std-odoo
e9f712278d
* fetchmail, google_gmail, fetchmail_gmail Purpose ======= Improve the usability of the outlook modules. Specifications ============== Remove the checkbox "Use Outlook" and instead use the smtp_authentication and the server_type, to be consistent with Gmail. Hide the password field for Outlook / Gmail mail servers. Add constraints on the outgoing mail server to force the user to use the right configuration (e.g. the from_filter, so the sending does not fail). Add an option in the mail module to install Outlook. Show a message for the outgoing mail servers to explain each authentication methods. Task-2811567 Part-of: odoo/odoo#88215
203 lines
8.5 KiB
Python
203 lines
8.5 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from datetime import datetime
|
|
import json
|
|
import logging
|
|
|
|
import requests
|
|
from werkzeug import urls
|
|
|
|
from odoo import api, fields, models, _
|
|
from odoo.exceptions import UserError
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
TIMEOUT = 20
|
|
|
|
GOOGLE_AUTH_ENDPOINT = 'https://accounts.google.com/o/oauth2/auth'
|
|
GOOGLE_TOKEN_ENDPOINT = 'https://accounts.google.com/o/oauth2/token'
|
|
GOOGLE_API_BASE_URL = 'https://www.googleapis.com'
|
|
|
|
|
|
class GoogleService(models.AbstractModel):
|
|
_name = 'google.service'
|
|
_description = 'Google Service'
|
|
|
|
@api.model
|
|
def generate_refresh_token(self, service, authorization_code):
|
|
""" Call Google API to refresh the token, with the given authorization code
|
|
:param service : the name of the google service to actualize
|
|
:param authorization_code : the code to exchange against the new refresh token
|
|
:returns the new refresh token
|
|
"""
|
|
Parameters = self.env['ir.config_parameter'].sudo()
|
|
client_id = Parameters.get_param('google_%s_client_id' % service)
|
|
client_secret = Parameters.get_param('google_%s_client_secret' % service)
|
|
redirect_uri = Parameters.get_param('google_redirect_uri')
|
|
|
|
# Get the Refresh Token From Google And store it in ir.config_parameter
|
|
headers = {"Content-type": "application/x-www-form-urlencoded"}
|
|
data = {
|
|
'code': authorization_code,
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'redirect_uri': redirect_uri,
|
|
'grant_type': "authorization_code"
|
|
}
|
|
try:
|
|
req = requests.post(GOOGLE_TOKEN_ENDPOINT, data=data, headers=headers, timeout=TIMEOUT)
|
|
req.raise_for_status()
|
|
content = req.json()
|
|
except IOError:
|
|
error_msg = _("Something went wrong during your token generation. Maybe your Authorization Code is invalid or already expired")
|
|
raise self.env['res.config.settings'].get_config_warning(error_msg)
|
|
|
|
return content.get('refresh_token')
|
|
|
|
@api.model
|
|
def _get_google_token_uri(self, service, scope):
|
|
get_param = self.env['ir.config_parameter'].sudo().get_param
|
|
encoded_params = urls.url_encode({
|
|
'scope': scope,
|
|
'redirect_uri': get_param('google_redirect_uri'),
|
|
'client_id': get_param('google_%s_client_id' % service),
|
|
'response_type': 'code',
|
|
})
|
|
return '%s?%s' % (GOOGLE_AUTH_ENDPOINT, encoded_params)
|
|
|
|
@api.model
|
|
def _get_authorize_uri(self, from_url, service, scope=False):
|
|
""" This method return the url needed to allow this instance of Odoo to access to the scope
|
|
of gmail specified as parameters
|
|
"""
|
|
state = {
|
|
'd': self.env.cr.dbname,
|
|
's': service,
|
|
'f': from_url
|
|
}
|
|
|
|
get_param = self.env['ir.config_parameter'].sudo().get_param
|
|
base_url = get_param('web.base.url', default='http://www.odoo.com?NoBaseUrl')
|
|
client_id = get_param('google_%s_client_id' % (service,), default=False)
|
|
|
|
encoded_params = urls.url_encode({
|
|
'response_type': 'code',
|
|
'client_id': client_id,
|
|
'state': json.dumps(state),
|
|
'scope': scope or '%s/auth/%s' % (GOOGLE_API_BASE_URL, service), # If no scope is passed, we use service by default to get a default scope
|
|
'redirect_uri': base_url + '/google_account/authentication',
|
|
'approval_prompt': 'force',
|
|
'access_type': 'offline'
|
|
})
|
|
return "%s?%s" % (GOOGLE_AUTH_ENDPOINT, encoded_params)
|
|
|
|
@api.model
|
|
def _get_google_tokens(self, authorize_code, service):
|
|
""" Call Google API to exchange authorization code against token, with POST request, to
|
|
not be redirected.
