mirror of
https://github.com/bringout/oca-server-auth.git
synced 2026-04-18 05:12:02 +02:00
Initial commit: OCA Server Auth packages (29 packages)
This commit is contained in:
Ernad Husremovic
commit
3ed80311c4
1325 changed files with 127292 additions and 0 deletions
46
odoo-bringout-oca-server-auth-auth_oauth_ropc/README.md
Normal file
46
odoo-bringout-oca-server-auth-auth_oauth_ropc/README.md
Normal file
|
|
@ -0,0 +1,46 @@
|
|||
# Auth OAuth ROPC
|
||||
|
||||
Odoo addon: auth_oauth_ropc
|
||||
|
||||
## Installation
|
||||
|
||||
```bash
|
||||
pip install odoo-bringout-oca-server-auth-auth_oauth_ropc
|
||||
```
|
||||
|
||||
## Dependencies
|
||||
|
||||
This addon depends on:
|
||||
- base
|
||||
|
||||
## Manifest Information
|
||||
|
||||
- **Name**: Auth OAuth ROPC
|
||||
- **Version**: 16.0.1.0.0
|
||||
- **Category**: N/A
|
||||
- **License**: AGPL-3
|
||||
- **Installable**: False
|
||||
|
||||
## Source
|
||||
|
||||
Based on [OCA/server-auth](https://github.com/OCA/server-auth) branch 16.0, addon `auth_oauth_ropc`.
|
||||
|
||||
## License
|
||||
|
||||
This package maintains the original AGPL-3 license from the upstream Odoo project.
|
||||
|
||||
## Documentation
|
||||
|
||||
- Overview: doc/OVERVIEW.md
|
||||
- Architecture: doc/ARCHITECTURE.md
|
||||
- Models: doc/MODELS.md
|
||||
- Controllers: doc/CONTROLLERS.md
|
||||
- Wizards: doc/WIZARDS.md
|
||||
- Reports: doc/REPORTS.md
|
||||
- Security: doc/SECURITY.md
|
||||
- Install: doc/INSTALL.md
|
||||
- Usage: doc/USAGE.md
|
||||
- Configuration: doc/CONFIGURATION.md
|
||||
- Dependencies: doc/DEPENDENCIES.md
|
||||
- Troubleshooting: doc/TROUBLESHOOTING.md
|
||||
- FAQ: doc/FAQ.md
|
||||
|
|
@ -0,0 +1,106 @@
|
|||
===============
|
||||
Auth OAuth ROPC
|
||||
===============
|
||||
|
||||
..
|
||||
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
!! This file is generated by oca-gen-addon-readme !!
|
||||
!! changes will be overwritten. !!
|
||||
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
!! source digest: sha256:4a0d8a58b581d5e0b655aa88c5623aa0884cf6e0efd31437d5b2c506729fb85a
|
||||
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
|
||||
.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
|
||||
:target: https://odoo-community.org/page/development-status
|
||||
:alt: Beta
|
||||
.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
|
||||
:target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
|
||||
:alt: License: AGPL-3
|
||||
.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
|
||||
:target: https://github.com/OCA/server-auth/tree/16.0/auth_oauth_ropc
|
||||
:alt: OCA/server-auth
|
||||
.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
|
||||
:target: https://translation.odoo-community.org/projects/server-auth-16-0/server-auth-16-0-auth_oauth_ropc
|
||||
:alt: Translate me on Weblate
|
||||
.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
|
||||
:target: https://runboat.odoo-community.org/builds?repo=OCA/server-auth&target_branch=16.0
|
||||
:alt: Try me on Runboat
|
||||
|
||||
|badge1| |badge2| |badge3| |badge4| |badge5|
|
||||
|
||||
This module add the possibility to login with OAuth Resource Owner Password Credentials Grant
|
||||
|
||||
https://datatracker.ietf.org/doc/html/rfc6749#section-4.3
|
||||
|
||||
In most scenarios, more secure alternatives are available and recommended. This flow requires a very high degree of trust in the application, and carries risks that are not present in other flows. You should only use this flow when other more secure flows aren't viable.
|
||||
|
||||
This module is useful for the Odoo mobile application, which only supports user/password authentication.
|
||||
|
||||
**Table of contents**
|
||||
|
||||
.. contents::
|
||||
:local:
|
||||
|
||||
Configuration
|
||||
=============
|
||||
|
||||
The configuration of this module is based with Microsoft Azure ad OAuth provider
|
||||
|
||||
https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc
|
||||
|
||||
To configure this module, you need to:
|
||||
|
||||
#. Go to Settings/Users/OAuth ROPC providers and create a new one
|
||||
|
||||
.. figure:: https://raw.githubusercontent.com/OCA/server-auth/16.0/auth_oauth_ropc/static/description/configuration.png
|
||||
:alt: provider description
|
||||
:width: 600 px
|
||||
|
||||
Usage
|
||||
=====
|
||||
|
||||
To use this module, you need to:
|
||||
|
||||
#. Go on the login screen
|
||||
#. Fill your Odoo user name (must be the same in OAuth provider)
|
||||
#. Fill your OAuth password
|
||||
|
||||
Bug Tracker
|
||||
===========
|
||||
|
||||
Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-auth/issues>`_.
|
||||
In case of trouble, please check there if your issue has already been reported.
|
||||
If you spotted it first, help us to smash it by providing a detailed and welcomed
|
||||
`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20auth_oauth_ropc%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
|
||||
|
||||
Do not contact contributors directly about support or help with technical issues.
|
||||
|
||||
Credits
|
||||
=======
|
||||
|
||||
Authors
|
||||
~~~~~~~
|
||||
|
||||
* ACSONE SA/NV
|
||||
|
||||
Contributors
|
||||
~~~~~~~~~~~~
|
||||
|
||||
Adrien Peiffer <adrien.peiffer@acsone.eu>
|
||||
|
||||
Maintainers
|
||||
~~~~~~~~~~~
|
||||
|
||||
This module is maintained by the OCA.
