div> |             </div> | ||||||
|           <div class="modal-footer"> |           <div class="modal-footer"> | ||||||
|             <div class="btn-group pull-left" role="group"> |             <div class="btn-group pull-left" role="group"> | ||||||
|   | |||||||
| @@ -89,7 +89,7 @@ SPDX-License-Identifier: GPL-2.0-or-later | |||||||
|                 </ul> |                 </ul> | ||||||
|                 <div class="card-body"> |                 <div class="card-body"> | ||||||
|                     <select id="debit_type" class="form-control custom-select d-none"> |                     <select id="debit_type" class="form-control custom-select d-none"> | ||||||
|                         {% for special_type in special_types %} |                         {% for special_type in special_types|slice:"::-1" %} | ||||||
|                             <option value="{{ special_type.id }}">{{ special_type.special_type }}</option> |                             <option value="{{ special_type.id }}">{{ special_type.special_type }}</option> | ||||||
|                         {% endfor %} |                         {% endfor %} | ||||||
|                     </select> |                     </select> | ||||||
|   | |||||||
| @@ -3815,7 +3815,7 @@ | |||||||
|             "mask": 2, |             "mask": 2, | ||||||
|             "field": "", |             "field": "", | ||||||
|             "permanent": false, |             "permanent": false, | ||||||
|             "description": "Créer une transaction vers la note d'un club tant que la source reste au dessus de -20 €" |             "description": "Créer une transaction vers la note d'un club" | ||||||
| 	} | 	} | ||||||
|     }, |     }, | ||||||
|     { |     { | ||||||
| @@ -4812,8 +4812,10 @@ | |||||||
|                 168, |                 168, | ||||||
|                 176, |                 176, | ||||||
|                 177, |                 177, | ||||||
|  | 		178, | ||||||
|                 197, |                 197, | ||||||
|                 211 |                 211, | ||||||
|  | 		244 | ||||||
|             ] |             ] | ||||||
|         } |         } | ||||||
|     }, |     }, | ||||||
|   | |||||||
							
								
								
									
										18
									
								
								apps/treasury/migrations/0010_alter_invoice_bde.py
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										18
									
								
								apps/treasury/migrations/0010_alter_invoice_bde.py
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,18 @@ | |||||||
|  | # Generated by Django 4.2.20 on 2025-04-14 20:21 | ||||||
|  |  | ||||||
|  | from django.db import migrations, models | ||||||
|  |  | ||||||
|  |  | ||||||
|  | class Migration(migrations.Migration): | ||||||
|  |  | ||||||
|  |     dependencies = [ | ||||||
|  |         ('treasury', '0009_alter_sogecredit_transactions'), | ||||||
|  |     ] | ||||||
|  |  | ||||||
|  |     operations = [ | ||||||
|  |         migrations.AlterField( | ||||||
|  |             model_name='invoice', | ||||||
|  |             name='bde', | ||||||
|  |             field=models.CharField(choices=[('Diolistos', 'Diol[list]os'), ('RavePartlist', 'RavePart[list]'), ('SecretStorlist', 'SecretStor[list]'), ('TotalistSpies', 'Tota[list]Spies'), ('Saperlistpopette', 'Saper[list]popette'), ('Finalist', 'Fina[list]'), ('Listorique', '[List]orique'), ('Satellist', 'Satel[list]'), ('Monopolist', 'Monopo[list]'), ('Kataclist', 'Katac[list]')], default='Diolistos', max_length=32, verbose_name='BDE'), | ||||||
|  |         ), | ||||||
|  |     ] | ||||||
| @@ -27,8 +27,9 @@ class Invoice(models.Model): | |||||||
|  |  | ||||||
|     bde = models.CharField( |     bde = models.CharField( | ||||||
|         max_length=32, |         max_length=32, | ||||||
|         default='RavePartlist', |         default='Diolistos', | ||||||
|         choices=( |         choices=( | ||||||
|  |             ('Diolistos', 'Diol[list]os'), | ||||||
|             ('RavePartlist', 'RavePart[list]'), |             ('RavePartlist', 'RavePart[list]'), | ||||||
|             ('SecretStorlist', 'SecretStor[list]'), |             ('SecretStorlist', 'SecretStor[list]'), | ||||||
|             ('TotalistSpies', 'Tota[list]Spies'), |             ('TotalistSpies', 'Tota[list]Spies'), | ||||||
|   | |||||||
							
