Xavier Morel
e0345512d9
I apparently missed this case in #88871: Google's legacy flow (response_type=token) explicitly rejects a `nonce` parameter being passed in the authentication request. The nonce parameter is only accepted for an OIDC-conformant implicit flow request (aka `response_type=token id_token`). The specific endpoint doesn't seem to have any bearing on this, v1 and v2 authentication endpoints result in the same behavior. Drawback: Okta isn't supported anymore, as it requires the nonce, no if, no but, even on "legacy" auth requests, possibly others. However since these already weren't supported that's considered less of an issue than possibly breaking compatibility with existing IDP. Rejected alternative: adding `id_token` to the `response_type` to come closer to OIDC-conformant request, however that was considered too risky: Odoo clients could be using legacy IDP which also reject the nonce parameter but don't have a magic "OIDC conformant" trigger. closes odoo/odoo#91500 X-original-commit: 1fd738d9826f9bdfe8deddd5ef81dcb9757e8988 Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com> Signed-off-by: Olivier Dony <odo@odoo.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials