TIP: You can type at any time to perform a new search.

Security findings

Repository
odoo/odoo · module folder
Module version
2.0
Category
Accounting/Payment Providers
Folder size
0.9 MB
License
LGPL-3
Application
No
Auto-installable
No
Website
None
Last tracking update
2026-10-05 00:19:50
Authors
Odoo S.A.
Maintainers
Odoo S.A.
Committers
Odoo Translation Bot, Christophe Matthieu, Victor Feyens, Andrea Grazioso (agr-odoo), Tiffany Chang (tic), Antoine Vandevenne (anv), Valentin Chevalier, Pedram (PEBR), Levi Siuzdak (sile), Dylan Kiss (dyki), Valeriya(vchu), Lina (liew), dija-odoo, Pierre Lamotte (pila), Corentin Heinix (cohe), Valeriya (vchu), Shrey Mehta, Carmine, Mahdi Alijani (malj), anko-odoo, Krzysztof Magusiak (krma), Florian Malfroid, Tudor-Calin Panzaru (tupan), Waleed Elgamal, Lionel Piraux (lipi), Ravij Parikh, Mazen, Khaj-odoo, khaj-odoo, chpa-odoo, mekot-odoo
Odoo dependencies
Python dependencies
None
System dependencies
None
Required by
pos_stripe
Description
 

Code Analysis info_outline

Views touched (6)
XML IDNameModelTypeStatus
express_checkout express_checkout ir.ui.view qweb Inherits payment.express_checkout
express_checkout_form express_checkout_form ir.ui.view qweb New
inline_form inline_form ir.ui.view qweb New
payment_form payment_form ir.ui.view qweb Inherits payment.form
payment_provider_form Stripe Provider Form payment.provider form Inherits payment.payment_provider_form
sdk_assets sdk_assets ir.ui.view qweb New
HTTP endpoints (6)
Route(s)HandlerAuthTypeMethodsFlags
(inherited route override) OnboardingController.stripe_refresh_onboarding user http GET
(inherited route override) OnboardingController.stripe_return_from_onboarding user http GET
/payment/stripe/client_secret StripeController.stripe_acss_client_secret_route public jsonrpc ALL sudo
(inherited route override) StripeController.stripe_apple_pay_get_domain_association_file public http ALL csrf off
(inherited route override) StripeController.stripe_return public http GET sudo
(inherited route override) StripeController.stripe_webhook public http POST csrf off sudo
Models touched (3)

New fields (4)
  • code Selection
    ondelete={'stripe': 'set default'} selection_add=[('stripe', 'Stripe')]
  • stripe_publishable_key Char
    copy=False help='The key solely used to identify the account with Stripe' required_if_provider='stripe' string='Publishable Key'
  • stripe_secret_key Char
    copy=False groups='base.group_system' required_if_provider='stripe' string='Secret Key'
  • stripe_webhook_secret Char
    copy=False groups='base.group_system' help='If a webhook is enabled on your Stripe account, this signing secret must be set to authenticate the messages sent from Stripe to Odoo.' string='Webhook Signing Secret'
Public methods (3)
  • action_start_onboarding(self, menu_id=None)
    Override of `payment` to create a Stripe Connect account and redirect the user to the next onboarding step. If the provider is already live, close the current window. Otherwise, generate a Stripe Connect onboarding link and redirect the user to it. If provided, the menu id is included in the URL the user is redirected to when coming back on Odoo after the onboarding. If the link generation failed, redirect the user to the provider form. Note: This method serves as a hook for modules that would fully implement Stripe Connect. Note: `self.ensure_one()` :param int menu_id: The menu from which the onboarding is started, as an `ir.ui.menu` id. :return: The next step action :rtype: dict :raise RedirectWarning: If the company's country is not supported.
  • action_stripe_create_webhook(self)
    Create a webhook and return a feedback notification. Note: This action only works for instances using a public URL :return: The feedback notification :rtype: dict
  • action_stripe_verify_apple_pay_domain(self)
    Verify the web domain with Stripe to enable Apple Pay. The domain is sent to Stripe API for them to verify that it is valid by making a request to the `/.well-known/apple-developer-merchantid-domain-association` route. If the domain is valid, it is registered to use with Apple Pay. See https://stripe.com/docs/stripe-js/elements/payment-request-button#verifying-your-domain-with-apple-pay. :returns: A client action with a success message. :rtype: dict :raise UserError: If test keys are used to send the request.

New fields (2)
  • stripe_mandate Char
    readonly=True string='Stripe Mandate'
  • stripe_payment_method Char
    readonly=True string='Stripe Payment Method ID'
Public methods (0)

No public methods.

New fields (0)

No new fields.

Public methods (0)

No public methods.

Loading…

Loading…

Loading…

Loading…

Loading…

Loading…

Loading…

Loading…

Loading…

Loading…