|
||||
|
||||
.. image:: https://odoo-community.org/logo.png
|
||||
:alt: Odoo Community Association
|
||||
:target: https://odoo-community.org
|
||||
|
||||
OCA, or the Odoo Community Association, is a nonprofit organization whose
|
||||
mission is to support the collaborative development of Odoo features and
|
||||
promote its widespread use.
|
||||
|
||||
This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/16.0/auth_oauth_ropc>`_ project on GitHub.
|
||||
|
||||
You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
|
||||
|
|
@ -0,0 +1 @@
|
|||
from . import models
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
# Copyright 2023 ACSONE SA/NV
|
||||
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
|
||||
|
||||
{
|
||||
"name": "Auth OAuth ROPC",
|
||||
"summary": """
|
||||
Allow to login with OAuth Resource Owner Password Credentials Grant""",
|
||||
"version": "16.0.1.0.0",
|
||||
"license": "AGPL-3",
|
||||
"author": "ACSONE SA/NV,Odoo Community Association (OCA)",
|
||||
"website": "https://github.com/OCA/server-auth",
|
||||
"depends": ["base"],
|
||||
"data": [
|
||||
"security/oauth_ropc_provider.xml",
|
||||
"views/oauth_ropc_provider.xml",
|
||||
],
|
||||
}
|
||||
|
|
@ -0,0 +1,107 @@
|
|||
# Translation of Odoo Server.
|
||||
# This file contains the translation of the following modules:
|
||||
# * auth_oauth_ropc
|
||||
#
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: Odoo Server 16.0\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"Last-Translator: \n"
|
||||
"Language-Team: \n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: \n"
|
||||
"Plural-Forms: \n"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__active
|
||||
msgid "Active"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__auth_endpoint
|
||||
msgid "Authorization URL"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_id
|
||||
msgid "Client ID"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_secret
|
||||
msgid "Client Secret"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_uid
|
||||
msgid "Created by"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_date
|
||||
msgid "Created on"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__display_name
|
||||
msgid "Display Name"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__id
|
||||
msgid "ID"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider____last_update
|
||||
msgid "Last Modified on"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_uid
|
||||
msgid "Last Updated by"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_date
|
||||
msgid "Last Updated on"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__name
|
||||
msgid "Name"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_oauth_ropc_provider
|
||||
msgid "OAuth ROPC Provider"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__resource
|
||||
msgid "Resource"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__scope
|
||||
msgid "Scope"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_res_users
|
||||
msgid "User"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#. odoo-python
|
||||
#: code:addons/auth_oauth_ropc/models/oauth_ropc_provider.py:0
|
||||
#, python-format
|
||||
msgid "You can define only one active provider"
|
||||
msgstr ""
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.actions.act_window,name:auth_oauth_ropc.oauth_ropc_provider_act_window
|
||||
#: model:ir.ui.menu,name:auth_oauth_ropc.oauth_ropc_provider_menu
|
||||
msgid "oauth ROPC Providers"
|
||||
msgstr ""
|
||||
|
|
@ -0,0 +1,107 @@
|
|||
# Translation of Odoo Server.
|
||||
# This file contains the translation of the following modules:
|
||||
# * auth_oauth_ropc
|
||||
#
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: Odoo Server 16.0\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"Last-Translator: \n"
|
||||
"Language-Team: \n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: \n"
|
||||
"Plural-Forms: \n"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__active
|
||||
msgid "Active"
|
||||
msgstr "Aktivan"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__auth_endpoint
|
||||
msgid "Authorization URL"
|
||||
msgstr "Authorization URL"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_id
|
||||
msgid "Client ID"
|
||||
msgstr "ID Klijenta"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_secret
|
||||
msgid "Client Secret"
|
||||
msgstr "Tajni klijent"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_uid
|
||||
msgid "Created by"
|
||||
msgstr "Kreirao"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_date
|
||||
msgid "Created on"
|
||||
msgstr "Kreirano"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__display_name
|
||||
msgid "Display Name"
|
||||
msgstr "Prikazani naziv"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__id
|
||||
msgid "ID"
|
||||
msgstr "ID"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider____last_update
|
||||
msgid "Last Modified on"
|
||||
msgstr "Zadnje mijenjano"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_uid
|
||||
msgid "Last Updated by"
|
||||
msgstr "Zadnji ažurirao"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_date
|
||||
msgid "Last Updated on"
|
||||
msgstr "Zadnje ažurirano"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__name
|
||||
msgid "Name"
|
||||
msgstr "Naziv:"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_oauth_ropc_provider
|
||||
msgid "OAuth ROPC Provider"
|
||||
msgstr "OAuth ROPC davatelj"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__resource
|
||||
msgid "Resource"
|
||||
msgstr "Resurs"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__scope
|
||||
msgid "Scope"
|
||||
msgstr "Opseg"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_res_users
|
||||
msgid "User"
|
||||
msgstr "Korisnik"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#. odoo-python
|
||||
#: code:addons/auth_oauth_ropc/models/oauth_ropc_provider.py:0
|
||||
#, python-format
|
||||
msgid "You can define only one active provider"
|
||||
msgstr "Možete definirati samo jednog aktivnog davatelja"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.actions.act_window,name:auth_oauth_ropc.oauth_ropc_provider_act_window
|
||||
#: model:ir.ui.menu,name:auth_oauth_ropc.oauth_ropc_provider_menu
|
||||
msgid "oauth ROPC Providers"
|
||||
msgstr "oauth ROPC davatelji"
