Initial commit: OCA Technical packages (595 packages)

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/README.md

@@ -0,0 +1,47 @@
+# FastAPI Auth JWT support
+
+Odoo addon: fastapi_auth_jwt
+
+## Installation
+
+```bash
+pip install odoo-bringout-oca-rest-framework-fastapi_auth_jwt
+```
+
+## Dependencies
+
+This addon depends on:
+- fastapi
+- auth_jwt
+
+## Manifest Information
+
+- **Name**: FastAPI Auth JWT support
+- **Version**: 16.0.1.0.4
+- **Category**: N/A
+- **License**: LGPL-3
+- **Installable**: False
+
+## Source
+
+Based on [OCA/rest-framework](https://github.com/OCA/rest-framework) branch 16.0, addon `fastapi_auth_jwt`.
+
+## License
+
+This package maintains the original LGPL-3 license from the upstream Odoo project.
+
+## Documentation
+
+- Overview: doc/OVERVIEW.md
+- Architecture: doc/ARCHITECTURE.md
+- Models: doc/MODELS.md
+- Controllers: doc/CONTROLLERS.md
+- Wizards: doc/WIZARDS.md
+- Reports: doc/REPORTS.md
+- Security: doc/SECURITY.md
+- Install: doc/INSTALL.md
+- Usage: doc/USAGE.md
+- Configuration: doc/CONFIGURATION.md
+- Dependencies: doc/DEPENDENCIES.md
+- Troubleshooting: doc/TROUBLESHOOTING.md
+- FAQ: doc/FAQ.md

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/ARCHITECTURE.md

@@ -0,0 +1,32 @@
+# Architecture
+
+```mermaid
+flowchart TD
+    U[Users] -->|HTTP| V[Views and QWeb Templates]
+    V --> C[Controllers]
+    V --> W[Wizards – Transient Models]
+    C --> M[Models and ORM]
+    W --> M
+    M --> R[Reports]
+    DX[Data XML] --> M
+    S[Security – ACLs and Groups] -. enforces .-> M
+
+    subgraph Fastapi_auth_jwt Module - fastapi_auth_jwt
+      direction LR
+      M:::layer
+      W:::layer
+      C:::layer
+      V:::layer
+      R:::layer
+      S:::layer
+      DX:::layer
+    end
+
+    classDef layer fill:#eef8ff,stroke:#6ea8fe,stroke-width:1px
+```
+
+Notes
+- Views include tree/form/kanban templates and report templates.
+- Controllers provide website/portal routes when present.
+- Wizards are UI flows implemented with `models.TransientModel`.
+- Data XML loads data/demo records; Security defines groups and access.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/CONFIGURATION.md

@@ -0,0 +1,3 @@
+# Configuration
+
+Refer to Odoo settings for fastapi_auth_jwt. Configure related models, access rights, and options as needed.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/CONTROLLERS.md

@@ -0,0 +1,3 @@
+# Controllers
+
+This module does not define custom HTTP controllers.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/DEPENDENCIES.md

@@ -0,0 +1,6 @@
+# Dependencies
+
+This addon depends on:
+
+- [fastapi](../../odoo-bringout-oca-rest-framework-fastapi)
+- [auth_jwt](../../odoo-bringout-oca-server-auth-auth_jwt)

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/FAQ.md

@@ -0,0 +1,4 @@
+# FAQ
+
+- Q: Which Odoo version? A: 16.0 (OCA/OCB packaged).
+- Q: How to enable? A: Start server with --addon fastapi_auth_jwt or install in UI.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/INSTALL.md

@@ -0,0 +1,7 @@
+# Install
+
+```bash
+pip install odoo-bringout-oca-rest-framework-fastapi_auth_jwt"
+# or
+uv pip install odoo-bringout-oca-rest-framework-fastapi_auth_jwt"
+```

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/MODELS.md

@@ -0,0 +1,11 @@
+# Models
+
+Detected core models and extensions in fastapi_auth_jwt.
+
+```mermaid
+classDiagram
+```
+
+Notes
+- Classes show model technical names; fields omitted for brevity.
+- Items listed under _inherit are extensions of existing models.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/OVERVIEW.md

