Reputation: 775
I am new in Odoo, and I don't have much knowledge of securities. I am reading about the authentication and authorization of OAuth and OpenID Connect for APIs. I like to implement some type of security in my Odoo API or know what type of security Odoo implements for its API.
I look in the Odoo documentation but I can't find what kind of authentication security Odoo implements, I only found that it implements the XMLRPC protocol.
I would like how to implement security in the Odoo API.
Upvotes: 1
Views: 287
Reputation: 3959
From Odoo docs:
The authentication itself is done through the
authenticate
function and returns a user identifier (uid
) used in authenticated calls instead of the login.Calling methods
The second endpoint is
xmlrpc/2/object
, is used to call methods of odoo models via theexecute_kw
RPC function. Each call toexecute_kw
takes the following parameters: the database to use, a string the user id (retrieved through authenticate), an integer the user’s password, a string ...
Translation: they do not implement an industry-standard protocol such as OpenID Connect for authorizing API calls .
Upvotes: 1