This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
Share
This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn't be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.
auto_awesome What this module does
AI-generated from the code · Odoo 18.0Lets users share a secret or file from the vault with external people through a link and a numeric PIN. Shares expire automatically after a set time or number of accesses.
This module adds a sharing feature on top of the Vault. From a vault field, a share button opens a new share form where the secret is encrypted with a PIN. The share record stores the encrypted secret, a PIN, a salt, an access counter and an expiration date, and shows a share link that can be copied and sent to the external person.
A new "Shares" menu appears under the Vault menu, listing all shares with their link. The form shows the PIN (hidden by default), expiration, access counter, the secret or file, and a log of who created or accessed the share.
Business rules: each share has an access counter (default 5) and an expiration date (default 7 days). When the external person opens the link and enters the PIN, the secret is decrypted in the browser; each successful access decreases the counter and writes a log entry. Once the counter reaches zero or the expiration passes, the link no longer works. A scheduled job runs every minute to delete expired shares, optionally delayed by a number of days configured in Settings.
Security: users only see their own shares and their logs. The external page is public and does not require login.
Depends on
Menus it adds
Models and fields (4)
- res.company · extends an existing modelvault_share_delay
- vault.share · new modeliv, pin, name, salt, token, secret, log_ids, user_id, accesses (Access counter), filename, expiration, iterations, share_link (Share URL), secret_file
- vault.share.log · new modelname, share_id
- res.config.settings · extends an existing modelvault_share_delay (Delayed Deletion)
Text generated by AI (DeepSeek) from reading the Odoo 18.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub
Availability by version
Reviewed: 2026-11-03Confirmation status: 5 confirmed, 4 with no information of 9 versions.
Sources · Odoo 15.0
Confirmed on 2026-11-03 in branch 15.0 of OCA/server-auth.
terminal Installation and usage
No verified informationInstallation instructions, the distribution package, dependencies and configuration steps are not shown because they have not yet been verified in the module documentation for any version.
Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.