100 Commits
Author SHA1 Message Date
elordenador 1d319d8efa Merge branch 'latest' of github.com:dsaub/proyecto-final into latest 2026-05-31 18:52:49 +02:00
elordenador 874f4e29db refactor: update static and media URL handling for S3 integration 2026-05-31 18:51:39 +02:00
elordenador 131fe8fecc refactor: streamline environment variable handling using django-environ 2026-05-31 18:33:35 +02:00
elordenador ac27137b77 refactor: change table cells to headers for improved semantic structure in email templates 2026-05-26 13:46:08 +02:00
elordenador 7c445d4b66 refactor: change table cells to headers for improved semantic structure in ban email template 2026-05-26 13:36:59 +02:00
elordenador e4f0611ac5 refactor: replace parseInt with Number.parseInt for consistency and clarity
fix: add hidden input to card data labels for improved accessibility
refactor: add scope attributes to table headers for better semantic structure
2026-05-26 13:31:07 +02:00
elordenador 33dee87cb2 send_hemail now returns tuples of same length 2026-05-26 13:21:44 +02:00
elordenador 3de6d37e03 refactor: clean up send_email function and remove outdated SMTP implementation 2026-05-26 13:21:03 +02:00
elordenador 5503bbe8f7 refactor: organize constants and improve template rendering in views 2026-05-26 13:19:06 +02:00
elordenador dd5ecec3f6 fix: improve accessibility by adding aria-labelledby attributes to card input labels 2026-05-26 13:17:47 +02:00
elordenador f0a638be2e fix: update Docker workflows to use specific action versions and improve test command security 2026-05-26 12:12:03 +02:00
elordenador a61664a46e a 2026-05-26 12:08:06 +02:00
elordenador 1a73a9e373 fix: replace random module with secrets for secure code generation in VerificationCode 2026-05-26 12:02:36 +02:00
elordenador 4877e859bd fix: update HTTP method requirements for borrar_producto and eliminar_direccion views to require POST only 2026-05-26 12:01:15 +02:00
elordenador 848a49c92d feat: add BlankToNoneCharField for handling empty strings in models and update Cart model to use it
fix: update view functions to require appropriate HTTP methods
2026-05-26 11:48:04 +02:00
elordenador ac9efaaf91 fix: update delete review URL to use review ID instead of product ID 2026-05-26 10:35:17 +02:00
elordenador 2024e2f90c fix: update session_key fields in Cart, Order, and StockReservation models for consistency 2026-05-26 10:29:06 +02:00
elordenador 6ec0f4e732 feat: add constants for image types and error messages in forms 2026-05-26 10:19:21 +02:00
elordenador 35e7e93600 fix: remove redundant type annotations for user in UserAdmin actions 2026-05-26 10:12:28 +02:00
elordenador a7f43483f0 refactor: remove obsolete service.sh script 2026-05-26 10:11:42 +02:00
elordenador d773addc53 fix: update database configuration to support PostgreSQL toggle 2026-05-26 10:10:45 +02:00
elordenador b143d92cb2 fix: consolidate RUN commands in Dockerfile for improved layer caching 2026-05-26 10:08:41 +02:00
elordenador 9d7a7f7432 Merge branch 'latest' of github.com:dsaub/proyecto-final into latest 2026-05-26 10:01:31 +02:00
elordenador 0bb2eeeaa6 fix: add integrity attributes to Stripe and n8n stylesheets for security 2026-05-26 10:00:29 +02:00
elordenador 57efd95b0c fix: add integrity attribute to Stripe script for security 2026-05-26 09:51:05 +02:00
elordenador 5696fdddaa fix: remove hardcoded IP address from ALLOWED_HOSTS 2026-05-26 09:45:02 +02:00
elordenador 37383b0736 fix: update SECRET_KEY to use environment variable instead of hardcoded value 2026-05-26 09:44:53 +02:00
elordenador e4fa941fd6 Add API for AI Agent 2026-05-15 12:35:23 +02:00
elordenador d0f687f56f feat: añadir edición y eliminación de valoraciones propias 2026-05-08 14:05:52 +02:00
elordenador e70a9aeb9c fix: usar nombre de URL correcto (producto en lugar de product_detail) 2026-05-08 14:04:17 +02:00
