Skip to content

[19.0][MIG] auth_saml: Migration to 19.0 - #916

Open
vincent-hatakeyama wants to merge 80 commits into
OCA:19.0from
xcgd:mig/19.0/auth_saml
Open

vincent-hatakeyama wants to merge 80 commits into
OCA:19.0from
xcgd:mig/19.0/auth_saml

Conversation

@vincent-hatakeyama

@vincent-hatakeyama vincent-hatakeyama commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

There is already an existing PR that missed some needed changes. I also do not manage to log in with a local keycloak.

I’m currently facing the same issue with my PR (that’s why it is in draft). Fixed by looking at auth_oauth to find the issue after some digging.

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

Rebased and added fix #937

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

/ocabot migration auth_saml

@OCA-git-bot

Copy link
Copy Markdown
Contributor

Sorry @vincent-hatakeyama you are not allowed to mark the addon to be migrated.

To do so you must either have push permissions on the repository, or be a declared maintainer of all modified addons.

If you wish to adopt an addon and become it's maintainer, open a pull request to add your GitHub login to the maintainers key of its manifest.

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

/ocabot merge nobump

@OCA-git-bot

Copy link
Copy Markdown
Contributor

Sorry @vincent-hatakeyama you are not allowed to merge.

To do so you must either have push permissions on the repository, or be a declared maintainer of all modified addons.

If you wish to adopt an addon and become it's maintainer, open a pull request to add your GitHub login to the maintainers key of its manifest.

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

As before, I can’t merge this because of the change to requirements.txt.

If anyone is using this PR, please approve it so I ask project maintainers to merge it.

@tommievm

tommievm commented Jul 11, 2026

Copy link
Copy Markdown

As before, I can’t merge this because of the change to requirements.txt.

If anyone is using this PR, please approve it so I ask project maintainers to merge it.

Hi @vincent-hatakeyama , I tried your latest code and the part not sending out the security notification that password has changed does not seem to work. I still get an email when creating a user with SAML configured that password has changed. So he receives a welcome notification (which we can adjust), but also immediately receives an email that the password was changed.

If there is anything I can do to help debugging this, please let me know.

It seems this PR was cloesed? So what needs to happen to get this merged as we use this module.

@oussjarrousse

oussjarrousse commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Hello everyone. I am also happy to help here.

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

Hi @vincent-hatakeyama , I tried your latest code and the part not sending out the security notification that password has changed does not seem to work. I still get an email when creating a user with SAML configured that password has changed. So he receives a welcome notification (which we can adjust), but also immediately receives an email that the password was changed.

I just checked and I do not reproduce this ; the new user only get the welcome notification.

If there is anything I can do to help debugging this, please let me know.

I need more detail on what is done on a newly created database to reproduce.

It seems this PR was cloesed? So what needs to happen to get this merged as we use this module.

This PR is not closed. It needs reviews to get merged. Even when not merged, it is usable ; one of our customer uses it in production and another will also do at the end of the month.

@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

Hello everyone. I am also happy to help here.

The code coverage is not a blocking issue but if you have time to improve it, it’s welcome.

Reviews with approval is what is really needed to get this PR merged.

@HugOdoo

HugOdoo commented Sep 14, 2026

Copy link
Copy Markdown

Hello,

I also have a customer that is using it in production, we just did the setup today!

Can we merge?

Hugo

@vincent-hatakeyama

vincent-hatakeyama commented Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

@OCA/tools-maintainers Hi. Can someone merge this?

There is enough positive reviews (in comments), and the only reason I can’t merge (despite being a maintainer) is because it touches the requirements file outside the addon directory.

@thomaspaulb

Copy link
Copy Markdown

/ocabot merge nobump

/ocabot migration auth_saml

Ricardoalso and others added 7 commits September 16, 2026 09:06
Fix logic of SELECT FOR UDPDATE to only lock records whose metadata will
be updated
When using mapping, not writing the value systematically avoids getting
security mail on login/email changes when there is no change.
Also use SQL for blanking passwords avoids the security update mails.
Currently translated at 100.0% (93 of 93 strings)

Translation: server-auth-18.0/server-auth-18.0-auth_saml
Translate-URL: https://translation.odoo-community.org/projects/server-auth-18-0/server-auth-18-0-auth_saml/it/
@oussjarrousse

Copy link
Copy Markdown
Contributor

This is soooo close to the finish line!

@astirpe

astirpe commented Sep 17, 2026

Copy link
Copy Markdown
Member

I opened this PR xcgd#4 to branch xcgd:mig/19.0/auth_saml
to fix some tests errors that I got while porting another module here: #1012

@vincent-hatakeyama
vincent-hatakeyama force-pushed the mig/19.0/auth_saml branch 3 times, most recently from 274a102 to c9caa2d Compare September 17, 2026 14:01
@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

I opened this PR xcgd#4 to branch xcgd:mig/19.0/auth_saml to fix some tests errors that I got while porting another module here: #1012

I was wondering why and came to a similar conclusion (and fix). Thanks to you, I found what was missing compared to the other auth addons.

@vincent-hatakeyama
vincent-hatakeyama force-pushed the mig/19.0/auth_saml branch 4 times, most recently from 0dcee26 to 4ab742d Compare September 17, 2026 14:32
@vincent-hatakeyama

Copy link
Copy Markdown
Contributor Author

@thomaspaulb Rebased and fixed/improved. It should now merge without issue. Thanks!

vincent-hatakeyama and others added 4 commits September 17, 2026 16:41
- custom message when response is too old
- avoid using werkzeug.urls method, they are deprecated
- add missing ondelete cascade when user is deleted
- attribute mapping is now also duplicated when the provider is duplicated
- factorize getting SAML attribute value, allowing using subject.nameId in mapping attributes too
- add an opton to reactivate user when finding an user and creation is
  enabled
@thomaspaulb

Copy link
Copy Markdown

/ocabot merge nobump

@OCA-git-bot

Copy link
Copy Markdown
Contributor

Hey, thanks for contributing! Proceeding to merge this for you.
Prepared branch 19.0-ocabot-merge-pr-916-by-thomaspaulb-bump-nobump, awaiting test results.

@OCA-git-bot

Copy link
Copy Markdown
Contributor

@thomaspaulb your merge command was aborted due to failed check(s), which you can inspect on this commit of 19.0-ocabot-merge-pr-916-by-thomaspaulb-bump-nobump.

After fixing the problem, you can re-issue a merge command. Please refrain from merging manually as it will most probably make the target branch red.

@thomaspaulb

Copy link
Copy Markdown

@vincent-hatakeyama Still a test failure, could you take a look?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.