Auth Timeout

auth_timeout · odoo/odoo

    Repository
    odoo/odoo · module folder
    Module version
    0.1.0
    Category
    Hidden/Tools
    Folder size
    0.66 MB
    License
    LGPL-3
    Application
    No
    Auto-installable
    No
    Website
    None
    Last tracking update
    2026-08-17 22:12:53
    Authors
    Odoo S.A.
    Maintainers
    Odoo S.A.
    Committers
    Xavier Morel, Odoo Translation Bot, Denis Ledoux, Tiffany Chang (tic), Stanislas Sobieski, Dylan Kiss (dyki), neloduka-sobe
    Odoo dependencies
    odoo/odoo:
    - auth_totp
    - web
    - base
    - auth_totp_mail
    - mail
    - base_setup
    - bus
    - web_tour
    - html_editor
    - auth_passkey
    Python dependencies
    None
    System dependencies
    None
    Required by
    None
    Description
    
    
    

    


    

    Code Analysis ⓘ
    

    Views touched (2)
    


    

    
    
    XML IDNameModelTypeStatus
    
    
        
        
    
            auth_passkey_groups_form
            auth.passkey.groups.form
            res.groups
            form
            
                
                Inherits base.view_groups_form
                
            
        
    
        
        
    
            check_identity
            Check Identity
            ir.ui.view
            qweb
            
                
                New
                
            
        
    
        
        

    

    



    HTTP endpoints (5)
    


    

    
    
    Route(s)HandlerAuthTypeMethodsFlags
    
    
        
        
    
            /auth-timeout/check-identity
            AuthTimeOutController.check_identity
            
                user
                
            
            http
            ALL
            
                
                
                website
            
        
    
        
        
    
            /auth-timeout/session/check-identity
            AuthTimeOutController.check_identity_session
            
                user
                
            
            jsonrpc
            ALL
            
                
                
                
            
        
    
        
        
    
            /auth-timeout/send-totp-mail-code
            AuthTimeOutController.send_totp_mail_code
            
                user
                
            
            jsonrpc
            ALL
            
                
                
                
            
        
    
        
        
    
            (inherited route override)
            Home.web_load_menus
            
                inherited
            
            http
            ALL
            
                
                
                
            
        
    
        
        
    
            (inherited route override)
            WebauthnController.json_start_authentication
            
                inherited
            
            http
            ALL
            
                
                
                
            
        
    
        
        

    

    



    Models touched (5)
    


    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (2)
                
                
      
                    
                    
    • 
                        get_frontend_session_info(self)
                        
      @api.model
      
                        
      Extend the frontend session info with inactivity timeout and user login.

dds the user's inactivity timeout (if applicable) to the session info
returned to the frontend web client.

:return: The updated session information dictionary.
:rtype: dict
      
                    
      • 
                    
                    
    • 
                        session_info(self)
                        
                        
      Extend the backend session info with inactivity timeout metadata.

Adds the user's inactivity timeout (if applicable) to the session info
returned to the backend web client.

:return: The updated session information dictionary.
:rtype: dict
      
                    
      • 
                    
                
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (12)
                
                
      
                    
                    
    • 
                        has_lock_timeout
                        Boolean
                        
                        
      
                            
                            compute='_compute_has_lock_timeout'
                            
                            help="Requires re-authentication after the user's last connection"
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        has_lock_timeout_inactivity
                        Boolean
                        
                        
      
                            
                            compute='_compute_lock_timeout_inactivity_bool'
                            
                            help='Requires re-authentication after a period of user inactivity'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout
                        Integer
                        
                        
      
                            
                            help='Time interval (in minutes) after which re-authentication is required, regardless of inactivity.'
                            
                            string='Session timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_2fa_selection
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_2fa_selection'
                            
                            inverse='_inverse_lock_timeout_2fa_selection'
                            
                            args: [('without_2fa', 'Logout'), ('with_2fa', 'Logout with two-factor authentication')]
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_delay_in_unit
                        Integer
                        
                        
      
                            
                            compute='_compute_lock_timeout_delay_unit'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_delay_unit
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_delay_unit'
                            
                            readonly=False
                            
                            args: DELAY_UNITS
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity
                        Integer
                        
                        
      
                            
                            help='Time (in minutes) of user inactivity after which re-authentication is required.'
                            
                            string='Inactivity timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_2fa_selection
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_inactivity_2fa_selection'
                            
                            inverse='_inverse_lock_timeout_inactivity_2fa_selection'
                            
                            args: [('without_2fa', 'Screen lock'), ('with_2fa', 'Screen lock with two-factor authentication')]
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_delay_in_unit
                        Integer
                        
                        
      
                            
                            compute='_compute_lock_timeout_inactivity_delay_unit'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_delay_unit
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_inactivity_delay_unit'
                            
                            readonly=False
                            
                            args: DELAY_UNITS
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_mfa
                        Boolean
                        
                        
      
                            
                            help='Enable two-factor authentication when the inactivity timeout is reached.'
                            
                            string='Require MFA on inactivity timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_mfa
                        Boolean
                        
                        
      
                            
                            help='Enable two-factor authentication when the session timeout is reached.'
                            
                            string='Require MFA on session timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                
    
                
                Public methods (3)
                
                
      
                    
                    
    • 
                        create(self, vals_list)
                        
      @api.model_create_multi
      
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields are set on creation.
      
                    
      • 
                    
                    
    • 
                        unlink(self)
                        
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields exist on deleted records.
      
                    
      • 
                    
                    
    • 
                        write(self, vals)
                        
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields are updated.
      
                    
      • 
                    
                
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.