Add anonymous calendar links with user tokens

src/shiftings/accounts/migrations/0002_user_ical_token_user_user_ical_token_idx.py

@@ -0,0 +1,22 @@
+# Generated by Django 4.0.9 on 2024-07-06 17:48
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('accounts', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='user',
+            name='ical_token',
+            field=models.CharField(max_length=64, null=True, unique=True, verbose_name='iCalendar Token'),
+        ),
+        migrations.AddIndex(
+            model_name='user',
+            index=models.Index(fields=['ical_token'], name='user_ical_token_idx'),
+        ),
+    ]

src/shiftings/accounts/models/user.py

@@ -8,6 +8,7 @@
 from django.urls import reverse
 from django.utils.translation import gettext_lazy as _
 from phonenumber_field.modelfields import PhoneNumberField
+from shiftings import local_settings
 
 if TYPE_CHECKING:
     from shiftings.events.models import Event
@@ -31,10 +32,14 @@ def display(self) -> str:
 class User(BaseUser):
     display_name = models.CharField(max_length=150, verbose_name=_('Display Name'), null=True, blank=True)
     phone_number = PhoneNumberField(verbose_name=_('Telephone Number'), blank=True, null=True)
+    ical_token = models.CharField(max_length=64, verbose_name=_('iCalendar Token'), null=True, unique=True)
 
     class Meta:
         default_permissions = ()
         ordering = ['username']
+        indexes = [
+            models.Index(fields=['ical_token'], name='user_ical_token_idx')
+        ]
 
     def __str__(self):
         return self.display
@@ -65,5 +70,17 @@ def shift_count(self) -> int:
             total += Shift.objects.filter(participants__user=claimed_user).count()
         return total
 
+    @property
+    def all_shifts_url(self):
+git         if self.ical_token is None:
+            return None
+        return local_settings.SITE + '/user/calendar?token=' + self.ical_token
+
+    @property
+    def my_shifts_url(self):
+        if self.ical_token is None:
+            return None
+        return local_settings.SITE + '/user/participation_calendar?token=' + self.ical_token
+
     def get_absolute_url(self):
         return reverse('user_profile')

src/shiftings/accounts/templates/accounts/user_detail.html

@@ -21,6 +21,19 @@ <h4 class="text-danger">Your data cannot be restored.</h4>
       </form>
     </div>
   {% endsimpledisplaymodal %}
+  {% simpledisplaymodal 'resetCalendarToken' _('Reset Calendar URL') %}
+    <div>
+        {% trans "Do you want to reset your personal calendar access token? All previous tokens will stop working." %}
+    </div>
+    <div class="mt-3">
+      <form action="{% url "user_ical_token_reset" %}" method="post">
+        {% csrf_token %}
+        <button type="submit" class="btn btn-info float-end" title="{% trans "Reset iCalendar Link Token" %}">
+          {% trans "Reset Token" %} <i class="fa-solid fa-repeat"></i>
+        </button>
+      </form>
+    </div>
+  {% endsimpledisplaymodal %}
 {% endblock %}
 {% block left %}
   <div class="sticky-top">
@@ -115,6 +128,31 @@ <h5>{% trans "Organizations" %}</h5>
       </div>
     </div>
   </div>
+  <div class="card bg-dark mt-2">
+    <div class="card-header center-items justify-content-between">
+      <h4>{% trans "Calendar URL" %}</h4>
+        <button class="btn btn-info" title="{% trans "Reset iCalendar Link Token" %}" data-bs-toggle="modal"
+                    data-bs-target="#resetCalendarToken">
+          {% trans "Reset Token" %} <i class="fa-solid fa-repeat"></i>
+        </button>
+    </div>
+    <div class="card-body pt-0">
+      {% if user.ical_token is None %}
+        <div class="text-bg-dark text-center text-secondary p-2">{% trans "(Re-)Generate your personal Token in order to use persistent iCalendar links." %}</div>
+      {% else %}
+        <span class="input-group mb-2">
+          <label for="user_all_shifts_url" class="input-group-text">{% trans "Overview" %}</label>
+          <input id="user_all_shifts_url" class="form-control" value="{{ user.all_shifts_url }}" />
+          {% include 'widgets/copy_input.html' with input_selector='#user_all_shifts_url' %}
+        </span>
+        <span class="input-group mb-2">
+          <label for="user_my_shifts_url" class="input-group-text">{% trans "My Shifts" %}</label>
+          <input id="user_my_shifts_url" class="form-control" value="{{ user.my_shifts_url }}" />
+          {% include 'widgets/copy_input.html' with input_selector='#user_all_shifts_url' %}
+        </span>
+      {% endif %}
+    </div>
+  </div>
 {% endblock %}
 
