Report MIT email for student members

We *require* students to provide a valid `@mit.edu` email address in
order to pay dues as students -- this is valuable for identifying
somebody's Kerberos even if they choose to have, say, a Gmail address as
their preferred address.

Author: DavidCain

ws/api_views.py

@@ -646,6 +646,7 @@ class MemberInfo(TypedDict):
     affiliation: str
     num_rentals: int
     # Fields from TripInformation, if found
+    mit_email: str | None
     is_leader: NotRequired[bool]
     num_trips_attended: NotRequired[int]
     num_trips_led: NotRequired[int]
@@ -669,6 +670,7 @@ def _flat_members_info(
                     # A bit repetetive, but `_as_dict()` won't satisfy mypy
                     {
                         "email": info.trips_information.email,
+                        "mit_email": info.trips_information.mit_email,
                         "is_leader": info.trips_information.is_leader,
                         "num_trips_attended": info.trips_information.num_trips_attended,
                         "num_trips_led": info.trips_information.num_trips_led,

ws/tests/views/test_api_views.py

@@ -659,6 +659,15 @@ def test_fetches_async_by_default(self):
             verified=True,
             primary=False,
         )
+        # Reflect reality -- to be an MIT student, you *must* have a verified mit.edu
+        self.participant.affiliation = "MU"
+        self.participant.save()
+        factories.EmailAddressFactory.create(
+            user=self.participant.user,
+            verified=True,
+            primary=False,
+            email="[email protected]",
+        )
         factories.SignUpFactory.create(participant=self.participant, on_trip=True)
 
         with mock.patch.object(tasks.update_member_stats, "delay") as update:
@@ -680,6 +689,7 @@ def test_fetches_async_by_default(self):
                         "num_trips_attended": 1,
                         "num_trips_led": 0,
                         "num_discounts": 0,
+                        "mit_email": "[email protected]",
                     },
                 ],
             },
@@ -768,6 +778,7 @@ def test_matches_on_verified_emails_only(self) -> None:
                 "num_rentals": 0,
                 "num_trips_attended": 0,
                 "num_trips_led": 0,
+                "mit_email": None,
             },
             # We did not find a matching trips account
             {
@@ -777,6 +788,56 @@ def test_matches_on_verified_emails_only(self) -> None:
             },
         )
 
+    @responses.activate
+    def test_ignores_possibly_old_mit_edu(self):
+        with freeze_time("2019-02-22 12:25:00 EST"):
+            cached = models.MembershipStats.load()
+            cached.response = [
+                {
+                    "id": 37,
+                    "affiliation": "MIT alum (former student)",
+                    "alternate_emails": ["[email protected]"],
+                    "email": "[email protected]",
+                    "num_rentals": 3,
+                }
+            ]
+            cached.save()
+
+        # Simulate an old MIT email they may no longer own!
+        factories.EmailAddressFactory.create(
+            user=self.participant.user,
+            email="[email protected]",
+            verified=True,
+            primary=False,
+        )
+        # MIT alum -- they *used* to own [email protected]
+        self.participant.affiliation = "ML"
+        self.participant.save()
+
+        with mock.patch.object(tasks.update_member_stats, "delay"):
+            response = self.client.get("/stats/membership.json")  # No cache_strategy
+
+        self.assertEqual(
+            response.json(),
+            {
+                # We used the cached information from the geardb
+                "retrieved_at": "2019-02-22T12:25:00-05:00",
+                "members": [
+                    {
+                        "email": self.participant.email,
+                        "affiliation": "MIT alum (former student)",
+                        "num_rentals": 3,
+                        "is_leader": True,
+                        "num_trips_attended": 0,
+                        "num_trips_led": 0,
+                        "num_discounts": 0,
+                        # We do *not* report the mit.edu email -- it may be old
+                        "mit_email": None,
+                    },
+                ],
+            },
+        )
+
     @responses.activate
     def test_trips_data_included(self):
         responses.get(
@@ -812,6 +873,15 @@ def test_trips_data_included(self):
             verified=True,
             primary=False,
         )
+        # Reflect reality -- to be an MIT student, you *must* have a verified mit.edu
+        self.participant.affiliation = "MU"
+        self.participant.save()
+        factories.EmailAddressFactory.create(
+            user=self.participant.user,
+            verified=True,
+            primary=False,
+            email="[email protected]",
+        )
         bob = factories.ParticipantFactory.create(email="[email protected]")
         factories.EmailAddressFactory.create(
             user=bob.user, email="[email protected]", verified=True, primary=False
@@ -849,6 +919,7 @@ def test_trips_data_included(self):
                 "num_trips_attended": 1,
                 "num_trips_led": 2,
                 "num_discounts": 0,
+                "mit_email": None,
             },
             {
                 "email": self.participant.email,
@@ -858,6 +929,7 @@ def test_trips_data_included(self):
                 "num_trips_attended": 2,
                 "num_trips_led": 1,
                 "num_discounts": 1,
+                "mit_email": "[email protected]",
             },
             # We did not find a matching trips account
             {
@@ -878,5 +950,6 @@ def test_trips_data_included(self):
         # 1. Count trips per participant (separate to avoid double-counting)
         # 2. Count discounts, trips led, per participant
         # 3. Get all emails (lowercased, for mapping back to participant records)
-        with self.assertNumQueries(3):
+        # 4. Get MIT email addresses
+        with self.assertNumQueries(4):
             stats.with_trips_information()

ws/utils/member_stats.py

@@ -8,6 +8,7 @@
 from allauth.account.models import EmailAddress
 from django.db.models import Count, Exists, OuterRef
 from django.db.models.functions import Lower
+from mitoc_const import affiliations
 from typing_extensions import assert_never
 
 from ws import models, tasks
@@ -32,6 +33,9 @@ class TripsInformation(NamedTuple):
     # Email address as given on Participant object
     # (We assume this is their preferred current email)
     email: str
+    # In order to claim MIT student status, you must give a Kerberos.
+    # We'll only report this for current students (since many others will lack)
+    mit_email: str | None
 
 
 class MembershipInformation(NamedTuple):
@@ -161,6 +165,19 @@ def _get_trip_stats_by_user() -> dict[int, TripsInformation]:
         .values_list("participant_id", "num_trips")
     )
 
+    # Technically, yes, one could have multiple verified mit.edu addresses.
+    # But that's going to be exceptionally rare, and the dict will handle dupes.
+    mit_email_for_students: dict[str, int] = dict(
+        models.Participant.objects.filter(
+            affiliation__in=[
+                affiliations.MIT_UNDERGRAD.CODE,
+                affiliations.MIT_GRAD_STUDENT.CODE,
+            ],
+            user__emailaddress__verified=True,
+            user__emailaddress__email__iendswith="@mit.edu",
+        ).values_list("pk", "user__emailaddress__email")
+    )
+
     additional_stats = (
         models.Participant.objects.all()
         .annotate(
@@ -187,6 +204,7 @@ def _get_trip_stats_by_user() -> dict[int, TripsInformation]:
     return {
         par["user_id"]: TripsInformation(
             email=par["email"],
+            mit_email=mit_email_for_students.get(par["pk"]),
             is_leader=par["is_leader"],
             num_trips_attended=trips_per_participant.get(par["pk"], 0),
             num_trips_led=par["num_trips_led"],