@@ -0,0 +1,6 @@
+# Overview
+
+Packaged Odoo addon: fastapi_auth_jwt. Provides features documented in upstream Odoo 16 under this addon.
+
+- Source: OCA/OCB 16.0, addon fastapi_auth_jwt
+- License: LGPL-3

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/REPORTS.md

@@ -0,0 +1,3 @@
+# Reports
+
+This module does not define custom reports.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/SECURITY.md

@@ -0,0 +1,8 @@
+# Security
+
+This module does not define custom security rules or access controls beyond Odoo defaults.
+
+Default Odoo security applies:
+- Base user access through standard groups
+- Model access inherited from dependencies
+- No custom row-level security rules

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/TROUBLESHOOTING.md

@@ -0,0 +1,5 @@
+# Troubleshooting
+
+- Ensure Python and Odoo environment matches repo guidance.
+- Check database connectivity and logs if startup fails.
+- Validate that dependent addons listed in DEPENDENCIES.md are installed.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/USAGE.md

@@ -0,0 +1,7 @@
+# Usage
+
+Start Odoo including this addon (from repo root):
+
+```bash
+python3 scripts/nix_odoo_web_server.py --db-name mydb --addon fastapi_auth_jwt
+```

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/doc/WIZARDS.md

@@ -0,0 +1,3 @@
+# Wizards
+
+This module does not include UI wizards.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/README.rst

@@ -0,0 +1,140 @@
+========================
+FastAPI Auth JWT support
+========================
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:a7c4a8b4ef360ff91c0b2bcb7ee4ce90308f98ee56c94dd2d651e35ceb92011c
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/licence-LGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/lgpl-3.0-standalone.html
+    :alt: License: LGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Frest--framework-lightgray.png?logo=github
+    :target: https://github.com/OCA/rest-framework/tree/16.0/fastapi_auth_jwt
+    :alt: OCA/rest-framework
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/rest-framework-16-0/rest-framework-16-0-fastapi_auth_jwt
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/rest-framework&target_branch=16.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+This module provides ``FastAPI`` ``Depends`` to allow authentication with `auth_jwt
+<https://github.com/OCA/server-auth/tree/16.0/auth_jwt>`_.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Usage
+=====
+
+The following FastAPI dependencies  are provided and importable from
+``odoo.addons.fastapi_auth_jwt.dependencies``:
+
+``def auth_jwt_authenticated_payload() -> Payload``
+
+  Return the authenticated JWT payload. Raise a 401 (unauthorized) if absent or invalid.
+
+``def auth_jwt_optionally_authenticated_payload() -> Payload | None``
+
+  Return the authenticated JWT payload, or ``None`` if the ``Authorization`` header and
+  cookie are absent. Raise a 401 (unauthorized) if present and invalid.
+
+``def auth_jwt_authenticated_partner() -> Partner``
+
+  Obtain the authenticated partner corresponding to the provided JWT token, according to
+  the partner strategy defined on the ``auth_jwt`` validator. Raise a 401 (unauthorized)
+  if the partner could not be determined for any reason.
+
+  This is function suitable and intended to override
+  ``odoo.addons.fastapi.dependencies.authenticated_partner_impl``.
+
+  The partner record returned by this function is bound to an environment that uses the
+  Odoo user obtained from the user strategy defined on the ``auth_jwt`` validator. When
+  used ``authenticated_partner_impl`` this in turn ensures that
+  ``odoo.addons.fastapi.dependencies.authenticated_partner_env`` is also bound to the
+  correct Odoo user.
+
+``def auth_jwt_optionally_authenticated_partner() -> Partner``
+
+  Same as ``auth_jwt_partner`` except it returns an empty recordset bound to the
+  ``public`` user if the ``Authorization`` header and cookie are absent, or if the JWT
+  validator could not find the partner and declares that the partner is not required.
+
+``def auth_jwt_authenticated_odoo_env() -> Environment``
+
+  Return an Odoo environment using the the Odoo user obtained from the user strategy
+  defined on the ``auth_jwt`` validator, if the request could be authenticated using a
+  JWT validator. Raise a 401 (unauthorized) otherwise.
+
+  This is function suitable and intended to override
+  ``odoo.addons.fastapi.dependencies.authenticated_odoo_env_impl``.
+
+``def auth_jwt_default_validator_name() -> str | None``
+
+  Return the name of the default JWT validator to use.
+
+  The default implementation returns ``None`` meaning only one active JWT validator is
+  allowed. This dependency is meant to be overridden.
+
+``def auth_jwt_http_header_authorization() -> str | None``
+
+  By default, return the credentials part of the ``Authorization`` header, or ``None``
+  if absent. This dependency is meant to be overridden, in particular with
+  ``fastapi.security.OAuth2AuthorizationCodeBearer`` to let swagger handle OAuth2
+  authorization (such override is only necessary for comfort when using the swagger
+  interface).
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/rest-framework/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/rest-framework/issues/new?body=module:%20fastapi_auth_jwt%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+~~~~~~~
+
+* ACSONE SA/NV
+
+Maintainers
+~~~~~~~~~~~
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+.. |maintainer-sbidoul| image:: https://github.com/sbidoul.png?size=40px
+    :target: https://github.com/sbidoul
+    :alt: sbidoul
+
+Current `maintainer <https://odoo-community.org/page/maintainer-role>`__:
+
+|maintainer-sbidoul| 
+
+This module is part of the `OCA/rest-framework <https://github.com/OCA/rest-framework/tree/16.0/fastapi_auth_jwt>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/__manifest__.py

