Merge branch 'main' into improve-newsletter-captcha-error-display

# This file is automatically @generated by Poetry and should not be changed by hand.

# This file is automatically @generated by Poetry 1.8.3 and should not be changed by hand.

[[package]]

name = "asgiref"

version = "3.8.1"

description = "ASGI specs, helper code, and adapters"

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "async-stripe"

version = "5.5.0"

description = "An asynchronous wrapper around Stripe's official python library."

category = "main"

optional = false

python-versions = ">=3.6,<4.0"

files = [

name = "async-timeout"

version = "4.0.3"

description = "Timeout context manager for asyncio programs"

category = "main"

optional = false

python-versions = ">=3.7"

files = [

name = "beautifulsoup4"

version = "4.12.3"

description = "Screen-scraping library"

category = "main"

optional = false

python-versions = ">=3.6.0"

files = [

name = "certifi"

version = "2024.7.4"

description = "Python package for providing Mozilla's CA Bundle."

category = "main"

optional = false

python-versions = ">=3.6"

files = [

name = "charset-normalizer"

version = "3.3.2"

description = "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet."

category = "main"

optional = false

python-versions = ">=3.7.0"

files = [

name = "coverage"

version = "7.6.1"

description = "Code coverage measurement for Python"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "dependency-injector"

version = "4.41.0"

description = "Dependency injection framework for Python"

category = "main"

optional = false

python-versions = "*"

files = [

name = "django"

version = "4.2.15"

description = "A high-level Python web framework that encourages rapid development and clean, pragmatic design."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "django-bootstrap-v5"

version = "1.0.11"

description = "Bootstrap 5 support for Django projects"

category = "main"

optional = false

python-versions = ">=3.6,<4.0"

files = [

name = "django-jinja"

version = "2.11.0"

description = "Jinja2 templating language integrated in Django."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "django-jinja-bootstrap-form"

version = "4.5.0"

description = "django-jinja-bootstrap-form"

category = "main"

optional = false

python-versions = ">=3.6"

files = [

name = "django-prometheus"

version = "2.3.1"

description = "Django middlewares to monitor your application with Prometheus.io."

category = "main"

optional = false

python-versions = "*"

files = [

name = "django-ranged-response"

version = "0.2.0"

description = "Modified Django FileResponse that adds Content-Range headers."

category = "main"

optional = false

python-versions = "*"

files = [

name = "django-ratelimit"

version = "4.1.0"

description = "Cache-based rate-limiting for Django."

category = "main"

optional = false

python-versions = ">=3.7"

files = [

name = "django-simple-captcha"

version = "0.6.1"

description = "A very simple, yet powerful, Django captcha application"

category = "main"

optional = false

python-versions = "*"

files = []

[package.dependencies]

Django = ">=4.2"

django-ranged-response = "0.2.0"

djangorestframework = ">=3.15.0"

Pillow = ">=6.2.0"

[package.extras]

[package.source]

type = "git"

url = "https://github.com/mbi/django-simple-captcha.git"

reference = "bf7fffc01b989ab411bbc29d7b27c465a0ba5289"

resolved_reference = "bf7fffc01b989ab411bbc29d7b27c465a0ba5289"

reference = "1c92409dd05475a94657711a048732228bf6288a"

resolved_reference = "1c92409dd05475a94657711a048732228bf6288a"

[[package]]

name = "djangorestframework"

version = "3.15.2"

description = "Web APIs for Django, made easy."

optional = false

python-versions = ">=3.8"

files = [

    {file = "djangorestframework-3.15.2-py3-none-any.whl", hash = "sha256:2b8871b062ba1aefc2de01f773875441a961fefbf79f5eed1e32b2f096944b20"},

    {file = "djangorestframework-3.15.2.tar.gz", hash = "sha256:36fe88cd2d6c6bec23dca9804bab2ba5517a8bb9d8f47ebc68981b56840107ad"},

]

[package.dependencies]

django = ">=4.2"

[[package]]

name = "dnspython"

version = "2.6.1"

description = "DNS toolkit"

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "email-validator"

version = "2.2.0"

description = "A robust email address syntax and deliverability validation library."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "fakeredis"

version = "2.24.1"

description = "Python implementation of redis API, can be used for testing purposes."

category = "dev"

optional = false

python-versions = "<4.0,>=3.7"

files = [

name = "flake8"

version = "6.1.0"

description = "the modular source code checker: pep8 pyflakes and co"

category = "dev"

optional = false

python-versions = ">=3.8.1"

files = [

name = "flake8-isort"

version = "6.1.1"

description = "flake8 plugin that integrates isort"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "flake8-pyproject"

version = "1.2.3"

description = "Flake8 plug-in loading the configuration from pyproject.toml"

category = "dev"

optional = false

python-versions = ">= 3.6"

files = [

name = "gunicorn"

version = "20.1.0"

description = "WSGI HTTP Server for UNIX"

category = "dev"

optional = false

python-versions = ">=3.5"

files = [

name = "idna"

version = "3.8"

description = "Internationalized Domain Names in Applications (IDNA)"

category = "main"

optional = false

python-versions = ">=3.6"

files = [

name = "isort"

version = "5.13.2"

description = "A Python utility / library to sort Python imports."

