Daily updates from Odoo
Thursday, January 25, 2024
1 change
Security fixes and vulnerability patches
This update strengthens the PEPPOL registration process by adding expiration to SMS verification codes and preventing users from registering when they already have an active registration elsewhere. These changes improve security by ensuring codes don't remain valid indefinitely and reduce support burden by catching duplicate registrations upfront rather than requiring manual intervention.
Original PR description
- Currently, once the SMS code has been created, it's valid forever, which is not very secure. Verification codes should expire after some time and users should have an opportunity to request a new one after some time elapses instead of having to cancel the registration and retry. - We've had several cases where users tried to register while having an active registration somewhere else. In that case, we cannot register them and we have to reach out to the user asking to deregister from the other service. It is better to catch that instantly. task-3677877 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr Forward-Port-Of: odoo/odoo#149425