@@ -0,0 +1,19 @@
+# Copyright 2023 ACSONE SA/NV
+# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl).
+
+{
+    "name": "FastAPI Auth JWT support",
+    "summary": """
+        JWT bearer token authentication for FastAPI.""",
+    "version": "16.0.1.0.4",
+    "license": "LGPL-3",
+    "author": "ACSONE SA/NV,Odoo Community Association (OCA)",
+    "maintainers": ["sbidoul"],
+    "website": "https://github.com/OCA/rest-framework",
+    "depends": [
+        "fastapi",
+        "auth_jwt",
+    ],
+    "data": [],
+    "demo": [],
+}

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/dependencies.py

@@ -0,0 +1,250 @@
+# Copyright 2023 ACSONE SA/NV
+# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl).
+
+import logging
+from typing import Annotated, Any, Dict, Optional, Tuple, Union
+
+from starlette.status import HTTP_401_UNAUTHORIZED
+
+from odoo.api import Environment
+
+from odoo.addons.auth_jwt.exceptions import (
+    ConfigurationError,
+    Unauthorized,
+    UnauthorizedCompositeJwtError,
+    UnauthorizedMissingAuthorizationHeader,
+    UnauthorizedMissingCookie,
+)
+from odoo.addons.auth_jwt.models.auth_jwt_validator import AuthJwtValidator
+from odoo.addons.base.models.res_partner import Partner
+from odoo.addons.fastapi.dependencies import odoo_env
+
+from fastapi import Depends, HTTPException, Request, Response
+from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
+
+_logger = logging.getLogger(__name__)
+
+
+Payload = Dict[str, Any]
+
+
+def _get_auth_jwt_validator(
+    validator_name: Union[str, None],
+    env: Environment,
+) -> AuthJwtValidator:
+    validator = env["auth.jwt.validator"].sudo()._get_validator_by_name(validator_name)
+    assert len(validator) == 1
+    return validator
+
+
+def _request_has_authentication(
+    request: Request,
+    authorization_header: Optional[str],
+    validator: AuthJwtValidator,
+) -> Union[Payload, None]:
+    if authorization_header is not None:
+        return True
+    if not validator.cookie_enabled:
+        # no Authorization header and cookies not enabled
+        return False
+    return request.cookies.get(validator.cookie_name) is not None
+
+
+def _get_jwt_payload(
+    request: Request,
+    authorization_header: Optional[str],
+    validator: AuthJwtValidator,
+) -> Payload:
+    """Obtain and validate the JWT payload from the request authorization header or
+    cookie (if enabled on the validator)."""
+    if authorization_header is not None:
+        return validator._decode(authorization_header)
+    if not validator.cookie_enabled:
+        _logger.info("Missing or malformed authorization header.")
+        raise UnauthorizedMissingAuthorizationHeader()
+    assert validator.cookie_name
+    cookie_token = request.cookies.get(validator.cookie_name)
+    if not cookie_token:
+        _logger.info(
+            "Missing or malformed authorization header, and %s cookie not present.",
+            validator.cookie_name,
+        )
+        raise UnauthorizedMissingCookie()
+    return validator._decode(cookie_token, secret=validator._get_jwt_cookie_secret())
+
+
+def _get_jwt_payload_and_validator(
+    request: Request,
+    response: Response,
+    authorization_header: Optional[str],
+    validator: AuthJwtValidator,
+) -> Tuple[Payload, AuthJwtValidator]:
+    try:
+        payload = None
+        exceptions = {}
+        while validator:
+            try:
+                payload = _get_jwt_payload(request, authorization_header, validator)
+                break
+            except Unauthorized as e:
+                exceptions[validator.name] = e
+                validator = validator.next_validator_id
+
+        if not payload:
+            if len(exceptions) == 1:
+                raise list(exceptions.values())[0]
+            raise UnauthorizedCompositeJwtError(exceptions)
+
+        if validator.cookie_enabled:
+            if not validator.cookie_name:
+                _logger.info("Cookie name not set for validator %s", validator.name)
+                raise ConfigurationError()
+            response.set_cookie(
+                key=validator.cookie_name,
+                value=validator._encode(
+                    payload,
+                    secret=validator._get_jwt_cookie_secret(),
+                    expire=validator.cookie_max_age,
+                ),
+                max_age=validator.cookie_max_age,
+                path=validator.cookie_path or "/",
+                secure=validator.cookie_secure,
+                httponly=True,
+            )
+
