Repository navigation

Pretix using Discourse Auth - #1

Merged

gundalow merged 39 commits into

mainfrom

feat-initial-plugin

Oct 23, 2026

Merged

Pretix using Discourse Auth#1
gundalow merged 39 commits into
mainfrom
feat-initial-plugin

Commits on Oct 5, 2026
- initial
  gundalow
  committed
  25f185c
- feat: SPEC v1
  gundalow
  committed
  ac7a697
- security: fix critical auth bypass bugs, harden plugin against spec v2
  
  gundalow
  and
  claude
  committed
  7b413f1
- fix: align with main project naming and fix audit findings
  
  gundalow
  and
  claude
  committed
  a1e6094
- docs: sync spec with code fixes and main project naming
  
  gundalow
  and
  claude
  committed
  bc205d1
- chore
  gundalow
  committed
  ad5817b
- chore: improve GHA
  gundalow
  committed
  2f29bbb
- chore: revert LICENSE
  gundalow
  committed
  38b9ce3
Commits on Oct 7, 2026
- Enforce fixed privileged authentication policy
  gundalow
  committed
  5d16e22
- Require DiscourseConnect 2FA assertion for privileged users
  gundalow
  committed
  a60930d
- Use DiscourseConnect as the sole 2FA authority
  gundalow
  committed
  b95f657
- Ignore unapproved Discourse group claims
  gundalow
  committed
  a519cc8
- Match privileged groups exactly
  gundalow
  committed
  c1bee82
- Document fixed group and 2FA security policy
  gundalow
  committed
  76324ca
- Refresh auth future work after security refactor
  gundalow
  committed
  fc3d38e
- Fail closed on malformed Discourse API responses
  gundalow
  committed
  ebf21dc
- Reject whitespace-padded privileged group claims
  gundalow
  committed
  4877f74
- Fail closed on incomplete moderation API data
  gundalow
  committed
  9ef3aac
- Limit HTTP Discourse URLs to loopback
  gundalow
  committed
  5af6101
- Validate moderation response identity shape
  gundalow
  committed
  84b9af6
- Document moderation response and loopback HTTP policy
  gundalow
  committed
  81b3606
- Harden Discourse login claims and settings
  gundalow
  committed
  0b7fcee
- Correct plugin version and repository metadata
  gundalow
  committed
  a6d1e28
- Require 2FA for all privileged Pretix team users
  gundalow
  committed
  d8a5091
- Document staff ownership and session policy
  gundalow
  committed
  43da96e
- Format auth plugin and sort imports
  gundalow
  committed
  a69908f
- Include documentation in source distributions
  gundalow
  committed
  2f312d4
- Clarify Pretix session limit ownership
  gundalow
  committed
  a4be6b0
- Test auth callback security decisions
  gundalow
  committed
  32a4e40
- Fix auth test import ordering
  gundalow
  committed
  e66ef94
Commits on Oct 8, 2026
- Harden Discourse auth callback
  gundalow
  committed
  d02f09d
- Sort auth unit test imports
  gundalow
  committed
  d4b8f57
Commits on Oct 13, 2026
- Use configured Requests session for Discourse API
  gundalow
  committed
  afa131d
- Set auth plugin User-Agent on Discourse requests
  gundalow
  committed
  6c2f771
- Remove placeholder city from team mapping
  gundalow
  committed
  b3638a0
- Enable database access in organizer login tests
  gundalow
  committed
  d1979a9
Commits on Oct 14, 2026
- Point to canonical Meetup specification
  gundalow
  committed
  0e0f203
- Fix package README heading markup
  gundalow
  committed
  194230c
- Fix stale team test fixture
  gundalow
  committed
  355c93c

Commits

Commits on Oct 5, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026