OAuth Multi Token

This module changes how OAuth sign-in works so that one account can stay connected from more than one device at the same time. Each successful OAuth login creates a separate token record linked to the user, instead of replacing the previous one.

On the user form (Security tab) you get an "OAuth Tokens" section showing the list of active tokens with their creation date, a field for the "Max Number of Simultaneous Connections" (default 10), and a "Clear Tokens" button. The token list and the maximum setting are only visible for your own user; the token list is restricted to system administrators.

Business rules added by the code: - When a new token is created, if the user already has more tokens than the allowed maximum, the oldest ones are automatically removed. - "Clear Tokens" removes all tokens of the selected user(s) and generates a new master token; only an ERP manager or the user themselves may do this. - During login, the system first tries the normal authentication; if that fails, it checks whether the supplied token matches one of the stored multi-tokens for the current user and, if so, grants access.

It touches res.users and adds the new model auth.oauth.multi.token. No new menus are added; everything appears inside the existing user form.