From 76c1ff1f340b0135f7e8c917cf253d7ec730dea5 Mon Sep 17 00:00:00 2001
From: fkantelberg <florian.kantelberg@initos.com>
Date: Fri, 12 Mar 2021 14:02:30 +0100
Subject: [PATCH 01/21] Add vault and vault_share module

Fix website in manifest

Run pre-commit

Move models to own files. Apply OCA conventions

Add application icon
---
 vault_share/__init__.py                       |   4 +
 vault_share/__manifest__.py                   |  24 ++
 vault_share/controllers/__init__.py           |   4 +
 vault_share/controllers/main.py               |  34 ++
 vault_share/data/ir_cron.xml                  |  13 +
 vault_share/models/__init__.py                |   4 +
 vault_share/models/vault_share.py             |  72 ++++
 vault_share/readme/CONTRIBUTORS.rst           |   1 +
 vault_share/readme/DESCRIPTION.rst            |   6 +
 vault_share/security/ir.model.access.csv      |   2 +
 vault_share/security/ir_rule.xml              |  12 +
 vault_share/static/description/icon.png       | Bin 0 -> 2287 bytes
 vault_share/static/src/js/vault_fields.js     |  55 +++
 vault_share/static/src/js/vault_share.js      |  56 +++
 .../static/src/js/vault_share_widget.js       | 355 ++++++++++++++++++
 vault_share/static/src/js/vault_utils.js      |  19 +
 vault_share/static/src/scss/vault_share.scss  |   3 +
 vault_share/static/src/xml/templates.xml      |  48 +++
 vault_share/tests/__init__.py                 |   4 +
 vault_share/tests/test_share.py               |  44 +++
 vault_share/views/assets.xml                  |  32 ++
 vault_share/views/menuitems.xml               |  16 +
 vault_share/views/templates.xml               |  44 +++
 vault_share/views/vault_share_views.xml       |  39 ++
 24 files changed, 891 insertions(+)
 create mode 100644 vault_share/__init__.py
 create mode 100644 vault_share/__manifest__.py
 create mode 100644 vault_share/controllers/__init__.py
 create mode 100644 vault_share/controllers/main.py
 create mode 100644 vault_share/data/ir_cron.xml
 create mode 100644 vault_share/models/__init__.py
 create mode 100644 vault_share/models/vault_share.py
 create mode 100644 vault_share/readme/CONTRIBUTORS.rst
 create mode 100644 vault_share/readme/DESCRIPTION.rst
 create mode 100644 vault_share/security/ir.model.access.csv
 create mode 100644 vault_share/security/ir_rule.xml
 create mode 100644 vault_share/static/description/icon.png
 create mode 100644 vault_share/static/src/js/vault_fields.js
 create mode 100644 vault_share/static/src/js/vault_share.js
 create mode 100644 vault_share/static/src/js/vault_share_widget.js
 create mode 100644 vault_share/static/src/js/vault_utils.js
 create mode 100644 vault_share/static/src/scss/vault_share.scss
 create mode 100644 vault_share/static/src/xml/templates.xml
 create mode 100644 vault_share/tests/__init__.py
 create mode 100644 vault_share/tests/test_share.py
 create mode 100644 vault_share/views/assets.xml
 create mode 100644 vault_share/views/menuitems.xml
 create mode 100644 vault_share/views/templates.xml
 create mode 100644 vault_share/views/vault_share_views.xml

