OdooWiki OCA HUB

Auth OAuth ROPC

auth_oauth_ropc folder_open OCA/server-auth open_in_new
Uncategorised License: AGPL-3

This module add the possibility to login with OAuth Resource Owner Password Credentials Grant

https://datatracker.ietf.org/doc/html/rfc6749#section-4.3

In most scenarios, more secure alternatives are available and recommended. This flow requires a very high degree of trust in the application, and carries risks that are not present in other flows. You should only use this flow when other more secure flows aren't viable.

This module is useful for the Odoo mobile application, which only supports user/password authentication.

auto_awesome What this module does

AI-generated from the code · Odoo 16.0

Lets users sign in to Odoo with their username and password validated against an external OAuth provider, instead of only Odoo's own password. Administrators configure the provider under Settings > Users.

This module adds an alternative way to log in to Odoo. When a user enters a username and password, Odoo first tries its normal authentication; if that fails, it can send the same credentials to an external OAuth provider for verification. If the provider accepts them, the user is logged in.

Administrators manage the connection details in a new screen called "oauth ROPC Providers", found under the Users menu in Settings. There they can create one or more provider records with a name, Client ID, Client secret, Authorization URL, resource, scope and an active flag. Only one provider can be active at a time; trying to activate a second one raises a validation error.

The module touches the res.users model by extending its credential check, and adds a new oauth.ropc.provider model. Access to provider records is restricted to the System administrator group. No reports, emails or scheduled jobs are added.

Depends on

base
Models and fields (2)
  • res.users · extends an existing model
  • oauth.ropc.provider · new modelname, scope, active, resource, client_id (Client ID), auth_endpoint (Authorization URL), client_secret

Text generated by AI (DeepSeek) from reading the Odoo 16.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub

Availability by version

Reviewed: 2026-11-03
Confirmed (verified in repository and branch) Estimated (unverified) No information

Confirmation status: 1 confirmed, 8 with no information of 9 versions.

Sources · Odoo 16.0

Confirmed on 2026-11-03 in branch 16.0 of OCA/server-auth.

terminal Installation and usage

OCA documentation · Odoo 16.0

The configuration of this module is based with Microsoft Azure ad OAuth provider

https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc

To configure this module, you need to:

  • Go to Settings/Users/OAuth ROPC providers and create a new one

To use this module, you need to:

  • Go on the login screen
  • Fill your Odoo user name (must be the same in OAuth provider)
  • Fill your OAuth password

No verified information in OCA: Installation.

info

Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.