summaryrefslogtreecommitdiff
path: root/odoo/http.py
diff options
context:
space:
mode:
authorXavier Morel <xmo@odoo.com>2019-06-05 12:45:16 +0000
committerOlivier Dony <odo@odoo.com>2020-08-14 23:06:24 +0000
commita9a65097132b53813991c9ce61c878ab3f302f53 (patch)
tree6c0d2a4a44f3428028f85e8df3305bd00ddd4be7 /odoo/http.py
parent63e38dad8de9d59edc2b75433b4e3f761eda0f3c (diff)
[ADD] auth_totp
New module for supporting two-factor authentication via time-base one-time-password (TOTP). Users (including portal users) can choose to enable two-factor auth in their user account settings, by scanning a QR code and adding it to an authenticator app, such as Google Auth, 1Password, etc. When two-factor is enabled, password-based non-interactive RPC is only possible by using API keys. Co-authored-by: Olivier Dony <odo@odoo.com>
Diffstat (limited to 'odoo/http.py')
-rw-r--r--odoo/http.py7
1 files changed, 3 insertions, 4 deletions
diff --git a/odoo/http.py b/odoo/http.py
index d025e7fac31..b794dce36f8 100644
--- a/odoo/http.py
+++ b/odoo/http.py
@@ -977,10 +977,9 @@ class OpenERPSession(sessions.Session):
"""
Authenticate the current user with the given db, login and
password. If successful, store the authentication parameters in the
- current session and request.
-
- :param uid: If not None, that user id will be used instead the login
- to authenticate the user.
+ current session and request, unless multi-factor-authentication
+ is activated. In that case, that last part will be done by
+ :ref:`finalize`.
"""
wsgienv = request.httprequest.environ