diff --git a/vault_share/__init__.py b/vault_share/__init__.py
new file mode 100644
index 0000000000..05ae53c8cb
--- /dev/null
+++ b/vault_share/__init__.py
@@ -0,0 +1,4 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import controllers, models
diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
new file mode 100644
index 0000000000..cdbf549b35
--- /dev/null
+++ b/vault_share/__manifest__.py
@@ -0,0 +1,24 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+{
+    "name": "Vault - Share",
+    "summary": "Implementation of a mechanism to share secrets",
+    "license": "AGPL-3",
+    "version": "14.0.1.0.0",
+    "website": "https://github.com/OCA/server-auth",
+    "application": True,
+    "author": "initOS GmbH, Odoo Community Association (OCA)",
+    "category": "Vault",
+    "depends": ["vault"],
+    "data": [
+        "data/ir_cron.xml",
+        "security/ir.model.access.csv",
+        "security/ir_rule.xml",
+        "views/assets.xml",
+        "views/menuitems.xml",
+        "views/templates.xml",
+        "views/vault_share_views.xml",
+    ],
+    "qweb": ["static/src/xml/templates.xml"],
+}
diff --git a/vault_share/controllers/__init__.py b/vault_share/controllers/__init__.py
new file mode 100644
index 0000000000..aabfa83edd
--- /dev/null
+++ b/vault_share/controllers/__init__.py
@@ -0,0 +1,4 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import main
diff --git a/vault_share/controllers/main.py b/vault_share/controllers/main.py
new file mode 100644
index 0000000000..4d908f0669
--- /dev/null
+++ b/vault_share/controllers/main.py
@@ -0,0 +1,34 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+
+from odoo import _, http
+from odoo.http import request
+
+_logger = logging.getLogger(__name__)
+
+
+class Controller(http.Controller):
+    @http.route("/vault/share/<string:token>", type="http", auth="public")
+    def vault_share(self, token):
+        ctx = {"disable_footer": True, "token": token}
+        secret = request.env["vault.share"].sudo().get(token)
+        if secret is None:
+            ctx["error"] = _("The secret expired")
+            return request.render("vault_share.share", ctx)
+
+        if len(secret) != 1:
+            ctx["error"] = _("Invalid token")
+            return request.render("vault_share.share", ctx)
+
+        ctx.update(
+            {
+                "encrypted": secret.secret,
+                "salt": secret.salt,
+                "iv": secret.iv,
+                "encrypted_file": secret.secret_file,
+                "filename": secret.filename,
+            }
+        )
+        return request.render("vault_share.share", ctx)
diff --git a/vault_share/data/ir_cron.xml b/vault_share/data/ir_cron.xml
new file mode 100644
index 0000000000..362e5c1905
--- /dev/null
+++ b/vault_share/data/ir_cron.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo noupdate="1">
+    <record id="cron_share_clean" model="ir.cron">
+        <field name="name">Clean outgoing share</field>
+        <field name="model_id" ref="model_vault_share" />
+        <field name="state">code</field>
+        <field name="code">model.clean()</field>
+        <field name="interval_number">1</field>
+        <field name="interval_type">minutes</field>
+        <field name="numbercall">-1</field>
+        <field name="active" eval="True" />
+    </record>
+</odoo>
diff --git a/vault_share/models/__init__.py b/vault_share/models/__init__.py
new file mode 100644
index 0000000000..51a08ee32d
--- /dev/null
+++ b/vault_share/models/__init__.py
@@ -0,0 +1,4 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import vault_share
diff --git a/vault_share/models/vault_share.py b/vault_share/models/vault_share.py
new file mode 100644
index 0000000000..24da5c41a9
--- /dev/null
+++ b/vault_share/models/vault_share.py
@@ -0,0 +1,72 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+from datetime import datetime, timedelta
+from uuid import uuid4
+
+from odoo import _, api, fields, models
+
+_logger = logging.getLogger(__name__)
+
+
+class VaultShare(models.Model):
+    _name = "vault.share"
+    _description = _("Vault share outgoing secrets")
+
+    user_id = fields.Many2one("res.users", default=lambda self: self.env.uid)
+    name = fields.Char(required=True)
+    share_link = fields.Char(
+        "Share URL",
+        compute="_compute_url",
+        store=False,
+        help="Using this link and pin people can access the secret.",
+    )
+    token = fields.Char(readonly=True, required=True, default=lambda self: uuid4())
+    secret = fields.Char()
+    secret_file = fields.Char()
+    filename = fields.Char()
+    salt = fields.Char(required=True)
+    iv = fields.Char(required=True)
+    pin = fields.Char(required=True, help="The pin needed to decrypt the share.")
+    accesses = fields.Integer(
+        "Access counter",
+        default=5,
+        help="Specifies how often a share can be accessed before deletion.",
+    )
+    expiration = fields.Datetime(
+        default=lambda self: datetime.now() + timedelta(days=7),
+        help="Specifies how long a share can be accessed until deletion.",
+    )
+
+    _sql_constraints = [
+        (
+            "value_check",
+            "CHECK(secret IS NOT NULL OR secret_file IS NOT NULL)",
+            _("No value found"),
+        ),
+    ]
+
+    @api.depends("token")
+    def _compute_url(self):
+        base_url = self.env["ir.config_parameter"].sudo().get_param("web.base.url")
+        for rec in self:
+            rec.share_link = f"{base_url}/vault/share/{rec.token}"
+
+    @api.model
+    def get(self, token):
+        rec = self.search([("token", "=", token)], limit=1)
+        if not rec:
+            return rec
+
+        if datetime.now() < rec.expiration and rec.accesses > 0:
+            rec.accesses -= 1
+            return rec
+
+        rec.unlink()
+        return None
+
+    @api.model
+    def clean(self):
+        now = datetime.now()
+        self.search([("expiration", "<=", now), ("accesses", "<=", 0)]).unlink()
diff --git a/vault_share/readme/CONTRIBUTORS.rst b/vault_share/readme/CONTRIBUTORS.rst
new file mode 100644
index 0000000000..e202826121
--- /dev/null
+++ b/vault_share/readme/CONTRIBUTORS.rst
@@ -0,0 +1 @@
+* Florian Kantelberg <florian.kantelberg@initos.com>
diff --git a/vault_share/readme/DESCRIPTION.rst b/vault_share/readme/DESCRIPTION.rst
new file mode 100644
index 0000000000..51e526ca52
--- /dev/null
+++ b/vault_share/readme/DESCRIPTION.rst
@@ -0,0 +1,6 @@
+This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
+
+Share
+=====
+
+This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn't be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.
diff --git a/vault_share/security/ir.model.access.csv b/vault_share/security/ir.model.access.csv
new file mode 100644
index 0000000000..46bc795e07
--- /dev/null
+++ b/vault_share/security/ir.model.access.csv
@@ -0,0 +1,2 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_vault_share,access_vault_share,model_vault_share,base.group_user,1,1,1,1
diff --git a/vault_share/security/ir_rule.xml b/vault_share/security/ir_rule.xml
new file mode 100644
index 0000000000..936aba6b94
--- /dev/null
+++ b/vault_share/security/ir_rule.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <record id="vault_share_owner" model="ir.rule">
+        <field name="name">vault.share.access.owner</field>
+        <field name="model_id" ref="vault_share.model_vault_share" />
+        <field name="domain_force">[('user_id', '=', user.id)]</field>
+        <field name="perm_create" eval="1" />
+        <field name="perm_write" eval="1" />
+        <field name="perm_unlink" eval="1" />
+        <field name="perm_read" eval="1" />
+    </record>
+</odoo>
diff --git a/vault_share/static/description/icon.png b/vault_share/static/description/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a0c9035d9b2247bbe8008a1601aafb0524a2c13d
GIT binary patch
literal 2287
zcmV<L2oU#)P)<h;3K|Lk000e1NJLTq002e+002e^1^@s6aW3M700004b3#c}2nYxW
zd<bNS000Q4Nkl<Zc%1E<U2Ggz6~})wyZ*{zJ8_7e=EENfF^Sr`F0E6<M};Z`qJ;-O
z6iU(}QBXsicV2k|#1jvoiU&|Zsz69kRSho)s7MtsZAgT0qR=L!NgVR!HU3<$cW3tU
zFn8wOJ2PwV?Cv;-?7WP}bI!Tv{O|vsbLL*#LS8?5{bwTA+f7?XI{=pdLjGh~Amm;B
zUMNY+d$zEYoc3B%l#k(OUtB7N-s^h0AHjI0yAcNrzYK%ktz0g%GQY&vpZt;){Q8G~
zctzZtze}N9#I3m6;Nf6Rrwu1X)M;JLaMH36hya{GkFXxvxKd6iy<jqoXKl(9dYT`;
zVPV9Xu`RmVIvL1q=Y{dlS=RS|^^&+=%14~l2dUTDKu$#UBF++{7n%f<pdsc2;Ku0b
z&tc|harr;&bh@$UMFA|l;E;oZhp0qeEfWwz4laZgQ^EKG7M7F?6wF|ezT$!E|H5F7
zkUt6EtS~{5{`mt3&jtumPm9Z&d<_(#;*vnH+*ZOaxFx8lAgkWR`tL13Y-Fdhv7HUy
z*D_8OJA~g?v9n4E+i@K|leL&5z^w>u1JM?9g1fDd5-sLv%rO|#VvfNWiDip926JK=
z(_)Um4v=awN51v&u-B{S_cL>B2{A3^n9NZ*ro|kCIkrNO7IOk{;;K@MIWos+2)CG{
zn3D|<)Am(_27=meiONxl(UW&{JLqy@yB4CN>1A>}uwyU7TX(UmyOXX=7Th9BYjfPV
zd!2Xkvn*AFniO9TwVxF0ha4xY7x72h$qLkr>p~`Tf~oUnHnKUT>G@NqF~Zmh6!JOb
zbY{z54juR?Pwp9Hpq=<@6e#DpJad-cT|CdfN)^qI80J{<aT)&0xO6*M7S{2fd|UX!
z2A%Xl^k=PY4)jD=FTA6t>?k?kr%s0Uf10m6e2{@m6+q&y@*L;RpXAq9?@|o>_eW}c
zC(u?-M%QNQImh14#1miR#CSqb0NVO^bo>a%$M(^eLe8;4)Rx_wUafi=KXjNQgT1sR
z#6(?Lc8`3PZ;TDmU3HxLs+Ib>W^<X-Kl(I>2YVBM;7~5Du<Ay^=^uH9FAw!JwOR#L
z$xjvG?4C-s+A_}J2Z!jY5t7yX8Gdo*6w}KNRwl>b&{I4+rZ2xv4m|it9=rJ)&Xk%{
zt?V#T9)f8y$7cV*5A%U)l_z|y{DYsL{v*>%j>ibMz_lwUd3pNZly$kb5uO@-fNYcc
zoS6NXlyi=~kB<y)tq~QNyEV<FwWystGt*oR$@cFaW1qcIZmTWl1UY82n3L@vt(`5N
zoADj83xxAc=UyJ_wSBdQm}3(NZ4Pt#wr!^;0W5tx4>D*)zpb|IIlxe)#OLVm$<|mE
z*Jq9`0>~hJ=49y3<r2UG<R0a#AAf=mcG+^qJJ>b+8D4y3Fs96Bd0(!lDc@FEA0gGj
z##J2&S`(^Oo1IMt4A9g6364GUF&0-=aN2V8wXb8t&dPWQ`J1d-d0*FZ#?xm`g+jTQ
z7#Q!$(v$059~8hT7Jc^`Vvejz6;HI{8%Zzc+*w#L%WP9Ghq=OnS!HVRH|F=Yfz&22
zr!YIi?bLv|!{xlI7|;N7LVZly%(2-$uqRPfN^+I+?{cvaUuBXq#}3MO>deWo`@m5q
zA0J8ym?D?2OmoNYbM(0CU`~~j$YwLgX87O{CMVJY1<Luq^7@tK>VEj~)W{rLVo7?;
z$uRuzQI1axrv?h8Yn=Ss+uV%nkn3cQy*`4CGRJ24p`%QGXqYXjAOg5~PEWnYsRdW{
zQ%yL1$a)BZ!5oRW+B1#r{RT~&GN76&ED#-xj6KWbV=02NdX3-z<u!ggTR=Lhnl)4$
zUh`(gWim&LQ_5$(8JBd5=>)xd#WPlOhnzMj4!39C<kfRiTr6ml682j^eTa)|oenvx
z7||@|bTTsb948*%({xY@%eT3D=K^oNbB?p~Yr%}KcluB-bF_0Mn!ub6MkbDOVyrPx
z%6Cum(y6zZYs=By)d}tz%S(CkWe4ME$ImIoGHMQUvigiS#+(jDC!XWj*xtrKS@=6I
z|LG0hErL~CVQz__DmHR%m6SQz@K<qt%;{kNq31dFNFAW8zQ-FEF0*JkluHX-dhegy
zC}RYb%8BO&%<-xcniF*}XUo3N^UZod0Vv&K>inO%5n>=ArvYQxrp=t7j|sL0f_p8U
zt=H!a?0A1e%cqvFa$r;c%EFedA3AfqxBha9VUA}7Pcf^$jq15d%LF?#LGF^nRow~n
zgOrX-f0UZf9F-Q(!Lc^(kc}NY->GCdNBLIERW8huF9EKDQ<`P!>>2X9J&4*5Er-p>
zIoV(>`bMZD=Onmpo&P1@o1P8E@h8~KCDE$4**Pb=gI8D1NdnEiIxA0>b8KUc1<Xm3
zbDTPIjQMR9bex*AzQDc8In{UY5-{i5r3+kNs{xO-D@@JICa8M%jycu~KlqkVOFPs7
z$`^X#HRb$>Eok4$&Yn*1tS3%SI4myaS#-@@;@=`UC-4I`<9f~^oJ%k}WdAuPu3G-b
zQ~PTNJv&#-tX)gBD$R3iHk$bKX3%#wT6Me^ssEKlf@)<4$Qx_3k(?9mb5w_{Eqawp
zg2ny6m2<otQ+16tTCHO21fbPpXY+E7txa)@IT~}!s?=gmaJLPlTFeQU6MwGMVvc`y
z9a>{8=B)oek@qumY=6dE%rTj>!Aa!(%N)DnI_9@Zi#b#r7uzkCYnuseM*rWL<181k
zt!2lDs>K{>$NA5yXX8^Zeo^%8+Ch6)2X-c_4eAFQdJdusZz1U0gE4w4CJiJ_4;@?u
zlA#y3<q_7?<*1^k$sq);>ryJLk-vVMSHJsHW&R73&x`q`c}k@c7=tSF`bk~PYt5OE
zlMow>8YlE<1Se-QPB3i0id|z8<J`9_+S}XN*3-)?-}$ix@LygOcaE+cnFRm<002ov
JPDHLkV1n|ya*F@}

