Implement form to request an invitation letter

Author: marcoacierno

backend/api/schema.py

@@ -26,8 +26,8 @@
 from .association_membership.mutation import AssociationMembershipMutation
 from .cms.schema import CMSQuery
 from .sponsors.schema import SponsorsMutation
-from .visa.queries import VisaQuery
-from .visa.mutations import VisaMutation
+from .visa.query import VisaQuery
+from .visa.mutation import VisaMutation
 
 
 @strawberry.type

backend/api/types.py

@@ -146,3 +146,8 @@ def paginate_list(
 @strawberry.type
 class NotFound:
     message: str = "Not found"
+
+
+@strawberry.type
+class NoAdmissionTicket:
+    message: str = "User does not have admission ticket"

backend/api/users/types.py

@@ -5,6 +5,12 @@
 
 from django.urls import reverse
 from api.billing.types import BillingAddress
+from api.visa.types import InvitationLetterRequest
+from visa.models import (
+    InvitationLetterRequest as InvitationLetterRequestModel,
+    InvitationLetterRequestOnBehalfOf,
+)
+from pretix import user_has_admission_ticket
 from pycon.signing import sign_path
 import strawberry
 from strawberry.types import Info
@@ -139,6 +145,19 @@ def tickets(
         attendee_tickets = get_user_tickets(conference, self.email, language)
         return [ticket for ticket in attendee_tickets]
 
+    @strawberry.field
+    def has_admission_ticket(self, conference: str) -> bool:
+        conference = Conference.objects.filter(code=conference).first()
+
+        if not conference:
+            return False
+
+        return user_has_admission_ticket(
+            email=self.email,
+            event_organizer=conference.pretix_organizer_id,
+            event_slug=conference.pretix_event_id,
+        )
+
     @strawberry.field
     def submissions(self, info: Info, conference: str) -> list[Submission]:
         return SubmissionModel.objects.filter(
@@ -162,6 +181,22 @@ def billing_addresses(self, conference: str) -> list[BillingAddress]:
             .all()
         ]
 
+    @strawberry.field
+    def invitation_letter_request(
+        self, conference: str
+    ) -> InvitationLetterRequest | None:
+        invitation_letter_request = (
+            InvitationLetterRequestModel.objects.for_conference_code(conference)
+            .of_user(self.id)
+            .filter(on_behalf_of=InvitationLetterRequestOnBehalfOf.SELF)
+            .first()
+        )
+        return (
+            InvitationLetterRequest.from_model(invitation_letter_request)
+            if invitation_letter_request
+            else None
+        )
+
     @classmethod
     def from_django_model(cls, user):
         return cls(

backend/api/visa/mutation.py

@@ -0,0 +1,13 @@
+from api.visa.mutations.update_invitation_letter_document import (
+    update_invitation_letter_document,
+)
+from api.visa.mutations.request_invitation_letter import request_invitation_letter
+from strawberry.tools import create_type
+
+VisaMutation = create_type(
+    "VisaMutation",
+    (
+        update_invitation_letter_document,
+        request_invitation_letter,
+    ),
+)

