pretix-enablebanking 1.0.0__tar.gz

pretix_enablebanking-1.0.0/.gitignore

@@ -0,0 +1,28 @@
+env/
+build/
+dist/
+.coverage
+htmlcov/
+.ropeproject
+*.sqlite3
+*.db
+*.py[cod]
+*.swp
+*.aux
+*.log
+*.toc
+*.mo
+*~
+.ropeproject
+__pycache__/
+_static/
+.idea
+.secret
+atlassian-ide-plugin.xml
+pretixeu/
+local/
+.project
+.pydevproject
+.DS_Store
+.venv
+.claude

pretix_enablebanking-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nico Knoll
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pretix_enablebanking-1.0.0/Makefile

@@ -0,0 +1,11 @@
+all: localecompile
+
+LNGS := $(shell find src/pretix_enablebanking/locale/ -mindepth 1 -maxdepth 1 -type d -printf "-l %f ")
+
+localecompile:
+	django-admin compilemessages
+
+localegen:
+	django-admin makemessages --keep-pot -i build -i dist -i "*egg*" $(LNGS)
+
+.PHONY: all localecompile localegen

pretix_enablebanking-1.0.0/PKG-INFO

@@ -0,0 +1,124 @@
+Metadata-Version: 2.3
+Name: pretix-enablebanking
+Version: 1.0.0
+Summary: Automatically import bank transactions via Enable Banking (PSD2/Open Banking) into pretix
+Project-URL: Homepage, https://github.com/nicoknoll/pretix-enablebanking
+Project-URL: Repository, https://github.com/nicoknoll/pretix-enablebanking
+Author-email: Nico Knoll <mail@nico.is>
+License: MIT
+Keywords: pretix
+Requires-Python: >=3.10
+Requires-Dist: pretix>=2.7.0
+Requires-Dist: requests
+Description-Content-Type: text/markdown
+
+# pretix-enablebanking
+
+Connects pretix to your bank via [Enable Banking](https://enablebanking.com) (PSD2/Open Banking). Once configured, it periodically fetches bank transactions and feeds them into pretix's bank transfer pipeline — automatically matching incoming payments to orders.
+
+**Key capabilities:**
+- OAuth-based bank connection via 400+ European banks (PSD2)
+- Automatic and on-demand transaction import
+- Multi-account support with per-account activation toggle
+- Configurable auto-fetch interval (every 1h, 4h, 12h, or 24h)
+- Works at organizer level (one connection per organizer)
+
+## Screenshots
+
+**Import — manual fetch & job history**
+
+![Import](docs/images/import.png)
+
+**Settings — bank connection & API credentials**
+
+![Settings](docs/images/settings.png)
+
+## How it works
+
+1. You register an app at Enable Banking and get an App ID + RSA private key.
+2. You enter those credentials in the plugin settings and initiate an OAuth flow to connect your bank account.
+3. After authorization, Enable Banking provides access to your bank accounts. You activate the ones you want to import from.
+4. The plugin fetches transactions (automatically or on demand) and creates `BankImportJob` records, which pretix then processes to match payments against open orders.
+