|
|
"""
|
|
get_param = self.env['ir.config_parameter'].sudo().get_param
|
|
base_url = get_param('web.base.url', default='http://www.odoo.com?NoBaseUrl')
|
|
client_id = get_param('google_%s_client_id' % (service,), default=False)
|
|
client_secret = get_param('google_%s_client_secret' % (service,), default=False)
|
|
|
|
headers = {"content-type": "application/x-www-form-urlencoded"}
|
|
data = {
|
|
'code': authorize_code,
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'grant_type': 'authorization_code',
|
|
'redirect_uri': base_url + '/google_account/authentication'
|
|
}
|
|
try:
|
|
dummy, response, dummy = self._do_request(GOOGLE_TOKEN_ENDPOINT, params=data, headers=headers, method='POST', preuri='')
|
|
access_token = response.get('access_token')
|
|
refresh_token = response.get('refresh_token')
|
|
ttl = response.get('expires_in')
|
|
return access_token, refresh_token, ttl
|
|
except requests.HTTPError:
|
|
error_msg = _("Something went wrong during your token generation. Maybe your Authorization Code is invalid")
|
|
raise self.env['res.config.settings'].get_config_warning(error_msg)
|
|
|
|
@api.model
|
|
def _get_access_token(self, refresh_token, service, scope):
|
|
"""Fetch the access token thanks to the refresh token."""
|
|
get_param = self.env['ir.config_parameter'].sudo().get_param
|
|
client_id = get_param('google_%s_client_id' % service, default=False)
|
|
client_secret = get_param('google_%s_client_secret' % service, default=False)
|
|
|
|
if not client_id or not client_secret:
|
|
raise UserError(_('Google %s is not yet configured.', service.title()))
|
|
|
|
if not refresh_token:
|
|
raise UserError(_('Your Google account is not connected.'))
|
|
|
|
try:
|
|
result = requests.post(
|
|
GOOGLE_TOKEN_ENDPOINT,
|
|
data={
|
|
'client_id': client_id,
|
|
'client_secret': client_secret,
|
|
'refresh_token': refresh_token,
|
|
'grant_type': 'refresh_token',
|
|
'scope': scope,
|
|
},
|
|
headers={'Content-type': 'application/x-www-form-urlencoded'},
|
|
timeout=TIMEOUT,
|
|
)
|
|
result.raise_for_status()
|
|
except requests.HTTPError:
|
|
raise UserError(
|
|
_('Something went wrong during the token generation. Please request again an authorization code.')
|
|
)
|
|
|
|
json_result = result.json()
|
|
|
|
return json_result.get('access_token'), json_result.get('expires_in')
|
|
|
|
@api.model
|
|
def _do_request(self, uri, params=None, headers=None, method='POST', preuri="https://www.googleapis.com", timeout=TIMEOUT):
|
|
""" Execute the request to Google API. Return a tuple ('HTTP_CODE', 'HTTP_RESPONSE')
|
|
:param uri : the url to contact
|
|
:param params : dict or already encoded parameters for the request to make
|
|
:param headers : headers of request
|
|
:param method : the method to use to make the request
|
|
:param preuri : pre url to prepend to param uri.
|
|
"""
|
|
if params is None:
|
|
params = {}
|
|
if headers is None:
|
|
headers = {}
|
|
|
|
_logger.debug("Uri: %s - Type : %s - Headers: %s - Params : %s !", uri, method, headers, params)
|
|
|
|
ask_time = fields.Datetime.now()
|
|
try:
|
|
if method.upper() in ('GET', 'DELETE'):
|
|
res = requests.request(method.lower(), preuri + uri, params=params, timeout=timeout)
|
|
elif method.upper() in ('POST', 'PATCH', 'PUT'):
|
|
res = requests.request(method.lower(), preuri + uri, data=params, headers=headers, timeout=timeout)
|
|
else:
|
|
raise Exception(_('Method not supported [%s] not in [GET, POST, PUT, PATCH or DELETE]!') % (method))
|
|
res.raise_for_status()
|
|
status = res.status_code
|
|
|
|
if int(status) == 204: # Page not found, no response
|
|
response = False
|
|
else:
|
|
response = res.json()
|
|
|
|
try:
|
|
ask_time = datetime.strptime(res.headers.get('date', ''), "%a, %d %b %Y %H:%M:%S %Z")
|
|
except ValueError:
|
|
pass
|
|
except requests.HTTPError as error:
|
|
if error.response.status_code in (204, 404):
|
|
status = error.response.status_code
|
|
response = ""
|
|
else:
|
|
_logger.exception("Bad google request : %s !", error.response.content)
|
|
raise error
|
|
return (status, response, ask_time)
|