[UI] Show linked barcode string on stock detail page (#11745)

src/backend/InvenTree/InvenTree/api_version.py

@@ -1,11 +1,14 @@
 """InvenTree API version information."""
 
 # InvenTree API version
-INVENTREE_API_VERSION = 530
+INVENTREE_API_VERSION = 531
 """Increment this API version number whenever there is a significant change to the API that any clients need to know about."""
 
 INVENTREE_API_TEXT = """
 
+v531 -> 2026-08-03 : https://github.com/inventree/InvenTree/pull/12354
+    - Adds read-only "barcode_data" field to the API endpoints for all models supporting custom barcodes (Part, StockItem, StockLocation, Build, SupplierPart, ManufacturerPart, PurchaseOrder, SalesOrder, ReturnOrder, TransferOrder, SalesOrderShipment)
+
 v530 -> 2026-07-28 : https://github.com/inventree/InvenTree/pull/12487
     - Adds searching against ReportSnippet API endpoint
 

src/backend/InvenTree/InvenTree/serializers.py

@@ -8,6 +8,7 @@
 
 from django.contrib.auth import get_user_model
 from django.contrib.contenttypes.models import ContentType
+from django.core.exceptions import ImproperlyConfigured
 from django.core.exceptions import ValidationError as DjangoValidationError
 from django.core.files.storage import default_storage
 from django.db import models
@@ -1016,6 +1017,65 @@ def __init__(self, *args, **kwargs):
                     self.fields.pop('notes', None)
 
 
+class BarcodeSerializerMixin(serializers.Serializer):
+    """Serializer mixin for models which support custom (third-party) barcode assignment.
+
+    Exposes the read-only 'barcode_data' field (the linked barcode string) so that
+    it can be displayed in the user interface. Applies to any model inheriting from
+    InvenTree.models.InvenTreeBarcodeMixin (e.g. Part, StockItem, StockLocation).
+
+    Note: The serializer's Meta.fields must include 'barcode_data' for it to appear.
+    The field is read-only here; barcodes are assigned via the barcode link endpoints.
+
+    Correct configuration is validated on initialization (see __init__), which raises
+    ImproperlyConfigured if the mixin is applied incorrectly.
+    """
+
+    barcode_data = serializers.CharField(
+        read_only=True, label=_('Barcode Data'), help_text=_('Third party barcode data')
+    )
+
+    def __init__(self, *args, **kwargs):
+        """Validate that the serializer is correctly configured for barcode data.
+
+        For concrete model serializers this checks that:
+        - the underlying model supports custom barcodes (InvenTreeBarcodeMixin), and
+        - 'barcode_data' is included in Meta.fields.
+
+        This guards against the mixin being added to an incompatible serializer, or
+        being added without exposing the field.
+        """
+        super().__init__(*args, **kwargs)
+
+        meta = getattr(self, 'Meta', None)
+        model = getattr(meta, 'model', None)
+
+        # Abstract / non-model serializers (e.g. AbstractOrderSerializer) are skipped
+        if model is None:
+            return
+
+        # Import here to avoid a circular import at module load time
+        from InvenTree.models import InvenTreeBarcodeMixin
+
+        if not issubclass(model, InvenTreeBarcodeMixin):
+            raise ImproperlyConfigured(
+                f'{self.__class__.__name__} uses BarcodeSerializerMixin, but its model '
+                f"'{model.__name__}' does not inherit InvenTreeBarcodeMixin."
+            )
+
+        meta_fields = getattr(meta, 'fields', None)
+
+        if (
+            meta_fields is not None
+            and meta_fields != '__all__'
+            and 'barcode_data' not in meta_fields
+        ):
+            raise ImproperlyConfigured(
+                f'{self.__class__.__name__} uses BarcodeSerializerMixin, but '
+                f"'barcode_data' is missing from Meta.fields."
+            )
+
+
 class ContentTypeField(serializers.ChoiceField):
     """Serializer field which represents a ContentType as 'app_label.model_name'.
 

src/backend/InvenTree/InvenTree/test_serializers.py

@@ -2,6 +2,7 @@
 
 from django.contrib import admin
 from django.contrib.auth.models import User
+from django.core.exceptions import ImproperlyConfigured
 from django.urls import path, reverse
 
 from rest_framework.serializers import SerializerMethodField
@@ -130,6 +131,86 @@ def test_basic_setup(self):
             self.assertContains(response, 'field_d')
             self.assertNotContains(response, 'field_e')
 