|
||||
|
|
@ -0,0 +1,110 @@
|
|||
# Translation of Odoo Server.
|
||||
# This file contains the translation of the following modules:
|
||||
# * auth_oauth_ropc
|
||||
#
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: Odoo Server 16.0\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"PO-Revision-Date: 2025-01-28 14:06+0000\n"
|
||||
"Last-Translator: mymage <stefano.consolaro@mymage.it>\n"
|
||||
"Language-Team: none\n"
|
||||
"Language: it\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: \n"
|
||||
"Plural-Forms: nplurals=2; plural=n != 1;\n"
|
||||
"X-Generator: Weblate 5.6.2\n"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__active
|
||||
msgid "Active"
|
||||
msgstr "Attivo"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__auth_endpoint
|
||||
msgid "Authorization URL"
|
||||
msgstr "URL autorizzazione"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_id
|
||||
msgid "Client ID"
|
||||
msgstr "ID client"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__client_secret
|
||||
msgid "Client Secret"
|
||||
msgstr "Chiave segreta client"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_uid
|
||||
msgid "Created by"
|
||||
msgstr "Creato da"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__create_date
|
||||
msgid "Created on"
|
||||
msgstr "Creato il"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__display_name
|
||||
msgid "Display Name"
|
||||
msgstr "Nome visualizzato"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__id
|
||||
msgid "ID"
|
||||
msgstr "ID"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider____last_update
|
||||
msgid "Last Modified on"
|
||||
msgstr "Ultima modifica il"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_uid
|
||||
msgid "Last Updated by"
|
||||
msgstr "Ultimo aggiornamento di"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__write_date
|
||||
msgid "Last Updated on"
|
||||
msgstr "Ultimo aggiornamento il"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__name
|
||||
msgid "Name"
|
||||
msgstr "Nome"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_oauth_ropc_provider
|
||||
msgid "OAuth ROPC Provider"
|
||||
msgstr "Provider ROPC OAuth"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__resource
|
||||
msgid "Resource"
|
||||
msgstr "Risorsa"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model.fields,field_description:auth_oauth_ropc.field_oauth_ropc_provider__scope
|
||||
msgid "Scope"
|
||||
msgstr "Ambito"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.model,name:auth_oauth_ropc.model_res_users
|
||||
msgid "User"
|
||||
msgstr "Utente"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#. odoo-python
|
||||
#: code:addons/auth_oauth_ropc/models/oauth_ropc_provider.py:0
|
||||
#, python-format
|
||||
msgid "You can define only one active provider"
|
||||
msgstr "Si può definire attivo un solo provider"
|
||||
|
||||
#. module: auth_oauth_ropc
|
||||
#: model:ir.actions.act_window,name:auth_oauth_ropc.oauth_ropc_provider_act_window
|
||||
#: model:ir.ui.menu,name:auth_oauth_ropc.oauth_ropc_provider_menu
|
||||
msgid "oauth ROPC Providers"
|
||||
msgstr "Provider ROPC OAuth"
|
||||
|
|
@ -0,0 +1,2 @@
|
|||
from . import oauth_ropc_provider
|
||||
from . import res_users
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
# Copyright 2023 ACSONE SA/NV
|
||||
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
|
||||
|
||||
import requests
|
||||
|
||||
from odoo import _, api, fields, models
|
||||
from odoo.exceptions import ValidationError
|
||||
|
||||
|
||||
class OAuthRopcProvider(models.Model):
|
||||
|
||||
_name = "oauth.ropc.provider"
|
||||
_description = "OAuth ROPC Provider"
|
||||
|
||||
name = fields.Char()
|
||||
client_id = fields.Char(string="Client ID")
|
||||
client_secret = fields.Char()
|
||||
auth_endpoint = fields.Char(string="Authorization URL", required=True)
|
||||
resource = fields.Char()
|
||||
scope = fields.Char()
|
||||
active = fields.Boolean(default=True)
|
||||
|
||||
@api.constrains("active")
|
||||
def _check_active(self):
|
||||
records_to_check = self.filtered(lambda r: r.active)
|
||||
for record in records_to_check:
|
||||
if self.search([("id", "!=", record.id)]):
|
||||
raise ValidationError(_("""You can define only one active provider"""))
|
||||
|
||||
def _authenticate(self, login, password):
|
||||
self.ensure_one()
|
||||
data = {
|
||||
"client_id": self.client_id,
|
||||
"client_secret": self.client_secret,
|
||||
"resource": self.resource,
|
||||
"scope": self.scope,
|
||||
"grant_type": "password",
|
||||
"username": login,
|
||||
"password": password,
|
||||
}
|
||||
r = requests.post(self.auth_endpoint, data=data, timeout=5)
|
||||
if r.status_code == 200:
|
||||
return True
|
||||
return False
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
# Copyright 2023 ACSONE SA/NV
|
||||
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
|
||||
|
||||
from odoo import models
|
||||
from odoo.exceptions import AccessDenied
|
||||
|
||||
|
||||
class ResUsers(models.Model):
|
||||
|
||||
_inherit = "res.users"
|
||||
|
||||
def _check_credentials(self, password, env):
|
||||
try:
|
||||
return super(ResUsers, self)._check_credentials(password, env)
|
||||
except AccessDenied:
|
||||
passwd_allowed = (
|
||||
env["interactive"] or not self.env.user._rpc_api_keys_only()
|
||||
)
|
||||
if passwd_allowed and self.env.user.active:
|
||||
if ropc_provider := self.env["oauth.ropc.provider"].sudo().search([]):
|
||||
if ropc_provider._authenticate(self.env.user.login, password):
|
||||
return
|
||||
raise
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
The configuration of this module is based with Microsoft Azure ad OAuth provider
|
||||
|
||||
https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc
|
||||
|
||||
To configure this module, you need to:
|
||||
|
||||
#. Go to Settings/Users/OAuth ROPC providers and create a new one
|
||||
|
||||
.. figure:: ../static/description/configuration.png
|
||||
:alt: provider description
|
||||
:width: 600 px
|
||||
|
|
@ -0,0 +1 @@
|
|||
Adrien Peiffer <adrien.peiffer@acsone.eu>
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
This module add the possibility to login with OAuth Resource Owner Password Credentials Grant
|
||||
|
||||
https://datatracker.ietf.org/doc/html/rfc6749#section-4.3
|
||||
|
||||
In most scenarios, more secure alternatives are available and recommended. This flow requires a very high degree of trust in the application, and carries risks that are not present in other flows. You should only use this flow when other more secure flows aren't viable.
|
||||
|
||||
This module is useful for the Odoo mobile application, which only supports user/password authentication.