+        return payload, validator
+    except Unauthorized as e:
+        raise HTTPException(status_code=HTTP_401_UNAUTHORIZED) from e
+
+
+def auth_jwt_default_validator_name() -> Union[str, None]:
+    return None
+
+
+def auth_jwt_http_header_authorization(
+    credentials: Annotated[
+        Optional[HTTPAuthorizationCredentials],
+        Depends(HTTPBearer(auto_error=False)),
+    ]
+):
+    if credentials is None:
+        return None
+    return credentials.credentials
+
+
+class BaseAuthJwt:  # noqa: B903
+    def __init__(
+        self, validator_name: Optional[str] = None, allow_unauthenticated: bool = False
+    ):
+        self.validator_name = validator_name
+        self.allow_unauthenticated = allow_unauthenticated
+
+
+class AuthJwtPayload(BaseAuthJwt):
+    def __call__(
+        self,
+        request: Request,
+        response: Response,
+        authorization_header: Annotated[
+            Optional[str],
+            Depends(auth_jwt_http_header_authorization),
+        ],
+        default_validator_name: Annotated[
+            Union[str, None],
+            Depends(auth_jwt_default_validator_name),
+        ],
+        env: Annotated[
+            Environment,
+            Depends(odoo_env),
+        ],
+    ) -> Optional[Payload]:
+        validator = _get_auth_jwt_validator(
+            self.validator_name or default_validator_name, env
+        )
+        if self.allow_unauthenticated and not _request_has_authentication(
+            request, authorization_header, validator
+        ):
+            return None
+        return _get_jwt_payload_and_validator(
+            request, response, authorization_header, validator
+        )[0]
+
+
+class AuthJwtPartner(BaseAuthJwt):
+    def __call__(
+        self,
+        request: Request,
+        response: Response,
+        authorization_header: Annotated[
+            Optional[str],
+            Depends(auth_jwt_http_header_authorization),
+        ],
+        default_validator_name: Annotated[
+            Union[str, None],
+            Depends(auth_jwt_default_validator_name),
+        ],
+        env: Annotated[
+            Environment,
+            Depends(odoo_env),
+        ],
+    ) -> Partner:
+        validator = _get_auth_jwt_validator(
+            self.validator_name or default_validator_name, env
+        )
+        if self.allow_unauthenticated and not _request_has_authentication(
+            request, authorization_header, validator
+        ):
+            return env["res.partner"].with_user(env.ref("base.public_user")).browse()
+        payload, validator = _get_jwt_payload_and_validator(
+            request, response, authorization_header, validator
+        )
+        try:
+            uid = validator._get_and_check_uid(payload)
+            partner_id = validator._get_and_check_partner_id(payload)
+        except Unauthorized as e:
+            raise HTTPException(status_code=HTTP_401_UNAUTHORIZED) from e
+        if not partner_id:
+            if not self.allow_unauthenticated or validator.partner_id_required:
+                _logger.info("Could not determine partner from JWT payload.")
+                raise HTTPException(status_code=HTTP_401_UNAUTHORIZED)
+            return env["res.partner"].with_user(uid).browse()
+        return env["res.partner"].with_user(uid).browse(partner_id)
+
+
+class AuthJwtOdooEnv(BaseAuthJwt):
+    def __call__(
+        self,
+        request: Request,
+        response: Response,
+        authorization_header: Annotated[
+            Optional[str],
+            Depends(auth_jwt_http_header_authorization),
+        ],
+        default_validator_name: Annotated[
+            Union[str, None],
+            Depends(auth_jwt_default_validator_name),
+        ],
+        env: Annotated[
+            Environment,
+            Depends(odoo_env),
+        ],
+    ) -> Environment:
+        validator = _get_auth_jwt_validator(
+            self.validator_name or default_validator_name, env
+        )
+        payload, validator = _get_jwt_payload_and_validator(
+            request, response, authorization_header, validator
+        )
+        uid = validator._get_and_check_uid(payload)
+        return env(user=uid)
+
+
+auth_jwt_authenticated_payload = AuthJwtPayload()
+
+auth_jwt_optionally_authenticated_payload = AuthJwtPayload(allow_unauthenticated=True)
+
+auth_jwt_authenticated_partner = AuthJwtPartner()
+
+auth_jwt_optionally_authenticated_partner = AuthJwtPartner(allow_unauthenticated=True)
+
+auth_jwt_authenticated_odoo_env = AuthJwtOdooEnv()