elordenador e0350de530 fix: usar estrellas Unicode en lugar de Bootstrap Icons 2026-05-08 14:03:31 +02:00
elordenador 62bf3fdc08 fix: mostrar mensaje correcto cuando no se puede valorar por no haber compra 2026-05-08 13:58:08 +02:00
elordenador 2b2054ace6 debug: añadir variables de debug al template 2026-05-08 13:57:33 +02:00
elordenador f129b0462a fix: permitir valorar si el usuario tiene cualquier OrderItem del producto 2026-05-08 13:53:56 +02:00
elordenador aa047b3fd8 fix: eliminar campo images del form (widget no soporta multiple) 2026-05-08 13:34:00 +02:00
elordenador 429b531bad feat: añadir Review al admin para gestionar valoraciones 2026-05-08 13:33:46 +02:00
elordenador 0438a77149 feat: añadir sistema de valoraciones con formulario, vistas y templates 2026-05-08 13:33:37 +02:00
elordenador 40f0ef8ea5 feat: añadir modelo Review para valoraciones de productos 2026-05-08 13:32:33 +02:00
elordenador bf39724837 Fix security issues: image validation, email masking, quantity limits, min length
- #76: Add file type validation for product images (Media severity)
- #75: Mask emails in audit logs to prevent information leakage (Media severity)
- #74: Add max value validator to quantity fields (Low severity)
- #73: Add min length validation to password fields (Low severity)
2026-05-08 13:24:54 +02:00
elordenador 46343c1ea8 Refactor error logging in create_paypal_payment function for clarity 2026-05-08 13:18:52 +02:00
elordenador 76c8a277da Remove unused send_test_email function from views.py 2026-05-08 13:16:43 +02:00
elordenador 169a6d9dfb Remove root test .py files 2026-05-08 13:14:52 +02:00
elordenador f59841b5b8 Add permissions section to test job in Docker workflow 2026-05-08 13:13:27 +02:00
elordenador 32c1e1e6ff Fix IDOR vulnerability in cart operations (issue #77)
- Add _get_cart_item_owner_filters() helper to validate CartItem ownership
- Update update_cart_item and remove_from_cart to validate ownership
- Prevents users from manipulating item_id to access other users' cart items
2026-05-08 13:09:50 +02:00
elordenador 8a0335fabc Merge branch 'latest' of github.com:dsaub/proyecto-final into latest 2026-05-08 13:07:32 +02:00
elordenador 74b9d3bbc6 Add send_email import 2026-05-08 13:07:06 +02:00
elordenador f9b3bc7096 Add Procfile 2026-05-08 10:39:38 +02:00
elordenador 932fe7316b Update 2026-05-08 10:37:09 +02:00
elordenador 84f125c4b3 Update Python version 2026-05-08 10:34:28 +02:00
elordenador bb4d9993ec Remove requirements.txt 2026-05-08 10:12:29 +02:00
elordenador 72def373e3 Merge pull request 'Rewrite all forms to use Django Forms with validation' (#1) from form-rewrite into development
Reviewed-on: #1
2026-05-08 07:46:01 +00:00
elordenador a50cadc873 Finish Form Rewrite 2026-05-08 09:43:19 +02:00
elordenador 551057b067 Rewrite all forms to use Django Forms with validation
- Add ProductEditForm, EditProfileForm, ChangePasswordForm, ShippingAddressForm
- Add ResetPasswordForm, ResetPasswordPhase2Form
- Update views to use new Django Forms
- Add form validation tests (terms required, password mismatch, etc)
- Update templates to use Django Forms {{ form.as_p }}
2026-05-08 09:42:44 +02:00
elordenador ad7ddbe887 Fix formatting in settings.json by adding a missing comma 2026-05-07 08:54:24 +02:00
elordenador d6b7cdfe6a Add error handling for product creation to manage DataError exceptions 2026-05-07 08:37:07 +02:00
elordenador 56286c2fd9 Add limit to briefdesc and description on Product model, for issue #73 2026-05-07 08:01:46 +02:00
elordenador ba4f6ad65d Add CSRF protection to payment endpoints 2026-05-07 07:53:38 +02:00
elordenador ed7041ae40 Add user ban check to login view and log failed attempts 2026-05-06 11:59:59 +02:00
elordenador fa948a98e2 Add desbanear_usuario_action to UserAdmin actions 2026-05-06 11:45:21 +02:00
elordenador e8a5091dfd Add unban email template to notify users of account reinstatement 2026-05-06 11:39:10 +02:00