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
To use this module, you need to:
|
||||
|
||||
#. Go on the login screen
|
||||
#. Fill your Odoo user name (must be the same in OAuth provider)
|
||||
#. Fill your OAuth password
|
||||
|
|
@ -0,0 +1,16 @@
|
|||
<?xml version="1.0" encoding="utf-8" ?>
|
||||
<!-- Copyright 2023 ACSONE SA/NV
|
||||
License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
|
||||
<odoo>
|
||||
|
||||
<record model="ir.model.access" id="oauth_ropc_provider_access_system">
|
||||
<field name="name">oauth.ropc.provider access system</field>
|
||||
<field name="model_id" ref="model_oauth_ropc_provider" />
|
||||
<field name="group_id" ref="base.group_system" />
|
||||
<field name="perm_read" eval="1" />
|
||||
<field name="perm_create" eval="1" />
|
||||
<field name="perm_write" eval="1" />
|
||||
<field name="perm_unlink" eval="1" />
|
||||
</record>
|
||||
|
||||
</odoo>
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 25 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 9.2 KiB |
|
|
@ -0,0 +1,444 @@
|
|||
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||||
<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
|
||||
<title>Auth OAuth ROPC</title>
|
||||
<style type="text/css">
|
||||
|
||||
/*
|
||||
:Author: David Goodger (goodger@python.org)
|
||||
:Id: $Id: html4css1.css 8954 2022-01-20 10:10:25Z milde $
|
||||
:Copyright: This stylesheet has been placed in the public domain.
|
||||
|
||||
Default cascading style sheet for the HTML output of Docutils.
|
||||
|
||||
See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
|
||||
customize this style sheet.
|
||||
*/
|
||||
|
||||
/* used to remove borders from tables and images */
|
||||
.borderless, table.borderless td, table.borderless th {
|
||||
border: 0 }
|
||||
|
||||
table.borderless td, table.borderless th {
|
||||
/* Override padding for "table.docutils td" with "! important".
|
||||
The right padding separates the table cells. */
|
||||
padding: 0 0.5em 0 0 ! important }
|
||||
|
||||
.first {
|
||||
/* Override more specific margin styles with "! important". */
|
||||
margin-top: 0 ! important }
|
||||
|
||||
.last, .with-subtitle {
|
||||
margin-bottom: 0 ! important }
|
||||
|
||||
.hidden {
|
||||
display: none }
|
||||
|
||||
.subscript {
|
||||
vertical-align: sub;
|
||||
font-size: smaller }
|
||||
|
||||
.superscript {
|
||||
vertical-align: super;
|
||||
font-size: smaller }
|
||||
|
||||
a.toc-backref {
|
||||
text-decoration: none ;
|
||||
color: black }
|
||||
|
||||
blockquote.epigraph {
|
||||
margin: 2em 5em ; }
|
||||
|
||||
dl.docutils dd {
|
||||
margin-bottom: 0.5em }
|
||||
|
||||
object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
|
||||
overflow: hidden;
|
||||
}
|
||||
|
||||
/* Uncomment (and remove this text!) to get bold-faced definition list terms
|
||||
dl.docutils dt {
|
||||
font-weight: bold }
|
||||
*/
|
||||
|
||||
div.abstract {
|
||||
margin: 2em 5em }
|
||||
|
||||
div.abstract p.topic-title {
|
||||
font-weight: bold ;
|
||||
text-align: center }
|
||||
|
||||
div.admonition, div.attention, div.caution, div.danger, div.error,
|
||||
div.hint, div.important, div.note, div.tip, div.warning {
|
||||
margin: 2em ;
|
||||
border: medium outset ;
|
||||
padding: 1em }
|
||||
|
||||
div.admonition p.admonition-title, div.hint p.admonition-title,
|
||||
div.important p.admonition-title, div.note p.admonition-title,
|
||||
div.tip p.admonition-title {
|
||||
font-weight: bold ;
|
||||
font-family: sans-serif }
|
||||
|
||||
div.attention p.admonition-title, div.caution p.admonition-title,
|
||||
div.danger p.admonition-title, div.error p.admonition-title,
|
||||
div.warning p.admonition-title, .code .error {
|
||||
color: red ;
|
||||
font-weight: bold ;
|
||||
font-family: sans-serif }
|
||||
|
||||
/* Uncomment (and remove this text!) to get reduced vertical space in
|
||||
compound paragraphs.
