diff --git a/.travis.yml b/.travis.yml index b7bd84095..ca96d060f 100644 --- a/.travis.yml +++ b/.travis.yml @@ -33,6 +33,7 @@ install: - travis_install_nightly - pip install python-ldap - pip install unidecode + - pip install validate_email - printf '[options]\n\nrunning_env = dev' > ${HOME}/.openerp_serverrc - ln -s server_environment_files_sample ./server_environment_files script: diff --git a/auth_signup_verify_email/README.rst b/auth_signup_verify_email/README.rst new file mode 100644 index 000000000..324821b31 --- /dev/null +++ b/auth_signup_verify_email/README.rst @@ -0,0 +1,84 @@ +.. image:: https://img.shields.io/badge/licence-AGPL--3-blue.svg + :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html + :alt: License: AGPL-3 + +====================== +Verify email at signup +====================== + +This module was written to extend the functionality of public sign up to force +users to provide a valid email address. + +To reinforce this requirement, the user will not need to provide a password at +sign up, but when logging in later for the first time. + +Installation +============ + +* Install validate_email_ with ``pip install validate_email`` or equivalent. + +Configuration +============= + +To configure this module, you need to: + +* `Properly configure your outgoing email server(s) + `_. +* Go to *Settings > Configuration > General Settings* and enable *Allow + external users to sign up*. + +Usage +===== + +To use this module, you need to: + +* Log out. +* `Sign up `_ with a valid email. + +.. image:: https://odoo-community.org/website/image/ir.attachment/5784_f2813bd/datas + :alt: Try me on Runbot + :target: https://runbot.odoo-community.org/runbot/186/8.0 + +Bug Tracker +=========== + +Bugs are tracked on `GitHub Issues `_. + +In case of trouble, please check there if your issue has already been reported. +If you spotted it first, help us smashing it by providing a detailed and +welcomed feedback `here `_. + + +Credits +======= + +Icon +---- + +* https://openclipart.org/detail/3040/thumbtack-note-email +* https://openclipart.org/detail/202732/check-mark + +Contributors +------------ + +* Rafael Blasco +* Jairo Llopis + +Maintainer +---------- + +.. image:: https://odoo-community.org/logo.png + :alt: Odoo Community Association + :target: https://odoo-community.org + +This module is maintained by the OCA. + +OCA, or the Odoo Community Association, is a nonprofit organization whose +mission is to support the collaborative development of Odoo features and +promote its widespread use. + +To contribute to this module, please visit http://odoo-community.org. + +.. _validate_email: https://pypi.python.org/pypi/validate_email diff --git a/auth_signup_verify_email/__init__.py b/auth_signup_verify_email/__init__.py new file mode 100644 index 000000000..35233d377 --- /dev/null +++ b/auth_signup_verify_email/__init__.py @@ -0,0 +1,5 @@ +# -*- coding: utf-8 -*- +# © 2015 Antiun Ingeniería, S.L. +# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html). + +from . import controllers diff --git a/auth_signup_verify_email/__openerp__.py b/auth_signup_verify_email/__openerp__.py new file mode 100644 index 000000000..1b543fd40 --- /dev/null +++ b/auth_signup_verify_email/__openerp__.py @@ -0,0 +1,25 @@ +# -*- coding: utf-8 -*- +# © 2015 Antiun Ingeniería, S.L. +# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html). +{ + "name": "Verify email at signup", + "summary": "Force uninvited users to use a good email for signup", + "version": "8.0.1.0.0", + "category": "Authentication", + "website": "https://odoo-community.org/", + "author": "Antiun Ingeniería, S.L., Odoo Community Association (OCA)", + "license": "AGPL-3", + "application": False, + "installable": True, + "external_dependencies": { + "python": [ + "validate_email", + ], + }, + "depends": [ + "auth_signup", + ], + "data": [ + "views/signup.xml", + ], +} diff --git a/auth_signup_verify_email/controllers/__init__.py b/auth_signup_verify_email/controllers/__init__.py new file mode 100644 index 000000000..d10129bed --- /dev/null +++ b/auth_signup_verify_email/controllers/__init__.py @@ -0,0 +1,5 @@ +# -*- coding: utf-8 -*- +# © 2015 Antiun Ingeniería, S.L. +# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html). + +from . import main diff --git a/auth_signup_verify_email/controllers/main.py b/auth_signup_verify_email/controllers/main.py new file mode 100644 index 000000000..137c275ee --- /dev/null +++ b/auth_signup_verify_email/controllers/main.py @@ -0,0 +1,52 @@ +# -*- coding: utf-8 -*- +# © 2015 Antiun Ingeniería, S.L. +# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html). + +import logging +from openerp import _, http +from openerp.addons.auth_signup.controllers.main import AuthSignupHome + + +_logger = logging.getLogger(__name__) + + +class SignupVerifyEmail(AuthSignupHome): + @http.route() + def web_auth_signup(self, *args, **kw): + if (http.request.params.get("login") and + not http.request.params.get("password")): + return self.passwordless_signup(http.request.params) + else: + return super(SignupVerifyEmail, self).web_auth_signup(*args, **kw) + + def passwordless_signup(self, values): + qcontext = self.get_auth_signup_qcontext() + + # Check good format of e-mail + from validate_email import validate_email + if not validate_email(values.get("login", "")): + qcontext["error"] = _("That does not seem to be an email address.") + return http.request.render("auth_signup.signup", qcontext) + elif not values.get("email"): + values["email"] = values.get("login") + + # Remove password + values["password"] = False + sudo_users = (http.request.env["res.users"] + .with_context(create_user=True).sudo()) + + try: + sudo_users.signup(values, qcontext.get("token")) + sudo_users.reset_password(values.get("login")) + except Exception as error: + # Duplicate key or wrong SMTP settings, probably + _logger.exception(error) + http.request.env.cr.rollback() + + # Agnostic message for security + qcontext["error"] = _( + "Something went wrong, please try again later or contact us.") + return http.request.render("auth_signup.signup", qcontext) + + qcontext["message"] = _("Check your email to activate your account!") + return http.request.render("auth_signup.reset_password", qcontext) diff --git a/auth_signup_verify_email/static/description/icon.png b/auth_signup_verify_email/static/description/icon.png new file mode 100644 index 000000000..52e1b17dc Binary files /dev/null and b/auth_signup_verify_email/static/description/icon.png differ diff --git a/auth_signup_verify_email/static/description/icon.svg b/auth_signup_verify_email/static/description/icon.svg new file mode 100644 index 000000000..ea6e7c2df --- /dev/null +++ b/auth_signup_verify_email/static/description/icon.svg @@ -0,0 +1,172 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + image/svg+xml + + + + + Openclipart + + + + 2007-02-06T06:13:53 + Thumbtack note with message "E-mail!" + https://openclipart.org/detail/3040/thumbtack-note-email-by-zeimusu + + + zeimusu + + + + + bulletin + email + memo + note + thumbtack + thumbtack note + + + + + + + + + + + diff --git a/auth_signup_verify_email/views/signup.xml b/auth_signup_verify_email/views/signup.xml new file mode 100644 index 000000000..a0a13ae60 --- /dev/null +++ b/auth_signup_verify_email/views/signup.xml @@ -0,0 +1,20 @@ + + + + + + + +