Xavier MorelandOlivier Dony
a9a6509713
New module for supporting two-factor authentication via time-base one-time-password (TOTP). Users (including portal users) can choose to enable two-factor auth in their user account settings, by scanning a QR code and adding it to an authenticator app, such as Google Auth, 1Password, etc. When two-factor is enabled, password-based non-interactive RPC is only possible by using API keys. Co-authored-by: Olivier Dony <odo@odoo.com>
26 lines
877 B
Python
26 lines
877 B
Python
{
|
|
'name': 'Two-Factor Authentication (TOTP)',
|
|
'description': """
|
|
Two-Factor Authentication (TOTP)
|
|
================================
|
|
Allows users to configure two-factor authentication on their user account
|
|
for extra security, using time-based one-time passwords (TOTP).
|
|
|
|
Once enabled, the user will need to enter a 6-digit code as provided
|
|
by their authenticator app before being granted access to the system.
|
|
All popular authenticator apps are supported.
|
|
|
|
Note: logically, two-factor prevents password-based RPC access for users
|
|
where it is enabled. In order to be able to execute RPC scripts, the user
|
|
can setup API keys to replace their main password.
|
|
""",
|
|
'depends': ['web'],
|
|
'category': 'Extra Tools',
|
|
'auto_install': True,
|
|
'data': [
|
|
'security/security.xml',
|
|
'views/user_preferences.xml',
|
|
'views/templates.xml',
|
|
],
|
|
}
|