|
||||
div.compound .compound-first, div.compound .compound-middle {
|
||||
margin-bottom: 0.5em }
|
||||
|
||||
div.compound .compound-last, div.compound .compound-middle {
|
||||
margin-top: 0.5em }
|
||||
*/
|
||||
|
||||
div.dedication {
|
||||
margin: 2em 5em ;
|
||||
text-align: center ;
|
||||
font-style: italic }
|
||||
|
||||
div.dedication p.topic-title {
|
||||
font-weight: bold ;
|
||||
font-style: normal }
|
||||
|
||||
div.figure {
|
||||
margin-left: 2em ;
|
||||
margin-right: 2em }
|
||||
|
||||
div.footer, div.header {
|
||||
clear: both;
|
||||
font-size: smaller }
|
||||
|
||||
div.line-block {
|
||||
display: block ;
|
||||
margin-top: 1em ;
|
||||
margin-bottom: 1em }
|
||||
|
||||
div.line-block div.line-block {
|
||||
margin-top: 0 ;
|
||||
margin-bottom: 0 ;
|
||||
margin-left: 1.5em }
|
||||
|
||||
div.sidebar {
|
||||
margin: 0 0 0.5em 1em ;
|
||||
border: medium outset ;
|
||||
padding: 1em ;
|
||||
background-color: #ffffee ;
|
||||
width: 40% ;
|
||||
float: right ;
|
||||
clear: right }
|
||||
|
||||
div.sidebar p.rubric {
|
||||
font-family: sans-serif ;
|
||||
font-size: medium }
|
||||
|
||||
div.system-messages {
|
||||
margin: 5em }
|
||||
|
||||
div.system-messages h1 {
|
||||
color: red }
|
||||
|
||||
div.system-message {
|
||||
border: medium outset ;
|
||||
padding: 1em }
|
||||
|
||||
div.system-message p.system-message-title {
|
||||
color: red ;
|
||||
font-weight: bold }
|
||||
|
||||
div.topic {
|
||||
margin: 2em }
|
||||
|
||||
h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
|
||||
h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
|
||||
margin-top: 0.4em }
|
||||
|
||||
h1.title {
|
||||
text-align: center }
|
||||
|
||||
h2.subtitle {
|
||||
text-align: center }
|
||||
|
||||
hr.docutils {
|
||||
width: 75% }
|
||||
|
||||
img.align-left, .figure.align-left, object.align-left, table.align-left {
|
||||
clear: left ;
|
||||
float: left ;
|
||||
margin-right: 1em }
|
||||
|
||||
img.align-right, .figure.align-right, object.align-right, table.align-right {
|
||||
clear: right ;
|
||||
float: right ;
|
||||
margin-left: 1em }
|
||||
|
||||
img.align-center, .figure.align-center, object.align-center {
|
||||
display: block;
|
||||
margin-left: auto;
|
||||
margin-right: auto;
|
||||
}
|
||||
|
||||
table.align-center {
|
||||
margin-left: auto;
|
||||
margin-right: auto;
|
||||
}
|
||||
|
||||
.align-left {
|
||||
text-align: left }
|
||||
|
||||
.align-center {
|
||||
clear: both ;
|
||||
text-align: center }
|
||||
|
||||
.align-right {
|
||||
text-align: right }
|
||||
|
||||
/* reset inner alignment in figures */
|
||||
div.align-right {
|
||||
text-align: inherit }
|
||||
|
||||
/* div.align-center * { */
|
||||
/* text-align: left } */
|
||||
|
||||
.align-top {
|
||||
vertical-align: top }
|
||||
|
||||
.align-middle {
|
||||
vertical-align: middle }
|
||||
|
||||
.align-bottom {
|
||||
vertical-align: bottom }
|
||||
|
||||
ol.simple, ul.simple {
|
||||
margin-bottom: 1em }
|
||||
|
||||
ol.arabic {
|
||||
list-style: decimal }
|
||||
|
||||
ol.loweralpha {
|
||||
list-style: lower-alpha }
|
||||
|
||||
ol.upperalpha {
|
||||
list-style: upper-alpha }
|
||||
|
||||
ol.lowerroman {
|
||||
list-style: lower-roman }
|
||||
|
||||
ol.upperroman {
|
||||
list-style: upper-roman }
|
||||
|
||||
p.attribution {
|
||||
text-align: right ;
|
||||
margin-left: 50% }
|
||||
|
||||
p.caption {
|
||||
font-style: italic }
|
||||
|
||||
p.credits {
|
||||
font-style: italic ;
|
||||
font-size: smaller }
|
||||
|
||||
p.label {
|
||||
white-space: nowrap }
|
||||
|
||||
p.rubric {
|
||||
font-weight: bold ;
|
||||
font-size: larger ;
|
||||
color: maroon ;
|
||||
text-align: center }
|
||||
|
||||
p.sidebar-title {
|
||||
font-family: sans-serif ;
|
||||
font-weight: bold ;
|
||||
font-size: larger }
|
||||
|
||||
p.sidebar-subtitle {
|
||||
font-family: sans-serif ;
|
||||
font-weight: bold }
|
||||
|
||||
p.topic-title {
|
||||
font-weight: bold }
|
||||
|
||||
pre.address {
|
||||
margin-bottom: 0 ;
|
||||
margin-top: 0 ;
|
||||
font: inherit }
|
||||
|
||||
pre.literal-block, pre.doctest-block, pre.math, pre.code {
|
||||
margin-left: 2em ;
|
||||
margin-right: 2em }
|
||||
|
||||
pre.code .ln { color: grey; } /* line numbers */
|
||||
pre.code, code { background-color: #eeeeee }
|
||||
pre.code .comment, code .comment { color: #5C6576 }
|
||||
pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
|
||||
pre.code .literal.string, code .literal.string { color: #0C5404 }
|
||||
pre.code .name.builtin, code .name.builtin { color: #352B84 }
|
||||
pre.code .deleted, code .deleted { background-color: #DEB0A1}
|
||||
pre.code .inserted, code .inserted { background-color: #A3D289}
|
||||
|
||||
span.classifier {
|
||||
font-family: sans-serif ;
|
||||
font-style: oblique }
|
||||
|
||||
span.classifier-delimiter {
|
||||
font-family: sans-serif ;
|
||||
font-weight: bold }
|
||||
|
||||
span.interpreted {
|
||||
font-family: sans-serif }
|
||||
|
||||
span.option {
|
||||
white-space: nowrap }
|
||||
|
||||
span.pre {
|
||||
white-space: pre }
|
||||
|
||||
span.problematic {
|
||||
color: red }
|
||||
|
||||
span.section-subtitle {
|
||||
/* font-size relative to parent (h1..h6 element) */
|
||||
font-size: 80% }
|
||||
|
||||
table.citation {
|
||||
border-left: solid 1px gray;
|
||||
margin-left: 1px }
|
||||
|
||||
table.docinfo {
|
||||
margin: 2em 4em }
|
||||
|
||||
table.docutils {
|
||||
margin-top: 0.5em ;
|
||||
margin-bottom: 0.5em }
|
||||
|
||||
table.footnote {
|
||||
border-left: solid 1px black;
|
||||
margin-left: 1px }
|
||||
|
||||
table.docutils td, table.docutils th,
|
||||
table.docinfo td, table.docinfo th {
|
||||
padding-left: 0.5em ;
|
||||
padding-right: 0.5em ;
|
||||
vertical-align: top }
|
||||
|
||||
table.docutils th.field-name, table.docinfo th.docinfo-name {
|
||||
font-weight: bold ;
|
||||
text-align: left ;
|
||||
white-space: nowrap ;
|
||||
padding-left: 0 }
|
||||
|
||||
/* "booktabs" style (no vertical lines) */
|
||||
table.docutils.booktabs {
|
||||
border: 0px;
|
||||
border-top: 2px solid;
|
||||
border-bottom: 2px solid;
|
||||
border-collapse: collapse;
|
||||
}
|
||||
table.docutils.booktabs * {
|
||||
border: 0px;
|
||||
}
|
||||
table.docutils.booktabs th {
|
||||
border-bottom: thin solid;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
|
||||
h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
|
||||
font-size: 100% }
|
||||
|
||||
ul.auto-toc {
|
||||
list-style-type: none }
|
||||
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="document" id="auth-oauth-ropc">
|
||||
<h1 class="title">Auth OAuth ROPC</h1>
|
||||
|
||||
<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
!! This file is generated by oca-gen-addon-readme !!
