| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
•
Discuss (mail)
• Employees (hr) • Project (project) |
| Lines of code | 1208 |
| Technical Name |
pocket |
| License | LGPL-3 |
| Website | https://www.codebar.ch |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
•
Discuss (mail)
• Employees (hr) • Project (project) |
| Lines of code | 1208 |
| Technical Name |
pocket |
| License | LGPL-3 |
| Website | https://www.codebar.ch |
One tap to sign in to the mobile time-tracking app
Getting a team onto a mobile app usually means handing out server addresses, database names, logins and API keys — and walking everyone through a fiddly setup screen. Pocket removes all of it. Send a single email; the user taps one button on their phone and the Pocket app opens and signs them in automatically. Nothing to type, nothing to copy and paste.
How it works
A secure, one-time handshake does all the setup for the user. Here is the full journey, from invite to tracking time:
- Invite. A manager invites users in bulk, or a user requests their own link from profile preferences.
- Email. Odoo sends a clean, branded email with a single one-time link.
- Tap. The user taps Set up Pocket on their phone and the app opens straight from the link.
- Hand-off. The app and Odoo exchange the link behind the scenes. Odoo verifies it once, then issues a real, per-user API key and returns the full connection profile (server, database, user and key).
- Done. The user is signed in automatically and starts tracking time — no server address, database, login or key ever typed by hand.
The link works once and expires after a short time, and the key it creates is a genuine Odoo API key that belongs to the user — not a shared secret.
Self-service sign-in
Users help themselves. Straight from their own profile preferences, they click Email me my sign-in link and get an invite on the spot — no support ticket, no waiting on an admin. Lost their phone or got a new one? They just request a fresh link.
Onboard the whole team at once
Managers select any number of users in the standard Users list and run Invite Pocket users from the Actions menu. Everyone gets their personal one-time link in a single step — perfect for rolling the app out to a new team or location.
See every invite at a glance
The Enrollments dashboard shows who has been invited and where each stands — pending, used, expired or revoked — plus when the link was last sent and when it expires. Filter and group to track a roll-out in seconds.
Full control over access
Open any enrollment to resend a fresh link or revoke access. Revoking instantly removes the linked API key, so a lost or stolen device is cut off immediately — without touching the user's Odoo login.
Secure by design
Convenience never comes at the cost of security. Pocket is built around one-time links and real, revocable keys.
One-time, short-lived links
Each link can be used only once and expires after a configurable window. Only a hash of the token is ever stored — the link itself is never kept in the database.
Rate-limited sign-in
The public exchange endpoint is rate-limited per source to absorb abuse and brute-force attempts.
Real, revocable API keys
Sign-in mints a genuine, per-user Odoo API key with a configurable lifetime. Revoke the enrollment and the key dies with it.
Hands-off cleanup
A daily job expires stale invites and purges old records based on a retention window you set — no manual housekeeping.
Clear access roles
Self-service is limited to internal users. Inviting others and managing enrollments are gated behind dedicated Pocket User and Pocket Manager groups.
Configurable, not complicated
Everything lives in Settings → Pocket. Sensible defaults work out of the box; tune the link scheme and lifetimes to match your app.
- Deep-link scheme & path for the mobile app.
- App Store / Play Store URLs (optional).
- Sign-in link validity in hours.
- API key validity in days (0 = never expires).
- Enrollment retention before old records are purged.
At a glance
- ✓ Frictionless onboarding — one tap, no manual setup
- ✓ Bulk invites for managers and self-service for users
- ✓ One-time, hash-stored links and revocable per-user API keys
- ✓ Available in English and German
- ✓ Built for Odoo 19
By codebar Solutions AG · Support: helpdesk@codebar.ch · www.codebar.ch
Please log in to comment on this module