literal 0
HcmV?d00001

diff --git a/vault_share/static/src/js/vault_fields.js b/vault_share/static/src/js/vault_fields.js
new file mode 100644
index 0000000000..13ee282ba7
--- /dev/null
+++ b/vault_share/static/src/js/vault_fields.js
@@ -0,0 +1,55 @@
+// © 2021 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+odoo.define("vault.share.fields", function (require) {
+    "use strict";
+
+    var core = require("web.core");
+    var sh_utils = require("vault.share.utils");
+    var utils = require("vault.utils");
+    var vault = require("vault");
+    var vault_fields = require("vault.fields");
+
+    var _t = core._t;
+
+    // Extend the widget to share
+    vault_fields.VaultField.include({
+        events: _.extend(vault_fields.VaultField.prototype.events, {
+            "click .o_vault_share": "_onShareValue",
+        }),
+
+        /**
+         * Share the value for an external user
+         *
+         * @private
+         * @param {OdooEvent} ev
+         */
+        _onShareValue: async function (ev) {
+            ev.stopPropagation();
+
+            const iv = await utils.generate_iv_base64();
+            const pin = sh_utils.generate_pin(sh_utils.PinSize);
+            const salt = utils.generate_bytes(utils.SaltLength).buffer;
+            const key = await utils.derive_key(pin, salt, 4000);
+            const public_key = await vault.get_public_key();
+            const value = await this._decrypt(this.value);
+
+            this.do_action({
+                type: "ir.actions.act_window",
+                title: _t("Share the secret"),
+                target: "new",
+                res_model: "vault.share",
+                views: [[false, "form"]],
+                context: {
+                    default_secret: await utils.sym_encrypt(key, value, iv),
+                    default_pin: await utils.asym_encrypt(
+                        public_key,
+                        pin + utils.generate_iv_base64()
+                    ),
+                    default_iv: iv,
+                    default_salt: utils.toBase64(salt),
+                },
+            });
+        },
+    });
+});
diff --git a/vault_share/static/src/js/vault_share.js b/vault_share/static/src/js/vault_share.js
new file mode 100644
index 0000000000..2af6783193
--- /dev/null
+++ b/vault_share/static/src/js/vault_share.js
@@ -0,0 +1,56 @@
+// © 2021 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+odoo.define("vault.share", function (require) {
+    "use strict";
+
+    require("web.dom_ready");
+
+    var utils = require("vault.utils");
+    var data = {};
+
+    // Find the elements in the document and check if they have values
+    function find_elements() {
+        for (const id of ["encrypted", "salt", "iv", "encrypted_file", "filename"])
+            if (!data[id]) {
+                const element = document.getElementById(id);
+                data[id] = element && element.value;
+            }
+    }
+
+    document.getElementById("pin").onchange = async function () {
+        find_elements();
+
+        // Derive the key from the pin
+        const key = await utils.derive_key(
+            this.value,
+            utils.fromBase64(data.salt),
+            4000
+        );
+
+        const secret = document.getElementById("secret");
+        const secret_file = document.getElementById("secret_file");
+        if (!secret || !secret_file) return;
+
+        // There is no secret to decrypt
+        if (!this.value) {
+            secret.setAttribute("class", "alert alert-danger col-12");
+            secret_file.setAttribute("class", "alert alert-danger col-12");
+            return;
+        }
+
+        // Decrypt the data and show the value
+        if (data.encrypted) {
+            secret.value = await utils.sym_decrypt(key, data.encrypted, data.iv);
+            secret.setAttribute("class", "alert alert-success col-12");
+        }
+
+        if (data.encrypted_file) {
+            const content = await utils.sym_decrypt(key, data.encrypted_file, data.iv);
+            const file = new File([atob(content)], data.filename);
+            secret_file.text = data.filename;
+            secret_file.setAttribute("href", window.URL.createObjectURL(file));
+            secret_file.setAttribute("class", "alert alert-success col-12");
+        }
+    };
+});
diff --git a/vault_share/static/src/js/vault_share_widget.js b/vault_share/static/src/js/vault_share_widget.js
new file mode 100644
index 0000000000..6b5c287c24
--- /dev/null
+++ b/vault_share/static/src/js/vault_share_widget.js
@@ -0,0 +1,355 @@
+// © 2021 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+odoo.define("vault.share.widget", function (require) {
+    "use strict";
+
+    var basic_fields = require("web.basic_fields");
+    var core = require("web.core");
+    var registry = require("web.field_registry");
+    var sh_utils = require("vault.share.utils");
+    var utils = require("vault.utils");
+    var vault = require("vault");
+    var vault_fields = require("vault.fields");
+
+    var QWeb = core.qweb;
+
+    // Widget used to view the encrypted pin
+    var VaultPinField = basic_fields.InputField.extend(vault_fields.VaultAbstract, {
+        supportedFieldTypes: ["char"],
+        events: _.extend({}, basic_fields.InputField.prototype.events, {
+            "click .o_vault_show": "_onShowValue",
+            "click .o_vault_clipboard": "_onCopyValue",
+        }),
+        template: "FieldPinVault",
+
+        /**
+         * Prepare the widget by evaluating the field attributes and setting the defaults
+         *
+         * @override
+         */
+        init: function () {
+            this._super.apply(this, arguments);
+
+            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
+        },
+
+        /**
+         * Decrypt the value using the private key of the vault and slice it to
+         * the actual pin size because there is a salt following
+         *
+         * @private
+         * @param {String} data
+         * @returns the decrypted data
+         */
+        _decrypt: async function (data) {
+            if (!data) return data;
+
+            const private_key = await vault.get_private_key();
+            const plain = await utils.asym_decrypt(private_key, data);
+            return plain.slice(0, this.pin_size);
+        },
+
+        /**
+         * Render the decrypted value or the stars
+         *
+         * @private
+         */
+        _renderReadonly: function () {
+            this._renderValue(this.decrypted_value || "********");
+        },
+
+        /**
+         * Render the decrypted value or the stars
+         *
+         * @private
+         */
+        _renderEdit: function () {
+            this._renderValue(this.decrypted_value || "********");
+        },
+
+        /**
+         * Render the field using the template
+         *
+         * @private
+         * @param {String} value
+         */
+        _renderValue: function (value) {
+            this.$el.html(
+                QWeb.render(this.template, {
+                    widget: self,
+                    value: value,
+                    show: !this.decrypted,
+                })
+            );
+        },
+    });
+
+    // Widget used to create shared outgoing secrets encrypted with a pin
+    var VaultShareField = vault_fields.VaultField.extend(vault_fields.VaultAbstract, {
+        events: _.extend({}, vault_fields.VaultField.prototype.events, {
+            "click .o_vault_save": "_onSaveValue",
+        }),
+        template: "FieldVaultShare",
+
+        /**
+         * Prepare the widget by evaluating the field attributes and setting the defaults
+         *
+         * @override
+         */
+        init: function () {
+            this._super.apply(this, arguments);
+
+            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
+            this.field_salt = this.attrs.salt || "salt";
+            this.field_pin = this.attrs.pin || "pin";
+        },
+
+        /**
+         * Encrypt the pin with a random salt to make it hard to guess him by
+         * encrypting every possilbilty with the public key. Store the pin in the
+         * proper field
+         *
+         * @private
+         */
+        _storePin: async function () {
+            const salt = utils.generate_iv_base64();
+            const crypted_pin = await utils.asym_encrypt(
+                await vault.get_public_key(),
+                this.pin + salt
+            );
+            this._setFieldValue(this.field_pin, crypted_pin);
+        },
+
+        /**
+         * Returns the pin from the class, record data, or generate a new pin if
+         * none s currently available
+         *
+         * @private
+         * @returns the pin
+         */
+        _getPin: async function () {
+            if (this.pin) return this.pin;
+
+            this.pin = this.recordData[this.field_pin];
+            if (this.pin) {
+                // Decrypt the pin and slice him to the configured pin size
+                const private_key = await vault.get_private_key();
+                const plain = await utils.asym_decrypt(private_key, this.pin);
+                this.pin = plain.slice(0, this.pin_size);
+                return this.pin;
+            }
+
+            // Generate a new pin and store it
+            this.pin = sh_utils.generate_pin(this.pin_size);
+            await this._storePin();
+            return this.pin;
+        },
+
+        /**
+         * Returns the salt from the class, record data, or generate a new salt if
+         * none is currently available
+         *
+         * @private
+         * @returns the salt
+         */
+        _getSalt: function () {
+            if (this.salt) return this.salt;
+
+            this.salt = this.recordData[this.field_salt];
+            if (this.salt) return this.salt;
+
+            // Generate a new salt and store him
+            this.salt = utils.toBase64(utils.generate_bytes(utils.SaltLength).buffer);
+            this._setFieldValue(this.field_salt, this.salt);
+            return this.salt;
+        },
+
+        /**
+         * Decrypt the encrypted data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} crypted
+         */
+        _decrypt: async function (crypted) {
+            const iv = this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(this._getSalt());
+
+            const key = await utils.derive_key(pin, salt, 4000);
+            return await utils.sym_decrypt(key, crypted, iv);
+        },
+
+        /**
+         * Encrypt the data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} data
+         */
+        _encrypt: async function (data) {
+            const iv = this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(this._getSalt());
+
+            const key = await utils.derive_key(pin, salt, 4000);
+            return await utils.sym_encrypt(key, data, iv);
+        },
+
+        /**
+         * Resets the content to the formated value in readonly mode.
+         *
+         * @override
+         * @private
+         */
+        _renderReadonly: function () {
+            this.$el.html(
+                QWeb.render(this.template, {
+                    widget: self,
+                    value: this.decrypted_value || "********",
+                    show: !this.decrypted,
+                })
+            );
+        },
+
+        /**
+         * @override
+         * @returns {String} the content of the input
+         */
+        _getValue: function () {
+            return this.$input.val();
+        },
+    });
+
+    // Widget used to view shared incoming secrets encrypted with public keys
+    var VaultShareFile = vault_fields.VaultFile.extend(vault_fields.VaultAbstract, {
+        store_model: "vault.file",
+        template: "FileVaultShare",
+        events: _.extend({}, vault_fields.VaultFile.prototype.events, {
+            "click .o_vault_save": "_onSaveValue",
+        }),
+
+        /**
+         * Prepare the widget by evaluating the field attributes and setting the defaults
+         *
+         * @override
+         */
+        init: function () {
+            this._super.apply(this, arguments);
+
+            this.field_key = this.attrs.key || "key";
+            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
+            this.field_salt = this.attrs.salt || "salt";
+            this.field_pin = this.attrs.pin || "pin";
+        },
+
+        /**
+         * Encrypt the pin with a random salt to make it hard to guess him by
+         * encrypting every possilbilty with the public key. Store the pin in the
+         * proper field
+         *
+         * @private
+         */
+        _storePin: async function () {
+            const salt = utils.generate_iv_base64();
+            const crypted_pin = await utils.asym_encrypt(
+                await vault.get_public_key(),
+                this.pin + salt
