| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
•
Attendances (hr_attendance)
• Employees (hr) • Discuss (mail) |
| Lines of code | 691 |
| Technical Name |
hr_qrcode_signon |
| License | LGPL-3 |
| Website | https://richsoda.com |
| Versions | 15.0 16.0 17.0 18.0 19.0 |
HR QR Code Sign-on
TOTP-based QR attendance kiosk for Odoo
基於 TOTP 的 QR Code 打卡簽到 Kiosk 模組
Display a rotating TOTP-encoded QR code on a shared screen (kiosk). Employees scan the QR from their phone to check in or check out via hr.attendance. The kiosk is PIN-protected — only authorized operators can launch or exit it.
在共用螢幕（Kiosk）上顯示每 25 秒自動更新的 TOTP QR Code， 員工用手機掃描即可完成上下班打卡。 Kiosk 經 PIN 保護，僅授權操作員可啟動或離開。
Features / 功能特色
TOTP Security / 時間式一次性密碼
QR code rotates every 25 seconds using TOTP (RFC 6238).
Prevents screenshot replay attacks.
QR Code 每 25 秒自動更新，防止截圖重放攻擊。
PIN-Protected Exit / PIN 保護退出
Operator must enter their HR PIN to leave the kiosk screen.
3 wrong attempts trigger a 10-minute lockout.
操作員需輸入 PIN 才能離開 Kiosk，連續錯誤三次即鎖定 10 分鐘。
Dual Roles / 雙角色權限
Operator can launch the kiosk; Admin can manage the TOTP secret.
Separation of duties for security.
操作員可啟動 Kiosk；管理員可管理 TOTP 金鑰，權限分離。
Multi-Language / 多語言支援
Ships with 6 translations: zh_TW, fr, es, vi, th, id.
內建六種語言：繁體中文、法文、西文、越文、泰文、印尼文。
Fullscreen Kiosk / 全螢幕 Kiosk
Full-page navigation with iframe-breakout guard.
Security headers prevent embedding.
全頁導航搭配 iframe 防穿機制，安全標頭防止嵌入。
Audit Logging / 稽核日誌
Every sign-in, sign-out, and failed attempt is logged
with user, employee, and remote IP.
每次簽到、簽退及失敗嘗試皆記錄使用者、員工及 IP。
How It Works / 運作方式
- Operator opens Attendances → Sign-on QR Code to launch the kiosk.
操作員開啟「出勤 → Sign-on QR Code」啟動 Kiosk。 - A rotating QR code is displayed on the shared screen.
共用螢幕上顯示自動更新的 QR Code。 - Employees scan the QR with their phone (logged in to Odoo) to check in or out.
員工用已登入 Odoo 的手機掃描 QR 即可打卡。 - Operator enters PIN to exit the kiosk when done.
操作員輸入 PIN 即可離開 Kiosk。
Requirements / 需求
- Python package:
pyotp - Odoo modules:
hr_attendance,hr_org_chart - Operators must have an
hr.employeerecord with a PIN set.
RichSoda Co., Ltd. 睿軒有限公司
https://richsoda.com |
service@richsoda.com
Please log in to comment on this module