+The transaction import runs as a Celery task and uses Enable Banking's paginated transactions API. The last-fetched date per account is tracked to avoid re-importing.
+
+## Installation
+
+```bash
+pip install pretix-enablebanking
+```
+
+Then run migrations and restart the server:
+
+```bash
+python -m pretix migrate
+```
+
+The plugin registers itself automatically via the `pretix.plugin` entry point — no manual `INSTALLED_APPS` edit needed.
+
+### Development installation
+
+```bash
+git clone https://github.com/nicoknoll/pretix-enablebanking.git
+cd pretix-enablebanking
+pip install -e .
+```
+
+## Setup in pretix
+
+### 1. Get Enable Banking credentials
+
+1. Sign up at [developers.enablebanking.com](https://developers.enablebanking.com) and create an application.
+2. Generate an RSA key pair. Register the public key with Enable Banking and keep the private key (PEM format).
+3. Note your **Application ID**.
+
+### 2. Configure the plugin
+
+In the pretix backend, go to your organizer → **Bank transfer** → **Enable Banking settings**:
+
+- **Application ID** — the App ID from Enable Banking
+- **Private key (PEM)** — your RSA private key (`-----BEGIN PRIVATE KEY-----` format)
+- **Country** — used to filter the list of available banks (ASPSPs)
+- **Auto-fetch interval** — how often transactions should be fetched automatically (set to "disabled" to import manually only)
+
+Save, then select your bank from the dropdown and click **Connect with bank**. You'll be redirected to Enable Banking's hosted authorization page where you log into your bank and grant consent.
+
+After authorization, you're redirected back and your accounts appear in the settings. Activate the accounts you want to import from and save.
+
+### 3. Import transactions
+
+Go to **Bank transfer** → **Automatic import** to:
+
+- Trigger a manual import (optionally specify a start date)
+- View recent import jobs and their status
+- See when your bank connection expires (Enable Banking consent is typically valid for 90 days — renew before it expires)
+
+## Testing with the sandbox
+
+Enable Banking provides a sandbox environment with a mock bank. Use these credentials when connecting **Aachener Bank** (country: **DE**):
+
+| Field | Value |
+|---|---|
+| VR NetKey | `VRK1234567890ALL` |
+| PIN | `password` |
+| OTP | `123456` |
+
+The import view shows a **Sandbox mode** warning when a mock bank is connected.
+
+## Dependencies
+
+| Package | Purpose |
+|---|---|
+| `pretix >= 2.7.0` | Host platform |
+| `requests` | HTTP calls to Enable Banking API |
+| `PyJWT` | RS256-signed JWT for API authentication (transitive via pretix) |
+
+Python 3.10+ required.
+
+## Permissions
+
+The plugin operates at organizer level. Users need **can_change_organizer_settings** to access settings and trigger imports.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

