Skip to main content

Implementation of a mechanism to share secrets

Project description

Beta License: AGPL-3 OCA/server-auth Translate me on Weblate Try me on Runboat

This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.

Share

This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn’t be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.

Table of contents

Known issues / Roadmap

  • Secure the download of the encrypted file behind a challenge/response

Bug Tracker

Bugs are tracked on GitHub Issues. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us to smash it by providing a detailed and welcomed feedback.

Do not contact contributors directly about support or help with technical issues.

Credits

Authors

  • initOS GmbH

Contributors

Maintainers

This module is maintained by the OCA.

Odoo Community Association

OCA, or the Odoo Community Association, is a nonprofit organization whose mission is to support the collaborative development of Odoo features and promote its widespread use.

This module is part of the OCA/server-auth project on GitHub.

You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

odoo_addon_vault_share-16.0.1.0.1.2-py3-none-any.whl (47.8 kB view details)

Uploaded Python 3

File details

Details for the file odoo_addon_vault_share-16.0.1.0.1.2-py3-none-any.whl.

File metadata

File hashes

Hashes for odoo_addon_vault_share-16.0.1.0.1.2-py3-none-any.whl
Algorithm Hash digest
SHA256 12358992af5d8d6507da1d80c0743e21c9bf100625a9ff23783276288fd12004
MD5 2d34831646cae12ca315372e8f54571a
BLAKE2b-256 519d66a33645f90a08c8b3f1ef4d809a8e108f2677d780dd9685dae32fbc1ca6

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page