- <%= link_to polymorphic_path(record.object), data: { turbo_frame: "_top"}, class: "block w-full h-full" do %>
+ <%= link_to record.link_target, data: { turbo_frame: "_top"}, class: "block w-full h-full" do %>
<%= render "assets/display_image",
resource: record.object,
width: "full", height: "full",
@@ -37,7 +37,7 @@
- <%= link_to polymorphic_path(record.object),
+ <%= link_to record.link_target,
data: { turbo_frame: "_top"},
class: "inline-flex min-w-0 max-w-full text-lg font-semibold
text-gray-900 leading-tight hover:underline" do %>
diff --git a/config/routes.rb b/config/routes.rb
index 0c7b7680f..92f2b8e8c 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -85,6 +85,10 @@
end
end
resources :community_news
+ get "registration/:slug", to: "events/registrations#show", as: :registration_ticket
+ post "registration/:slug/resend_confirmation", to: "events/registrations#resend_confirmation", as: :registration_resend_confirmation
+ post "registration/:slug/cancel", to: "events/registrations#cancel", as: :registration_cancel
+ post "registration/:slug/reactivate", to: "events/registrations#reactivate", as: :registration_reactivate
resources :event_registrations do
resources :comments, only: [ :index, :create ]
end
diff --git a/db/migrate/20260228230836_add_slug_to_event_registrations.rb b/db/migrate/20260228230836_add_slug_to_event_registrations.rb
new file mode 100644
index 000000000..4f48248de
--- /dev/null
+++ b/db/migrate/20260228230836_add_slug_to_event_registrations.rb
@@ -0,0 +1,6 @@
+class AddSlugToEventRegistrations < ActiveRecord::Migration[8.0]
+ def change
+ add_column :event_registrations, :slug, :string unless column_exists?(:event_registrations, :slug)
+ add_index :event_registrations, :slug, unique: true unless index_exists?(:event_registrations, :slug)
+ end
+end
diff --git a/db/schema.rb b/db/schema.rb
index b431428f4..fc0659cb1 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -10,7 +10,7 @@
#
# It's strongly recommended that you check this file into your version control system.
-ActiveRecord::Schema[8.1].define(version: 2026_02_28_134201) do
+ActiveRecord::Schema[8.1].define(version: 2026_02_28_230836) do
create_table "action_text_mentions", charset: "utf8mb4", collation: "utf8mb4_unicode_ci", force: :cascade do |t|
t.bigint "action_text_rich_text_id", null: false
t.datetime "created_at", null: false
@@ -403,11 +403,13 @@
t.bigint "registrant_id", null: false
t.boolean "scholarship_recipient", default: false, null: false
t.boolean "scholarship_tasks_completed", default: false, null: false
+ t.string "slug"
t.string "status", default: "registered", null: false
t.datetime "updated_at", null: false
t.index ["event_id"], name: "index_event_registrations_on_event_id"
t.index ["registrant_id", "event_id"], name: "index_event_registrations_on_registrant_id_and_event_id", unique: true
t.index ["registrant_id"], name: "index_event_registrations_on_registrant_id"
+ t.index ["slug"], name: "index_event_registrations_on_slug", unique: true
end
create_table "events", charset: "utf8mb4", collation: "utf8mb4_unicode_ci", force: :cascade do |t|
@@ -812,7 +814,6 @@
t.index ["organization_id"], name: "index_reports_on_organization_id"
t.index ["owner_type", "owner_id"], name: "index_reports_on_owner_type_and_owner_id"
t.index ["type", "date"], name: "index_reports_on_type_and_date"
- t.index ["type", "organization_id"], name: "index_reports_on_type_and_organization_id"
t.index ["windows_type_id"], name: "index_reports_on_windows_type_id"
t.index ["workshop_id"], name: "index_reports_on_workshop_id"
end
diff --git a/lib/tasks/backfill_event_registration_slugs.rake b/lib/tasks/backfill_event_registration_slugs.rake
new file mode 100644
index 000000000..c677f8bd6
--- /dev/null
+++ b/lib/tasks/backfill_event_registration_slugs.rake
@@ -0,0 +1,11 @@
+namespace :event_registrations do
+ desc "Backfill slugs for existing event registrations"
+ task backfill_slugs: :environment do
+ count = 0
+ EventRegistration.where(slug: nil).find_each do |registration|
+ registration.update_column(:slug, SecureRandom.urlsafe_base64(16))
+ count += 1
+ end
+ puts "Backfilled #{count} event registration slugs"
+ end
+end
