콘텐츠로 건너뛰기
메뉴
커뮤니티에 참여하려면 회원 가입을 하시기 바랍니다.
신고된 질문입니다

Hello,

I have created a Android Mobile app for pushing some data in my database. Now before pushing the data I want the user to login through the credentials he use to login in odoo. I can get the email/login field but there is a problem with password as odoo save the encrypted form of password. So I have created a separate field in res.users for a mobile application password. 

That is not supposed to be ethical as I have access to read and view their passwords in database. So is there a way that I can make the user login with the same username password in mobile app with which he login his odoo account?

아바타
취소
베스트 답변

Hi Mian,

    You can compare the encrypted password using the CryptContext package in python. So you can ask the user to enter his Odoo password, then you can compare it with encrypted password stored in 'res.users'.


from passlib.context import CryptContext
compare_password = CryptContext(['pbkdf2_sha512']).verify(password, password_crypt)
if compare_password:
    print("Login Approved")
else:
    print("Invalid username/password")

Hope this helps you!

아바타
취소
베스트 답변

Hi,

You can do the authentication from the mobile app like this,

request = urllib2.Request(
server_url+'/web/session/authenticate',
json.dumps({
'jsonrpc': '2.0',
'params': {
'db': db,
'login': user,
'password': password,
},
}),
{'Content-type': 'application/json'})
result = urllib2.urlopen(request).read()
result = json.loads(result)


Then in the result you will get the session_id if the authentication is success. You can use this session_id as authentication for the database operation.

Thanks

아바타
취소
베스트 답변

I think you just need to refer to the origin code of the odoo login function,  use the same encrypted method to completed the login process, there are not any differents I think.

아바타
취소
관련 게시물 답글 화면 활동
1
11월 23
2288
0
7월 20
3458
0
9월 18
3260
0
10월 17
9999
2
7월 24
10308