								
								
									
										
											BIN
										
									
								
								apps/treasury/static/img/Diolistos.png
									
									
									
									
									
										Executable file
									
								
							
							
						
						
									
										
											BIN
										
									
								
								apps/treasury/static/img/Diolistos.png
									
									
									
									
									
										Executable file
									
								
							
										
											Binary file not shown.
										
									
								
							| After Width: | Height: | Size: 2.8 MiB | 
							
								
								
									
										
											BIN
										
									
								
								apps/treasury/static/img/Diolistos_bg.jpg
									
									
									
									
									
										Executable file
									
								
							
							
						
						
									
										
											BIN
										
									
								
								apps/treasury/static/img/Diolistos_bg.jpg
									
									
									
									
									
										Executable file
									
								
							
										
											Binary file not shown.
										
									
								
							| After Width: | Height: | Size: 284 KiB | 
| @@ -55,6 +55,7 @@ Les adhérent⋅es ont la possibilité d'inviter des ami⋅es. Pour cela, les di | |||||||
| * Activité concernée (clé étrangère) | * Activité concernée (clé étrangère) | ||||||
| * Nom de famille | * Nom de famille | ||||||
| * Prénom | * Prénom | ||||||
|  | * École | ||||||
| * Note de la personne ayant invité | * Note de la personne ayant invité | ||||||
|  |  | ||||||
| Certaines contraintes s'appliquent : | Certaines contraintes s'appliquent : | ||||||
|   | |||||||
| @@ -43,6 +43,11 @@ On a ensuite besoin de définir nos propres scopes afin d'avoir des permissions | |||||||
|        'SCOPES_BACKEND_CLASS': 'permission.scopes.PermissionScopes', |        'SCOPES_BACKEND_CLASS': 'permission.scopes.PermissionScopes', | ||||||
|        'OAUTH2_VALIDATOR_CLASS': "permission.scopes.PermissionOAuth2Validator", |        'OAUTH2_VALIDATOR_CLASS': "permission.scopes.PermissionOAuth2Validator", | ||||||
|        'REFRESH_TOKEN_EXPIRE_SECONDS': timedelta(days=14), |        'REFRESH_TOKEN_EXPIRE_SECONDS': timedelta(days=14), | ||||||
|  |        'PKCE_REQUIRED': False, | ||||||
|  |        'OIDC_ENABLED': True, | ||||||
|  |        'OIDC_RSA_PRIVATE_KEY': | ||||||
|  |            os.getenv('OIDC_RSA_PRIVATE_KEY', '/var/secrets/oidc.key'), | ||||||
|  |        'SCOPES': { 'openid': "OpenID Connect scope" }, | ||||||
|    } |    } | ||||||
|  |  | ||||||
| Cela a pour effet d'avoir des scopes sous la forme ``PERMISSION_CLUB``, | Cela a pour effet d'avoir des scopes sous la forme ``PERMISSION_CLUB``, | ||||||
| @@ -57,6 +62,14 @@ On ajoute enfin les routes dans ``urls.py`` : | |||||||
|         path('o/', include('oauth2_provider.urls', namespace='oauth2_provider')) |         path('o/', include('oauth2_provider.urls', namespace='oauth2_provider')) | ||||||
|     ) |     ) | ||||||
|  |  | ||||||
|  | Enfin pour utiliser OIDC, il faut générer une clé privé que l'on va, par défaut, | ||||||
|  | mettre dans `/var/secrets/oidc.key` : | ||||||
|  |  | ||||||
|  | .. code:: bash | ||||||
|  |  | ||||||
|  |    cd /var/secrets/ | ||||||
|  |    openssl genrsa -out oidc.key 4096 | ||||||
|  |  | ||||||
| L'OAuth2 est désormais prêt à être utilisé. | L'OAuth2 est désormais prêt à être utilisé. | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
| @@ -227,6 +227,22 @@ En production, ce fichier contient : | |||||||
|    ) |    ) | ||||||
|  |  | ||||||
|  |  | ||||||
|  | Génération d'une clé privé pour OIDC | ||||||
