Monday, December 2, 2024
1 change · 18.0
Enhancements to existing features
Automated actions can now read incoming request headers and use secure digest checks when handling webhooks. This makes it easier for businesses to connect Odoo with third-party services while validating that requests are legitimate.
Original PR description
Before this commit, the code had no access to any request's headers nor could we use HMAC/Hashlib functions to authenticate and verify incoming webhook. This was a limitation in the basic flows that the feature is supposed to support. After this commit, we pass in the context a key "headers" that contains a copy of the request headers. We're also given the possibility to authenticate third-party requests by comparing digest. ### (Useless) context about this PR: This PR is based on kebeclibre's PR (commit 2d345a5) when request payload where added. It's also my first PR on an open-source project and I'm new to Python/programming, my apologise in advance if I did a mistake. I'm open to any feedback, many thanks! --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr