Skip to content

Commit 55330d3

Browse files
committed
[UDP] auth_api_key: Update description for reason to keep this module
1 parent 4f824b0 commit 55330d3

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

auth_api_key/readme/DESCRIPTION.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,3 +10,10 @@ from known sources.
1010

1111
For unknown sources, it is a good practice to filter out this header at
1212
proxy level.
13+
14+
Odoo allows users to authenticate `XMLRPC/JSONRPC` calls using their API key instead of a password by native API keys (`res.users.apikey`). However, `auth_api_key` has some special features of its own such as:
15+
- API keys remain usable even when the user is inactive, if enabled via settings (e.g., for system users in a shopinvader case).
16+
- Supports dual authentication via Basic Auth and API_KEY in separate HTTP headers.
17+
- Admins can manage API keys for all users
18+
19+
Given these advantages, particularly in use case like system user authentication, we have decided to keep the `auth_api_key` module

0 commit comments

Comments
 (0)