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/i18n/fastapi_auth_jwt.pot

@@ -0,0 +1,13 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/i18n/it.po

@@ -0,0 +1,14 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/readme/DESCRIPTION.rst

@@ -0,0 +1,2 @@
+This module provides ``FastAPI`` ``Depends`` to allow authentication with `auth_jwt
+<https://github.com/OCA/server-auth/tree/16.0/auth_jwt>`_.

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/readme/USAGE.rst

@@ -0,0 +1,56 @@
+The following FastAPI dependencies  are provided and importable from
+``odoo.addons.fastapi_auth_jwt.dependencies``:
+
+``def auth_jwt_authenticated_payload() -> Payload``
+
+  Return the authenticated JWT payload. Raise a 401 (unauthorized) if absent or invalid.
+
+``def auth_jwt_optionally_authenticated_payload() -> Payload | None``
+
+  Return the authenticated JWT payload, or ``None`` if the ``Authorization`` header and
+  cookie are absent. Raise a 401 (unauthorized) if present and invalid.
+
+``def auth_jwt_authenticated_partner() -> Partner``
+
+  Obtain the authenticated partner corresponding to the provided JWT token, according to
+  the partner strategy defined on the ``auth_jwt`` validator. Raise a 401 (unauthorized)
+  if the partner could not be determined for any reason.
+
+  This is function suitable and intended to override
+  ``odoo.addons.fastapi.dependencies.authenticated_partner_impl``.
+
+  The partner record returned by this function is bound to an environment that uses the
+  Odoo user obtained from the user strategy defined on the ``auth_jwt`` validator. When
+  used ``authenticated_partner_impl`` this in turn ensures that
+  ``odoo.addons.fastapi.dependencies.authenticated_partner_env`` is also bound to the
+  correct Odoo user.
+
+``def auth_jwt_optionally_authenticated_partner() -> Partner``
+
+  Same as ``auth_jwt_partner`` except it returns an empty recordset bound to the
+  ``public`` user if the ``Authorization`` header and cookie are absent, or if the JWT
+  validator could not find the partner and declares that the partner is not required.
+
+``def auth_jwt_authenticated_odoo_env() -> Environment``
+
+  Return an Odoo environment using the the Odoo user obtained from the user strategy
+  defined on the ``auth_jwt`` validator, if the request could be authenticated using a
+  JWT validator. Raise a 401 (unauthorized) otherwise.
+
+  This is function suitable and intended to override
+  ``odoo.addons.fastapi.dependencies.authenticated_odoo_env_impl``.
+
+``def auth_jwt_default_validator_name() -> str | None``
+
+  Return the name of the default JWT validator to use.
+
+  The default implementation returns ``None`` meaning only one active JWT validator is
+  allowed. This dependency is meant to be overridden.
+
+``def auth_jwt_http_header_authorization() -> str | None``
+
+  By default, return the credentials part of the ``Authorization`` header, or ``None``
+  if absent. This dependency is meant to be overridden, in particular with
+  ``fastapi.security.OAuth2AuthorizationCodeBearer`` to let swagger handle OAuth2
+  authorization (such override is only necessary for comfort when using the swagger
+  interface).

