Once an IoT device is connected to a database, password resets can no longer be triggered directly from the local network. This improves security by requiring resets to be managed through the trusted database connection instead.

To increase security on the local network, we
prevent password reset from the local network
once a db is connected, and allow it only
from db through ws.

see odoo/enterprise#128620

The IoT Box password reset process now uses a more restricted communication channel instead of a publicly accessible route. This reduces the risk of unauthorized password resets and strengthens device security.

In order to improve security on the IoT Box
we disable the possibility to reset the
system password using a public controller.

We now restrict it to websocket.

see odoo/odoo#283598