[IMP] webhook_outgoing: send outgoing webhooks

[hoangtrann]

No description provided.

[rvalyi]

Great! Using queue job also seems interesting. I didn't dig deeply into the review yet though, but I might use it and help.

For reference here is the webhook code In Odoo 17.0+ CE (so not available on Odoo 16.0)
https://github.com/odoo/odoo/blob/master/addons/base_automation/models/base_automation.py#L98

(usage can be seen here https://medium.com/@karan.bk/simplify-integration-with-odoo-17-using-webhooks-4ec56c46fcb3)
This is not a lot of code; eventually there are some ideas to get, eventually some sort of compatibility can be achieved.

EDIT: to achieve some kind of compatibility, from a quick overview:

• it looks like the webhook.consumer object of this PR could be merged into the Odoo base.automation object from base_automation. Fields can be made the same.
• base_automation don't use queue job, so eventually, this would be a great addition from this extra OCA module.
• the ir.actions.server override here is minimal just like it is minimal in base_automation, so we could easily ensure it works closely enough: https://github.com/odoo/odoo/blob/master/addons/base_automation/models/ir_actions_server.py#L54
• In this PR calls are logged in a new object called webhook.logging while in base_automation, the log object is ir.logging that is available at least since Odoo v14: https://github.com/odoo/odoo/blob/16.0/odoo/addons/base/models/ir_logging.py

cc @pedrobaeza @sebastienbeau @hparfr @sbidoul @lmignon @simahawk @etobella

[rvalyi]

there is also possibly some overlap with https://github.com/OCA/web-api/blob/14.0/webservice/models/webservice_backend.py from the https://github.com/OCA/web-api/tree/14.0 OCA project. In any case, quick and dirty web hooks with no code is certainly something important to have for simple and quick automation.

[rvalyi]

it can also be installed as an option, but eventually this server_action_logging module might help.

[rvalyi]

BTW, @gurneyalex pointed that the security of the native Odoo v17 web hooks is probably not so good: https://x.com/gurneyalex/status/1817900552329560150 ...

So good if this extra module could bring some real security... Is it safe now https://github.com/OCA/webhook/pull/13/files#diff-ca6b9e897fddbb1f998aefd239a9630cef55fbdcd6de7a2b20043e2faff24b29R28 ?

Eventually, we might use base_rest_auth_api_key https://github.com/OCA/rest-framework/tree/16.0/base_rest_auth_api_key may be ?

[ivs-cetmix]

@hoangtrann @rvalyi looks like `codecov/project' action is still running. It will consume tons of minutes

[ivs-cetmix]

also @sbidoul please have a look at the codecove job here

[hoangtrann]

@ivs-cetmix force push to trigger actions seem to solve the issue

[ivs-cetmix]

Thank you once again for your contribution. Some thoughts here:

• Probably the first module should be named something like webhook_outgoing for better matching the module designation. Same for the module name and description
• Maybe it would be better to have 2 different PR's per module. You can add dependencies in the second PR using test-requirements.txt. This will make reviews and merging modules faster
• Test coverage is something that is a must so tests should be added in order to proceed further
• Same with documentation. However this is something we can also assist with

[ivs-cetmix]

We don't need this dependency because "base_automation" already depends on "base".

[ivs-cetmix]

Not an issue, just curios: how does this work in selection fields?

[ivs-cetmix]

"webhook_base" already depends on "base_automation" so no need to add "base" and "base_automation" here

[hoangtrann]

thanks @ivs-cetmix @rvalyi for your feedback, I've updated the PR to only include the webhook_outgoing for sending out webhook requests.

I've made changes accordingly as well:

• Merge with ir.actions.server, all fields are brought to this model
• I'd like to keep webhook.logging for now to log information that we can relate directly to the webhook

I'm going to update the tests as well as creating another PR for incoming webhook

[agent-z28]

@hoangtrann lets get it merged ! it's really great.

[lmignon]

Thank you for this addons. Can you add tests plz? Unittest are required to ensure code quality and maintainability.