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/fastapi_auth_jwt/static/description/index.html

@@ -0,0 +1,467 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
+<title>FastAPI Auth JWT support</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 8954 2022-01-20 10:10:25Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: grey; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document" id="fastapi-auth-jwt-support">
+<h1 class="title">FastAPI Auth JWT support</h1>
+
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:a7c4a8b4ef360ff91c0b2bcb7ee4ce90308f98ee56c94dd2d651e35ceb92011c
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/lgpl-3.0-standalone.html"><img alt="License: LGPL-3" src="https://img.shields.io/badge/licence-LGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/rest-framework/tree/16.0/fastapi_auth_jwt"><img alt="OCA/rest-framework" src="https://img.shields.io/badge/github-OCA%2Frest--framework-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/rest-framework-16-0/rest-framework-16-0-fastapi_auth_jwt"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/rest-framework&amp;target_branch=16.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
+<p>This module provides <tt class="docutils literal">FastAPI</tt> <tt class="docutils literal">Depends</tt> to allow authentication with <a class="reference external" href="https://github.com/OCA/server-auth/tree/16.0/auth_jwt">auth_jwt</a>.</p>
+<p><strong>Table of contents</strong></p>
+<div class="contents local topic" id="contents">
+<ul class="simple">
+<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a></li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-2">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-3">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-4">Authors</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-5">Maintainers</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="usage">
+<h1><a class="toc-backref" href="#toc-entry-1">Usage</a></h1>
+<p>The following FastAPI dependencies  are provided and importable from
+<tt class="docutils literal">odoo.addons.fastapi_auth_jwt.dependencies</tt>:</p>
+<p><tt class="docutils literal">def auth_jwt_authenticated_payload() <span class="pre">-&gt;</span> Payload</tt></p>
+<blockquote>
+Return the authenticated JWT payload. Raise a 401 (unauthorized) if absent or invalid.</blockquote>
+<p><tt class="docutils literal">def auth_jwt_optionally_authenticated_payload() <span class="pre">-&gt;</span> Payload | None</tt></p>
+<blockquote>
+Return the authenticated JWT payload, or <tt class="docutils literal">None</tt> if the <tt class="docutils literal">Authorization</tt> header and
+cookie are absent. Raise a 401 (unauthorized) if present and invalid.</blockquote>
+<p><tt class="docutils literal">def auth_jwt_authenticated_partner() <span class="pre">-&gt;</span> Partner</tt></p>
+<blockquote>
+<p>Obtain the authenticated partner corresponding to the provided JWT token, according to
+the partner strategy defined on the <tt class="docutils literal">auth_jwt</tt> validator. Raise a 401 (unauthorized)
+if the partner could not be determined for any reason.</p>
+<p>This is function suitable and intended to override
+<tt class="docutils literal">odoo.addons.fastapi.dependencies.authenticated_partner_impl</tt>.</p>
+<p>The partner record returned by this function is bound to an environment that uses the
+Odoo user obtained from the user strategy defined on the <tt class="docutils literal">auth_jwt</tt> validator. When
+used <tt class="docutils literal">authenticated_partner_impl</tt> this in turn ensures that
+<tt class="docutils literal">odoo.addons.fastapi.dependencies.authenticated_partner_env</tt> is also bound to the
+correct Odoo user.</p>
+</blockquote>
+<p><tt class="docutils literal">def auth_jwt_optionally_authenticated_partner() <span class="pre">-&gt;</span> Partner</tt></p>
+<blockquote>
+Same as <tt class="docutils literal">auth_jwt_partner</tt> except it returns an empty recordset bound to the
+<tt class="docutils literal">public</tt> user if the <tt class="docutils literal">Authorization</tt> header and cookie are absent, or if the JWT
