feat(networks): make navbar community links network-aware

On a network host (up.profile.hcommons.org) or network path prefix,
the community nav links now point at the network's own Commons domain:
activity, groups and sites become up.hcommons.org/activity/ etc.,
built as {network_slug}.{NAV_DEFAULT_DOMAIN} so each environment maps
to its own Commons domain (stemedplus.hcommons-dev.org on dev).

The network-aware set is an explicit key allowlist — news feed, groups,
sites — rather than a hostname match, because KC Organizations lives on
the default domain too but must stay fixed. Works, Help & Support,
KC Organizations, About and the Team Blog never follow the network
(Works remains environment-specific via the NAV_WORKS_URL env var).
The network context takes precedence over the referer-derived session
domain, whose behaviour is otherwise unchanged.

Author: MartinPaulEve

knowledge_commons_profiles/newprofile/context_processors.py

@@ -24,6 +24,16 @@ def _rewrite_domain(url, default_domain, target_domain):
     return urlunparse(parsed._replace(netloc=new_netloc))
 
 
+# Nav links that follow the network context (the community surfaces on
+# the network's own Commons domain). Everything else — Works, Help &
+# Support, KC Organizations, About, Team Blog — stays fixed regardless
+# of network. KC Organizations lives ON the default domain, so this
+# must be an explicit key allowlist rather than a hostname match.
+NETWORK_AWARE_NAV_KEYS = frozenset(
+    {"NAV_NEWS_FEED_URL", "NAV_GROUPS_URL", "NAV_SITES_URL"}
+)
+
+
 def nav_links(request):
     urls = {
         "NAV_NEWS_FEED_URL": settings.NAV_NEWS_FEED_URL,
@@ -36,6 +46,23 @@ def nav_links(request):
         "NAV_BLOG_URL": settings.NAV_BLOG_URL,
     }
 
+    default_domain = getattr(settings, "NAV_DEFAULT_DOMAIN", "hcommons.org")
+
+    # a network host or path prefix (NetworkSubdomainMiddleware) pins
+    # the community links to that network's Commons domain and takes
+    # precedence over the referer-derived session domain below
+    network_slug = getattr(request, "network_slug", None)
+    if network_slug:
+        network_domain = f"{network_slug}.{default_domain}"
+        return {
+            key: (
+                _rewrite_domain(url, default_domain, network_domain)
+                if key in NETWORK_AWARE_NAV_KEYS
+                else url
+            )
+            for key, url in urls.items()
+        }
+
     session = getattr(request, "session", {})
     network_domain = session.get("nav_network_domain")
     if not network_domain:
@@ -48,7 +75,6 @@ def nav_links(request):
         session.pop("nav_network_domain_ts", None)
         return urls
 
-    default_domain = getattr(settings, "NAV_DEFAULT_DOMAIN", "hcommons.org")
     return {
         key: _rewrite_domain(url, default_domain, network_domain)
         for key, url in urls.items()