category = "dev"

optional = false

python-versions = ">=3.8.0"

files = [

name = "jinja2"

version = "3.1.4"

description = "A very fast and expressive template engine."

category = "main"

optional = false

python-versions = ">=3.7"

files = [

name = "markupsafe"

version = "2.1.5"

description = "Safely add untrusted strings to HTML/XML markup."

category = "main"

optional = false

python-versions = ">=3.7"

files = [

name = "mccabe"

version = "0.7.0"

description = "McCabe checker, plugin for flake8"

category = "dev"

optional = false

python-versions = ">=3.6"

files = [

name = "mypy"

version = "1.11.2"

description = "Optional static typing for Python"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "mypy-extensions"

version = "1.0.0"

description = "Type system extensions for programs checked with the mypy type checker."

category = "dev"

optional = false

python-versions = ">=3.5"

files = [

name = "pillow"

version = "10.4.0"

description = "Python Imaging Library (Fork)"

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "prometheus-client"

version = "0.20.0"

description = "Python client for the Prometheus monitoring system."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "pycodestyle"

version = "2.11.1"

description = "Python style guide checker"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "pyflakes"

version = "3.1.0"

description = "passive checker of Python programs"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "python-dotenv"

version = "1.0.1"

description = "Read key-value pairs from a .env file and set them as environment variables"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "redis"

version = "5.0.8"

description = "Python client for Redis database and key-value store"

category = "main"

optional = false

python-versions = ">=3.7"

files = [

name = "requests"

version = "2.32.3"

description = "Python HTTP for Humans."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "requests-mock"

version = "1.12.1"

description = "Mock out responses from the requests package"

category = "dev"

optional = false

python-versions = ">=3.5"

files = [

name = "setuptools"

version = "74.0.0"

description = "Easily download, build, install, upgrade, and uninstall Python packages"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

doc = ["furo", "jaraco.packaging (>=9.3)", "jaraco.tidelift (>=1.4)", "pygments-github-lexers (==0.0.5)", "pyproject-hooks (!=1.1)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-favicon", "sphinx-inline-tabs", "sphinx-lint", "sphinx-notfound-page (>=1,<2)", "sphinx-reredirects", "sphinxcontrib-towncrier", "towncrier (<24.7)"]

enabler = ["pytest-enabler (>=2.2)"]

test = ["build[virtualenv] (>=1.0.3)", "filelock (>=3.4.0)", "ini2toml[lite] (>=0.14)", "jaraco.develop (>=7.21)", "jaraco.envs (>=2.2)", "jaraco.path (>=3.2.0)", "jaraco.test", "packaging (>=23.2)", "pip (>=19.1)", "pyproject-hooks (!=1.1)", "pytest (>=6,!=8.1.*)", "pytest-home (>=0.5)", "pytest-perf", "pytest-subprocess", "pytest-timeout", "pytest-xdist (>=3)", "tomli-w (>=1.0.0)", "virtualenv (>=13.0.0)", "wheel (>=0.44.0)"]

type = ["importlib-metadata (>=7.0.2)", "jaraco.develop (>=7.21)", "mypy (>=1.11.0,<1.12.0)", "pytest-mypy"]

type = ["importlib-metadata (>=7.0.2)", "jaraco.develop (>=7.21)", "mypy (==1.11.*)", "pytest-mypy"]

[[package]]

name = "six"

version = "1.16.0"

description = "Python 2 and 3 compatibility utilities"

category = "main"

optional = false

python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*"

files = [

name = "sortedcontainers"

version = "2.4.0"

description = "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set"

category = "dev"

optional = false

python-versions = "*"

files = [

name = "soupsieve"

version = "2.6"

description = "A modern CSS selector implementation for Beautiful Soup."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "sqlparse"

version = "0.5.1"

description = "A non-validating SQL parser."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "stripe"

version = "5.5.0"

description = "Python bindings for the Stripe API"

category = "main"

optional = false

python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"

files = [

name = "tomli"

version = "2.0.1"

description = "A lil' TOML parser"

category = "dev"

optional = false

python-versions = ">=3.7"

files = [

name = "tornado"

version = "6.4.1"

description = "Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "types-requests"

version = "2.32.0.20240712"

description = "Typing stubs for requests"

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "types-stripe"

version = "3.5.2.20240106"

description = "Typing stubs for stripe"

category = "main"

optional = false

python-versions = ">=3.8"

files = [

name = "typing-extensions"

version = "4.12.2"

description = "Backported and Experimental Type Hints for Python 3.8+"

category = "dev"

optional = false

python-versions = ">=3.8"

files = [

name = "tzdata"

version = "2024.1"

description = "Provider of IANA time zone data"

category = "main"

optional = false

python-versions = ">=2"

files = [

name = "urllib3"

version = "2.2.2"

description = "HTTP library with thread-safe connection pooling, file post, and more."