diff --git a/spec/models/event_registration_spec.rb b/spec/models/event_registration_spec.rb
index cbedb301e..159d644f1 100644
--- a/spec/models/event_registration_spec.rb
+++ b/spec/models/event_registration_spec.rb
@@ -227,4 +227,24 @@
expect(results).not_to include(reg_bob_music)
end
end
+
+ describe "slug" do
+ it "generates a slug on create" do
+ registration = create(:event_registration)
+ expect(registration.slug).to be_present
+ expect(registration.slug.length).to eq(22)
+ end
+
+ it "does not change slug on update" do
+ registration = create(:event_registration)
+ original_slug = registration.slug
+ registration.update!(status: "attended")
+ expect(registration.reload.slug).to eq(original_slug)
+ end
+
+ it "generates unique slugs" do
+ slugs = 10.times.map { create(:event_registration).slug }
+ expect(slugs.uniq.size).to eq(10)
+ end
+ end
end
diff --git a/spec/requests/event_registrations_spec.rb b/spec/requests/event_registrations_spec.rb
index 69299c400..0dd9dff61 100644
--- a/spec/requests/event_registrations_spec.rb
+++ b/spec/requests/event_registrations_spec.rb
@@ -78,7 +78,7 @@
patch event_registration_path(existing_registration),
params: { event_registration: { event_id: new_event.id } }
- expect(response).to redirect_to(event_registration_path(existing_registration))
+ expect(response).to redirect_to(registration_ticket_path(existing_registration.slug))
expect(existing_registration.reload.event_id).to eq(new_event.id)
end
end
@@ -109,6 +109,13 @@
end
end
+ describe "GET /event_registrations/:id (admin-only show)" do
+ it "redirects to root (unauthorized)" do
+ get event_registration_path(existing_registration)
+ expect(response).to redirect_to(root_path)
+ end
+ end
+
describe "POST /event_registrations" do
context "when no registration exists yet" do
it "creates a new EventRegistration" do
@@ -157,7 +164,7 @@
params: { event_registration: { status: "cancelled" } }
expect(existing_registration.reload.status).to eq("cancelled")
- expect(response).to redirect_to(event_registration_path(existing_registration))
+ expect(response).to redirect_to(registration_ticket_path(existing_registration.slug))
expect(flash[:notice]).to eq("Registration was successfully updated.")
end
diff --git a/spec/requests/events/registrations_spec.rb b/spec/requests/events/registrations_spec.rb
index 6c7c8d5f6..7a246256f 100644
--- a/spec/requests/events/registrations_spec.rb
+++ b/spec/requests/events/registrations_spec.rb
@@ -8,6 +8,179 @@
let(:turbo_headers) { { "Accept" => "text/vnd.turbo-stream.html" } }
+ describe "GET /registration/:slug" do
+ let(:admin) { create(:user, :with_person, super_user: true) }
+ let(:other_user) { create(:user, :with_person) }
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person) }
+
+ context "as the registrant (owner)" do
+ it "shows the registration ticket" do
+ get registration_ticket_path(registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+ end
+
+ context "as an admin" do
+ before { sign_in admin }
+
+ it "shows the registration ticket" do
+ get registration_ticket_path(registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+ end
+
+ context "as another user" do
+ before { sign_in other_user }
+
+ it "shows the registration ticket (slug is authorization)" do
+ get registration_ticket_path(registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+ end
+
+ context "as a guest" do
+ before { sign_out user }
+
+ it "shows the registration ticket (slug is authorization)" do
+ get registration_ticket_path(registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+ end
+
+ context "with an invalid slug" do
+ it "returns 404" do
+ get registration_ticket_path("nonexistent-slug")
+ expect(response).to have_http_status(:not_found)
+ end
+ end
+ end
+
+ describe "POST /registration/:slug/resend_confirmation" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person) }
+
+ it "sends confirmation email and redirects back" do
+ expect {
+ post registration_resend_confirmation_path(registration.slug)
+ }.to have_enqueued_mail(EventMailer, :event_registration_confirmation)
+
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ expect(flash[:notice]).to eq("Confirmation email sent.")
