{
    "info": {
        "author": "Acsone SA/NV,Odoo Community Association (OCA)",
        "author_email": "support@odoo-community.org",
        "bugtrack_url": null,
        "classifiers": [
            "Framework :: Odoo",
            "License :: OSI Approved :: GNU Affero General Public License v3",
            "Programming Language :: Python"
        ],
        "description": ".. image:: https://img.shields.io/badge/license-AGPL--3-blue.png\n    :target: https://www.gnu.org/licenses/agpl\n    :alt: License: AGPL-3\n\n====================================\nAuthentication From HTTP Remote User\n====================================\n\nThis module initialize the session by looking for the field HTTP_REMOTE_USER in\nthe HEADERS of the HTTP request and trying to bind the given value to a user.\nTo be active, the module must be installed in the expected databases and loaded\nat startup; Add the *--load* parameter to the startup command: ::\n\n  --load=web,auth_from_http_remote_user, ...\n\nIf the field is found in the header and no user matches the given one, the\nsystem issue a login error page. (*401* `Unauthorized`)\n\nConfiguration\n=============\n\nThe module allows integration with external security systems [#]_ that can pass\nalong authentication of a user via Remote_User HTTP header field. In many\ncases, this is achieved via server like Apache HTTPD or nginx proxying Odoo.\n\n.. important:: When proxying your Odoo server with Apache or nginx, It's\n   important to filter out the Remote_User HTTP header field before your\n   request is processed by the proxy to avoid security issues. In apache you\n   can do it by using the RequestHeader directive in your VirtualHost\n   section  ::\n\n    <VirtualHost *:80>\n     ServerName MY_VHOST.com\n     ProxyRequests Off\n    ...\n\n     RequestHeader unset Remote-User early\n     ProxyPass / http://127.0.0.1:8069/  retry=10\n     ProxyPassReverse  / http://127.0.0.1:8069/\n     ProxyPreserveHost On\n    </VirtualHost>\n\n\nHow to test the module with Apache [#]_\n----------------------------------------\n\nApache can be used as a reverse proxy providing the authentication and adding\nthe required field in the Http headers.\n\nInstall apache:  ::\n\n   $ sudo apt-get install apache2\n\n\nDefine a new vhost to Apache by putting a new file in\n/etc/apache2/sites-available: ::\n\n   $ sudo vi  /etc/apache2/sites-available/MY_VHOST.com\n\nwith the following content: ::\n\n   <VirtualHost *:80>\n     ServerName MY_VHOST.com\n     ProxyRequests Off\n     <Location />\n       AuthType Basic\n       AuthName \"Test Odoo auth_from_http_remote_user\"\n       AuthBasicProvider file\n       AuthUserFile /etc/apache2/MY_VHOST.htpasswd\n       Require valid-user\n\n       RewriteEngine On\n       RewriteCond %{LA-U:REMOTE_USER} (.+)\n       RewriteRule . - [E=RU:%1]\n       RequestHeader set Remote-User \"%{RU}e\" env=RU\n     </Location>\n\n     RequestHeader unset Remote-User early\n     ProxyPass / http://127.0.0.1:8069/  retry=10\n     ProxyPassReverse  / http://127.0.0.1:8069/\n     ProxyPreserveHost On\n   </VirtualHost>\n\n.. important:: The *RequestHeader* directive is used to add the *Remote-User*\n   field in the http headers. By default an *'Http-'* prefix is added to the\n   field name.\n   In Odoo, header's fields name are normalized. As result of this\n   normalization, the 'Http-Remote-User' is available as 'HTTP_REMOTE_USER'.\n   If you don't know how your specified field is seen by Odoo, run your\n   server in debug mode once the module is activated and look for an entry\n   like: ::\n\n     DEBUG openerp1 openerp.addons.auth_from_http_remote_user.controllers.\n     session:\n     Field 'HTTP_MY_REMOTE_USER' not found in http headers\n     {'HTTP_AUTHORIZATION': 'Basic YWRtaW46YWRtaW4=', ...,\n     'HTTP_REMOTE_USER': 'demo')\n\nEnable the required apache modules: ::\n\n   $ sudo a2enmod headers\n   $ sudo a2enmod proxy\n   $ sudo a2enmod rewrite\n   $ sudo a2enmod proxy_http\n\nEnable your new vhost: ::\n\n  $ sudo a2ensite MY_VHOST.com\n\nCreate the *htpassword* file used by the configured basic authentication: ::\n\n   $ sudo htpasswd -cb /etc/apache2/MY_VHOST.htpasswd admin admin\n   $ sudo htpasswd -b /etc/apache2/MY_VHOST.htpasswd demo demo\n\nFor local test, add the *MY_VHOST.com* in your /etc/vhosts file.\n\nFinally reload the configuration: ::\n\n   $ sudo service apache2 reload\n\nOpen your browser and go to MY_VHOST.com. If everything is well configured, you\nare prompted for a login and password outside Odoo and are automatically\nlogged in the system.\n\n.. [#] Shibboleth, Tivoli access manager, ..\n.. [#] Based on a ubuntu 12.04 env\n\nUsage\n=====\n\n.. image:: https://odoo-community.org/website/image/ir.attachment/5784_f2813bd/datas\n    :alt: Try me on Runbot\n    :target: https://runbot.odoo-community.org/runbot/149/11.0\n\n\nBug Tracker\n===========\n\nBugs are tracked on `GitHub Issues\n<https://github.com/OCA/server-auth/issues>`_. In case of trouble, please\ncheck there if your issue has already been reported. If you spotted it first,\nhelp us to smash it by providing detailed and welcomed feedback.