|
||||
!! changes will be overwritten. !!
|
||||
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
!! source digest: sha256:4a0d8a58b581d5e0b655aa88c5623aa0884cf6e0efd31437d5b2c506729fb85a
|
||||
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
|
||||
<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/server-auth/tree/16.0/auth_oauth_ropc"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/server-auth-16-0/server-auth-16-0-auth_oauth_ropc"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/server-auth&target_branch=16.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
|
||||
<p>This module add the possibility to login with OAuth Resource Owner Password Credentials Grant</p>
|
||||
<p><a class="reference external" href="https://datatracker.ietf.org/doc/html/rfc6749#section-4.3">https://datatracker.ietf.org/doc/html/rfc6749#section-4.3</a></p>
|
||||
<p>In most scenarios, more secure alternatives are available and recommended. This flow requires a very high degree of trust in the application, and carries risks that are not present in other flows. You should only use this flow when other more secure flows aren’t viable.</p>
|
||||
<p>This module is useful for the Odoo mobile application, which only supports user/password authentication.</p>
|
||||
<p><strong>Table of contents</strong></p>
|
||||
<div class="contents local topic" id="contents">
|
||||
<ul class="simple">
|
||||
<li><a class="reference internal" href="#configuration" id="toc-entry-1">Configuration</a></li>
|
||||
<li><a class="reference internal" href="#usage" id="toc-entry-2">Usage</a></li>
|
||||
<li><a class="reference internal" href="#bug-tracker" id="toc-entry-3">Bug Tracker</a></li>
|
||||
<li><a class="reference internal" href="#credits" id="toc-entry-4">Credits</a><ul>
|
||||
<li><a class="reference internal" href="#authors" id="toc-entry-5">Authors</a></li>
|
||||
<li><a class="reference internal" href="#contributors" id="toc-entry-6">Contributors</a></li>
|
||||
<li><a class="reference internal" href="#maintainers" id="toc-entry-7">Maintainers</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
<div class="section" id="configuration">
|
||||
<h1><a class="toc-backref" href="#toc-entry-1">Configuration</a></h1>
|
||||
<p>The configuration of this module is based with Microsoft Azure ad OAuth provider</p>
|
||||
<p><a class="reference external" href="https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc">https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc</a></p>
|
||||
<p>To configure this module, you need to:</p>
|
||||
<ol class="arabic simple">
|
||||
<li>Go to Settings/Users/OAuth ROPC providers and create a new one</li>
|
||||
</ol>
|
||||
<div class="figure">
|
||||
<img alt="provider description" src="https://raw.githubusercontent.com/OCA/server-auth/16.0/auth_oauth_ropc/static/description/configuration.png" style="width: 600px;" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="section" id="usage">
|
||||
<h1><a class="toc-backref" href="#toc-entry-2">Usage</a></h1>
|
||||
<p>To use this module, you need to:</p>
|
||||
<ol class="arabic simple">
|
||||
<li>Go on the login screen</li>
|
||||
<li>Fill your Odoo user name (must be the same in OAuth provider)</li>
|
||||
<li>Fill your OAuth password</li>
|
||||
</ol>
|
||||
</div>
|
||||
<div class="section" id="bug-tracker">
|
||||
<h1><a class="toc-backref" href="#toc-entry-3">Bug Tracker</a></h1>
|
||||
<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-auth/issues">GitHub Issues</a>.
|
||||
In case of trouble, please check there if your issue has already been reported.