|  | ------------------------------------ | ||||||
|  |  | ||||||
|  | Pour pouvoir proposer le service de connexion Openid Connect (OIDC) par OAuth2, il y a | ||||||
|  | besoin d'une clé privé. Par défaut, elle est cherché dans le fichier `/var/secrets/oidc.key` | ||||||
|  | (sinon, il faut modifier l'emplacement dans les fichiers de configurations). | ||||||
|  |  | ||||||
|  | Pour générer la clé, il faut aller dans le dossier `/var/secrets` (à créer, si nécessaire) puis | ||||||
|  | utiliser la commande de génération : | ||||||
|  |  | ||||||
|  | .. code:: bash | ||||||
|  |  | ||||||
|  |    cd /var/secrets | ||||||
|  |    openssl genrsa -out oidc.key 4096 | ||||||
|  |  | ||||||
|  |  | ||||||
| Configuration des tâches récurrentes | Configuration des tâches récurrentes | ||||||
| ------------------------------------ | ------------------------------------ | ||||||
|  |  | ||||||
|   | |||||||
| @@ -7,7 +7,7 @@ msgid "" | |||||||
| msgstr "" | msgstr "" | ||||||
| "Project-Id-Version: \n" | "Project-Id-Version: \n" | ||||||
| "Report-Msgid-Bugs-To: \n" | "Report-Msgid-Bugs-To: \n" | ||||||
| "POT-Creation-Date: 2025-03-13 21:08+0100\n" | "POT-Creation-Date: 2025-03-25 11:16+0100\n" | ||||||
| "PO-Revision-Date: 2022-04-11 22:05+0200\n" | "PO-Revision-Date: 2022-04-11 22:05+0200\n" | ||||||
| "Last-Translator: bleizi <bleizi@crans.org>\n" | "Last-Translator: bleizi <bleizi@crans.org>\n" | ||||||
| "Language-Team: French <http://translate.ynerant.fr/projects/nk20/nk20/fr/>\n" | "Language-Team: French <http://translate.ynerant.fr/projects/nk20/nk20/fr/>\n" | ||||||
| @@ -25,7 +25,7 @@ msgid "This opener already exists" | |||||||
| msgstr "Cette amitié existe déjà" | msgstr "Cette amitié existe déjà" | ||||||
|  |  | ||||||
| #: apps/activity/apps.py:10 apps/activity/models.py:129 | #: apps/activity/apps.py:10 apps/activity/models.py:129 | ||||||
| #: apps/activity/models.py:169 apps/activity/models.py:323 | #: apps/activity/models.py:169 apps/activity/models.py:328 | ||||||
| msgid "activity" | msgid "activity" | ||||||
| msgstr "activité" | msgstr "activité" | ||||||
|  |  | ||||||
| @@ -37,24 +37,24 @@ msgstr "La note du club est inactive." | |||||||
| msgid "The end date must be after the start date." | msgid "The end date must be after the start date." | ||||||
| msgstr "La date de fin doit être après celle de début." | msgstr "La date de fin doit être après celle de début." | ||||||
|  |  | ||||||
| #: apps/activity/forms.py:83 apps/activity/models.py:271 | #: apps/activity/forms.py:83 apps/activity/models.py:276 | ||||||
| msgid "You can't invite someone once the activity is started." | msgid "You can't invite someone once the activity is started." | ||||||
| msgstr "" | msgstr "" | ||||||
| "Vous ne pouvez pas inviter quelqu'un une fois que l'activité a démarré." | "Vous ne pouvez pas inviter quelqu'un une fois que l'activité a démarré." | ||||||
|  |  | ||||||
| #: apps/activity/forms.py:86 apps/activity/models.py:274 | #: apps/activity/forms.py:86 apps/activity/models.py:279 | ||||||
| msgid "This activity is not validated yet." | msgid "This activity is not validated yet." | ||||||
| msgstr "Cette activité n'est pas encore validée." | msgstr "Cette activité n'est pas encore validée." | ||||||
|  |  | ||||||
| #: apps/activity/forms.py:96 apps/activity/models.py:282 | #: apps/activity/forms.py:96 apps/activity/models.py:287 | ||||||
| msgid "This person has been already invited 5 times this year." | msgid "This person has been already invited 5 times this year." | ||||||
| msgstr "Cette personne a déjà été invitée 5 fois cette année." | msgstr "Cette personne a déjà été invitée 5 fois cette année." | ||||||
