server-auth icon indicating copy to clipboard operation
server-auth copied to clipboard

Feature: Auth_oidc specify internal/portal user in config

Open andrewmeyer opened this issue 1 year ago • 2 comments

Is your feature request related to a problem? Presently all oauth providers default to creating "portal users" instead of internal users.

Describe the solution you'd like Ideally we could specify per-provider if the users should be treated as internal, portal, or public users. This will allow companies with a centralized authentication platform to not require enabling debug mode every time a new user is created just to switch them to an internal user.

Describe alternatives you've considered Currently I have modified the portal user template to create users as internal users. While this works, this breaks our ability to ever have portal users in the future as they will all be created as internal users.

andrewmeyer avatar Jan 14 '25 16:01 andrewmeyer

Just noting this feature is not related to the auth_oidc module but rather maybe to the auth_sign or auth_oauth Odoo CE modules.

sbidoul avatar Jan 15 '25 14:01 sbidoul

@andrewmeyer I've spent way too much time debugging this. With the groups' feature ( https://github.com/OCA/server-auth/pull/682 ), you can have separate groups' lines that will assign/deassign depending on the token content:

  • 'User Types / Internal' -> Internal in token['groups']
  • 'User Types / Portal -> Internal not in token['groups']

With this, the login will work both ways.

OdyX avatar Feb 21 '25 13:02 OdyX

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.

github-actions[bot] avatar Aug 24 '25 12:08 github-actions[bot]