+            );
+            this._setFieldValue(this.field_pin, crypted_pin);
+        },
+
+        /**
+         * Returns the pin from the class, record data, or generate a new pin if
+         * none s currently available
+         *
+         * @private
+         * @returns the pin
+         */
+        _getPin: async function () {
+            if (this.pin) return this.pin;
+
+            this.pin = this.recordData[this.field_pin];
+            if (this.pin) {
+                // Decrypt the pin and slice him to the configured pin size
+                const private_key = await vault.get_private_key();
+                const plain = await utils.asym_decrypt(private_key, this.pin);
+                this.pin = plain.slice(0, this.pin_size);
+                return this.pin;
+            }
+
+            // Generate a new pin and store it
+            this.pin = sh_utils.generate_pin(this.pin_size);
+            await this._storePin();
+            return this.pin;
+        },
+
+        /**
+         * Returns the salt from the class, record data, or generate a new salt if
+         * none is currently available
+         *
+         * @private
+         * @returns the salt
+         */
+        _getSalt: function () {
+            if (this.salt) return this.salt;
+
+            this.salt = this.recordData[this.field_salt];
+            if (this.salt) return this.salt;
+
+            // Generate a new salt and store him
+            this.salt = utils.toBase64(utils.generate_bytes(utils.SaltLength).buffer);
+            this._setFieldValue(this.field_salt, this.salt);
+            return this.salt;
+        },
+
+        _renderReadonly: function () {
+            this.do_toggle(Boolean(this.value));
+            if (this.value) {
+                this.$el.html(
+                    QWeb.render(this.template, {
+                        widget: this,
+                        filename: this.filename_value,
+                    })
+                );
+
+                const $el = this.$(".link");
+                if (this.recordData.id) $el.css("cursor", "pointer");
+                else $el.css("cursor", "not-allowed");
+            }
+        },
+
+        /**
+         * Decrypt the encrypted data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} crypted
+         */
+        _decrypt: async function (crypted) {
+            const iv = this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(this._getSalt());
+
+            const key = await utils.derive_key(pin, salt, 4000);
+            return await utils.sym_decrypt(key, crypted, iv);
+        },
+
+        /**
+         * Encrypt the data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} data
+         */
+        _encrypt: async function (data) {
+            const iv = this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(this._getSalt());
+
+            const key = await utils.derive_key(pin, salt, 4000);
+            return await utils.sym_encrypt(key, data, iv);
+        },
+    });
+
+    registry.add("vault_pin", VaultPinField);
+    registry.add("vault_share", VaultShareField);
+    registry.add("vault_share_file", VaultShareFile);
+});
diff --git a/vault_share/static/src/js/vault_utils.js b/vault_share/static/src/js/vault_utils.js
new file mode 100644
index 0000000000..c85a522f3d
--- /dev/null
+++ b/vault_share/static/src/js/vault_utils.js
@@ -0,0 +1,19 @@
+// © 2021 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+odoo.define("vault.share.utils", function (require) {
+    "use strict";
+
+    const PinSize = 5;
+
+    var utils = require("vault.utils");
+
+    function generate_pin(pin_size) {
+        return utils.generate_secret(pin_size, "0123456789");
+    }
+
+    return {
+        PinSize: PinSize,
+        generate_pin: generate_pin,
+    };
+});
diff --git a/vault_share/static/src/scss/vault_share.scss b/vault_share/static/src/scss/vault_share.scss
new file mode 100644
index 0000000000..09e4e6b160
--- /dev/null
+++ b/vault_share/static/src/scss/vault_share.scss
@@ -0,0 +1,3 @@
+.o_vault_share {
+    white-space: pre-wrap;
+}
diff --git a/vault_share/static/src/xml/templates.xml b/vault_share/static/src/xml/templates.xml
new file mode 100644
index 0000000000..0f6f2334a6
--- /dev/null
+++ b/vault_share/static/src/xml/templates.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<templates id="template" xml:space="preserve">
+    <t t-name="FieldVaultShare">
+        <input class="o_vault_share" t-if="widget.mode == 'edit'" t-esc="value" />
+        <div class="o_vault" t-else="">
+            <t t-call="vault.buttons" />
+            <button
+                class="btn fa fa-save o_vault_save"
+                title="Save in a vault"
+                aria-label="Save in a vault"
+            />
+
+            <span class="o_vault_share" t-esc="value" />
+        </div>
+    </t>
+
+    <t t-name="FileVaultShare">
+        <t t-if="widget.mode == 'edit'" t-call="FieldBinaryFile" />
+        <div class="o_vault" t-else="">
+            <button
+                class="btn fa fa-save o_vault_save"
+                title="Save in a vault"
+                aria-label="Save in a vault"
+            />
+
+            <span class="link"><span class="fa fa-download" /> <t
+                    t-esc="filename"
+                /></span>
+        </div>
+    </t>
+
+    <t t-name="FieldPinVault">
+        <div class="o_vault">
+            <t t-call="vault.buttons" />
+            <span class="o_vault_value" t-esc="value" />
+        </div>
+    </t>
+
+    <t t-extend="FieldVault">
+        <t t-jquery="span.o_vault_value" t-operation="before">
+            <button
+                class="btn fa fa-external-link o_vault_share"
+                title="Share the secret with an external user"
+                aria-label="Share the secret with an external user"
+            />
+        </t>
+    </t>
+</templates>
diff --git a/vault_share/tests/__init__.py b/vault_share/tests/__init__.py
new file mode 100644
index 0000000000..a2758c5219
--- /dev/null
+++ b/vault_share/tests/__init__.py
@@ -0,0 +1,4 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from . import test_share
diff --git a/vault_share/tests/test_share.py b/vault_share/tests/test_share.py
new file mode 100644
index 0000000000..cac8a41c2c
--- /dev/null
+++ b/vault_share/tests/test_share.py
@@ -0,0 +1,44 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+from datetime import datetime
+from uuid import uuid4
+
+from odoo.tests import TransactionCase
+
+_logger = logging.getLogger(__name__)
+
+
+class TestShare(TransactionCase):
+    def test_share(self):
+        user = self.env.user
+        model = self.env["vault.share"]
+        vals = {
+            "name": f"Share {user.name}",
+            "secret": "secret",
+            "salt": "sa17",
+            "iv": "1v",
+            "pin": "12345",
+        }
+
+        share = model.create(vals)
+        self.assertEqual(share, model.get(share.token))
+        self.assertIn(share.token, share.share_link)
+
+        # Nothing should happen
+        model.clean()
+        self.assertEqual(share, model.get(share.token))
+
+        # Deletion because of accesses
+        share = model.create(vals)
+        share.accesses = 0
+        self.assertEqual(None, model.get(share.token))
+
+        # Deletion because of expiration
+        share = model.create(vals)
+        share.expiration = datetime(1970, 1, 1)
+        self.assertEqual(None, model.get(share.token))
+
+        # Search for invalid token
+        self.assertEqual(model, model.get(uuid4()))
diff --git a/vault_share/views/assets.xml b/vault_share/views/assets.xml
new file mode 100644
index 0000000000..905f8fd346
--- /dev/null
+++ b/vault_share/views/assets.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <template id="assets_backend" inherit_id="web.assets_backend">
+        <xpath expr="." position="inside">
+            <script
+                type="text/javascript"
+                src="/vault_share/static/src/js/vault_fields.js"
+            />
+            <script
+                type="text/javascript"
+                src="/vault_share/static/src/js/vault_share_widget.js"
+            />
+            <script
+                type="text/javascript"
+                src="/vault_share/static/src/js/vault_utils.js"
+            />
+            <link
+                rel="stylesheet"
+                type="text/scss"
+                href="/vault_share/static/src/scss/vault_share.scss"
+            />
+        </xpath>
+    </template>
+
+    <template id="share_frontend">
+        <script type="text/javascript" src="/vault/static/src/js/vault_utils.js" />
+        <script
+            type="text/javascript"
+            src="/vault_share/static/src/js/vault_share.js"
+        />
+    </template>
+</odoo>
diff --git a/vault_share/views/menuitems.xml b/vault_share/views/menuitems.xml
new file mode 100644
index 0000000000..add9343225
--- /dev/null
+++ b/vault_share/views/menuitems.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <record id="action_vault_share" model="ir.actions.act_window">
+        <field name="name">Shares</field>
+        <field name="res_model">vault.share</field>
+        <field name="view_mode">tree,form</field>
+    </record>
+
+    <menuitem
+        id="menu_vault_share"
+        groups="base.group_user"
+        parent="vault.menu_vault"
+        action="action_vault_share"
+        sequence="60"
+    />
+</odoo>
diff --git a/vault_share/views/templates.xml b/vault_share/views/templates.xml
new file mode 100644
index 0000000000..65aa8a8f6c
--- /dev/null
+++ b/vault_share/views/templates.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <template id="share">
+        <t t-call="web.login_layout">
+            <t t-call-assets="vault_share.share_frontend" t-css="false" />
+
+            <input type="hidden" id="encrypted" t-att-value="encrypted" />
+            <input type="hidden" id="encrypted_file" t-att-value="encrypted_file" />
+            <input type="hidden" id="filename" t-att-value="filename" />
+            <input type="hidden" id="salt" t-att-value="salt" />
+            <input type="hidden" id="iv" t-att-value="iv" />
+
+            <div class="form-group">
+                <label for="pin">Enter the pin:</label>
+                <input type="text" id="pin" class="form-control" />
+            </div>
+
+            <p class="alert alert-danger" t-if="error" role="alert" t-esc="error" />
+            <p
+                class="alert alert-success"
+                t-if="message"
+                role="status"
+                t-esc="message"
+            />
+
+            <div class="form-group" t-if="encrypted">
+                <label for="secret">Shared secret:</label>
+                <input
+                    type="text"
+                    id="secret"
+                    readonly="readonly"
+                    class="alert alert-danger col-12"
+                />
+            </div>
+
+            <div class="form-group" t-if="encrypted_file">
+                <label for="secret">Shared file:</label><vr /><a
+                    href=""
+                    id="secret_file"
+                />
+            </div>
+        </t>
+    </template>
+</odoo>
diff --git a/vault_share/views/vault_share_views.xml b/vault_share/views/vault_share_views.xml
new file mode 100644
index 0000000000..4b3ef95a93
--- /dev/null
+++ b/vault_share/views/vault_share_views.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <record id="view_vault_share_tree" model="ir.ui.view">
+        <field name="model">vault.share</field>
+        <field name="arch" type="xml">
+            <tree>
+                <field name="name" />
+            </tree>
+        </field>
+    </record>
+
+    <record id="view_vault_share_form" model="ir.ui.view">
+        <field name="model">vault.share</field>
+        <field name="arch" type="xml">
+            <form>
+                <sheet>
+                    <group>
+                        <field name="token" invisible="1" />
+                        <field name="iv" invisible="1" />
+                        <field name="salt" invisible="1" />
+                        <field name="filename" invisible="1" />
+
+                        <field name="name" />
+                        <field name="share_link" widget="url" />
+                        <field name="pin" widget="vault_pin" />
+                        <field name="expiration" />
+                        <field name="accesses" />
+                        <field name="secret" widget="vault_share" />
+                        <field
+                            name="secret_file"
+                            filename="filename"
+                            widget="vault_share_file"
+                        />
+                    </group>
+                </sheet>
+            </form>
+        </field>
+    </record>
+</odoo>

