Skip to content

Conversation

@theangryangel
Copy link
Member

Forward port of #214.

We've got this running on our production install so I'm reasonably happy it's OK. Again happy to learn/take comments, etc. :)

@theangryangel theangryangel mentioned this pull request Apr 23, 2021
17 tasks
@yvaucher
Copy link
Member

FTR we created this module to automatise the configuration of this module by environment:

https://github.com/OCA/server-env/pull/74/files

@yvaucher
Copy link
Member

@theangryangel I propesed you a PR to extend the configurations on signatures here:
GlodoUK#6

@yvaucher
Copy link
Member

@theangryangel beware my change is broken on the signatures I missed some self.sign

@yvaucher
Copy link
Member

@theangryangel feel free to remove my commit as it is unstable.

@OCA-git-bot
Copy link
Contributor

This PR has the approved label and has been created more than 5 days ago. It should therefore be ready to merge by a maintainer (or a PSC member if the concerned addon has no declared maintainer). 🤖

@houssine78
Copy link

@pedrobaeza this PR seems ready to be merged ! :)

Copy link
Member

@pedrobaeza pedrobaeza left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution.

Please preserve commit history following technical method explained in https://github.com/OCA/maintainer-tools/wiki/Migration-to-version-14.0.

Please squash migration commits as well.

@savijoki
Copy link

savijoki commented Sep 1, 2021

@theangryangel Hey, what's the situation with this PR, any estimation when this will merged?

Does the module make it possible for users to signup automatically if no user with matching attribute exist and Free sign up is enabled?

@theangryangel
Copy link
Member Author

@theangryangel Hey, what's the situation with this PR, any estimation when this will merged?

@savijoki no idea, I don't have the ability to merge into this repo. Ignoring the pre-commit issue (which is a 2 minute fix that I'll sort today), this is in the same state that the 13.0 was. You can see how long that took here.

If it helps we are running it in production direct from the branch, it should be relatively safe to do so.

Does the module make it possible for users to signup automatically if no user with matching attribute exist and Free sign up is enabled?

Currently no. In terms of user setup both the 13.0 and 14.0 ports follow how 12.0 was implemented.

It could certainly be added, but in my experience you'd need someone to go and fiddle with the user account to set the correct permissions for a new user anyway. Very few of our customers all run with the same group memberships 🤷

Copy link
Member

@bodedra bodedra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Functional review. 👍 works great on 14.0 (Enterprise)

Possible addition on this module: Allow to auto create users in Odoo if not present

"website": "https://github.com/OCA/server-auth",
"license": "AGPL-3",
"depends": ["base_setup"],
"external_dependencies": {"python": ["pysaml2"]},

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm wondering if it is saml2 that is used instead of pysaml2

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@houssine78
Copy link

Hi @pedrobaeza this PR is now ready to be merged. Thanks

@pedrobaeza pedrobaeza dismissed their stale review September 19, 2021 09:18

Formal requirements met

yvaucher and others added 17 commits September 20, 2021 09:31
The following line of code for 11.0:
 - https://github.com/odoo/odoo/blob/52d6f0e3ee90874fc93fec9cdff74ec71d3b991f/addons/auth_oauth/controllers/main.py#L69

is assigning the key "auth_link" for "list_providers" method.

The following template is expecting this key:
 - https://github.com/odoo/odoo/blob/52d6f0e3ee90874fc93fec9cdff74ec71d3b991f/addons/auth_oauth/views/auth_oauth_templates.xml#L5

So, it raise a KeyError compiling "template_auth_oauth_providers_N"

This change is fixing adding that expected key in order to avoid this KeyError
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: server-auth-11.0/server-auth-11.0-auth_saml
Translate-URL: https://translation.odoo-community.org/projects/server-auth-11-0/server-auth-11-0-auth_saml/
[FIX] dependencies
add requirement on lasso
- Default behavior is now to allow password and SAML together.
  Otherwise, users could keep getting their passwords removed without warning.
- General cleanup.
- Remove relations to field `password_crypt` because in v12 the
  `password` field is always encrypted instead.

Co-Authored-By: Alexandre Díaz <[email protected]>
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: server-auth-12.0/server-auth-12.0-auth_saml
Translate-URL: https://translation.odoo-community.org/projects/server-auth-12-0/server-auth-12-0-auth_saml/
@theangryangel theangryangel force-pushed the feat/14.0-mig-auth_saml branch from ed2f30f to 9f60a1a Compare September 20, 2021 08:34
@theangryangel
Copy link
Member Author

This branch needs to be rebased and fix pre-commit stuff.

Rebased, pre-commit manually run and pushed. Sorry, I thought I had done that weeks ago for some reason.

@houssine78
Copy link

Hi @pedrobaeza it has been rebased. I hope this time is the right one.

@pedrobaeza
Copy link
Member

/ocabot merge nobump

@OCA-git-bot
Copy link
Contributor

On my way to merge this fine PR!
Prepared branch 14.0-ocabot-merge-pr-268-by-pedrobaeza-bump-nobump, awaiting test results.

@OCA-git-bot OCA-git-bot merged commit e0431ce into OCA:14.0 Sep 24, 2021
@OCA-git-bot
Copy link
Contributor

Congratulations, your PR was merged at 0af0920. Thanks a lot for contributing to OCA. ❤️

@houssine78
Copy link

thanks @pedrobaeza !

@simahawk
Copy link
Contributor

FTR tests for this module are broken ATM #330

SiesslPhillip pushed a commit to grueneerde/OCA-server-auth that referenced this pull request Nov 20, 2024
Syncing from upstream OCA/server-auth (13.0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.