Daily updates from Odoo
Thursday, September 19, 2019
1 change
New functionality added to Odoo
Users can now create and manage API keys for secure access to Odoo integrations without using their main password. This improves security for automated connections and prepares the platform for stronger login protections such as two-factor authentication.
Original PR description
Pre-requisite for 2FA / TOTP. Actual API keys implementation is the third commit, the other two are improvements to make things possible or better: * ~~split the auth flows between interactive (interface / web client) and non-interactive (API), so API keys can be restricted to non-interactive auth flows~~ * fix invalidation of UID cache in non-interactive auth flows as the creation & removal of API keys would increase pressure on that working properly * actually implement API keys and user interface to them (though the user preferences / profile)