pretix_enablebanking-1.0.0/README.md

@@ -0,0 +1,110 @@
+# pretix-enablebanking
+
+Connects pretix to your bank via [Enable Banking](https://enablebanking.com) (PSD2/Open Banking). Once configured, it periodically fetches bank transactions and feeds them into pretix's bank transfer pipeline — automatically matching incoming payments to orders.
+
+**Key capabilities:**
+- OAuth-based bank connection via 400+ European banks (PSD2)
+- Automatic and on-demand transaction import
+- Multi-account support with per-account activation toggle
+- Configurable auto-fetch interval (every 1h, 4h, 12h, or 24h)
+- Works at organizer level (one connection per organizer)
+
+## Screenshots
+
+**Import — manual fetch & job history**
+
+![Import](docs/images/import.png)
+
+**Settings — bank connection & API credentials**
+
+![Settings](docs/images/settings.png)
+
+## How it works
+
+1. You register an app at Enable Banking and get an App ID + RSA private key.
+2. You enter those credentials in the plugin settings and initiate an OAuth flow to connect your bank account.
+3. After authorization, Enable Banking provides access to your bank accounts. You activate the ones you want to import from.
+4. The plugin fetches transactions (automatically or on demand) and creates `BankImportJob` records, which pretix then processes to match payments against open orders.
+
+The transaction import runs as a Celery task and uses Enable Banking's paginated transactions API. The last-fetched date per account is tracked to avoid re-importing.
+
+## Installation
+
+```bash
+pip install pretix-enablebanking
+```
+
+Then run migrations and restart the server:
+
+```bash
+python -m pretix migrate
+```
+
+The plugin registers itself automatically via the `pretix.plugin` entry point — no manual `INSTALLED_APPS` edit needed.
+
+### Development installation
+
+```bash
+git clone https://github.com/nicoknoll/pretix-enablebanking.git
+cd pretix-enablebanking
+pip install -e .
+```
+
+## Setup in pretix
+
+### 1. Get Enable Banking credentials
+
+1. Sign up at [developers.enablebanking.com](https://developers.enablebanking.com) and create an application.
+2. Generate an RSA key pair. Register the public key with Enable Banking and keep the private key (PEM format).
+3. Note your **Application ID**.
+
+### 2. Configure the plugin
+
+In the pretix backend, go to your organizer → **Bank transfer** → **Enable Banking settings**:
+
+- **Application ID** — the App ID from Enable Banking
+- **Private key (PEM)** — your RSA private key (`-----BEGIN PRIVATE KEY-----` format)
+- **Country** — used to filter the list of available banks (ASPSPs)
+- **Auto-fetch interval** — how often transactions should be fetched automatically (set to "disabled" to import manually only)
+
+Save, then select your bank from the dropdown and click **Connect with bank**. You'll be redirected to Enable Banking's hosted authorization page where you log into your bank and grant consent.
+
+After authorization, you're redirected back and your accounts appear in the settings. Activate the accounts you want to import from and save.
+
+### 3. Import transactions
+
+Go to **Bank transfer** → **Automatic import** to:
+
+- Trigger a manual import (optionally specify a start date)
+- View recent import jobs and their status
+- See when your bank connection expires (Enable Banking consent is typically valid for 90 days — renew before it expires)
+
+## Testing with the sandbox
+
+Enable Banking provides a sandbox environment with a mock bank. Use these credentials when connecting **Aachener Bank** (country: **DE**):
+
+| Field | Value |
+|---|---|
+| VR NetKey | `VRK1234567890ALL` |
+| PIN | `password` |
+| OTP | `123456` |
+
+The import view shows a **Sandbox mode** warning when a mock bank is connected.
+
+## Dependencies
+
+| Package | Purpose |
+|---|---|
+| `pretix >= 2.7.0` | Host platform |
+| `requests` | HTTP calls to Enable Banking API |
+| `PyJWT` | RS256-signed JWT for API authentication (transitive via pretix) |
+
+Python 3.10+ required.
+
+## Permissions
+
+The plugin operates at organizer level. Users need **can_change_organizer_settings** to access settings and trigger imports.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

pretix_enablebanking-1.0.0/pretixplugin.toml

@@ -0,0 +1,4 @@
+[plugin]
+package = "pretix-enablebanking"
+modules = ["pretix_enablebanking"]
+marketplace_name = "enablebanking"

pretix_enablebanking-1.0.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "pretix-enablebanking"
+version = "1.0.0"
+description = "Automatically import bank transactions via Enable Banking (PSD2/Open Banking) into pretix"
+readme = "README.md"
+requires-python = ">=3.10"
+license = {text = "MIT"}
+keywords = ["pretix"]
+authors = [
+    {name = "Nico Knoll", email = "mail@nico.is"},
+]
+dependencies = [
+    "pretix>=2.7.0",
+    "requests",
+]
+
+[project.urls]
+Homepage = "https://github.com/nicoknoll/pretix-enablebanking"
+Repository = "https://github.com/nicoknoll/pretix-enablebanking"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/pretix_enablebanking"]
+core-metadata-version = "2.3"
+
+[tool.hatch.build.targets.sdist]
+core-metadata-version = "2.3"
+
+[project.entry-points."pretix.plugin"]
+pretix_enablebanking = "pretix_enablebanking.apps:PluginApp"

pretix_enablebanking-1.0.0/src/pretix_enablebanking/__init__.py

@@ -0,0 +1 @@
+__version__ = "1.0.0"

