Skip to main content

Password vault integration in Odoo

Project description

Beta License: AGPL-3 OCA/server-auth Translate me on Weblate Try me on Runboat

This module implements a vault for secrets and files using end-to-end-encryption. The encryption and decryption happens in the browser using a vault specific shared master key. The master keys are encrypted using asymmetrically. For this the user has to enter a second password on the first login or if he needs to access data in a vault. The asymmetric keys are stored for a certain time in the browser storage.

The server can never access the secrets with the information available. Only people registered in the vault can decrypt or encrypt values in a vault. The meta data isn’t encrypted to be able to search/filter for entries more easily.

This modules requires a secure context for the browser to work properly.

The vault-recovery project focuses on disaster recovery in case of an incident to recover secrets from old database backups or old exports.

Table of contents

Known issues / Roadmap

  • Field and file history for restoration

  • Send secrets directly to an inbox within Odoo

  • Import improvement

  • Support challenge-response/FIDO2

  • Support for argon2 and kdbx v4

  • When changing an entry from one vault to another existing vault, the values added on this entry cannot be accessed, so the field vault is going to be readonly when it is defined.

    If you want to move entries between vaults you can use the export -> import option.

Bug Tracker

Bugs are tracked on GitHub Issues. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us to smash it by providing a detailed and welcomed feedback.

Do not contact contributors directly about support or help with technical issues.

Credits

Authors

  • initOS GmbH

Contributors

Maintainers

This module is maintained by the OCA.

Odoo Community Association

OCA, or the Odoo Community Association, is a nonprofit organization whose mission is to support the collaborative development of Odoo features and promote its widespread use.

This module is part of the OCA/server-auth project on GitHub.

You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

odoo_addon_vault-15.0.2.1.0.4-py3-none-any.whl (146.1 kB view details)

Uploaded Python 3

File details

Details for the file odoo_addon_vault-15.0.2.1.0.4-py3-none-any.whl.

File metadata

File hashes

Hashes for odoo_addon_vault-15.0.2.1.0.4-py3-none-any.whl
Algorithm Hash digest
SHA256 a231f27989d58045a7946b58059541849711f0ef6147346a7c6c8d71f45a7f4d
MD5 b4558c579d015ea75cdb6215dbfcd3fd
BLAKE2b-256 b25518893c00fa55f0c0cd0464294672b0d0f12d92d6a78323504dd7865bc62c

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page