category = "main"

optional = false

python-versions = ">=3.8"

files = [

[metadata]

lock-version = "2.0"

python-versions = "^3.11"

content-hash = "aa40551da0d21287e2177518c6f023f2e62ee6ddf2c75df8c25addf5760d51de"

content-hash = "da05afb7869c76f57a76c97e157e76b748605e6854067eee7bbf5888932f56fb"

[tool.poetry.dependencies]

python = "^3.11"

Django = "^4.2.4"

django-simple-captcha = { git = "https://github.com/mbi/django-simple-captcha.git", rev = "bf7fffc01b989ab411bbc29d7b27c465a0ba5289" }

django-simple-captcha = { git = "https://github.com/mbi/django-simple-captcha.git", rev = "1c92409dd05475a94657711a048732228bf6288a" }

django-bootstrap-v5 = "^1.0.11"

django-jinja = "^2.10.2"

django-jinja-bootstrap-form = "^4.5.0"

    $("form.was-validated").removeClass("was-validated");

    dTor.refreshCaptcha();

    const messageContainer = $("#result-message");

    messageContainer.html(message).removeClass("hidden");

    messageContainer.text(message).removeClass("hidden");

  };

  this.hidePaymentError = function() {

    const messageContainer = $("#result-message");

    messageContainer.html("").addClass("hidden");

    messageContainer.text("").addClass("hidden");

  }

  this.handleFormErrors = function (errors) {

  this.validateElement = function (el) {

    if (!el.checkValidity() || $(el).val() == null) {

      $(el).siblings(".invalid-feedback").html(el.validationMessage);

      $(el).siblings(".invalid-feedback").text(el.validationMessage);

      $(el).addClass("is-invalid");

    } else {

      $(el).removeClass("is-invalid");

    # IPN timestamp info: https://developer.paypal.com/api/nvp-soap/ipn/IPNandPDTVariables/#payment-information  # noqa: E501

    # Relevant Python Github issue regarding strptime's %Z matching: https://github.com/python/cpython/issues/66571  # noqa: E501

    def ipn_time_to_datetime(self, ipn_time: str) -> datetime:

        # Replace timestamp whether or not it's daylight savings time in the US

        ipn_time = ipn_time.replace("PDT", "-0700").replace("PST", "-0800")

        return datetime.strptime(

            ipn_time.replace("PDT", "-0700"),

            ipn_time,

            "%H:%M:%S %b %d, %Y %z"

        ).astimezone(

            timezone.utc

        # that we do from webhooks, so we pick and choose the particular information from it

        # which will allow us to hand this info off to the rest of the donation-processing

        # pipeline.

        # (IPN messages always, and only, relate to ongoing subscriptions, so we can

        # (IPN messages we care about always, and only, relate to ongoing subscriptions, so we can

        # hardcode the message and make some other assumptions about what's in `args`.)

        message = "Tor\\Donation\\RecurringContributionOngoing"

        args = {

            "payment_instrument_id": "PayPal",

            "receive_date": timestamp,

            "trxn_id": param_dict["txn_id"],

            "handshake_id": param_dict["txn_id"],

            "trxn_id": param_dict["recurring_payment_id"],

            "handshake_id": param_dict["recurring_payment_id"],

            "recurring_contribution_transaction_id": param_dict["recurring_payment_id"],

            "currency": param_dict["mc_currency"],

            "total_amount": param_dict["amount"],

            billing_result, "recurring", "paypal"

        ).inc()

        # Ensure that IPN messages are deduped before being handed off for processing.

        if await self._civi.donation_exists(message, args["trxn_id"]) is False:

        # Ensure that donations are deduped before being handed off for processing.

        # In the event that PayPal sends both an IPN message and a webhook message about the

        # same legacy transaction, we need to use a deduping value available to both message

        # types; since `txn_id` is an IPN-exclusive value, we instead use `recurring_payment_id`.

        # Note that this ID is unique to this transaction series, and not this individual

        # transaction; since recurring transactions only bill once a month, and since we only

        # check for duplicate transaction messages for an hour after the first message, this

        # value is both unique enough and broadly-available enough for our purposes.

        if await self._civi.donation_exists(

            message, args["trxn_id"]

        ) is False:

            try:

                await self._civi.report_donation(message, args)

            except ValueError:

            # A subscription's donation has succeeded

            case "PAYMENT.SALE.COMPLETED":

                message = "Tor\\Donation\\RecurringContributionOngoing"

                args["trxn_id"] = event["id"]

                args["trxn_id"] = event["resource"]["id"]

                # In the case of new Paypal subscriptions, the only ID string found both in the

                # post-donation success data _and_ the webhook confirming the payment went through

                # is the billing agreement ID. This works fine in practice, but it is the one-off