+ end
+
+ context "as a guest" do
+ before { sign_out user }
+
+ it "sends confirmation email (slug is authorization)" do
+ expect {
+ post registration_resend_confirmation_path(registration.slug)
+ }.to have_enqueued_mail(EventMailer, :event_registration_confirmation)
+
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ end
+ end
+ end
+
+ describe "POST /registration/:slug/cancel" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person, status: "registered") }
+
+ it "cancels an active registration" do
+ post registration_cancel_path(registration.slug)
+
+ expect(registration.reload.status).to eq("cancelled")
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ expect(flash[:notice]).to eq("Your registration has been cancelled.")
+ end
+
+ it "does not cancel an already cancelled registration" do
+ registration.update!(status: "cancelled")
+
+ post registration_cancel_path(registration.slug)
+
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ expect(flash[:alert]).to eq("Registration is already cancelled.")
+ end
+
+ context "as a guest" do
+ before { sign_out user }
+
+ it "cancels the registration (slug is authorization)" do
+ post registration_cancel_path(registration.slug)
+
+ expect(registration.reload.status).to eq("cancelled")
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ end
+ end
+ end
+
+ describe "POST /registration/:slug/reactivate" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person, status: "cancelled") }
+
+ it "reactivates a cancelled registration" do
+ post registration_reactivate_path(registration.slug)
+
+ expect(registration.reload.status).to eq("registered")
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ expect(flash[:notice]).to eq("Your registration has been reactivated.")
+ end
+
+ it "does not reactivate an already active registration" do
+ registration.update!(status: "registered")
+
+ post registration_reactivate_path(registration.slug)
+
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ expect(flash[:alert]).to eq("Registration is not cancelled.")
+ end
+
+ context "as a guest" do
+ before { sign_out user }
+
+ it "reactivates the registration (slug is authorization)" do
+ post registration_reactivate_path(registration.slug)
+
+ expect(registration.reload.status).to eq("registered")
+ expect(response).to redirect_to(registration_ticket_path(registration.slug))
+ end
+ end
+ end
+
+ describe "GET /events/:event_id/public_registration (show)" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person) }
+
+ before do
+ EventRegistrationFormBuilder.build!(event)
+ form = event.forms.find_by(name: "Public Registration")
+ form.person_forms.create!(person: user.person)
+ end
+
+ it "allows access with a valid slug" do
+ get event_public_registration_path(event, reg: registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+
+ it "returns 404 with an invalid slug" do
+ get event_public_registration_path(event, reg: "bogus-slug")
+ expect(response).to have_http_status(:not_found)
+ end
+
+ it "returns 404 with a slug from a different event" do
+ other_event = create(:event)
+ other_registration = create(:event_registration, event: other_event, registrant: user.person)
+
+ get event_public_registration_path(event, reg: other_registration.slug)
+ expect(response).to have_http_status(:not_found)
+ end
+
+ context "as a guest" do
+ before { sign_out user }
+
+ it "allows access with a valid slug" do
+ get event_public_registration_path(event, reg: registration.slug)
+ expect(response).to have_http_status(:success)
+ end
+ end
+ end
+
describe "POST /events/:event_id/registrations" do
context "when successful" do
it "creates a registration and returns turbo stream" do
diff --git a/spec/system/event_registration_show_spec.rb b/spec/system/event_registration_show_spec.rb
index 171f353b1..8903fc5a8 100644
--- a/spec/system/event_registration_show_spec.rb
+++ b/spec/system/event_registration_show_spec.rb