backend/api/visa/mutations/__init__.py

@@ -0,0 +1,148 @@
+from django.db import transaction
+from datetime import date
+from typing import Annotated
+from api.types import BaseErrorType, NoAdmissionTicket
+from api.utils import validate_email
+from api.visa.types import InvitationLetterOnBehalfOf, InvitationLetterRequest
+from api.extensions import RateLimit
+from privacy_policy.record import record_privacy_policy_acceptance
+from visa.models import (
+    InvitationLetterRequest as InvitationLetterRequestModel,
+    InvitationLetterRequestOnBehalfOf,
+)
+from api.permissions import IsAuthenticated
+from api.context import Context
+from api.conferences.types import Conference
+from conferences.models import Conference as ConferenceModel
+from pretix import user_has_admission_ticket
+import strawberry
+
+
+@strawberry.type
+class InvitationLetterAlreadyRequested:
+    message: str = "Invitation letter has already been requested for this conference"
+
+
+@strawberry.type
+class RequestInvitationLetterErrors(BaseErrorType):
+    @strawberry.type
+    class _RequestInvitationLetterErrors:
+        conference: list[str] = strawberry.field(default_factory=list)
+        on_behalf_of: list[str] = strawberry.field(default_factory=list)
+        email: list[str] = strawberry.field(default_factory=list)
+        full_name: list[str] = strawberry.field(default_factory=list)
+        date_of_birth: list[str] = strawberry.field(default_factory=list)
+        nationality: list[str] = strawberry.field(default_factory=list)
+        address: list[str] = strawberry.field(default_factory=list)
+        passport_number: list[str] = strawberry.field(default_factory=list)
+        embassy_name: list[str] = strawberry.field(default_factory=list)
+
+    errors: _RequestInvitationLetterErrors = None
+
+
+@strawberry.input
+class RequestInvitationLetterInput:
+    conference: str
+    on_behalf_of: InvitationLetterOnBehalfOf
+    email: str
+    full_name: str
+    nationality: str
+    address: str
+    passport_number: str
+    embassy_name: str
+    date_of_birth: date
+
+    def validate(self, conference: Conference) -> RequestInvitationLetterErrors | None:
+        errors = RequestInvitationLetterErrors()
+
+        required_fields = [
+            "conference",
+            "on_behalf_of",
+            "full_name",
+            "nationality",
+            "address",
+            "passport_number",
+            "embassy_name",
+            "date_of_birth",
+        ]
+
+        if self.on_behalf_of == InvitationLetterOnBehalfOf.OTHER:
+            required_fields.append("email")
+
+        for field_name in required_fields:
+            if not getattr(self, field_name):
+                errors.add_error(field_name, "This field is required")
+
+        if self.email and not validate_email(self.email):
+            errors.add_error("email", "Invalid email address")
+
+        if not conference:
+            errors.add_error("conference", "Conference not found")
+
+        return errors.if_has_errors
+
+
+RequestInvitationLetterResult = Annotated[
+    InvitationLetterRequest
+    | RequestInvitationLetterErrors
+    | NoAdmissionTicket
+    | InvitationLetterAlreadyRequested,
+    strawberry.union(name="RequestInvitationLetterResult"),
+]
+
+
+@strawberry.mutation(
+    permission_classes=[IsAuthenticated],
+    extensions=[RateLimit("5/m")],
+)
+def request_invitation_letter(
+    info: strawberry.Info[Context], input: RequestInvitationLetterInput
+) -> RequestInvitationLetterResult:
+    conference = ConferenceModel.objects.filter(code=input.conference).first()
+
+    if errors := input.validate(conference):
+        return errors
+
+    user = info.context.request.user
+
+    if input.on_behalf_of == InvitationLetterOnBehalfOf.SELF:
+        input.email = ""
+
+        if not user_has_admission_ticket(
+            email=info.context.request.user.email,
+            event_organizer=conference.pretix_organizer_id,
+            event_slug=conference.pretix_event_id,
+        ):
+            return NoAdmissionTicket()
+
+        if (
+            InvitationLetterRequestModel.objects.for_conference(conference)
+            .of_user(user)
+            .filter(
+                on_behalf_of=InvitationLetterRequestOnBehalfOf.SELF,
+            )
+            .exists()
+        ):
+            return InvitationLetterAlreadyRequested()
+
+    with transaction.atomic():
+        invitation_letter, _ = InvitationLetterRequestModel.objects.get_or_create(
+            conference=conference,
+            requester=user,
+            on_behalf_of=InvitationLetterRequestOnBehalfOf(input.on_behalf_of.name),
+            full_name=input.full_name,
+            email_address=input.email,
+            nationality=input.nationality,
+            address=input.address,
+            date_of_birth=input.date_of_birth,
+            passport_number=input.passport_number,
+            embassy_name=input.embassy_name,
+        )
+
+        record_privacy_policy_acceptance(
+            info.context.request,
+            conference,
+            "invitation_letter",
+        )
+
+    return InvitationLetterRequest.from_model(invitation_letter)

backend/api/visa/mutations/request_invitation_letter.py

@@ -4,7 +4,6 @@
 from custom_admin.audit import create_change_admin_log_entry
 from visa.models import InvitationLetterDocument as InvitationLetterDocumentModel
 from api.visa.permissions import CanEditInvitationLetterDocument
-from strawberry.tools import create_type
 from api.visa.types import InvitationLetterDocument
 import strawberry
 
@@ -65,9 +64,3 @@ def update_invitation_letter_document(
         change_message="Invitation letter document updated",
     )
     return InvitationLetterDocument.from_model(invitation_letter_document)
-
-
-VisaMutation = create_type(
-    "VisaMutation",
-    (update_invitation_letter_document,),
-)

backend/api/visa/mutations.py …ons/update_invitation_letter_document.pybackend/api/visa/mutations.py renamed to backend/api/visa/mutations/update_invitation_letter_document.py backend/api/visa/mutations.py renamed to backend/api/visa/mutations/update_invitation_letter_document.py

@@ -2,7 +2,6 @@
 from visa.models import InvitationLetterDocument as InvitationLetterDocumentModel
 from api.visa.types import InvitationLetterDocument
 import strawberry
-from strawberry.tools import create_type
 
 
 @strawberry.field(permission_classes=[CanViewInvitationLetterDocument])
@@ -13,9 +12,3 @@ def invitation_letter_document(id: strawberry.ID) -> InvitationLetterDocument |
         return InvitationLetterDocument.from_model(invitation_letter_document)
 
     return None
-
-
-VisaQuery = create_type(
-    "VisaQuery",
-    (invitation_letter_document,),
-)

backend/api/visa/queries/__init__.py

@@ -0,0 +1,8 @@
+from api.visa.queries.invitation_letter_document import invitation_letter_document
+from strawberry.tools import create_type
+
+
+VisaQuery = create_type(
+    "VisaQuery",
+    (invitation_letter_document,),
+)