You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: auth_api_key/readme/DESCRIPTION.md
+7Lines changed: 7 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,3 +10,10 @@ from known sources.
10
10
11
11
For unknown sources, it is a good practice to filter out this header at
12
12
proxy level.
13
+
14
+
Odoo allows users to authenticate `XMLRPC/JSONRPC` calls using their API key instead of a password by native API keys (`res.users.apikey`). However, `auth_api_key` has some special features of its own such as:
15
+
- API keys remain usable even when the user is inactive, if enabled via settings (e.g., for system users in a shopinvader case).
16
+
- Supports dual authentication via Basic Auth and API_KEY in separate HTTP headers.
17
+
- Admins can manage API keys for all users
18
+
19
+
Given these advantages, particularly in use case like system user authentication, we have decided to keep the `auth_api_key` module
0 commit comments