+
+class BarcodeSerializerMixinTest(InvenTreeAPITestCase):
+    """Tests for the shared BarcodeSerializerMixin.
+
+    Ref #11745: every model which supports custom (third-party) barcodes must
+    expose the linked barcode string ('barcode_data') via its API serializer,
+    as a read-only field, so that it can be displayed in the user interface.
+    """
+
+    def test_barcode_data_field_exposed(self):
+        """'barcode_data' must be present and read-only on every barcode serializer."""
+        from build.serializers import BuildSerializer
+        from company.serializers import (
+            ManufacturerPartSerializer,
+            SupplierPartSerializer,
+        )
+        from order.serializers import (
+            PurchaseOrderSerializer,
+            ReturnOrderSerializer,
+            SalesOrderSerializer,
+            SalesOrderShipmentSerializer,
+            TransferOrderSerializer,
+        )
+        from part.serializers import PartSerializer
+        from stock.serializers import LocationSerializer, StockItemSerializer
+
+        serializers = [
+            PartSerializer,
+            StockItemSerializer,
+            LocationSerializer,
+            BuildSerializer,
+            ManufacturerPartSerializer,
+            SupplierPartSerializer,
+            PurchaseOrderSerializer,
+            SalesOrderSerializer,
+            ReturnOrderSerializer,
+            TransferOrderSerializer,
+            SalesOrderShipmentSerializer,
+        ]
+
+        for serializer in serializers:
+            fields = serializer().fields
+            self.assertIn(
+                'barcode_data',
+                fields,
+                f"'barcode_data' missing from {serializer.__name__}",
+            )
+            self.assertTrue(
+                fields['barcode_data'].read_only,
+                f"'barcode_data' must be read-only in {serializer.__name__}",
+            )
+
+    def test_misconfiguration_raises(self):
+        """The mixin must reject serializers which are configured incorrectly."""
+        from part.models import Part
+
+        # Case 1: the model does not support custom barcodes
+        class NoBarcodeModelSerializer(
+            InvenTree.serializers.BarcodeSerializerMixin,
+            InvenTree.serializers.InvenTreeModelSerializer,
+        ):
+            class Meta:
+                model = User
+                fields = ['id', 'barcode_data']
+
+        with self.assertRaises(ImproperlyConfigured):
+            NoBarcodeModelSerializer()
+
+        # Case 2: 'barcode_data' is omitted from Meta.fields
+        class MissingFieldSerializer(
+            InvenTree.serializers.BarcodeSerializerMixin,
+            InvenTree.serializers.InvenTreeModelSerializer,
+        ):
+            class Meta:
+                model = Part
+                fields = ['pk']
+
+        with self.assertRaises(ImproperlyConfigured):
+            MissingFieldSerializer()
+
     def test_permission_gating(self):
         """An OptionalField which embeds a model should respect the model's permissions.
 

src/backend/InvenTree/build/serializers.py

@@ -34,6 +34,7 @@
 from InvenTree.fields import PrefetchedPrimaryKeyRelatedField
 from InvenTree.mixins import DataImportExportSerializerMixin
 from InvenTree.serializers import (
+    BarcodeSerializerMixin,
     BulkPrefetchSerializerMixin,
     CustomStatusSerializerMixin,
     DuplicateOptionsSerializer,
@@ -61,6 +62,7 @@
 
 
 class BuildSerializer(
+    BarcodeSerializerMixin,
     CustomStatusSerializerMixin,
     FilterableSerializerMixin,
     NotesFieldMixin,
@@ -81,6 +83,7 @@ class Meta:
             'pk',
             'title',
             'barcode_hash',
+            'barcode_data',
             'batch',
             'creation_date',
             'completed',

src/backend/InvenTree/company/serializers.py

@@ -15,6 +15,7 @@
 from InvenTree.mixins import DataImportExportSerializerMixin
 from InvenTree.ready import isGeneratingSchema
 from InvenTree.serializers import (
+    BarcodeSerializerMixin,
     DuplicateOptionsSerializer,
     FilterableSerializerMixin,
     InvenTreeCurrencySerializer,
@@ -231,6 +232,7 @@ class Meta:
 
 @register_importer()
 class ManufacturerPartSerializer(
+    BarcodeSerializerMixin,
     FilterableSerializerMixin,
     DataImportExportSerializerMixin,
     InvenTreeTaggitSerializer,
@@ -257,6 +259,7 @@ class Meta:
             'MPN',
             'link',
             'barcode_hash',
+            'barcode_data',
             'notes',
             'tags',
             'parameters',
@@ -355,6 +358,7 @@ class Meta:
 
 @register_importer()
 class SupplierPartSerializer(
+    BarcodeSerializerMixin,
     FilterableSerializerMixin,
     DataImportExportSerializerMixin,
     InvenTreeTaggitSerializer,
@@ -398,6 +402,7 @@ class Meta:
             'note',
             'pk',
             'barcode_hash',
+            'barcode_data',
             'packaging',
             'pack_quantity',
             'pack_quantity_native',

src/backend/InvenTree/order/serializers.py

@@ -32,6 +32,7 @@
 from InvenTree.helpers import extract_serial_numbers, hash_barcode, normalize, str2bool
 from InvenTree.mixins import DataImportExportSerializerMixin
 from InvenTree.serializers import (
+    BarcodeSerializerMixin,
     CustomStatusSerializerMixin,
     DuplicateOptionsSerializer,
     FilterableSerializerMixin,
@@ -73,6 +74,7 @@ class TotalPriceMixin(serializers.Serializer):
 
 
 class AbstractOrderSerializer(
+    BarcodeSerializerMixin,
     CustomStatusSerializerMixin,
     DataImportExportSerializerMixin,
     InvenTreeTaggitSerializer,
@@ -231,6 +233,7 @@ def order_fields(extra_fields):
             'status_custom_key',
             'notes',
             'barcode_hash',
+            'barcode_data',
             'overdue',
             'duplicate',
             # Extra detail fields
@@ -1424,6 +1427,7 @@ def annotate_queryset(queryset):
 
