metatroncubeswdev db50c3f15c feat(event_qr_ticketing): signed QR tickets + mobile check-in (Phase 2)
Extends stock event.registration with a signed QR ticket system, built to
complement rather than duplicate Odoo 19's existing barcode/badge
infrastructure. ticket_ref ('TIX-{event}-{seq}') and a QR code encoding
"ticket_ref|hmac_token" are added; the HMAC is signed with Odoo's own
per-database secret (ir.config_parameter 'database.secret', the same
mechanism core uses for password-reset tokens), so a copied/edited
ticket_ref without the matching signature is rejected as forged. A "Event
Ticket (QR)" PDF report is auto-attached to the core registration
confirmation email by adding it to event.event_subscription's
report_template_ids - no override of core mail-sending logic needed.

Adds the missing piece core doesn't provide: a mobile-friendly staff
check-in page at /event/checkin (gated on event.group_event_registration_desk),
built as a v19 "Interaction" (registry.category("public.interactions"),
the current replacement for legacy publicWidget) with manual ticket-ref
entry always available and camera scanning via the browser's native
BarcodeDetector API - avoiding a third-party CDN dependency and its
security/offline-reliability tradeoffs. Guards against forged tokens and
double check-in; a live per-event registered-vs-checked-in dashboard.

Two more real Odoo 19 surprises hit here: event.event has no more `state`
field at all (replaced by a stage_id/event.stage kanban system - my
check-in page's event picker now filters by date_end instead), and a
route type='json' should be type='jsonrpc' (json still works but is
deprecated).

Verified against a live Odoo 19 + Postgres 16 container: 9/9 tests pass
(ticket generation/uniqueness, valid/duplicate/forged/tampered token
handling, manual lookup), plus a full manual live run over HTTP - created
an event and registration via JSON-RPC, confirmed ticket_ref generation,
authenticated a session, hit /event/checkin/scan for a real check-in and
duplicate rejection, confirmed dashboard counts update, and loaded the
actual /event/checkin page (title, camera-button markup, and our JS
present in the served frontend bundle).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-17 21:29:40 -04:00

49 lines
1.4 KiB
Python

{
'name': 'Community OS - Event QR Ticketing',
'version': '19.0.1.0.0',
'category': 'Marketing/Events',
'summary': 'Signed QR tickets per registration with a staff check-in and verification screen',
'description': """
Community OS - Event QR Ticketing
===================================
Extends standard Odoo Community events with:
* A signed QR ticket per registration (forgery-resistant, per-database secret)
* Ticket PDF and QR attachment on the registration confirmation email
* A mobile-friendly staff check-in page: scan or manual entry, duplicate and
forged-token protection
* A simple per-event registered vs checked-in dashboard
Works standalone with a stock Community Edition event - no other Community
OS product module required.
""",
'author': 'Metatroncube Software Solutions LLP',
'website': 'https://www.metatroncube.com',
'license': 'LGPL-3',
'price': 0.00,
'currency': 'USD',
'depends': [
'event',
'event_sale',
'website_event',
],
'data': [
'data/ir_sequence.xml',
'report/event_ticket_report.xml',
'views/checkin_templates.xml',
],
'demo': [],
'assets': {
'web.assets_frontend': [
'event_qr_ticketing/static/src/js/event_checkin.js',
],
},
'images': ['static/description/banner.png'],
'application': False,
'installable': True,
'external_dependencies': {
'python': ['qrcode'],
},
}