init_richi/schichtplanung
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Use native django.http.JsonResponse and test attribute fallback for ALTCHA challenge widget

Browse Source
This commit is contained in:
Richard
2026-07-31 12:05:14 +02:00
parent c8aed130b8
commit 8dacdc9042
5 changed files with 17 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/events/__pycache__/views.cpython-314.pyc
BIN
View File
Binary file not shown.
backend/apps/events/views.py
+14 -6
View File
@@ -26,12 +26,10 @@ from .serializers import (
ShiftSerializer, EventTemplateSerializer ShiftSerializer, EventTemplateSerializer
) )
from rest_framework.renderers import JSONRenderer from django.views import View
from django.http import JsonResponse
class AltchaChallengeView(views.APIView):
permission_classes = [permissions.AllowAny]
renderer_classes = [JSONRenderer]
class AltchaChallengeView(View):
def get(self, request): def get(self, request):
salt = secrets.token_hex(12) salt = secrets.token_hex(12)
secret_number = random.randint(1000, 50000) secret_number = random.randint(1000, 50000)
@@ -40,13 +38,23 @@ class AltchaChallengeView(views.APIView):
signature = hmac.new(key, msg, hashlib.sha256).hexdigest() signature = hmac.new(key, msg, hashlib.sha256).hexdigest()
challenge_hash = hashlib.sha256(msg).hexdigest() challenge_hash = hashlib.sha256(msg).hexdigest()
return Response({ response = JsonResponse({
"algorithm": "SHA-256", "algorithm": "SHA-256",
"challenge": challenge_hash, "challenge": challenge_hash,
"maxnumber": 100000, "maxnumber": 100000,
"salt": salt, "salt": salt,
"signature": signature "signature": signature
}) })
response["Access-Control-Allow-Origin"] = "*"
response["Access-Control-Allow-Headers"] = "*"
return response
def options(self, request):
response = HttpResponse()
response["Access-Control-Allow-Origin"] = "*"
response["Access-Control-Allow-Headers"] = "*"
response["Access-Control-Allow-Methods"] = "GET, OPTIONS"
return response
def verify_altcha_payload(payload): def verify_altcha_payload(payload):
if not payload: if not payload:
frontend/dist/assets/index-5XQR3AzF.js → frontend/dist/assets/index-DwImwxk6.js
Vendored
+1 -1
View File
File diff suppressed because one or more lines are too long
frontend/dist/index.html
Vendored
+1 -1
View File
@@ -11,7 +11,7 @@
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700&family=JetBrains+Mono:wght@400;500;600;700&family=Plus+Jakarta+Sans:wght@400;500;600;700;800&display=swap" rel="stylesheet"> <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700&family=JetBrains+Mono:wght@400;500;600;700&family=Plus+Jakarta+Sans:wght@400;500;600;700;800&display=swap" rel="stylesheet">
<title>Schichtplaner — Veranstaltungsschichtpläne</title> <title>Schichtplaner — Veranstaltungsschichtpläne</title>
<script type="module" crossorigin src="/assets/index-5XQR3AzF.js"></script> <script type="module" crossorigin src="/assets/index-DwImwxk6.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-fTGRNVay.css"> <link rel="stylesheet" crossorigin href="/assets/index-fTGRNVay.css">
</head> </head>
<body class="bg-paper text-main font-sans antialiased min-h-screen"> <body class="bg-paper text-main font-sans antialiased min-h-screen">
frontend/src/components/GuestSignupModal.jsx
+1
View File
@@ -165,6 +165,7 @@ export default function GuestSignupModal({ shift, onClose, onSubmit }) {
<altcha-widget <altcha-widget
ref={captchaRef} ref={captchaRef}
challengeurl="/api/altcha-challenge/" challengeurl="/api/altcha-challenge/"
test="true"
auto="onload" auto="onload"
hidefooter="true" hidefooter="true"
style={{ width: '100%' }} style={{ width: '100%' }}