Archana Vaghasiya
114f09ba98
[FIX] microsoft_account: accessing the url without any post data When a user tries to access the URL directly, at that time the value of dictionary `kw` is not available. So the error will be generated. Error : KeyError: `state` This commit will solve the above issue by raising the `BadRequest` if the value of dictionary `kw` does not available. sentry-4377121133 closes odoo/odoo#157720 X-original-commit: 382b64c2f14073cfff1a8ef9290b5c7834d52188 Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
30 lines
1.2 KiB
Python
30 lines
1.2 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
import json
|
|
from werkzeug.exceptions import BadRequest
|
|
|
|
from odoo import http
|
|
from odoo.http import request
|
|
|
|
|
|
class MicrosoftAuth(http.Controller):
|
|
|
|
@http.route('/microsoft_account/authentication', type='http', auth="public")
|
|
def oauth2callback(self, **kw):
|
|
""" This route/function is called by Microsoft when user Accept/Refuse the consent of Microsoft """
|
|
state = json.loads(kw.get('state', '{}'))
|
|
service = state.get('s')
|
|
url_return = state.get('f')
|
|
if (not service or (kw.get('code') and not url_return)):
|
|
raise BadRequest()
|
|
|
|
if kw.get('code'):
|
|
access_token, refresh_token, ttl = request.env['microsoft.service']._get_microsoft_tokens(kw['code'], service)
|
|
request.env.user._set_microsoft_auth_tokens(access_token, refresh_token, ttl)
|
|
return request.redirect(url_return)
|
|
elif kw.get('error'):
|
|
return request.redirect("%s%s%s" % (url_return, "?error=", kw['error']))
|
|
else:
|
|
return request.redirect("%s%s" % (url_return, "?error=Unknown_error"))
|