byrsapty
7fe8ce9030
The Mini App required a valid Telegram WebApp signature for every cart/checkout/order call, so anyone without Telegram couldn't order at all. require_customer_auth now falls back to a cookie-bound guest identity (a fresh negative telegram_id per guest, see allocate_guest_telegram_id) instead of rejecting the request, reusing the existing webapp bundle with no new frontend needed. Orders also get a random tracking_token so a guest who loses their session cookie can still check status via a /track/<token> link. Staff/admin surfaces (notifications, customer stats, broadcast) are updated to treat guests the same as the existing walk-in sentinel user. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| auth.py | ||
| cart.py | ||
| checkout.py | ||
| me.py | ||
| menu.py | ||
| orders.py | ||
| payments.py | ||
| payments_liqpay.py | ||
| settings.py | ||