|  |  | ||||||
| #: apps/activity/forms.py:100 apps/activity/models.py:286 | #: apps/activity/forms.py:100 apps/activity/models.py:291 | ||||||
| msgid "This person is already invited." | msgid "This person is already invited." | ||||||
| msgstr "Cette personne est déjà invitée." | msgstr "Cette personne est déjà invitée." | ||||||
|  |  | ||||||
| #: apps/activity/forms.py:104 apps/activity/models.py:290 | #: apps/activity/forms.py:104 apps/activity/models.py:295 | ||||||
| msgid "You can't invite more than 3 people to this activity." | msgid "You can't invite more than 3 people to this activity." | ||||||
| msgstr "Vous ne pouvez pas inviter plus de 3 personnes à cette activité." | msgstr "Vous ne pouvez pas inviter plus de 3 personnes à cette activité." | ||||||
|  |  | ||||||
| @@ -228,32 +228,36 @@ msgstr "nom de famille" | |||||||
| msgid "first name" | msgid "first name" | ||||||
| msgstr "prénom" | msgstr "prénom" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:254 | #: apps/activity/models.py:252 | ||||||
|  | msgid "school" | ||||||
|  | msgstr "école" | ||||||
|  |  | ||||||
|  | #: apps/activity/models.py:259 | ||||||
| msgid "inviter" | msgid "inviter" | ||||||
| msgstr "hôte" | msgstr "hôte" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:258 | #: apps/activity/models.py:263 | ||||||
| msgid "guest" | msgid "guest" | ||||||
| msgstr "invité·e" | msgstr "invité·e" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:259 | #: apps/activity/models.py:264 | ||||||
| msgid "guests" | msgid "guests" | ||||||
| msgstr "invité·e·s" | msgstr "invité·e·s" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:312 | #: apps/activity/models.py:317 | ||||||
| msgid "Invitation" | msgid "Invitation" | ||||||
| msgstr "Invitation" | msgstr "Invitation" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:330 apps/activity/models.py:334 | #: apps/activity/models.py:335 apps/activity/models.py:339 | ||||||
| msgid "Opener" | msgid "Opener" | ||||||
| msgstr "Ouvreur⋅se" | msgstr "Ouvreur⋅se" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:335 | #: apps/activity/models.py:340 | ||||||
| #: apps/activity/templates/activity/activity_detail.html:16 | #: apps/activity/templates/activity/activity_detail.html:16 | ||||||
| msgid "Openers" | msgid "Openers" | ||||||
| msgstr "Ouvreur⋅ses" | msgstr "Ouvreur⋅ses" | ||||||
|  |  | ||||||
| #: apps/activity/models.py:339 | #: apps/activity/models.py:344 | ||||||
| #, fuzzy, python-brace-format | #, fuzzy, python-brace-format | ||||||
| #| msgid "Entry for {note} to the activity {activity}" | #| msgid "Entry for {note} to the activity {activity}" | ||||||
| msgid "{opener} is opener of activity {acivity}" | msgid "{opener} is opener of activity {acivity}" | ||||||
| @@ -463,25 +467,25 @@ msgstr "Détails de l'activité" | |||||||
| msgid "Update activity" | msgid "Update activity" | ||||||
| msgstr "Modifier l'activité" | msgstr "Modifier l'activité" | ||||||
|  |  | ||||||
| #: apps/activity/views.py:177 | #: apps/activity/views.py:178 | ||||||
| msgid "Invite guest to the activity \"{}\"" | msgid "Invite guest to the activity \"{}\"" | ||||||
| msgstr "Invitation pour l'activité « {} »" | msgstr "Invitation pour l'activité « {} »" | ||||||
|  |  | ||||||
| #: apps/activity/views.py:217 | #: apps/activity/views.py:218 | ||||||
| msgid "You are not allowed to display the entry interface for this activity." | msgid "You are not allowed to display the entry interface for this activity." | ||||||
| msgstr "" | msgstr "" | ||||||
| "Vous n'êtes pas autorisé·e à afficher l'interface des entrées pour cette " | "Vous n'êtes pas autorisé·e à afficher l'interface des entrées pour cette " | ||||||
