TIP: You can type at any time to perform a new search.

Auth Timeout

auth_timeout · odoo/odoo

    Security findings

    Repository
    odoo/odoo · module folder
    Module version
    0.1.0
    Category
    Hidden/Tools
    Folder size
    0.49 MB
    License
    LGPL-3
    Application
    No
    Auto-installable
    No
    Website
    None
    Last tracking update
    2026-09-28 18:31:23
    Authors
    Odoo S.A.
    Maintainers
    Odoo S.A.
    Committers
    Xavier Morel, Raphael Collet, Odoo Translation Bot, Julien Castiaux, Xavier-Do, Tiffany Chang (tic), Stanislas Sobieski, tsm-odoo, Dylan Kiss (dyki), Antoine Boonen, thle-odoo, Pierre Pulinckx, Krzysztof Magusiak (krma)
    Odoo dependencies
    odoo/odoo:
    - auth_totp
    - web
    - base
    - auth_totp_mail
    - mail
    - base_setup
    - bus
    - web_tour
    - html_editor
    - auth_passkey
    Python dependencies
    None
    System dependencies
    None
    Required by
    None
    Description
    
    
    

    


    

    Code Analysis info_outline
    

    Views touched (1)
    


    

    
    
    XML IDNameModelTypeStatus
    
    
        
        
    
            auth_passkey_groups_form
            auth.passkey.groups.form
            res.groups
            form
            
                
                Inherits base.view_groups_form
                
            
        
    
        
        

    

    



    HTTP endpoints (0)
    


    No HTTP endpoints found for this module.
    



    Models touched (5)
    


    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (2)
                
                
      
                    
                    
    • 
                        get_frontend_session_info(self)
                        
      @api.model
      
                        
      Extend the frontend session info with inactivity timeout and user login.

dds the user's inactivity timeout (if applicable) to the session info
returned to the frontend web client.

:return: The updated session information dictionary.
:rtype: dict
      
                    
      • 
                    
                    
    • 
                        session_info(self)
                        
                        
      Extend the backend session info with inactivity timeout metadata.

Adds the user's inactivity timeout (if applicable) to the session info
returned to the backend web client.

:return: The updated session information dictionary.
:rtype: dict
      
                    
      • 
                    
                
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (12)
                
                
      
                    
                    
    • 
                        has_lock_timeout
                        Boolean
                        
                        
      
                            
                            compute='_compute_has_lock_timeout'
                            
                            help="Requires re-authentication after the user's last connection"
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        has_lock_timeout_inactivity
                        Boolean
                        
                        
      
                            
                            compute='_compute_lock_timeout_inactivity_bool'
                            
                            help='Requires re-authentication after a period of user inactivity'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout
                        Integer
                        
                        
      
                            
                            help='Time interval (in minutes) after which re-authentication is required, regardless of inactivity.'
                            
                            string='Session timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_2fa_selection
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_2fa_selection'
                            
                            inverse='_inverse_lock_timeout_2fa_selection'
                            
                            args: [('without_2fa', 'Logout'), ('with_2fa', 'Logout with two-factor authentication')]
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_delay_in_unit
                        Integer
                        
                        
      
                            
                            compute='_compute_lock_timeout_delay_unit'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_delay_unit
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_delay_unit'
                            
                            readonly=False
                            
                            args: DELAY_UNITS
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity
                        Integer
                        
                        
      
                            
                            help='Time (in minutes) of user inactivity after which re-authentication is required.'
                            
                            string='Inactivity timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_2fa_selection
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_inactivity_2fa_selection'
                            
                            inverse='_inverse_lock_timeout_inactivity_2fa_selection'
                            
                            args: [('without_2fa', 'Screen lock'), ('with_2fa', 'Screen lock with two-factor authentication')]
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_delay_in_unit
                        Integer
                        
                        
      
                            
                            compute='_compute_lock_timeout_inactivity_delay_unit'
                            
                            readonly=False
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_delay_unit
                        Selection
                        
                        
      
                            
                            
                            
                            compute='_compute_lock_timeout_inactivity_delay_unit'
                            
                            readonly=False
                            
                            args: DELAY_UNITS
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_inactivity_mfa
                        Boolean
                        
                        
      
                            
                            help='Enable two-factor authentication when the inactivity timeout is reached.'
                            
                            string='Require MFA on inactivity timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                    
    • 
                        lock_timeout_mfa
                        Boolean
                        
                        
      
                            
                            help='Enable two-factor authentication when the session timeout is reached.'
                            
                            string='Require MFA on session timeout'
                            
                            
                        
      
                        
                    
      • 
                    
                
    
                
                Public methods (3)
                
                
      
                    
                    
    • 
                        create(self, vals_list)
                        
      @api.model_create_multi
      
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields are set on creation.
      
                    
      • 
                    
                    
    • 
                        unlink(self)
                        
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields exist on deleted records.
      
                    
      • 
                    
                    
    • 
                        write(self, vals)
                        
                        
      Override to invalidate `_get_lock_timeouts` cache if timeout fields are updated.
      
                    
      • 
                    
                
    
                
            
    
        
    
    
    
    
    
    
        
    
            
        
    
        
    
            
    
                New fields (0)
                
                
    No new fields.
    
                
                Public methods (0)
                
                
    No public methods.
    
                
            
    
        
    
    
    
    

    


    
    
    
    
    
    
    
    
    
        
    Loading…