pretix_enablebanking-1.0.0/src/pretix_enablebanking/apps.py

@@ -0,0 +1,38 @@
+from django.utils.translation import gettext_lazy
+from . import __version__
+
+try:
+    from pretix.base.plugins import PluginConfig, PLUGIN_LEVEL_ORGANIZER
+except ImportError:
+    raise RuntimeError("Please use pretix 2.7 or above to run this plugin!")
+
+
+class PluginApp(PluginConfig):
+    default = True
+    name = "pretix_enablebanking"
+    verbose_name = "Enable Banking"
+
+    class PretixPluginMeta:
+        name = gettext_lazy("Enable Banking")
+        author = "Nico Knoll"
+        description = gettext_lazy(
+            "Automatically import bank transactions via Enable Banking (PSD2/Open Banking) "
+            "into the pretix bank transfer pipeline."
+        )
+        visible = True
+        version = __version__
+        category = "PAYMENT"
+        compatibility = "pretix>=2.7.0"
+        level = PLUGIN_LEVEL_ORGANIZER
+
+    def uninstalled(self, organizer):
+        from .models import EnableBankingConnection
+
+        for key in ('enablebanking_app_id', 'enablebanking_private_key',
+                    'enablebanking_fetch_interval', 'enablebanking_country'):
+            organizer.settings.delete(key)
+
+        EnableBankingConnection.objects.filter(organizer=organizer).delete()
+
+    def ready(self):
+        from . import signals  # NOQA

pretix_enablebanking-1.0.0/src/pretix_enablebanking/enablebanking_client.py

@@ -0,0 +1,125 @@
+import logging
+import uuid
+from datetime import datetime, timedelta, timezone
+
+import jwt as pyjwt
+import requests
+from django.core.exceptions import ImproperlyConfigured
+
+logger = logging.getLogger(__name__)
+
+
+class EnableBankingClient:
+    BASE_URL = 'https://api.enablebanking.com'
+
+    def __init__(self, app_id, private_key_pem):
+        self.app_id = app_id
+        self.private_key_pem = private_key_pem
+
+    def _create_jwt(self):
+        iat = int(datetime.now(tz=timezone.utc).timestamp())
+        payload = {
+            "iss": "enablebanking.com",
+            "aud": "api.enablebanking.com",
+            "iat": iat,
+            "exp": iat + 3600,
+        }
+        return pyjwt.encode(
+            payload,
+            self.private_key_pem,
+            algorithm="RS256",
+            headers={"kid": self.app_id},
+        )
+
+    def _headers(self):
+        return {"Authorization": f"Bearer {self._create_jwt()}"}
+
+    def list_aspsps(self, country=None):
+        params = {}
+        if country:
+            params["country"] = country
+
+        resp = requests.get(
+            f"{self.BASE_URL}/aspsps",
+            params=params,
+            headers=self._headers(),
+            timeout=30,
+        )
+
+        if not resp.ok:
+            logger.error('Enable Banking GET /aspsps failed %s: %s', resp.status_code, resp.text)
+
+        resp.raise_for_status()
+        return resp.json().get("aspsps", [])
+
+    def create_auth(self, aspsp_name, aspsp_country, redirect_url, maximum_consent_validity=None):
+        # Use the ASPSP's maximum_consent_validity (seconds) if provided, else fall back to 90 days
+        seconds = maximum_consent_validity if maximum_consent_validity else 90 * 24 * 3600
+        valid_until = (
+            datetime.now(tz=timezone.utc) + timedelta(seconds=seconds)
+        ).strftime("%Y-%m-%dT%H:%M:%S.000000+00:00")
+
+        body = {
+            "access": {"valid_until": valid_until},
+            "aspsp": {"name": aspsp_name, "country": aspsp_country},
+            "state": str(uuid.uuid4()),
+            "redirect_url": redirect_url,
+            "psu_type": "personal",
+        }
+        resp = requests.post(
+            f"{self.BASE_URL}/auth",
+            json=body,
+            headers=self._headers(),
+            timeout=30,
+        )
+
+        if not resp.ok:
+            logger.error('Enable Banking POST /auth failed %s: %s', resp.status_code, resp.text)
+
+        resp.raise_for_status()
+        return resp.json()
+
+    def create_session(self, code):
+        resp = requests.post(
+            f"{self.BASE_URL}/sessions",
+            json={"code": code},
+            headers=self._headers(),
+            timeout=30,
+        )
+        resp.raise_for_status()
+        return resp.json()
+
+    def get_transactions(self, account_uid, date_from=None):
+        params = {}
+        if date_from:
+            params["date_from"] = str(date_from)
+
+        transactions = []
+        while True:
+            resp = requests.get(
+                f"{self.BASE_URL}/accounts/{account_uid}/transactions",
+                params=params,
+                headers=self._headers(),
+                timeout=60,
+            )
+            resp.raise_for_status()
+            data = resp.json()
+            transactions.extend(data.get("transactions", []))
+            continuation_key = data.get("continuation_key")
+
+            if not continuation_key:
+                break
+
+            params["continuation_key"] = continuation_key
+
+        return {"booked": transactions, "pending": []}
+
+
+def get_enablebanking_client(organizer):
+    app_id = organizer.settings.get('enablebanking_app_id', default='')
+    private_key = organizer.settings.get('enablebanking_private_key', default='')
+
+    if not app_id or not private_key:
+        raise ImproperlyConfigured('Enable Banking app_id and private_key must be configured.')
+
+    return EnableBankingClient(app_id, private_key)