| "activité." | "activité." | ||||||
|  |  | ||||||
| #: apps/activity/views.py:220 | #: apps/activity/views.py:221 | ||||||
| msgid "This activity does not support activity entries." | msgid "This activity does not support activity entries." | ||||||
| msgstr "Cette activité ne requiert pas d'entrées." | msgstr "Cette activité ne requiert pas d'entrées." | ||||||
|  |  | ||||||
| #: apps/activity/views.py:223 | #: apps/activity/views.py:224 | ||||||
| msgid "This activity is closed." | msgid "This activity is closed." | ||||||
| msgstr "Cette activité est fermée." | msgstr "Cette activité est fermée." | ||||||
|  |  | ||||||
| #: apps/activity/views.py:328 | #: apps/activity/views.py:329 | ||||||
| msgid "Entry for activity \"{}\"" | msgid "Entry for activity \"{}\"" | ||||||
| msgstr "Entrées pour l'activité « {} »" | msgstr "Entrées pour l'activité « {} »" | ||||||
|  |  | ||||||
| @@ -1989,10 +1993,6 @@ msgstr "Historique des transactions récentes" | |||||||
| #: apps/note/templates/note/mails/weekly_report.txt:32 | #: apps/note/templates/note/mails/weekly_report.txt:32 | ||||||
| #: apps/registration/templates/registration/mails/email_validation_email.html:40 | #: apps/registration/templates/registration/mails/email_validation_email.html:40 | ||||||
| #: apps/registration/templates/registration/mails/email_validation_email.txt:16 | #: apps/registration/templates/registration/mails/email_validation_email.txt:16 | ||||||
| #: apps/scripts/templates/scripts/horaires.html:35 |  | ||||||
| #: apps/scripts/templates/scripts/horaires.txt:17 |  | ||||||
| #: apps/scripts/templates/scripts/intro_mail.html:49 |  | ||||||
| #: apps/scripts/templates/scripts/intro_mail.txt:25 |  | ||||||
| msgid "Mail generated by the Note Kfet on the" | msgid "Mail generated by the Note Kfet on the" | ||||||
| msgstr "Mail généré par la Note Kfet le" | msgstr "Mail généré par la Note Kfet le" | ||||||
|  |  | ||||||
|   | |||||||
| @@ -27,5 +27,5 @@ MAILTO=notekfet2020@lists.crans.org | |||||||
| # Vider les tokens Oauth2 | # Vider les tokens Oauth2 | ||||||
|  00  6     *   *   *     root   cd /var/www/note_kfet && env/bin/python manage.py cleartokens -v 0 |  00  6     *   *   *     root   cd /var/www/note_kfet && env/bin/python manage.py cleartokens -v 0 | ||||||
| # Envoyer la liste des abonnés à la NL BDA | # Envoyer la liste des abonnés à la NL BDA | ||||||
|  00  10     *   *   0     root   cd /var/www/note_kfet && env/bin/python manage.py extract_ml_registrations -t art |  00  10     *   *   0     root   cd /var/www/note_kfet && env/bin/python manage.py extract_ml_registrations -t art -e "bda.ensparissaclay@gmail.com" | ||||||
|   |   | ||||||
| @@ -268,6 +268,10 @@ OAUTH2_PROVIDER = { | |||||||
|     'OAUTH2_VALIDATOR_CLASS': "permission.scopes.PermissionOAuth2Validator", |     'OAUTH2_VALIDATOR_CLASS': "permission.scopes.PermissionOAuth2Validator", | ||||||
|     'REFRESH_TOKEN_EXPIRE_SECONDS': timedelta(days=14), |     'REFRESH_TOKEN_EXPIRE_SECONDS': timedelta(days=14), | ||||||
|     'PKCE_REQUIRED': False, # PKCE (fix a breaking change of django-oauth-toolkit 2.0.0) |     'PKCE_REQUIRED': False, # PKCE (fix a breaking change of django-oauth-toolkit 2.0.0) | ||||||
|  |     'OIDC_ENABLED': True, | ||||||
|  |     'OIDC_RSA_PRIVATE_KEY': | ||||||
|  |         os.getenv('OIDC_RSA_PRIVATE_KEY', '/var/secrets/oidc.key'), | ||||||
|  |     'SCOPES': { 'openid': "OpenID Connect scope" }, | ||||||
| } | } | ||||||
|  |  | ||||||
| # Take control on how widget templates are sourced | # Take control on how widget templates are sourced | ||||||
|   | |||||||
							