knowledge_commons_profiles/newprofile/tests/test_network_nav_links.py

@@ -0,0 +1,121 @@
+"""
+Tests for network-aware navbar links.
+
+On a network host (up.profile.hcommons.org) or network path prefix,
+the community links (news feed/activity, groups, sites) point at the
+network's own Commons domain (up.hcommons.org). Works, Help & Support,
+KC Organizations, About and the Team Blog never follow the network —
+including KC Organizations, which lives on the default domain and must
+be excluded by key, not by hostname.
+"""
+
+import json
+import time
+
+from django.test import RequestFactory
+from django.test import TestCase
+from django.test import override_settings
+
+from knowledge_commons_profiles.newprofile.context_processors import nav_links
+from knowledge_commons_profiles.newprofile.models import Profile
+
+NAV_SETTINGS = {
+    "NAV_NEWS_FEED_URL": "https://hcommons.org/activity/",
+    "NAV_GROUPS_URL": "https://hcommons.org/groups/",
+    "NAV_SITES_URL": "https://hcommons.org/sites/",
+    "NAV_WORKS_URL": "https://works.hcommons.org/",
+    "NAV_SUPPORT_URL": "https://support.hcommons.org/",
+    "NAV_ORGANIZATIONS_URL": "https://hcommons.org/societies/",
+    "NAV_ABOUT_URL": "https://sustaining.hcommons.org/",
+    "NAV_BLOG_URL": "https://team.hcommons.org/",
+    "NAV_DEFAULT_DOMAIN": "hcommons.org",
+}
+
+
+@override_settings(**NAV_SETTINGS)
+class NetworkAwareNavLinksTests(TestCase):
+    def _nav_for_network(self, slug, session=None):
+        request = RequestFactory().get("/members/")
+        request.network_slug = slug
+        request.network = slug
+        request.session = session if session is not None else {}
+        return nav_links(request)
+
+    def test_community_links_follow_the_network(self):
+        urls = self._nav_for_network("up")
+        self.assertEqual(
+            urls["NAV_NEWS_FEED_URL"], "https://up.hcommons.org/activity/"
+        )
+        self.assertEqual(
+            urls["NAV_GROUPS_URL"], "https://up.hcommons.org/groups/"
+        )
+        self.assertEqual(
+            urls["NAV_SITES_URL"], "https://up.hcommons.org/sites/"
+        )
+
+    def test_fixed_links_never_follow_the_network(self):
+        urls = self._nav_for_network("stemedplus")
+        self.assertEqual(
+            urls["NAV_WORKS_URL"], "https://works.hcommons.org/"
+        )
+        self.assertEqual(
+            urls["NAV_SUPPORT_URL"], "https://support.hcommons.org/"
+        )
+        # KC Organizations lives ON the default domain and must still
+        # not follow the network
+        self.assertEqual(
+            urls["NAV_ORGANIZATIONS_URL"], "https://hcommons.org/societies/"
+        )
+        self.assertEqual(
+            urls["NAV_ABOUT_URL"], "https://sustaining.hcommons.org/"
+        )
+        self.assertEqual(urls["NAV_BLOG_URL"], "https://team.hcommons.org/")
+
+    def test_no_network_leaves_links_unchanged(self):
+        urls = self._nav_for_network(None)
+        self.assertEqual(
+            urls["NAV_NEWS_FEED_URL"], "https://hcommons.org/activity/"
+        )
+        self.assertEqual(
+            urls["NAV_GROUPS_URL"], "https://hcommons.org/groups/"
+        )
+
+    def test_network_beats_referer_session_domain(self):
+        session = {
+            "nav_network_domain": "msu.edu",
+            "nav_network_domain_ts": time.time(),
+        }
+        urls = self._nav_for_network("up", session=session)
+        self.assertEqual(
+            urls["NAV_NEWS_FEED_URL"], "https://up.hcommons.org/activity/"
+        )
+
+
+@override_settings(
+    **NAV_SETTINGS,
+    ALLOWED_HOSTS=["*"],
+    KNOWN_SOCIETY_MAPPINGS={"stemedplus": "STEMED+"},
+    NETWORK_DISPLAY_NAMES={
+        "up": "Association of University Presses",
+        "stemed+": "STEM Ed+",
+    },
+    NETWORK_SUBDOMAIN_BASE_DOMAINS=["profile.hcommons-dev.org"],
+    NETWORK_SUBDOMAIN_IGNORED=["www"],
+)
+class NetworkNavRenderingTests(TestCase):
+    def setUp(self):
+        Profile.objects.create(
+            username="alice",
+            name="Alice",
+            is_member_of=json.dumps({"UP": True}),
+        )
+
+    def test_subdomain_page_renders_network_nav_links(self):
+        response = self.client.get(
+            "/members/", headers={"host": "up.profile.hcommons-dev.org"}
+        )
+        self.assertEqual(response.status_code, 200)
+        self.assertContains(response, "https://up.hcommons.org/activity/")
+        self.assertContains(response, "https://up.hcommons.org/groups/")
+        self.assertContains(response, "https://works.hcommons.org/")
+        self.assertContains(response, "https://hcommons.org/societies/")