TIP: You can type at any time to perform a new search.

Security findings

Repository
odoo/odoo · module folder
Module version
0.1.0
Category
Extra Tools
Folder size
0.82 MB
License
LGPL-3
Application
No
Auto-installable
Yes
Website
None
Last tracking update
2026-10-05 00:19:41
Authors
Odoo S.A.
Maintainers
Odoo S.A.
Committers
Odoo Translation Bot, Denis Ledoux, Julien Castiaux, Victor Feyens, Tiffany Chang (tic), Pierre Paridans, Miquel Raïch, Dylan Kiss (dyki), Chong Wang (cwg), mano-odoo, thle-odoo, Mathieu Coutant, Pierre Pulinckx, defl, akha, Julien Launois (jula), Laetitia (ldau), Kadam Darji, Julien Piron, SebVrc
Odoo dependencies
odoo/odoo:
- web
- bus
Python dependencies
None
System dependencies
None
Required by
auth_timeout
Description
2FA Invite mail
===============
Allow the users to invite another user to use Two-Factor authentication
by sending an email to the target user. This email redirects them to:
- the users security settings if the user is internal.
- the portal security settings page if the user is not internal.
    

Code Analysis info_outline

Views touched (5)
XML IDNameModelTypeStatus
account_security_alert account_security_alert ir.ui.view qweb Inherits mail.account_security_alert
auth_totp_mail.res_users_view_form res.users.view.form.auth.totp.mail res.users form Inherits base.view_users_form_simple_modif
auth_totp_mail_form auth_totp_mail_form ir.ui.view qweb Inherits auth_totp.auth_totp_form
res_config_settings_view_form res.config.settings.view.form.inherit.auth_totp_mail_enforce res.config.settings form Inherits base_setup.res_config_settings_view_form
view_users_form res.users.view.form.inherit.auth.totp.mail res.users form Inherits auth_totp.view_totp_form
HTTP endpoints (2)
Route(s)HandlerAuthTypeMethodsFlags
/auth-timeout/send-totp-mail-code AuthTOTPMailController.send_totp_mail_code user jsonrpc ALL
(inherited route override) Home.web_totp inherited http ALL
Models touched (4)

New fields (0)

No new fields.

Public methods (1)
  • unlink(self)
    Notify users when trusted devices are removed from their account.

New fields (0)

No new fields.

Public methods (0)

No public methods.

New fields (2)
  • auth_totp_enforce Boolean
    string='Enforce two-factor authentication'
  • auth_totp_policy Selection
    config_parameter='auth_totp.policy' string='Two-factor authentication enforcing policy' args: [('employee_required', 'Employees only'), ('all_required', 'All users')]
Public methods (1)
  • get_values(self)
    @api.model

New fields (0)

No new fields.

Public methods (5)
  • action_open_my_account_settings(self)
  • action_totp_invite(self)
  • authenticate(self, credential, user_agent_env)
    Send an alert on new connection. - 2FA enabled -> only for new device - Not enabled -> no alert
  • get_totp_invite_url(self)
  • write(self, vals)

Loading…

Loading…

Loading…

Loading…

Loading…