| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 407 |
| Technical Name |
zalo_sso |
| License | OPL-1 |
| Website | https://innovasol.tech |
| Versions | 17.0 18.0 19.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 407 |
| Technical Name |
zalo_sso |
| License | OPL-1 |
| Website | https://innovasol.tech |
| Versions | 17.0 18.0 19.0 |
Zalo SSO Login for Odoo 19
One-click sign-in with a Zalo account â secure OAuth v4 + PKCE
Let Vietnamese customers, partners and employees sign in to your Odoo portal with the Zalo account they already use every day. No password to remember, no extra signup form.
Key features
Official Zalo OAuth v4 flow
Uses the current Zalo
oauth.zaloapp.com/v4/permission authorization
endpoint with PKCE (code_verifier /
code_challenge) â no deprecated v2 calls.
CSRF-safe redirect
A random per-session state is verified on the
/zalo_sso/signin callback before any token is
exchanged.
Domain-verifier built in
Serve Zalo's platform site verification HTML from a configurable path â no need for a static file on disk.
Automatic portal user provisioning
First-time Zalo users are auto-created from the configured
Portal template, with the Zalo profile name and
avatar populated on res.users.
Refresh-token storage
Zalo refresh tokens and expiry are persisted in system-only fields so background jobs can renew access without re-prompting the user.
VN proxy support
Zalo blocks graph.zalo.me from non-Vietnam
IPs (error -501). Configure a VN proxy URL
on the provider record and all Zalo calls route through
it automatically.
How it works
-
Admin enables the Zalo OAuth provider
and pastes App ID + App Secret from
developers.zalo.me. - A Login with Zalo button appears on the Odoo login page.
-
The user authorizes on Zalo, returns to
/zalo_sso/signin, and is logged in (or auto-provisioned as a Portal user) in one round-trip.
Configuration
After installation, go to Settings → Users & Companies → OAuth Providers, open the Zalo record and fill in:
- Client ID â your Zalo App ID
- Zalo App Secret â secret key
(sent as the
secret_keyheader on token exchange) - Zalo VN Proxy â optional, only when the Odoo server runs outside Vietnam
- Zalo Verifier Filename / Content â optional, for Zalo platform domain verification
- Allowed â toggle on when ready to publish the button
Compatibility & support
Odoo
- Odoo 19 Community & Enterprise
- Depends on stock
auth_oauth+auth_signup
Zalo
- Zalo User Access Token V4
- PKCE (S256) code challenge
- Profile fields:
id,name,picture
Questions or feature requests?
Reach out at
innovasol.tech.
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module