								
								
									
										96
									
								
								note_kfet/static/css/custom.css
									
									
									
									
									
										
										
										Executable file → Normal file
									
								
							
							
						
						
									
										96
									
								
								note_kfet/static/css/custom.css
									
									
									
									
									
										
										
										Executable file → Normal file
									
								
							| @@ -61,20 +61,16 @@ mark { | |||||||
| /* Make navbar more readable */ | /* Make navbar more readable */ | ||||||
| .navbar-dark .navbar-nav .nav-link { | .navbar-dark .navbar-nav .nav-link { | ||||||
|     color: rgba(255, 255, 255, .75); |     color: rgba(255, 255, 255, .75); | ||||||
|     text-shadow: 2px 2px 15px #ffeb40; |     /* text-shadow: 2px 2px 15px #ffeb40; */ | ||||||
| } | } | ||||||
|  |  | ||||||
| .navbar-brand { | /* .navbar-brand { */ | ||||||
|     text-shadow: 2px 2px 15px #ffeb40; | /*     text-shadow: 2px 2px 15px #ffeb40; */ | ||||||
| } | /* } | ||||||
|  |  | ||||||
| /* Last BDE colors */ | /* Last BDE colors */ | ||||||
| .bg-primary { | .bg-primary { | ||||||
| /*    background-color: rgb(18, 67, 4) !important; */ |     background-color: rgb(102, 83, 105) !important; | ||||||
| /* MODE VIEUXCON=ON */ |  | ||||||
| /*    background-color: rgb(166, 0, 2) !important; */ |  | ||||||
|     background-color: rgb(0, 0, 0); |  | ||||||
|     background-image: url('/static/img/rp_bg.png'); |  | ||||||
| } | } | ||||||
|  |  | ||||||
| html { | html { | ||||||
| @@ -89,94 +85,52 @@ body { | |||||||
| .btn-outline-primary:hover, | .btn-outline-primary:hover, | ||||||
| .btn-outline-primary:not(:disabled):not(.disabled).active, | .btn-outline-primary:not(:disabled):not(.disabled).active, | ||||||
| .btn-outline-primary:not(:disabled):not(.disabled):active { | .btn-outline-primary:not(:disabled):not(.disabled):active { | ||||||
|     color:  rgb(0, 0, 0); |     color: #fff; | ||||||
|     background-color: rgb(255, 0, 101); |     background-color: rgb(102, 83, 105); | ||||||
|     border-color: rgb(255, 203, 32); |     border-color: rgb(102, 83, 105); | ||||||
| } | } | ||||||
|  |  | ||||||
| .btn-outline-primary { | .btn-outline-primary { | ||||||
|     color: #000; |     color: rgb(102, 83, 105); | ||||||
|     background-color: #ffcb20; |     background-color: rgba(248, 249, 250, 0.9); | ||||||
|     border-color: #000; |     border-color: rgb(102, 83, 105); | ||||||
| } | } | ||||||
|  |  | ||||||
| .turbolinks-progress-bar { | .turbolinks-progress-bar { | ||||||
|     background-color: #ffffff; |     background-color: #12432E; | ||||||
| } | } | ||||||
|  |  | ||||||
| .btn-primary:hover, | .btn-primary:hover, | ||||||