From 0ac2f505a37cf2176ee8b33796a4c80e835c4eb2 Mon Sep 17 00:00:00 2001
From: oca-travis <oca+oca-travis@odoo-community.org>
Date: Tue, 21 Sep 2021 14:17:48 +0000
Subject: [PATCH 02/21] Update vault_share.pot

---
 vault_share/i18n/vault_share.pot | 208 +++++++++++++++++++++++++++++++
 1 file changed, 208 insertions(+)
 create mode 100644 vault_share/i18n/vault_share.pot

diff --git a/vault_share/i18n/vault_share.pot b/vault_share/i18n/vault_share.pot
new file mode 100644
index 0000000000..9ab807534b
--- /dev/null
+++ b/vault_share/i18n/vault_share.pot
@@ -0,0 +1,208 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* vault_share
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 14.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
+msgid "Access counter"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.actions.server,name:vault_share.cron_share_clean_ir_actions_server
+#: model:ir.cron,cron_name:vault_share.cron_share_clean
+#: model:ir.cron,name:vault_share.cron_share_clean
+msgid "Clean outgoing share"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
+msgid "Created by"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_date
+msgid "Created on"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Enter the pin:"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__expiration
+msgid "Expiration"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__filename
+msgid "Filename"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__id
+msgid "ID"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "Invalid token"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__iv
+msgid "Iv"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__name
+msgid "Name"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model.constraint,message:vault_share.constraint_vault_share_value_check
+#, python-format
+msgid "No value found"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__pin
+msgid "Pin"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__salt
+msgid "Salt"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#, python-format
+msgid "Save in a vault"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret
+msgid "Secret"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret_file
+msgid "Secret File"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__share_link
+msgid "Share URL"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/js/vault_fields.js:0
+#, python-format
+msgid "Share the secret"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#, python-format
+msgid "Share the secret with an external user"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared file:"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared secret:"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.actions.act_window,name:vault_share.action_vault_share
+#: model:ir.ui.menu,name:vault_share.menu_vault_share
+msgid "Shares"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__expiration
+msgid "Specifies how long a share can be accessed until deletion."
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__accesses
+msgid "Specifies how often a share can be accessed before deletion."
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__pin
+msgid "The pin needed to decrypt the share."
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "The secret expired"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__token
+msgid "Token"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__user_id
+msgid "User"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__share_link
+msgid "Using this link and pin people can access the secret."
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model,name:vault_share.model_vault_share
+#, python-format
+msgid "Vault share outgoing secrets"
+msgstr ""

From 6fcc7c5be658b7c50fc4eaadf317881c0bbda32b Mon Sep 17 00:00:00 2001
From: OCA-git-bot <oca-git-bot@odoo-community.org>
Date: Tue, 21 Sep 2021 14:53:35 +0000
Subject: [PATCH 03/21] README.rst