|
||||
If you spotted it first, help us to smash it by providing a detailed and welcomed
|
||||
<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20auth_oauth_ropc%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
|
||||
<p>Do not contact contributors directly about support or help with technical issues.</p>
|
||||
</div>
|
||||
<div class="section" id="credits">
|
||||
<h1><a class="toc-backref" href="#toc-entry-4">Credits</a></h1>
|
||||
<div class="section" id="authors">
|
||||
<h2><a class="toc-backref" href="#toc-entry-5">Authors</a></h2>
|
||||
<ul class="simple">
|
||||
<li>ACSONE SA/NV</li>
|
||||
</ul>
|
||||
</div>
|
||||
<div class="section" id="contributors">
|
||||
<h2><a class="toc-backref" href="#toc-entry-6">Contributors</a></h2>
|
||||
<p>Adrien Peiffer <<a class="reference external" href="mailto:adrien.peiffer@acsone.eu">adrien.peiffer@acsone.eu</a>></p>
|
||||
</div>
|
||||
<div class="section" id="maintainers">
|
||||
<h2><a class="toc-backref" href="#toc-entry-7">Maintainers</a></h2>
|
||||
<p>This module is maintained by the OCA.</p>
|
||||
<a class="reference external image-reference" href="https://odoo-community.org"><img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" /></a>
|
||||
<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
|
||||
mission is to support the collaborative development of Odoo features and
|
||||
promote its widespread use.</p>
|
||||
<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/16.0/auth_oauth_ropc">OCA/server-auth</a> project on GitHub.</p>
|
||||
<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -0,0 +1,53 @@
|
|||
<?xml version="1.0" encoding="utf-8" ?>
|
||||
<!-- Copyright 2023 ACSONE SA/NV
|
||||
License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
|
||||
<odoo>
|
||||
|
||||
<record model="ir.ui.view" id="oauth_ropc_provider_form_view">
|
||||
<field name="name">oauth.ropc.provider.form (in auth_oauth_ropc)</field>
|
||||
<field name="model">oauth.ropc.provider</field>
|
||||
<field name="arch" type="xml">
|
||||
<form>
|
||||
<sheet>
|
||||
<group>
|
||||
<field name="name" />
|
||||
<field name="client_id" />
|
||||
<field name="client_secret" />
|
||||
<field name="auth_endpoint" />
|
||||
<field name="resource" />
|
||||
<field name="scope" />
|
||||
<field name="active" />
|
||||
</group>
|
||||
</sheet>
|
||||
</form>
|
||||
</field>
|
||||
</record>
|
||||
|
||||
|
||||
<record model="ir.ui.view" id="oauth_ropc_provider_tree_view">
|
||||
<field name="name">oauth.ropc.provider.tree (in auth_oauth_ropc)</field>
|
||||
<field name="model">oauth.ropc.provider</field>
|
||||
<field name="arch" type="xml">
|
||||
<tree>
|
||||
<field name="name" />
|
||||
<field name="client_id" />
|
||||
</tree>
|
||||
</field>
|
||||
</record>
|
||||
|
||||
<record model="ir.actions.act_window" id="oauth_ropc_provider_act_window">
|
||||
<field name="name">oauth ROPC Providers</field>
|
||||
<field name="res_model">oauth.ropc.provider</field>
|
||||
<field name="view_mode">tree,form</field>
|
||||
<field name="domain">[]</field>
|
||||
<field name="context">{}</field>
|
||||
</record>
|
||||
|
||||
<record model="ir.ui.menu" id="oauth_ropc_provider_menu">
|
||||
<field name="name">oauth ROPC Providers</field>
|
||||
<field name="parent_id" ref="base.menu_users" />
|
||||
<field name="action" ref="oauth_ropc_provider_act_window" />
|
||||
<field name="sequence" eval="50" />
|
||||
</record>
|
||||
|
||||
</odoo>
|
||||
|
|
@ -0,0 +1,32 @@
|
|||
# Architecture
|
||||
|
||||
```mermaid
|
||||
flowchart TD
|
||||
U[Users] -->|HTTP| V[Views and QWeb Templates]
|
||||
V --> C[Controllers]
|
||||
V --> W[Wizards – Transient Models]
|
||||
C --> M[Models and ORM]
|
||||
W --> M
|
||||
M --> R[Reports]
|
||||
DX[Data XML] --> M
|
||||
S[Security – ACLs and Groups] -. enforces .-> M
|
||||
|
||||
subgraph Auth_oauth_ropc Module - auth_oauth_ropc
|
||||
direction LR
|
||||
M:::layer
|
||||
W:::layer
|
||||
C:::layer
|
||||
V:::layer
|
||||
R:::layer
|
||||
S:::layer
|
||||
DX:::layer
|
||||
end
|
||||
|
||||
classDef layer fill:#eef8ff,stroke:#6ea8fe,stroke-width:1px
|
||||
```
|
||||
|
||||
Notes
|
||||
- Views include tree/form/kanban templates and report templates.
|
||||
- Controllers provide website/portal routes when present.
|
||||
- Wizards are UI flows implemented with `models.TransientModel`.
|
||||
- Data XML loads data/demo records; Security defines groups and access.
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
# Configuration
|
||||
|
||||
Refer to Odoo settings for auth_oauth_ropc. Configure related models, access rights, and options as needed.
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
# Controllers
|
||||
|
||||
This module does not define custom HTTP controllers.
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
# Dependencies
|
||||
|
||||
This addon depends on:
|
||||
|
||||
- base
|
||||
4
odoo-bringout-oca-server-auth-auth_oauth_ropc/doc/FAQ.md
Normal file
4
odoo-bringout-oca-server-auth-auth_oauth_ropc/doc/FAQ.md
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
# FAQ
|
||||
|
||||
- Q: Which Odoo version? A: 16.0 (OCA/OCB packaged).
|
||||
- Q: How to enable? A: Start server with --addon auth_oauth_ropc or install in UI.
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
# Install
|
||||
|
||||
```bash
|
||||
pip install odoo-bringout-oca-server-auth-auth_oauth_ropc"
|
||||
# or
|
||||
uv pip install odoo-bringout-oca-server-auth-auth_oauth_ropc"
|
||||
```
|
||||
13
odoo-bringout-oca-server-auth-auth_oauth_ropc/doc/MODELS.md
Normal file
13
odoo-bringout-oca-server-auth-auth_oauth_ropc/doc/MODELS.md
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
# Models
|
||||
|
||||
Detected core models and extensions in auth_oauth_ropc.
|
||||
|
||||
```mermaid
|
||||
classDiagram
|
||||
class oauth_ropc_provider
|
||||
class res_users
|
||||
```
|
||||
|
||||
Notes
|
||||
- Classes show model technical names; fields omitted for brevity.
|
||||
- Items listed under _inherit are extensions of existing models.