\n\n\nCredits\n=======\n\nImages\n------\n\n* Odoo Community Association: `Icon <https://github.com/OCA/maintainer-tools/blob/master/template/module/static/description/icon.svg>`_.\n\nContributors\n------------\n\n* Laurent Mignon\n\nMaintainer\n----------\n\n.. image:: https://odoo-community.org/logo.png\n    :alt: Odoo Community Association\n    :target: https://odoo-community.org\n\nThis module is maintained by the OCA.\n\nOCA, or the Odoo Community Association, is a nonprofit organization whose\nmission is to support the collaborative development of Odoo features and\npromote its widespread use.\n\nTo contribute to this module, please visit https://odoo-community.org.\n\n\n",
        "description_content_type": "",
        "docs_url": null,
        "download_url": "",
        "downloads": {
            "last_day": -1,
            "last_month": -1,
            "last_week": -1
        },
        "home_page": "https://github.com/OCA/server-auth",
        "keywords": "",
        "license": "AGPL-3",
        "maintainer": "",
        "maintainer_email": "",
        "name": "odoo11-addon-auth-from-http-remote-user",
        "package_url": "https://pypi.org/project/odoo11-addon-auth-from-http-remote-user/",
        "platform": "",
        "project_url": "https://pypi.org/project/odoo11-addon-auth-from-http-remote-user/",
        "project_urls": {
            "Homepage": "https://github.com/OCA/server-auth"
        },
        "release_url": "https://pypi.org/project/odoo11-addon-auth-from-http-remote-user/11.0.1.0.0.99.dev6/",
        "requires_dist": [
            "odoo (<11.1dev,>=11.0a)"
        ],
        "requires_python": ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*",
        "summary": "Authenticate via HTTP Remote User",
        "version": "11.0.1.0.0.99.dev6"
    },
    "last_serial": 4920546,
    "releases": {
        "11.0.1.0.0.99.dev5": [
            {
                "comment_text": "",
                "digests": {
                    "md5": "d6aa68d31a0e249beb7aa4b3e12fdb64",
                    "sha256": "74d30a0d0f532af749757e168b21d19e24b451d95902bbb47fd4c5cc5a5a6726"
                },
                "downloads": -1,
                "filename": "odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev5-py2.py3-none-any.whl",
                "has_sig": false,
                "md5_digest": "d6aa68d31a0e249beb7aa4b3e12fdb64",
                "packagetype": "bdist_wheel",
                "python_version": "py2.py3",
                "requires_python": ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*",
                "size": 76996,
                "upload_time": "2019-02-26T05:58:22",
                "url": "https://files.pythonhosted.org/packages/4d/66/bfaf9ea1c0fda4b42e0c93a71aeaf85b4eb1c6910d04d489bca81dac5658/odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev5-py2.py3-none-any.whl"
            }
        ],
        "11.0.1.0.0.99.dev6": [
            {
                "comment_text": "",
                "digests": {
                    "md5": "9c5d9013a34ae70cd230c1fa14f4ff52",
                    "sha256": "40c3d7e3797023d57f5a039d55a7d72e5cd56963d1474782bcb56d4e8caef099"
                },
                "downloads": -1,
                "filename": "odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev6-py2.py3-none-any.whl",
                "has_sig": false,
                "md5_digest": "9c5d9013a34ae70cd230c1fa14f4ff52",
                "packagetype": "bdist_wheel",
                "python_version": "py2.py3",
                "requires_python": ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*",
                "size": 76147,
                "upload_time": "2019-03-10T05:57:53",
                "url": "https://files.pythonhosted.org/packages/47/24/ca982c1edcac5a5cbfdc82630a44061b5c84f9fbfa40c0d3600625cfb726/odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev6-py2.py3-none-any.whl"
            }
        ]
    },
    "urls": [
        {
            "comment_text": "",
            "digests": {
                "md5": "9c5d9013a34ae70cd230c1fa14f4ff52",
                "sha256": "40c3d7e3797023d57f5a039d55a7d72e5cd56963d1474782bcb56d4e8caef099"
            },
            "downloads": -1,
            "filename": "odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev6-py2.py3-none-any.whl",
            "has_sig": false,
            "md5_digest": "9c5d9013a34ae70cd230c1fa14f4ff52",
            "packagetype": "bdist_wheel",
            "python_version": "py2.py3",
            "requires_python": ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*",
            "size": 76147,
            "upload_time": "2019-03-10T05:57:53",
            "url": "https://files.pythonhosted.org/packages/47/24/ca982c1edcac5a5cbfdc82630a44061b5c84f9fbfa40c0d3600625cfb726/odoo11_addon_auth_from_http_remote_user-11.0.1.0.0.99.dev6-py2.py3-none-any.whl"
        }
    ]
}