Maintainers
+Maintainers
This module is maintained by the OCA.
@@ -600,5 +605,6 @@ 
| Automatically redirect to the OAuth provider for login
[auth_oauth_multi_token](auth_oauth_multi_token/) | 17.0.1.1.1 | | Allow multiple connection with the same OAuth account
-[auth_oidc](auth_oidc/) | 17.0.1.1.0 | | Allow users to login through OpenID Connect Provider
+[auth_oidc](auth_oidc/) | 17.0.1.2.0 | | Allow users to login through OpenID Connect Provider
[auth_saml](auth_saml/) | 17.0.1.0.3 | 
| SAML2 Authentication
[auth_session_timeout](auth_session_timeout/) | 17.0.1.0.1 | | This module disable all inactive sessions since a given delay
[auth_signup_verify_email](auth_signup_verify_email/) | 17.0.1.0.0 | | Force uninvited users to use a good email for signup
diff --git a/auth_oidc/README.rst b/auth_oidc/README.rst
index aaae547e08..1fb2c42059 100644
--- a/auth_oidc/README.rst
+++ b/auth_oidc/README.rst
@@ -1,3 +1,7 @@
+.. image:: https://odoo-community.org/readme-banner-image
+ :target: https://odoo-community.org/get-involved?utm_source=readme
+ :alt: Odoo Community Association
+
=============================
Authentication OpenID Connect
=============================
@@ -7,13 +11,13 @@ Authentication OpenID Connect
!! This file is generated by oca-gen-addon-readme !!
!! changes will be overwritten. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
- !! source digest: sha256:3096227b4ab79c036812a7fefcac69f61356e55ece061ec82bd3b51c54fce263
+ !! source digest: sha256:9fb171c24622a7ada2230b91cec8ce45289545f3124d9e18492e260023d6410f
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
:target: https://odoo-community.org/page/development-status
:alt: Beta
-.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+.. |badge2| image:: https://img.shields.io/badge/license-AGPL--3-blue.png
:target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
:alt: License: AGPL-3
.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
@@ -75,23 +79,23 @@ Single tenant provider limits the access to user of your tenant, while
Multitenants allow access for all AzureAD users, so user of foreign
companies can use their AzureAD login without an guest account.
-- Provider Name: Azure AD Single Tenant
-- Client ID: Application (client) id
-- Client Secret: Client secret
-- Allowed: yes
+- Provider Name: Azure AD Single Tenant
+- Client ID: Application (client) id
+- Client Secret: Client secret
+- Allowed: yes
or
-- Provider Name: Azure AD Multitenant
-- Client ID: Application (client) id
-- Client Secret: Client secret
-- Allowed: yes
-- replace {tenant_id} in urls with your Azure tenant id
+- Provider Name: Azure AD Multitenant
+- Client ID: Application (client) id
+- Client Secret: Client secret
+- Allowed: yes
+- replace {tenant_id} in urls with your Azure tenant id
|image2|
-- Auth Link Params: Add {'prompt':'select_account'} to the auth link to
- get the account selection screen |image3|
+- Auth Link Params: Add {'prompt':'select_account'} to the auth link to
+ get the account selection screen |image3|
Setup for Keycloak
------------------
@@ -109,22 +113,22 @@ In Keycloak:
In Odoo, create a new Oauth Provider with the following parameters:
-- Provider name: Keycloak (or any name you like that identify your
- keycloak provider)
-- Auth Flow: OpenID Connect (authorization code flow)
-- Client ID: the same Client ID you entered when configuring the client
- in Keycloak
-- Client Secret: found in keycloak on the client Credentials tab
-- Allowed: yes
-- Body: the link text to appear on the login page, such as Login with
- Keycloak
-- Scope: openid email
-- Authentication URL: The "authorization_endpoint" URL found in the
- OpenID Endpoint Configuration of your Keycloak realm
-- Token URL: The "token_endpoint" URL found in the OpenID Endpoint
- Configuration of your Keycloak realm
-- JWKS URL: The "jwks_uri" URL found in the OpenID Endpoint
- Configuration of your Keycloak realm
+- Provider name: Keycloak (or any name you like that identify your
+ keycloak provider)
+- Auth Flow: OpenID Connect (authorization code flow)
+- Client ID: the same Client ID you entered when configuring the client
+ in Keycloak
+- Client Secret: found in keycloak on the client Credentials tab
+- Allowed: yes
+- Body: the link text to appear on the login page, such as Login with
+ Keycloak
+- Scope: openid email
+- Authentication URL: The "authorization_endpoint" URL found in the
+ OpenID Endpoint Configuration of your Keycloak realm
+- Token URL: The "token_endpoint" URL found in the OpenID Endpoint
+ Configuration of your Keycloak realm
+- JWKS URL: The "jwks_uri" URL found in the OpenID Endpoint
+ Configuration of your Keycloak realm
.. |image| image:: https://raw.githubusercontent.com/OCA/server-auth/17.0/auth_oidc/static/description/oauth-microsoft_azure-api_permissions.png
.. |image1| image:: https://raw.githubusercontent.com/OCA/server-auth/17.0/auth_oidc/static/description/oauth-microsoft_azure-optional_claims.png
@@ -139,10 +143,10 @@ On the login page, click on the authentication provider you configured.
Known issues / Roadmap
======================
-- When going to the login screen, check for a existing token and do a
- direct login without the clicking on the SSO link
-- When doing a logout an extra option to also logout at the SSO
- provider.
+- When going to the login screen, check for a existing token and do a
+ direct login without the clicking on the SSO link
+- When doing a logout an extra option to also logout at the SSO
+ provider.
Changelog
=========
@@ -150,47 +154,47 @@ Changelog
17.0.1.0.0 2024-03-20
---------------------
-- Odoo 17 migration
+- Odoo 17 migration
16.0.1.1.0 2024-02-28
---------------------
-- Forward port OpenID Connect fixes from 15.0 to 16.0
+- Forward port OpenID Connect fixes from 15.0 to 16.0
16.0.1.0.2 2023-11-16
---------------------
-- Readme link updates
+- Readme link updates
16.0.1.0.1 2023-10-09
---------------------
-- Add AzureAD code flow provider
+- Add AzureAD code flow provider
16.0.1.0.0 2023-01-27
---------------------
-- Odoo 16 migration
+- Odoo 16 migration
15.0.1.0.0 2023-01-06
---------------------
-- Odoo 15 migration
+- Odoo 15 migration
14.0.1.0.0 2021-12-10
---------------------
-- Odoo 14 migration
+- Odoo 14 migration
13.0.1.0.0 2020-04-10
---------------------
-- Odoo 13 migration, add authorization code flow.
+- Odoo 13 migration, add authorization code flow.
10.0.1.0.0 2018-10-05
---------------------
-- Initial implementation
+- Initial implementation
Bug Tracker
===========
@@ -215,10 +219,10 @@ Authors
Contributors
------------
-- Alexandre Fayolle 
This module allows users to login through an OpenID Connect provider using the authorization code flow or implicit flow.
Note the implicit flow is not recommended because it exposes access @@ -407,15 +412,15 @@
This module depends on the python-jose library, not to be confused with jose which is also available on PyPI.
Example configuration with OpenID Connect authorization code flow.
Example configuration with OpenID Connect authorization code flow.
In Keycloak:
Bugs are tracked on GitHub Issues. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us to smash it by providing a detailed and welcomed @@ -566,9 +571,9 @@
Do not contact contributors directly about support or help with technical issues.