示例#1
0
    def post(self, request, format=None):
        # TODO: Make it possible to create orders with options.
        # at the moment, no options are passed to this method, which means they
        # are also not created.

        basket = parse_basket_from_hyperlink(request.data, format)

        if not request_allows_access_to_basket(request, basket):
            return response.Response("Unauthorized",
                                     status=status.HTTP_401_UNAUTHORIZED)

        c_ser = self.serializer_class(data=request.data,
                                      context={"request": request})

        if c_ser.is_valid():
            order = c_ser.save()
            basket.freeze()
            o_ser = self.order_serializer_class(order,
                                                context={"request": request})

            resp = response.Response(o_ser.data)

            oscarapi_post_checkout.send(
                sender=self,
                order=order,
                user=request.user,
                request=request,
                response=resp,
            )
            return resp

        return response.Response(c_ser.errors, status.HTTP_406_NOT_ACCEPTABLE)
示例#2
0
    def post(self, request, format=None):
        # TODO: Make it possible to create orders with options.
        # at the moment, no options are passed to this method, which means they
        # are also not created.

        basket = parse_basket_from_hyperlink(request.data, format)

        if not request_allows_access_to_basket(request, basket):
            return response.Response(
                "Unauthorized", status=status.HTTP_401_UNAUTHORIZED)

        c_ser = self.serializer_class(
            data=request.data, context={'request': request})

        if c_ser.is_valid():
            order = c_ser.save()
            basket.freeze()
            o_ser = self.order_serializer_class(
                order, context={'request': request})

            resp = response.Response(o_ser.data)

            oscarapi_post_checkout.send(
                sender=self, order=order, user=request.user,
                request=request, response=resp)
            return resp

        return response.Response(c_ser.errors, status.HTTP_406_NOT_ACCEPTABLE)
示例#3
0
 def get_queryset(self):
     basket_pk = self.kwargs.get("basket_pk")
     basket = generics.get_object_or_404(operations.editable_baskets(), pk=basket_pk)
     prepped_basket = operations.prepare_basket(basket, self.request)
     if operations.request_allows_access_to_basket(self.request, prepped_basket):
         return prepped_basket.all_lines()
     else:
         return self.queryset.none()
示例#4
0
 def get_queryset(self):
     basket_pk = self.kwargs.get('basket_pk')
     basket = get_object_or_404(operations.editable_baskets(), pk=basket_pk)
     prepped_basket = operations.prepare_basket(basket, self.request)
     if operations.request_allows_access_to_basket(self.request, prepped_basket):
         return prepped_basket.all_lines()
     else:
         return self.queryset.none()
示例#5
0
    def __call__(self, request):
        if self.is_api_request(request):
            request.cookies_to_delete = []
            # we should make sure that any cookie baskets are turned into
            # session baskets, since oscarapi uses only baskets from the
            # session.
            cookie_key = self.get_cookie_key(request)

            basket = self.get_cookie_basket(
                cookie_key, request,
                Exception(
                    "get_cookie_basket doesn't use the manager argument"))

            if basket is not None:
                # when a basket exists and we are already allowed to access
                # this basket
                if request_allows_access_to_basket(request, basket):
                    pass
                else:
                    store_basket_in_session(basket, request.session)

        return super(ApiBasketMiddleWare, self).__call__(request)
    def __call__(self, request):
        if self.is_api_request(request):
            request.cookies_to_delete = []
            # we should make sure that any cookie baskets are turned into
            # session baskets, since oscarapi uses only baskets from the
            # session.
            cookie_key = self.get_cookie_key(request)

            basket = self.get_cookie_basket(
                cookie_key,
                request,
                Exception("get_cookie_basket doesn't use the manager argument")
            )

            if basket is not None:
                # when a basket exists and we are already allowed to access
                # this basket
                if request_allows_access_to_basket(request, basket):
                    pass
                else:
                    store_basket_in_session(basket, request.session)

        return super(ApiBasketMiddleWare, self).__call__(request)
示例#7
0
    def post(self, request, format=None):
        # TODO: Make it possible to create orders with options.
        # at the moment, no options are passed to this method, which means they
        # are also not created.
        email = request.query_params.get('email', None)
        print(email)
        if email is not None:
            request.user = User.objects.filter(email=email).first()

        basket = parse_basket_from_hyperlink(request.data, format)

        if not request_allows_access_to_basket(request, basket):
            return response.Response("Unauthorized",
                                     status=status.HTTP_401_UNAUTHORIZED)

        c_ser = self.serializer_class(data=request.data,
                                      context={'request': request})

        if c_ser.is_valid():
            order = c_ser.save()
            _record_products_in_order(order)
            _record_user_order(request.user, order)
            basket.freeze()
            o_ser = self.order_serializer_class(order,
                                                context={'request': request})

            resp = response.Response(o_ser.data)

            oscarapi_post_checkout.send(sender=self,
                                        order=order,
                                        user=request.user,
                                        request=request,
                                        response=resp)
            return resp

        return response.Response(c_ser.errors, status.HTTP_406_NOT_ACCEPTABLE)