---
 vault_share/README.rst                    |  78 ++++
 vault_share/static/description/index.html | 412 ++++++++++++++++++++++
 2 files changed, 490 insertions(+)
 create mode 100644 vault_share/README.rst
 create mode 100644 vault_share/static/description/index.html

diff --git a/vault_share/README.rst b/vault_share/README.rst
new file mode 100644
index 0000000000..79c29aa762
--- /dev/null
+++ b/vault_share/README.rst
@@ -0,0 +1,78 @@
+=============
+Vault - Share
+=============
+
+.. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
+    :target: https://github.com/OCA/server-auth/tree/14.0/vault_share
+    :alt: OCA/server-auth
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/server-auth-14-0/server-auth-14-0-vault_share
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runbot-Try%20me-875A7B.png
+    :target: https://runbot.odoo-community.org/runbot/251/14.0
+    :alt: Try me on Runbot
+
+|badge1| |badge2| |badge3| |badge4| |badge5| 
+
+This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
+
+Share
+=====
+
+This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn't be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-auth/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us smashing it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2014.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+~~~~~~~
+
+* initOS GmbH
+
+Contributors
+~~~~~~~~~~~~
+
+* Florian Kantelberg <florian.kantelberg@initos.com>
+
+Maintainers
+~~~~~~~~~~~
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/14.0/vault_share>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/vault_share/static/description/index.html b/vault_share/static/description/index.html
new file mode 100644
index 0000000000..915b781b46
--- /dev/null
+++ b/vault_share/static/description/index.html
@@ -0,0 +1,412 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils 0.15.1: http://docutils.sourceforge.net/" />
+<title>Vault - Share</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 7952 2016-07-26 18:15:59Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+
+See http://docutils.sf.net/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: grey; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document" id="vault-share">
+<h1 class="title">Vault - Share</h1>
+
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external" href="https://github.com/OCA/server-auth/tree/14.0/vault_share"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external" href="https://translation.odoo-community.org/projects/server-auth-14-0/server-auth-14-0-vault_share"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external" href="https://runbot.odoo-community.org/runbot/251/14.0"><img alt="Try me on Runbot" src="https://img.shields.io/badge/runbot-Try%20me-875A7B.png" /></a></p>
+<p>This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.</p>
+<div class="section" id="share">
+<h1>Share</h1>
+<p>This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn’t be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.</p>
+<p><strong>Table of contents</strong></p>
+</div>
+<div class="section" id="bug-tracker">
+<h1>Bug Tracker</h1>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-auth/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us smashing it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2014.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h1>Credits</h1>
+<div class="section" id="authors">
+<h2>Authors</h2>
+<ul class="simple">
+<li>initOS GmbH</li>
+</ul>
+</div>
+<div class="section" id="contributors">
+<h2>Contributors</h2>
+<ul class="simple">
+<li>Florian Kantelberg &lt;<a class="reference external" href="mailto:florian.kantelberg&#64;initos.com">florian.kantelberg&#64;initos.com</a>&gt;</li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h2>Maintainers</h2>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org"><img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" /></a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/14.0/vault_share">OCA/server-auth</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</body>
+</html>

From 67d75e2e7e5f0edf4f03c33e012e3bf3370b7b1e Mon Sep 17 00:00:00 2001
From: fkantelberg <florian.kantelberg@initos.com>
Date: Wed, 27 Oct 2021 18:32:33 +0200
Subject: [PATCH 04/21] General fixes and improvements of the vault - Send
 wizard couldn't select all possible users due to access rights - Disable the
 features if browser isn't using a secure context (https/localhost) - Load
 required assets in inbox and share frontends - Allow the user to switch a
 parent of an entry within the same vault - Allow to create entries for vaults
 using the main menu Entries - Fix bug that encrypted a share twice due to
 multiple extension with VaultAbstract - Fix a bug on share create that throws
 a warning about changed values

---
 vault_share/__manifest__.py                   |  5 +-
 vault_share/controllers/main.py               |  3 +-
 vault_share/models/__init__.py                |  2 +-
 vault_share/models/res_company.py             | 10 +++
 vault_share/models/res_config_settings.py     | 24 +++++++
 vault_share/models/vault_share.py             | 16 ++++-
 vault_share/models/vault_share_log.py         | 22 +++++++
 vault_share/security/ir.model.access.csv      |  1 +
 vault_share/security/ir_rule.xml              | 10 +++
 vault_share/static/src/js/vault_share.js      |  4 +-
 .../static/src/js/vault_share_widget.js       | 16 ++++-
 vault_share/static/src/xml/templates.xml      | 15 ++++-
 vault_share/tests/test_share.py               | 63 ++++++++++++++-----
 vault_share/views/assets.xml                  |  1 +
 vault_share/views/menuitems.xml               |  2 +-
 .../views/res_config_settings_views.xml       | 18 ++++++
 vault_share/views/vault_share_views.xml       | 11 +++-
 17 files changed, 193 insertions(+), 30 deletions(-)
 create mode 100644 vault_share/models/res_company.py
 create mode 100644 vault_share/models/res_config_settings.py
 create mode 100644 vault_share/models/vault_share_log.py
 create mode 100644 vault_share/views/res_config_settings_views.xml

diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
index cdbf549b35..80235e1c1f 100644
--- a/vault_share/__manifest__.py
+++ b/vault_share/__manifest__.py
@@ -5,9 +5,9 @@
     "name": "Vault - Share",
     "summary": "Implementation of a mechanism to share secrets",
     "license": "AGPL-3",
-    "version": "14.0.1.0.0",
+    "version": "14.0.1.1.0",
     "website": "https://github.com/OCA/server-auth",
-    "application": True,
+    "application": False,
     "author": "initOS GmbH, Odoo Community Association (OCA)",
     "category": "Vault",
     "depends": ["vault"],
@@ -17,6 +17,7 @@
         "security/ir_rule.xml",
         "views/assets.xml",
         "views/menuitems.xml",
+        "views/res_config_settings_views.xml",
         "views/templates.xml",
         "views/vault_share_views.xml",
     ],
diff --git a/vault_share/controllers/main.py b/vault_share/controllers/main.py
index 4d908f0669..e51f703cbf 100644
--- a/vault_share/controllers/main.py
+++ b/vault_share/controllers/main.py
@@ -13,7 +13,8 @@ class Controller(http.Controller):
     @http.route("/vault/share/<string:token>", type="http", auth="public")
     def vault_share(self, token):
         ctx = {"disable_footer": True, "token": token}
-        secret = request.env["vault.share"].sudo().get(token)
+        share = request.env["vault.share"].sudo()
+        secret = share.get(token, ip=request.httprequest.remote_addr)
         if secret is None:
             ctx["error"] = _("The secret expired")
             return request.render("vault_share.share", ctx)
diff --git a/vault_share/models/__init__.py b/vault_share/models/__init__.py
index 51a08ee32d..e6b947e32a 100644
--- a/vault_share/models/__init__.py
+++ b/vault_share/models/__init__.py
@@ -1,4 +1,4 @@
 # © 2021 Florian Kantelberg - initOS GmbH
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
-from . import vault_share
+from . import res_company, res_config_settings, vault_share, vault_share_log
diff --git a/vault_share/models/res_company.py b/vault_share/models/res_company.py
new file mode 100644
index 0000000000..8eac8cd823
--- /dev/null
+++ b/vault_share/models/res_company.py
@@ -0,0 +1,10 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+from odoo import fields, models
+
+
+class RecCompany(models.Model):
+    _inherit = "res.company"
+
+    vault_share_delay = fields.Integer(default=0)
diff --git a/vault_share/models/res_config_settings.py b/vault_share/models/res_config_settings.py
new file mode 100644
index 0000000000..15b04def40
--- /dev/null
+++ b/vault_share/models/res_config_settings.py
@@ -0,0 +1,24 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+
+from odoo import api, fields, models
+
+_logger = logging.getLogger(__name__)
+
+
+class ResConfigSettings(models.TransientModel):
+    _inherit = "res.config.settings"
+
+    vault_share_delay = fields.Integer(
+        string="Delayed Deletion",
+        related="company_id.vault_share_delay",
+        readonly=False,
+        help="Delays the deletion of a share. After the expiration date it continues "
+        "to stay inaccessible",
+    )
+
+    @api.onchange("vault_share_delay")
+    def _on_change_mins(self):
+        self.vault_share_delay = max(0, self.vault_share_delay)
diff --git a/vault_share/models/vault_share.py b/vault_share/models/vault_share.py
index 24da5c41a9..9eb337bab2 100644
--- a/vault_share/models/vault_share.py
+++ b/vault_share/models/vault_share.py
@@ -38,6 +38,7 @@ class VaultShare(models.Model):
         default=lambda self: datetime.now() + timedelta(days=7),
         help="Specifies how long a share can be accessed until deletion.",
     )
+    log_ids = fields.One2many("vault.share.log", "share_id", "Log", readonly=True)
 
     _sql_constraints = [
         (
@@ -54,19 +55,28 @@ def _compute_url(self):
             rec.share_link = f"{base_url}/vault/share/{rec.token}"
 
     @api.model
-    def get(self, token):
+    def get(self, token, ip=None):
         rec = self.search([("token", "=", token)], limit=1)
         if not rec:
             return rec
 
         if datetime.now() < rec.expiration and rec.accesses > 0:
             rec.accesses -= 1
+            log = _("The share was accessed by %s via %s")
+            rec.log_ids = [(0, 0, {"name": log % (self.env.user.name, ip)})]
             return rec
 