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
# Overview
|
||||
|
||||
Packaged Odoo addon: auth_oauth_ropc. Provides features documented in upstream Odoo 16 under this addon.
|
||||
|
||||
- Source: OCA/OCB 16.0, addon auth_oauth_ropc
|
||||
- License: LGPL-3
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
# Reports
|
||||
|
||||
This module does not define custom reports.
|
||||
|
|
@ -0,0 +1,69 @@
|
|||
# Security
|
||||
|
||||
Access control and security definitions in auth_oauth_ropc.
|
||||
|
||||
## Access Control Lists (ACLs)
|
||||
|
||||
Model access permissions defined in:
|
||||
- **[bosnian_translations.json](../bosnian_translations.json)**
|
||||
- 50 model access rules
|
||||
- **[bosnian_translations_output.json](../bosnian_translations_output.json)**
|
||||
- 444 model access rules
|
||||
- **[CHANGELOG.md](../CHANGELOG.md)**
|
||||
- 132 model access rules
|
||||
- **[delete_odoo_addons.sh](../delete_odoo_addons.sh)**
|
||||
- 44 model access rules
|
||||
- **[doc](../doc)**
|
||||
- **[docker](../docker)**
|
||||
- **[input](../input)**
|
||||
- **[nix](../nix)**
|
||||
- **[odoo.conf](../odoo.conf)**
|
||||
- 58 model access rules
|
||||
- **[odoo_packages_bez_l10n.txt](../odoo_packages_bez_l10n.txt)**
|
||||
- 1947 model access rules
|
||||
- **[odoo_packages_bringout.txt](../odoo_packages_bringout.txt)**
|
||||
- 1947 model access rules
|
||||
- **[odoo_packages.txt](../odoo_packages.txt)**
|
||||
- 2085 model access rules
|
||||
- **[output](../output)**
|
||||
- **[packages](../packages)**
|
||||
- **[PACKAGES.md](../PACKAGES.md)**
|
||||
- 298 model access rules
|
||||
- **[README.md](../README.md)**
|
||||
- 338 model access rules
|
||||
- **[scripts](../scripts)**
|
||||
- **[temp](../temp)**
|
||||
- **[TRANSLATION_BS_SUMMARY.md](../TRANSLATION_BS_SUMMARY.md)**
|
||||
- 146 model access rules
|
||||
- **[verify_deletions.sh](../verify_deletions.sh)**
|
||||
- 55 model access rules
|
||||
|
||||
## Record Rules
|
||||
|
||||
Row-level security rules defined in:
|
||||
|
||||
## Security Groups & Configuration
|
||||
|
||||
Security groups and permissions defined in:
|
||||
- **[oauth_ropc_provider.xml](../auth_oauth_ropc/security/oauth_ropc_provider.xml)**
|
||||
|
||||
```mermaid
|
||||
graph TB
|
||||
subgraph "Security Layers"
|
||||
A[Users] --> B[Groups]
|
||||
B --> C[Access Control Lists]
|
||||
C --> D[Models]
|
||||
B --> E[Record Rules]
|
||||
E --> F[Individual Records]
|
||||
end
|
||||
```
|
||||
|
||||
Security files overview:
|
||||
- **[oauth_ropc_provider.xml](../auth_oauth_ropc/security/oauth_ropc_provider.xml)**
|
||||
- Security groups, categories, and XML-based rules
|
||||
|
||||
Notes
|
||||
- Access Control Lists define which groups can access which models
|
||||
- Record Rules provide row-level security (filter records by user/group)
|
||||
- Security groups organize users and define permission sets
|
||||
- All security is enforced at the ORM level by Odoo
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
# Troubleshooting
|
||||
|
||||
- Ensure Python and Odoo environment matches repo guidance.
|
||||
- Check database connectivity and logs if startup fails.
|
||||
- Validate that dependent addons listed in DEPENDENCIES.md are installed.
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
# Usage
|
||||
|
||||
Start Odoo including this addon (from repo root):
|
||||
|
||||
```bash
|
||||
python3 scripts/nix_odoo_web_server.py --db-name mydb --addon auth_oauth_ropc
|
||||
```
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
# Wizards
|
||||
|
||||
This module does not include UI wizards.
|
||||
43
odoo-bringout-oca-server-auth-auth_oauth_ropc/pyproject.toml
Normal file
43
odoo-bringout-oca-server-auth-auth_oauth_ropc/pyproject.toml
Normal file
|
|
@ -0,0 +1,43 @@
|
|||
[project]
|
||||
name = "odoo-bringout-oca-server-auth-auth_oauth_ropc"
|
||||
version = "16.0.0"
|
||||
description = "Auth OAuth ROPC -
|
||||
Allow to login with OAuth Resource Owner Password Credentials Grant"
|
||||
authors = [
|
||||
{ name = "Ernad Husremovic", email = "hernad@bring.out.ba" }
|
||||
]
|
||||
dependencies = [
|
||||
"odoo-bringout-oca-ocb-base>=16.0.0",
|
||||
"requests>=2.25.1"
|
||||
]
|
||||
readme = "README.md"
|
||||
requires-python = ">= 3.11"
|
||||
classifiers = [
|
||||
"Development Status :: 5 - Production/Stable",
|
||||
"Intended Audience :: Developers",
|
||||
"License :: OSI Approved :: GNU Lesser General Public License v3 (LGPLv3)",
|
||||
"Programming Language :: Python :: 3",
|
||||
"Programming Language :: Python :: 3.11",
|
||||
"Programming Language :: Python :: 3.12",
|
||||
"Topic :: Office/Business",
|
||||
]
|
||||
|
||||
[project.urls]
|
||||
homepage = "https://github.com/bringout/0"
|
||||
repository = "https://github.com/bringout/0"
|
||||
|
||||
[build-system]
|
||||
requires = ["hatchling"]
|
||||
build-backend = "hatchling.build"
|
||||
|
||||
[tool.hatch.metadata]
|
||||
allow-direct-references = true
|
||||
|
||||
[tool.hatch.build.targets.wheel]
|
||||
packages = ["auth_oauth_ropc"]
|
||||
|
||||
[tool.rye]
|
||||
managed = true
|
||||
dev-dependencies = [
|
||||
"pytest>=8.4.1",
|
||||
]
|
||||
Loading…
Add table
Add a link
Reference in a new issue