elordenador a0ee6ecd14 Update short description for desbanear_usuario_action in UserAdmin 2026-05-06 11:37:43 +02:00
elordenador d6c9aa3db3 Implement user unban functionality and enhance ban action with product deletion 2026-05-06 11:37:26 +02:00
elordenador 9751d19401 Add desbanear_usuario task to send unban email notifications 2026-05-06 10:52:32 +02:00
elordenador cda9adb986 Enhance user ban action to delete products by creator and add success message 2026-05-06 10:37:48 +02:00
elordenador e7e7fd118d Refactor user ban action to streamline user deactivation and product deletion 2026-05-06 10:25:13 +02:00
elordenador 132b1e1722 Remove user ban link from admin submit line template 2026-05-06 10:22:34 +02:00
elordenador 7f557a3247 Implement user ban functionality to delete associated products 2026-05-06 09:48:55 +02:00
elordenador 8cf1a55161 Add user ban functionality with email notification 2026-05-06 09:47:47 +02:00
elordenador 61a04e5040 Fix logins int() None 2026-05-06 09:23:33 +02:00
elordenador e5a0caa8b6 Fix text overflow 2026-05-06 09:23:23 +02:00
elordenador 25e6088355 Fix: correct user_options assignment in Celery app 2026-05-05 16:19:59 +02:00
elordenador 8ec391ccde Update AGENTS.md 2026-05-05 15:51:52 +02:00
elordenador 3b007f324f Fix: add COMPRESS_URL setting 2026-05-05 14:03:27 +02:00
elordenador 6e003009fa Fix: add COMPRESS_ROOT setting 2026-05-05 14:01:44 +02:00
elordenador 69578f1dba Fix: add user_options attribute to Celery app 2026-05-05 14:00:36 +02:00
elordenador 3eb81b343c Fix celery worker initialization by setting up Django before Celery and fixing import name 2026-05-05 13:09:54 +02:00
elordenador ce5aac0e89 Fix celery user_options attribute for worker 2026-05-05 13:03:44 +02:00
elordenador c534f500ad Fix: remove CELERY_APP setting 2026-05-05 12:57:51 +02:00
elordenador 63c6b645c3 Fix Celery: add CELERY_APP setting 2026-05-05 12:53:43 +02:00
elordenador b16cb367d3 Fix Celery: restore autodiscover_tasks to default behavior 2026-05-05 12:45:54 +02:00
elordenador 503233d323 Fix Celery: use autodiscover_tasks with full module path 2026-05-05 12:39:45 +02:00
elordenador b50ab06a22 Fix Celery: use CELERY_IMPORTS instead of autodiscover 2026-05-05 12:35:53 +02:00
elordenador cda339a336 Restore autodiscover_tasks to working state 2026-05-05 12:33:14 +02:00
elordenador 541a73ce36 Fix Celery: add django.setup() before importing tasks 2026-05-05 12:31:54 +02:00
elordenador 8932eeefbf Fix Celery worker: import tasks directly instead of autodiscover 2026-05-05 12:29:09 +02:00
elordenador 80e5e2a422 Fix Celery 2026-05-05 12:22:07 +02:00
elordenador a686bccd54 Update AGENTS.md 2026-05-05 12:20:11 +02:00
elordenador 6be67a9100 Add SKU field to Product model (issue #67) 2026-05-05 09:01:24 +02:00
elordenador bee360dfbb Fix POSTGRES_ENABLED check in ShippingAddress.clean() (issue #66) 2026-05-05 08:52:02 +02:00
elordenador a20a61be82 Add postal code validation to ShippingAddress model (issue #66) 2026-05-05 08:46:34 +02:00
elordenador b9675385aa Fix Github issue #69 2026-05-05 07:44:32 +02:00
elordenador c33def1124 Add staticfiles folder to .gitignore 2026-05-04 22:03:05 +02:00
elordenador 52dfa51af2 Remove Static Files 2026-05-04 22:02:19 +02:00
elordenador a02617f8d2 Move MD files and add an AGENTS.md 2026-05-04 22:01:27 +02:00
elordenador 53b4e89347 Fix tasks.py making tests fail 2026-05-04 22:01:12 +02:00
elordenador df0579dd86 Fix GH Issue #68 2026-05-04 21:59:28 +02:00
elordenador 1022a44f12 Fix GH Issue #65 2026-05-04 19:51:49 +02:00
elordenador bb697d92c6 Fix GH Issue #64 2026-05-04 19:45:47 +02:00
elordenador d75165e31a Arreglar el bug de posiblemente creator y primary_image este en None... 2026-05-04 12:31:49 +02:00
elordenador 6ed4fb1954 Remove punctuation Signs so we generate 'url-safe' codes 2026-05-04 12:30:09 +02:00