-        rec.unlink()
         return None
 
+    @api.model
+    def create(self, vals):
+        rec = super().create(vals)
+        log = _("The share was created by %s")
+        rec.log_ids = [(0, 0, {"name": log % self.env.user.name})]
+        return rec
+
     @api.model
     def clean(self):
         now = datetime.now()
-        self.search([("expiration", "<=", now), ("accesses", "<=", 0)]).unlink()
+        offset = timedelta(days=self.env.company.vault_share_delay)
+        self.search([("expiration", "<=", now + offset)]).unlink()
diff --git a/vault_share/models/vault_share_log.py b/vault_share/models/vault_share_log.py
new file mode 100644
index 0000000000..c8c2ef047e
--- /dev/null
+++ b/vault_share/models/vault_share_log.py
@@ -0,0 +1,22 @@
+# © 2021 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+
+from odoo import _, fields, models
+
+_logger = logging.getLogger(__name__)
+
+
+class VaultShareLog(models.Model):
+    _name = "vault.share.log"
+    _description = _("Vault share log")
+    _order = "create_date DESC"
+
+    share_id = fields.Many2one(
+        "vault.share",
+        ondelete="cascade",
+        readonly=True,
+        required=True,
+    )
+    name = fields.Char(readonly=True)
diff --git a/vault_share/security/ir.model.access.csv b/vault_share/security/ir.model.access.csv
index 46bc795e07..54569a817c 100644
--- a/vault_share/security/ir.model.access.csv
+++ b/vault_share/security/ir.model.access.csv
@@ -1,2 +1,3 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_vault_share,access_vault_share,model_vault_share,base.group_user,1,1,1,1
+access_vault_share_log,access_vault_share_log,model_vault_share_log,base.group_user,1,1,1,1
diff --git a/vault_share/security/ir_rule.xml b/vault_share/security/ir_rule.xml
index 936aba6b94..e9a1dc2576 100644
--- a/vault_share/security/ir_rule.xml
+++ b/vault_share/security/ir_rule.xml
@@ -9,4 +9,14 @@
         <field name="perm_unlink" eval="1" />
         <field name="perm_read" eval="1" />
     </record>
+
+    <record id="vault_share_log_owner" model="ir.rule">
+        <field name="name">vault.share.log.access.owner</field>
+        <field name="model_id" ref="vault_share.model_vault_share_log" />
+        <field name="domain_force">[('share_id.user_id', '=', user.id)]</field>
+        <field name="perm_create" eval="1" />
+        <field name="perm_write" eval="1" />
+        <field name="perm_unlink" eval="1" />
+        <field name="perm_read" eval="1" />
+    </record>
 </odoo>
diff --git a/vault_share/static/src/js/vault_share.js b/vault_share/static/src/js/vault_share.js
index 2af6783193..81b8482c9f 100644
--- a/vault_share/static/src/js/vault_share.js
+++ b/vault_share/static/src/js/vault_share.js
@@ -19,6 +19,8 @@ odoo.define("vault.share", function (require) {
     }
 
     document.getElementById("pin").onchange = async function () {
+        if (!utils.supported()) return;
+
         find_elements();
 
         // Derive the key from the pin
@@ -30,7 +32,7 @@ odoo.define("vault.share", function (require) {
 
         const secret = document.getElementById("secret");
         const secret_file = document.getElementById("secret_file");
-        if (!secret || !secret_file) return;
+        if (!secret && !secret_file) return;
 
         // There is no secret to decrypt
         if (!this.value) {
diff --git a/vault_share/static/src/js/vault_share_widget.js b/vault_share/static/src/js/vault_share_widget.js
index 6b5c287c24..a897667b52 100644
--- a/vault_share/static/src/js/vault_share_widget.js
+++ b/vault_share/static/src/js/vault_share_widget.js
@@ -75,6 +75,7 @@ odoo.define("vault.share.widget", function (require) {
          * @param {String} value
          */
         _renderValue: function (value) {
+            const self = this;
             this.$el.html(
                 QWeb.render(this.template, {
                     widget: self,
@@ -86,7 +87,7 @@ odoo.define("vault.share.widget", function (require) {
     });
 
     // Widget used to create shared outgoing secrets encrypted with a pin
-    var VaultShareField = vault_fields.VaultField.extend(vault_fields.VaultAbstract, {
+    var VaultShareField = vault_fields.VaultField.extend({
         events: _.extend({}, vault_fields.VaultField.prototype.events, {
             "click .o_vault_save": "_onSaveValue",
         }),
@@ -172,6 +173,10 @@ odoo.define("vault.share.widget", function (require) {
          * @param {String} crypted
          */
         _decrypt: async function (crypted) {
+            if (crypted === false) return false;
+
+            if (!utils.supported()) return null;
+
             const iv = this._getIV();
             const pin = await this._getPin();
             const salt = utils.fromBase64(this._getSalt());
@@ -187,6 +192,8 @@ odoo.define("vault.share.widget", function (require) {
          * @param {String} data
          */
         _encrypt: async function (data) {
+            if (!utils.supported()) return null;
+
             const iv = this._getIV();
             const pin = await this._getPin();
             const salt = utils.fromBase64(this._getSalt());
@@ -202,6 +209,7 @@ odoo.define("vault.share.widget", function (require) {
          * @private
          */
         _renderReadonly: function () {
+            const self = this;
             this.$el.html(
                 QWeb.render(this.template, {
                     widget: self,
@@ -221,7 +229,7 @@ odoo.define("vault.share.widget", function (require) {
     });
 
     // Widget used to view shared incoming secrets encrypted with public keys
-    var VaultShareFile = vault_fields.VaultFile.extend(vault_fields.VaultAbstract, {
+    var VaultShareFile = vault_fields.VaultFile.extend({
         store_model: "vault.file",
         template: "FileVaultShare",
         events: _.extend({}, vault_fields.VaultFile.prototype.events, {
@@ -325,6 +333,8 @@ odoo.define("vault.share.widget", function (require) {
          * @param {String} crypted
          */
         _decrypt: async function (crypted) {
+            if (!utils.supported()) return null;
+
             const iv = this._getIV();
             const pin = await this._getPin();
             const salt = utils.fromBase64(this._getSalt());
@@ -340,6 +350,8 @@ odoo.define("vault.share.widget", function (require) {
          * @param {String} data
          */
         _encrypt: async function (data) {
+            if (!utils.supported()) return null;
+
             const iv = this._getIV();
             const pin = await this._getPin();
             const salt = utils.fromBase64(this._getSalt());
diff --git a/vault_share/static/src/xml/templates.xml b/vault_share/static/src/xml/templates.xml
index 0f6f2334a6..f8a2c9b9c9 100644
--- a/vault_share/static/src/xml/templates.xml
+++ b/vault_share/static/src/xml/templates.xml
@@ -1,7 +1,10 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <templates id="template" xml:space="preserve">
     <t t-name="FieldVaultShare">
-        <input class="o_vault_share" t-if="widget.mode == 'edit'" t-esc="value" />
+        <div class="o_vault o_vault_error" t-if="!widget.supported()">
+            <span>*******</span>
+        </div>
+        <input class="o_vault_share" t-elif="widget.mode == 'edit'" t-esc="value" />
         <div class="o_vault" t-else="">
             <t t-call="vault.buttons" />
             <button
@@ -15,7 +18,10 @@
     </t>
 
     <t t-name="FileVaultShare">
-        <t t-if="widget.mode == 'edit'" t-call="FieldBinaryFile" />
+        <div class="o_vault o_vault_error" t-if="!widget.supported()">
+            <span>*******</span>
+        </div>
+        <t t-elif="widget.mode == 'edit'" t-call="FieldBinaryFile" />
         <div class="o_vault" t-else="">
             <button
                 class="btn fa fa-save o_vault_save"
@@ -30,7 +36,10 @@
     </t>
 
     <t t-name="FieldPinVault">
-        <div class="o_vault">
+        <div class="o_vault o_vault_error" t-if="!widget.supported()">
+            <span>*******</span>
+        </div>
+        <div class="o_vault" t-else="">
             <t t-call="vault.buttons" />
             <span class="o_vault_value" t-esc="value" />
         </div>
diff --git a/vault_share/tests/test_share.py b/vault_share/tests/test_share.py
index cac8a41c2c..dab6176fbf 100644
--- a/vault_share/tests/test_share.py
+++ b/vault_share/tests/test_share.py
@@ -3,42 +3,75 @@
 
 import logging
 from datetime import datetime
+from unittest.mock import patch
 from uuid import uuid4
 
 from odoo.tests import TransactionCase
+from odoo.tools import mute_logger
+
+from ..controllers import main
 
 _logger = logging.getLogger(__name__)
 
 
 class TestShare(TransactionCase):
-    def test_share(self):
-        user = self.env.user
-        model = self.env["vault.share"]
-        vals = {
-            "name": f"Share {user.name}",
+    def setUp(self):
+        super().setUp()
+
+        self.user = self.env.user
+        self.vals = {
+            "name": f"Share {self.user.name}",
             "secret": "secret",
             "salt": "sa17",
             "iv": "1v",
             "pin": "12345",
         }
 
-        share = model.create(vals)
-        self.assertEqual(share, model.get(share.token))
-        self.assertIn(share.token, share.share_link)
+        self.share = self.env["vault.share"].create(self.vals)
+
+        patcher = patch("odoo.http.request")
+        self.addCleanup(patcher.stop)
+        patcher.start()
+
+    @mute_logger("odoo.sql_db")
+    def test_share(self):
+        self.assertEqual(self.share, self.share.get(self.share.token))
+        self.assertIn(self.share.token, self.share.share_link)
 