pretix_enablebanking-1.0.0/src/pretix_enablebanking/forms.py

@@ -0,0 +1,69 @@
+from django import forms
+from django.utils.translation import gettext_lazy as _
+
+from pretix.base.forms import SettingsForm
+
+
+class EnableBankingSettingsForm(SettingsForm):
+    enablebanking_app_id = forms.CharField(
+        label=_('Application ID'),
+        required=False,
+        help_text=_('Your Enable Banking application ID.'),
+    )
+    enablebanking_private_key = forms.CharField(
+        label=_('Private Key (PEM)'),
+        required=False,
+        widget=forms.Textarea(attrs={'rows': 10, 'style': 'font-family: monospace;'}),
+        help_text=_('Your RSA private key in PEM format for Enable Banking API authentication.'),
+    )
+    enablebanking_fetch_interval = forms.ChoiceField(
+        label=_('Automatic fetch interval'),
+        choices=(
+            ('0', _('Disabled')),
+            ('60', _('Every hour')),
+            ('240', _('Every 4 hours')),
+            ('720', _('Every 12 hours')),
+            ('1440', _('Every 24 hours')),
+        ),
+        initial='0',
+        required=False,
+        help_text=_('How often to automatically fetch new transactions.'),
+    )
+    enablebanking_country = forms.ChoiceField(
+        label=_('Country'),
+        required=False,
+        initial='DE',
+        choices=[
+            ('AT', _('Austria')),
+            ('BE', _('Belgium')),
+            ('BG', _('Bulgaria')),
+            ('HR', _('Croatia')),
+            ('CY', _('Cyprus')),
+            ('CZ', _('Czech Republic')),
+            ('DK', _('Denmark')),
+            ('EE', _('Estonia')),
+            ('FI', _('Finland')),
+            ('FR', _('France')),
+            ('DE', _('Germany')),
+            ('GR', _('Greece')),
+            ('HU', _('Hungary')),
+            ('IS', _('Iceland')),
+            ('IE', _('Ireland')),
+            ('IT', _('Italy')),
+            ('LV', _('Latvia')),
+            ('LI', _('Liechtenstein')),
+            ('LT', _('Lithuania')),
+            ('LU', _('Luxembourg')),
+            ('MT', _('Malta')),
+            ('NL', _('Netherlands')),
+            ('NO', _('Norway')),
+            ('PL', _('Poland')),
+            ('PT', _('Portugal')),
+            ('RO', _('Romania')),
+            ('SK', _('Slovakia')),
+            ('SI', _('Slovenia')),
+            ('ES', _('Spain')),
+            ('SE', _('Sweden')),
+        ],
+        help_text=_('Country to filter available banks.'),
+    )