@@ -18,21 +18,21 @@
before { driven_by(:rack_test) }
describe "back to event link" do
- it "shows a back link to the event page" do
+ it "shows a back link to the event page with reg param" do
sign_in(user)
- visit event_registration_path(registration)
+ visit registration_ticket_path(registration.slug)
- expect(page).to have_link("Back to Event", href: event_path(event))
+ expect(page).to have_link("Back to Event", href: event_path(event, reg: registration.slug))
end
end
describe "event title link" do
- it "links the event title back to the event page" do
+ it "links the event title back to the event page with reg param" do
sign_in(user)
- visit event_registration_path(registration)
+ visit registration_ticket_path(registration.slug)
within("h2") do
- expect(page).to have_link(event.title, href: event_path(event))
+ expect(page).to have_link(event.title, href: event_path(event, reg: registration.slug))
end
end
end
@@ -40,11 +40,76 @@
describe "calendar links" do
it "shows Add to Your Calendar header and calendar links" do
sign_in(user)
- visit event_registration_path(registration)
+ visit registration_ticket_path(registration.slug)
expect(page).to have_text("Add to Your Calendar")
expect(page).to have_link("Google")
expect(page).to have_link("Office 365")
end
end
+
+ describe "view registration form link" do
+ it "links to form show with slug param" do
+ EventRegistrationFormBuilder.build!(event)
+ form = event.forms.find_by(name: "Public Registration")
+ form.person_forms.create!(person: user.person)
+
+ sign_in(user)
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_link("View registration form",
+ href: event_public_registration_path(event, reg: registration.slug))
+ end
+ end
+
+ describe "action links" do
+ it "shows resend and cancel for active registration" do
+ sign_in(user)
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_button("Resend confirmation email")
+ expect(page).to have_button("Cancel registration")
+ end
+
+ it "shows resend but not cancel for cancelled registration" do
+ registration.update!(status: "cancelled")
+
+ sign_in(user)
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_button("Resend confirmation email")
+ expect(page).not_to have_button("Cancel registration")
+ end
+ end
+
+ describe "cancelled registration" do
+ before { registration.update!(status: "cancelled") }
+
+ it "shows Registration cancelled badge and Register again button" do
+ sign_in(user)
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_text("Registration cancelled")
+ expect(page).to have_button("Register again")
+ end
+
+ it "does not show Register again when registration is closed" do
+ event.update!(registration_close_date: 1.day.ago)
+
+ sign_in(user)
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_text("Registration cancelled")
+ expect(page).not_to have_button("Register again")
+ end
+ end
+
+ describe "guest access" do
+ it "allows guests to view the ticket via slug" do
+ visit registration_ticket_path(registration.slug)
+
+ expect(page).to have_text("Event Registration")
+ expect(page).to have_text(registration.registrant.full_name)
+ end
+ end
end
diff --git a/spec/system/events_show_spec.rb b/spec/system/events_show_spec.rb
index fbed566c1..5c574d28d 100644
--- a/spec/system/events_show_spec.rb
+++ b/spec/system/events_show_spec.rb
@@ -130,8 +130,7 @@
visit event_path(event)
expect(page).to have_button("Register")
- expect(page).not_to have_button("De-register")
- expect(page).not_to have_text("You are registered!")
+ expect(page).not_to have_text("View your registration")
end
end
@@ -140,15 +139,15 @@
create(:event_registration, event: event, registrant: user.person)
end
- it "shows deregister button, badge, and calendar links" do
+ it "shows registration link and calendar links" do
sign_in(user)
visit event_path(event)
- expect(page).to have_button("De-register")
- expect(page).to have_text("You are registered!")
