Saturday, February 26, 2022
1 change · master
Resolved issues and error corrections
This fixes a login problem that prevented users from completing two-step authentication in Odoo's Android and iOS mobile apps. It restores the expected mobile app login flow so users can authenticate without requiring an app update, which is especially important for iOS users affected by app review delays.
Original PR description
Since PR odoo/odoo#78857 , the TOTP authentication support is broken when used inside either Android or iOS mobile apps. Due to our inability to update the iOS app (following review from Apple), this commit aims at restoring the bare minimum requirements to make the current mobile apps (specially iOS but also Android) authentication workflow works. As extended explanation: - Set-Cookie header is expected to be sent even when session_id hasn't changed (iOS specific). - Successful credentials check on `/web/session/authenticate` expect a successful response with a result containing `uid` set to `null` to mark the need of an additional totp handshake (both platforms).