| .btn-primary:not(:disabled):not(.disabled).active, | .btn-primary:not(:disabled):not(.disabled).active, | ||||||
| .btn-primary:not(:disabled):not(.disabled):active { | .btn-primary:not(:disabled):not(.disabled):active { | ||||||
|     color:  rgb(0, 0, 0); |     color: #fff; | ||||||
|     background-color: rgb(255, 0, 101); |     background-color: rgb(102, 83, 105); | ||||||
|     border-color: rgb(255, 203, 32); |     border-color: rgb(102, 83, 105); | ||||||
| } | } | ||||||
|  |  | ||||||
| .btn-primary { | .btn-primary { | ||||||
|     color:  #ffcb20;  |     color: rgba(248, 249, 250, 0.9);  | ||||||
|     background-color: #000000; |     background-color: rgb(102, 83, 105); | ||||||
|     border-color: #ffcd20; |     border-color: rgb(102, 83, 105); | ||||||
| } | } | ||||||
|  |  | ||||||
| .border-primary { | .border-primary { | ||||||
|     border-color: rgb(255, 255, 255) !important;  |     border-color: rgb(115, 15, 115) !important;  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-secondary { |  | ||||||
|     color:  #ff0065; |  | ||||||
|     background-color: #000000; |  | ||||||
|     border-color: #ff0065; |  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-secondary:hover, |  | ||||||
| .btn-secondary:not(:disabled):not(.disabled).active, |  | ||||||
| .btn-secondary:not(:disabled):not(.disabled):active { |  | ||||||
|     color:  rgb(0, 0, 0); |  | ||||||
|     background-color: rgb(255, 203, 32); |  | ||||||
|     border-color: rgb(255, 0, 101); |  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-outline-dark-shiny { |  | ||||||
|     background-color: #222; |  | ||||||
|     border-color: #61605b; |  | ||||||
|     color: rgba(255, 0, 101, 75%); |  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-outline-dark-shiny:hover, |  | ||||||
| .btn-outline-dark-shiny:not(:disabled):not(.disabled).active, |  | ||||||
| .btn-outline-dark-shiny:not(:disabled):not(.disabled):active { |  | ||||||
|     color:  rgb(0, 0, 0); |  | ||||||
|     background-color: rgb(255, 203, 32); |  | ||||||
|     border-color: rgb(255, 0, 101); |  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-outline-dark { |  | ||||||
|     background-color: #222; |  | ||||||
|     border-color: #61605b; |  | ||||||
|     color: rgba(255, 203, 32, 75%); |  | ||||||
| } |  | ||||||
|  |  | ||||||
| .btn-outline-dark:hover, |  | ||||||
| .btn-outline-dark:not(:disabled):not(.disabled).active, |  | ||||||
| .btn-outline-dark:not(:disabled):not(.disabled):active { |  | ||||||
|     color:  rgb(0, 0, 0); |  | ||||||
|     background-color: rgb(255, 0, 101); |  | ||||||
|     border-color: rgb(255, 203, 32); |  | ||||||
| } | } | ||||||
|  |  | ||||||
| a { | a { | ||||||
|     color: rgb(255, 0, 101); |     color: rgb(102, 83, 105); | ||||||
| } | } | ||||||
|  |  | ||||||
| a:hover { | a:hover { | ||||||