 {% block right %}

src/shiftings/accounts/urls/user.py

@@ -7,7 +7,7 @@
 from shiftings.accounts.views.auth import UserLoginView, UserLogoutView, UserReLoginView
 from shiftings.accounts.views.password import PasswordResetConfirmView, PasswordResetView
 from shiftings.accounts.views.user import (ConfirmEMailView, UserDeleteSelfView, UserEditView, UserProfileView,
-                                           UserRegisterView)
+                                           UserRegisterView, UserRegenerateCalendarTokenView)
 from shiftings.cal.feed.user import OwnShiftsFeed, UserFeed
 from shiftings.utils.converters import AlphaNumericConverter
 
@@ -30,6 +30,7 @@
          name='password_reset_success'),
     path('calendar/', UserFeed(), name='user_calendar'),
     path('participation_calendar/', OwnShiftsFeed(), name='user_participation_calendar'),
+    path('ical_token_reset/', UserRegenerateCalendarTokenView.as_view(), name='user_ical_token_reset')
 ]
 if settings.FEATURES.get('registration', False):
     urlpatterns.append(path('register/', UserRegisterView.as_view(), name='register'))

src/shiftings/accounts/views/user.py

@@ -1,4 +1,5 @@
 from datetime import date
+from secrets import token_urlsafe
 from typing import Any, Dict
 
 from django import template
@@ -10,6 +11,7 @@
 from django.core.mail import EmailMessage
 from django.db.models import Q
 from django.http import HttpRequest, HttpResponse, HttpResponseRedirect
+from django.shortcuts import redirect
 from django.urls import reverse, reverse_lazy
 from django.utils.decorators import method_decorator
 from django.utils.encoding import force_bytes, force_str
@@ -131,3 +133,14 @@ def delete(self, request, *args, **kwargs):
 
     def post(self, request, *args, **kwargs):
         return self.delete(request, *args, **kwargs)
+
+
+class UserRegenerateCalendarTokenView(BaseLoginMixin, View):
+    def get(self, request, *args, **kwargs):
+        return redirect(reverse('user_profile'))
+
+    def post(self, request, *args, **kwargs):
+        user = self.request.user
+        user.ical_token = token_urlsafe(64)
+        user.save()
+        return redirect(reverse('user_profile'))

src/shiftings/cal/feed/user.py

@@ -11,9 +11,12 @@
 
 class UserFeed(ShiftFeed[User]):
     def get_object(self, request: HttpRequest, *args: Any, **kwargs: Any) -> Optional[User]:
-        if not request.user.is_authenticated:
-            raise Http403()
-        return request.user
+        if request.user.is_authenticated:
+            return request.user
+
+        # noinspection all
+        user = User.objects.get(ical_token=request.GET.get('token', ''))
+        return user
 
     def file_name(self, obj: User) -> str:
         return f'{obj.display.lower().replace(" ", "_")}_shifts.ics'

src/shiftings/templates/widgets/copy_input.html

@@ -0,0 +1,7 @@
+<button onclick="
+        var x = document.querySelector('{{ input_selector }}');
+        x.select();
+        x.setSelectionRange(0, 99999);
+        navigator.clipboard.writeText(x.value);" class="btn btn-secondary">
+    {% trans "Copy" %} <i class="fa-solid fa-clipboard"></i></button>
+</span>