+ expect(page).to have_text("View your registration")
expect(page).to have_text("Add to Your Calendar")
expect(page).to have_text("Google")
expect(page).to have_text("Office 365")
+ expect(page).not_to have_button("Register")
end
end
@@ -181,6 +180,58 @@
end
end
+ context "guest with reg slug param" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person) }
+
+ it "shows 'View your registration' badge and calendar links" do
+ visit event_path(event, reg: registration.slug)
+
+ expect(page).to have_text("View your registration")
+ expect(page).to have_text("Add to Your Calendar")
+ expect(page).not_to have_button("Register")
+ end
+
+ it "does not show badge with invalid slug" do
+ visit event_path(event, reg: "bogus-slug")
+
+ expect(page).not_to have_text("View your registration")
+ end
+
+ it "does not show badge with slug from a different event" do
+ other_event = create(:event, :published, :publicly_visible)
+ other_registration = create(:event_registration, event: other_event, registrant: user.person)
+
+ visit event_path(event, reg: other_registration.slug)
+
+ expect(page).not_to have_text("View your registration")
+ end
+ end
+
+ context "guest with cancelled registration slug" do
+ let!(:registration) { create(:event_registration, event: event, registrant: user.person, status: "cancelled") }
+
+ it "does not show 'View your registration' link" do
+ visit event_path(event, reg: registration.slug)
+
+ expect(page).not_to have_text("View your registration")
+ end
+
+ it "shows 'Register again' button" do
+ visit event_path(event, reg: registration.slug)
+
+ expect(page).to have_button("Register again")
+ end
+
+ it "does not show 'Register again' when registration is closed" do
+ event.update!(registration_close_date: 1.day.ago)
+
+ visit event_path(event, reg: registration.slug)
+
+ expect(page).not_to have_button("Register again")
+ expect(page).to have_text("Registration closed")
+ end
+ end
+
context "unpublished event with future registration date" do
before do
event.update!(published: false, publicly_visible: false)
@@ -358,40 +409,22 @@
describe "registration button updates via Turbo", js: true do
before { driven_by(:selenium_chrome_headless) }
- it "updates Register to De-register and shows clickable registration link without full page reload" do
+ it "updates Register to show registration link without full page reload" do
sign_in(user)
visit event_path(event)
expect(page).to have_button("Register")
- expect(page).not_to have_text("You are registered!")
+ expect(page).not_to have_text("View your registration")
click_button "Register"
# Turbo stream replaces the registration section; we stay on the event page
expect(page).to have_current_path(event_path(event))
- expect(page).to have_button("De-register")
expect(page).not_to have_button("Register")
- # "You are registered!" is a clickable link to the registration show page
+ # "View your registration" is a clickable link to the registration show page
registration = EventRegistration.last
- expect(page).to have_link("You are registered!", href: event_registration_path(registration))
- end
-
- it "updates De-register back to Register after de-registering" do
- create(:event_registration, event: event, registrant: user.person)
-
- sign_in(user)
- visit event_path(event)
-
- expect(page).to have_button("De-register")
- accept_confirm do
- click_button "De-register"
- end
-
- expect(page).to have_current_path(event_path(event))
- expect(page).to have_button("Register")
- expect(page).not_to have_button("De-register")
- expect(page).not_to have_text("You are registered!")
+ expect(page).to have_link("View your registration", href: registration_ticket_path(registration.slug))
end
end
diff --git a/spec/views/page_bg_class_alignment_spec.rb b/spec/views/page_bg_class_alignment_spec.rb
index 9df21a35a..c9383d202 100644
--- a/spec/views/page_bg_class_alignment_spec.rb
+++ b/spec/views/page_bg_class_alignment_spec.rb
@@ -63,7 +63,6 @@
"app/views/organizations/populations_served.html.erb" => "admin-or-authpublished",
# ─── admin-or-owner (policy: admin? || owner?) ───
- "app/views/event_registrations/show.html.erb" => "admin-or-owner",
"app/views/quotes/show.html.erb" => "admin-or-owner",
"app/views/story_ideas/show.html.erb" => "admin-or-owner",
"app/views/workshop_variation_ideas/show.html.erb" => "admin-or-owner",
@@ -162,9 +161,10 @@
"app/views/workshop_variations/edit.html.erb" => "admin-only bg-blue-100",
"app/views/workshops/edit.html.erb" => "admin-only bg-blue-100",
- # ─── public registration ───
+ # ─── public registration / slug-based views ───
"app/views/events/public_registrations/new.html.erb" => "public",
- "app/views/events/public_registrations/show.html.erb" => "admin-or-owner"
+ "app/views/events/public_registrations/show.html.erb" => "public",
+ "app/views/events/registrations/show.html.erb" => "public"
}.freeze
EXPECTED_MAPPINGS.each do |view_path, expected_bg_class|