Tuesday, June 11, 2024
1 change · 17.0
New functionality added to Odoo
Odoo now has an initial passkey sign-in option using WebAuthn, allowing users to authenticate without relying only on usernames and passwords. This improves account protection with phishing-resistant authentication, while some multi-factor authentication flows remain limited until future authentication improvements are completed.
Original PR description
**NEW PR** Please refer to: https://github.com/odoo/odoo/pull/168892 Passkeys are a new authentication method which bypass the traditional username and password combination. Instead it uses the webauthn protocol in order to authenticate the user. This is a phishing resistant and more secure method of authentication. This commit adds the initial implementation of passkeys. There were still some restrictions due to auth_totp and identitycheck not supporting multiple factors. The goal for the future is to redo the way authentication is done in Odoo. Task-3663657