|     color: rgb(255, 203, 32); |     color: rgb(200, 30, 200); | ||||||
| } | } | ||||||
|  |  | ||||||
| .form-control:focus { | .form-control:focus { | ||||||
|     box-shadow: 0 0 0 0.25rem rgb(255 0 101 / 50%); |     box-shadow: 0 0 0 0.25rem rgba(200, 30, 200, 0.25); | ||||||
|     border-color: rgb(255, 0, 101); |     border-color: rgb(200, 30, 200); | ||||||
| } | } | ||||||
|  |  | ||||||
| .btn-outline-primary.focus { | .btn-outline-primary.focus { | ||||||
|   box-shadow: 0 0 0 0.25rem rgb(255 203 32 / 22%); |   box-shadow: 0 0 0 0.25rem rgba(200, 30, 200, 0.5); | ||||||
| } |  | ||||||
|   | |||||||
| @@ -96,11 +96,13 @@ function displayStyle (note) { | |||||||
|   if (!note) { return '' } |   if (!note) { return '' } | ||||||
|   const balance = note.balance |   const balance = note.balance | ||||||
|   var css = '' |   var css = '' | ||||||
|  |   var ms_per_year = 31536000000 // 365 * 24 * 3600 * 1000 | ||||||
|   if (balance < -2000) { css += ' text-danger bg-dark' }  |   if (balance < -2000) { css += ' text-danger bg-dark' }  | ||||||
|   else if (balance < -1000) { css += ' text-danger' }  |   else if (balance < -1000) { css += ' text-danger' }  | ||||||
|   else if (balance < 0) { css += ' text-warning' } |   else if (balance < 0) { css += ' text-warning' } | ||||||
|   if (!note.email_confirmed) { css += ' bg-primary' } |   if (!note.email_confirmed) { css += ' bg-primary' } | ||||||
|   else if (!note.is_active || (note.membership && note.membership.date_end < new Date().toISOString())) { css += ' bg-info' } |   else if (!note.is_active || (note.membership && note.membership.date_end < new Date().toISOString())) { css += ' bg-info' } | ||||||
|  |   if (((Date.now() - Date.parse(note.created_at))/ms_per_year) > 2.5) { css += ' font-weight-bold underline' } | ||||||
|   return css |   return css | ||||||
| } | } | ||||||
|  |  | ||||||
|   | |||||||
| @@ -165,6 +165,11 @@ SPDX-License-Identifier: GPL-3.0-or-later | |||||||
|     </nav> |     </nav> | ||||||
|     <div class="{% block containertype %}container{% endblock %} my-3"> |     <div class="{% block containertype %}container{% endblock %} my-3"> | ||||||
|         <div id="messages"> |         <div id="messages"> | ||||||
|  | 	    {% if user.is_authenticated %} | ||||||
|  | 	    	<div class="alert alert-info"> | ||||||
|  | 		    Bravo pour votre diplomation les survis ! | ||||||
|  | 		</div> | ||||||
|  | 	    {% endif %} | ||||||
|             {% if user.is_authenticated %} |             {% if user.is_authenticated %} | ||||||
|                 {% if not user|is_member:"BDE" %} |                 {% if not user|is_member:"BDE" %} | ||||||
|                     <div class="alert alert-danger"> |                     <div class="alert alert-danger"> | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user