+validator could not find the partner and declares that the partner is not required.</blockquote>
+<p><tt class="docutils literal">def auth_jwt_authenticated_odoo_env() <span class="pre">-&gt;</span> Environment</tt></p>
+<blockquote>
+<p>Return an Odoo environment using the the Odoo user obtained from the user strategy
+defined on the <tt class="docutils literal">auth_jwt</tt> validator, if the request could be authenticated using a
+JWT validator. Raise a 401 (unauthorized) otherwise.</p>
+<p>This is function suitable and intended to override
+<tt class="docutils literal">odoo.addons.fastapi.dependencies.authenticated_odoo_env_impl</tt>.</p>
+</blockquote>
+<p><tt class="docutils literal">def auth_jwt_default_validator_name() <span class="pre">-&gt;</span> str | None</tt></p>
+<blockquote>
+<p>Return the name of the default JWT validator to use.</p>
+<p>The default implementation returns <tt class="docutils literal">None</tt> meaning only one active JWT validator is
+allowed. This dependency is meant to be overridden.</p>
+</blockquote>
+<p><tt class="docutils literal">def auth_jwt_http_header_authorization() <span class="pre">-&gt;</span> str | None</tt></p>
+<blockquote>
+By default, return the credentials part of the <tt class="docutils literal">Authorization</tt> header, or <tt class="docutils literal">None</tt>
+if absent. This dependency is meant to be overridden, in particular with
+<tt class="docutils literal">fastapi.security.OAuth2AuthorizationCodeBearer</tt> to let swagger handle OAuth2
+authorization (such override is only necessary for comfort when using the swagger
+interface).</blockquote>
+</div>
+<div class="section" id="bug-tracker">
+<h1><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h1>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/rest-framework/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/rest-framework/issues/new?body=module:%20fastapi_auth_jwt%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h1><a class="toc-backref" href="#toc-entry-3">Credits</a></h1>
+<div class="section" id="authors">
+<h2><a class="toc-backref" href="#toc-entry-4">Authors</a></h2>
+<ul class="simple">
+<li>ACSONE SA/NV</li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h2><a class="toc-backref" href="#toc-entry-5">Maintainers</a></h2>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org"><img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" /></a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>Current <a class="reference external" href="https://odoo-community.org/page/maintainer-role">maintainer</a>:</p>
+<p><a class="reference external image-reference" href="https://github.com/sbidoul"><img alt="sbidoul" src="https://github.com/sbidoul.png?size=40px" /></a></p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/rest-framework/tree/16.0/fastapi_auth_jwt">OCA/rest-framework</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</body>
+</html>

odoo-bringout-oca-rest-framework-fastapi_auth_jwt/pyproject.toml

@@ -0,0 +1,44 @@
+[project]
+name = "odoo-bringout-oca-rest-framework-fastapi_auth_jwt"
+version = "16.0.0"
+description = "FastAPI Auth JWT support - 
+        JWT bearer token authentication for FastAPI."
+authors = [
+    { name = "Ernad Husremovic", email = "hernad@bring.out.ba" }
+]
+dependencies = [
+    "odoo-bringout-oca-rest-framework-fastapi>=16.0.0",
+    "odoo-bringout-oca-rest-framework-auth_jwt>=16.0.0",
+    "requests>=2.25.1"
+]
+readme = "README.md"
+requires-python = ">= 3.11"
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: GNU Lesser General Public License v3 (LGPLv3)",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.11", 
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Office/Business",
+]
+
+[project.urls]
+homepage = "https://github.com/bringout/0"
+repository = "https://github.com/bringout/0"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.metadata]
+allow-direct-references = true
+
+[tool.hatch.build.targets.wheel]
+packages = ["fastapi_auth_jwt"]
+
+[tool.rye]
+managed = true
+dev-dependencies = [
+    "pytest>=8.4.1",
+]