 @register_importer()
 class SalesOrderShipmentSerializer(
+    BarcodeSerializerMixin,
     DataImportExportSerializerMixin,
     FilterableSerializerMixin,
     InvenTreeTaggitSerializer,
@@ -1451,6 +1455,7 @@ class Meta:
             'tracking_number',
             'invoice_number',
             'barcode_hash',
+            'barcode_data',
             'link',
             'notes',
             # Extra detail fields

src/backend/InvenTree/part/serializers.py

@@ -533,6 +533,7 @@ class Meta:
 
 @register_importer()
 class PartSerializer(
+    InvenTree.serializers.BarcodeSerializerMixin,
     InvenTree.serializers.FilterableSerializerMixin,
     DataImportExportSerializerMixin,
     InvenTree.serializers.NotesFieldMixin,
@@ -555,6 +556,7 @@ class Meta:
             'active',
             'assembly',
             'barcode_hash',
+            'barcode_data',
             'category',
             'category_detail',
             'category_path',

src/backend/InvenTree/stock/serializers.py

@@ -313,6 +313,7 @@ def validate(self, data):
 
 @register_importer()
 class StockItemSerializer(
+    InvenTree.serializers.BarcodeSerializerMixin,
     CustomStatusSerializerMixin,
     InvenTree.serializers.FilterableSerializerMixin,
     DataImportExportSerializerMixin,
@@ -378,6 +379,7 @@ class Meta:
             'SKU',
             'MPN',
             'barcode_hash',
+            'barcode_data',
             'creation_date',
             'stocktake_date',
             'updated',
@@ -1417,6 +1419,7 @@ class Meta:
 
 @register_importer()
 class LocationSerializer(
+    InvenTree.serializers.BarcodeSerializerMixin,
     InvenTree.serializers.FilterableSerializerMixin,
     DataImportExportSerializerMixin,
     InvenTree.serializers.InvenTreeTaggitSerializer,
@@ -1433,6 +1436,7 @@ class Meta:
         fields = [
             'pk',
             'barcode_hash',
+            'barcode_data',
             'name',
             'level',
             'description',

src/backend/InvenTree/stock/test_api.py

@@ -1680,6 +1680,34 @@ def test_creation_date_set_on_serialize(self):
         for new_item in new_items:
             self.assertIsNotNone(new_item.creation_date)
 
+    def test_barcode_data_in_detail_api(self):
+        """Test that 'barcode_data' (the linked barcode string) is exposed via the API.
+
+        Regression test for #11745: the linked barcode string must be present in
+        the StockItem serializer output so it can be displayed in the user interface.
+        It must be read-only (assigned/cleared only via the barcode link endpoints).
+        """
+        item = StockItem.objects.get(pk=1)
+        url = reverse('api-stock-detail', kwargs={'pk': item.pk})
+
+        # With no external barcode assigned, the field is present but empty
+        response = self.get(url, expected_code=200)
+        self.assertIn('barcode_data', response.data)
+        self.assertEqual(response.data['barcode_data'], '')
+
+        # Assign a third-party barcode to the stock item
+        item.assign_barcode(barcode_data='TEST-123')
+        item.refresh_from_db()
+
+        # The linked barcode string must now be returned by the detail endpoint
+        response = self.get(url, expected_code=200)
+        self.assertEqual(response.data['barcode_data'], 'TEST-123')
+
+        # The field must be read-only: a PATCH must not overwrite it
+        self.patch(url, data={'barcode_data': 'HACKED-VALUE'}, expected_code=200)
+        item.refresh_from_db()
+        self.assertEqual(item.barcode_data, 'TEST-123')
+
     def test_bulk_serialize_benchmark(self):
         """Benchmark: measure the number of DB queries required to serialize 100 stock items at once."""
         InvenTreeSetting.set_setting('ENABLE_PLUGINS_EVENTS', True, change_user=None)

src/frontend/src/components/details/Details.tsx

@@ -54,6 +54,23 @@ export type DetailsField = {
 type BadgeType = 'owner' | 'user' | 'group';
 type ValueFormatterReturn = string | number | null | React.ReactNode;
 
+/**
+ * Construct a reusable "Linked Barcode" detail field for any model which
+ * supports custom (third-party) barcode assignment (i.e. exposes 'barcode_data').
+ *
+ * The field is copyable and only rendered when a barcode is linked to the instance.
+ */
+export function barcodeDataField(instance: any): DetailsField {
+  return {
+    type: 'text',
+    name: 'barcode_data',
+    icon: 'barcode',
+    label: t`Linked Barcode`,
+    copy: true,
+    hidden: !instance?.barcode_data
+  };
+}
+
 type StringDetailField =
   | {
       type: 'string' | 'text';