         # Nothing should happen
-        model.clean()
-        self.assertEqual(share, model.get(share.token))
+        self.share.clean()
+        self.assertEqual(self.share, self.share.get(self.share.token))
 
         # Deletion because of accesses
-        share = model.create(vals)
+        share = self.share.create(self.vals)
         share.accesses = 0
-        self.assertEqual(None, model.get(share.token))
+        self.assertEqual(None, share.get(share.token))
 
         # Deletion because of expiration
-        share = model.create(vals)
+        share = self.share.create(self.vals)
         share.expiration = datetime(1970, 1, 1)
-        self.assertEqual(None, model.get(share.token))
+        self.assertEqual(None, share.get(share.token))
 
         # Search for invalid token
-        self.assertEqual(model, model.get(uuid4()))
+        self.assertEqual(share.browse(), share.get(uuid4()))
+
+    @patch("odoo.addons.vault_share.controllers.main.request")
+    @mute_logger("odoo.sql_db")
+    def test_vault_share(self, request_mock):
+        def return_context(template, context):
+            self.assertEqual(template, "vault_share.share")
+            return context
+
+        request_mock.env = self.env
+        request_mock.render.side_effect = return_context
+        controller = main.Controller()
+
+        response = controller.vault_share("")
+        self.assertIn("error", response)
+
+        response = controller.vault_share(self.share.token)
+        self.assertEqual(response["salt"], self.share.salt)
+
+        self.share.accesses = 0
+        response = controller.vault_share(self.share.token)
+        self.assertIn("error", response)
diff --git a/vault_share/views/assets.xml b/vault_share/views/assets.xml
index 905f8fd346..628e38e8c6 100644
--- a/vault_share/views/assets.xml
+++ b/vault_share/views/assets.xml
@@ -23,6 +23,7 @@
     </template>
 
     <template id="share_frontend">
+        <t t-call-assets="web.assets_common" />
         <script type="text/javascript" src="/vault/static/src/js/vault_utils.js" />
         <script
             type="text/javascript"
diff --git a/vault_share/views/menuitems.xml b/vault_share/views/menuitems.xml
index add9343225..639332a0fc 100644
--- a/vault_share/views/menuitems.xml
+++ b/vault_share/views/menuitems.xml
@@ -11,6 +11,6 @@
         groups="base.group_user"
         parent="vault.menu_vault"
         action="action_vault_share"
-        sequence="60"
+        sequence="45"
     />
 </odoo>
diff --git a/vault_share/views/res_config_settings_views.xml b/vault_share/views/res_config_settings_views.xml
new file mode 100644
index 0000000000..971759c497
--- /dev/null
+++ b/vault_share/views/res_config_settings_views.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <record id="res_config_settings_view_form" model="ir.ui.view">
+        <field name="name">res.config.settings.view.form</field>
+        <field name="model">res.config.settings</field>
+        <field name="inherit_id" ref="vault.res_config_settings_view_form" />
+        <field name="arch" type="xml">
+            <div id="vault_share" position="after">
+                <div class="col-xs-12 col-md-6 o_setting_box" id="vault_share">
+                    <div class="o_setting_right_pane">
+                        <div class="o_form_label">Delay the deletion of shares</div>
+                        <field name="vault_share_delay" /> Days
+                    </div>
+                </div>
+            </div>
+        </field>
+    </record>
+</odoo>
diff --git a/vault_share/views/vault_share_views.xml b/vault_share/views/vault_share_views.xml
index 4b3ef95a93..da61c5ec4c 100644
--- a/vault_share/views/vault_share_views.xml
+++ b/vault_share/views/vault_share_views.xml
@@ -5,6 +5,7 @@
         <field name="arch" type="xml">
             <tree>
                 <field name="name" />
+                <field name="share_link" widget="url" />
             </tree>
         </field>
     </record>
@@ -21,7 +22,7 @@
                         <field name="filename" invisible="1" />
 
                         <field name="name" />
-                        <field name="share_link" widget="url" />
+                        <field name="share_link" widget="url" class="oe_read_only" />
                         <field name="pin" widget="vault_pin" />
                         <field name="expiration" />
                         <field name="accesses" />
@@ -32,6 +33,14 @@
                             widget="vault_share_file"
                         />
                     </group>
+
+                    <label for="log_ids" />
+                    <field name="log_ids" options="{'no_open': True}">
+                        <tree>
+                            <field name="name" />
+                            <field name="create_date" />
+                        </tree>
+                    </field>
                 </sheet>
             </form>
         </field>

From c1435abda066b0d950ae08ad0fe6c335ff87dca5 Mon Sep 17 00:00:00 2001
From: oca-travis <oca+oca-travis@odoo-community.org>
Date: Fri, 18 Mar 2022 09:50:39 +0000
Subject: [PATCH 05/21] Update vault_share.pot

---
 vault_share/i18n/vault_share.pot | 80 ++++++++++++++++++++++++++++++++
 1 file changed, 80 insertions(+)

diff --git a/vault_share/i18n/vault_share.pot b/vault_share/i18n/vault_share.pot
index 9ab807534b..8fd3ff71c6 100644
--- a/vault_share/i18n/vault_share.pot
+++ b/vault_share/i18n/vault_share.pot
@@ -25,18 +25,55 @@ msgstr ""
 msgid "Clean outgoing share"
 msgstr ""
 
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_company
+msgid "Companies"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_uid
 msgid "Created by"
 msgstr ""
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__create_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_date
 msgid "Created on"
 msgstr ""
 
 #. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Days"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Delay the deletion of shares"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__vault_share_delay
+msgid "Delayed Deletion"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_res_config_settings__vault_share_delay
+msgid ""
+"Delays the deletion of a share. After the expiration date it continues to "
+"stay inaccessible"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__display_name
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
 msgid "Display Name"
 msgstr ""
 
@@ -56,7 +93,10 @@ msgid "Filename"
 msgstr ""
 
 #. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__id
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
 msgid "ID"
 msgstr ""
 
@@ -72,22 +112,33 @@ msgid "Iv"
 msgstr ""
 
 #. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company____last_update
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
 msgid "Last Modified on"
 msgstr ""
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__write_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_uid
 msgid "Last Updated by"
 msgstr ""
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__write_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_date
 msgid "Last Updated on"
 msgstr ""
 
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__log_ids
+msgid "Log"
+msgstr ""
+
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__name
 msgid "Name"
 msgstr ""
 
@@ -128,6 +179,11 @@ msgstr ""
 msgid "Secret File"
 msgstr ""
 
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__share_id
+msgid "Share"
+msgstr ""
+
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__share_link
 msgid "Share URL"
@@ -185,6 +241,18 @@ msgstr ""
 msgid "The secret expired"
 msgstr ""
 
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was accessed by %s via %s"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was created by %s"
+msgstr ""
+
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__token
 msgid "Token"
@@ -200,6 +268,18 @@ msgstr ""
 msgid "Using this link and pin people can access the secret."
 msgstr ""
 
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__vault_share_delay
+msgid "Vault Share Delay"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share_log.py:0
+#: model:ir.model,name:vault_share.model_vault_share_log
+#, python-format
+msgid "Vault share log"
+msgstr ""
+
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #: model:ir.model,name:vault_share.model_vault_share

From 5b5323a7eda8ff3847c5359077b3b48f41eded5e Mon Sep 17 00:00:00 2001
From: CarlosRoca13 <carlos.roca@tecnativa.com>
Date: Mon, 6 Jun 2022 11:27:39 +0200
Subject: [PATCH 06/21] vault: Show just name instad of full path in
 searchpanel

---
 vault_share/i18n/es.po           | 288 +++++++++++++++++++++++++++++++
 vault_share/i18n/vault_share.pot |  13 +-
 2 files changed, 291 insertions(+), 10 deletions(-)
 create mode 100644 vault_share/i18n/es.po

diff --git a/vault_share/i18n/es.po b/vault_share/i18n/es.po
new file mode 100644
index 0000000000..752e01d09a
--- /dev/null
+++ b/vault_share/i18n/es.po
@@ -0,0 +1,288 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* vault_share
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 13.0\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2022-06-06 07:44+0000\n"
+"PO-Revision-Date: 2022-06-06 09:54+0200\n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Poedit 2.3\n"
+"Last-Translator: \n"
+"Language: es\n"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
+msgid "Access counter"
+msgstr "Contador de acceso"
+
+#. module: vault_share
+#: model:ir.actions.server,name:vault_share.cron_share_clean_ir_actions_server
+#: model:ir.cron,cron_name:vault_share.cron_share_clean
+#: model:ir.cron,name:vault_share.cron_share_clean
+msgid "Clean outgoing share"
+msgstr "Limpiar recurso compartido externo"
+
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_company
+msgid "Companies"
+msgstr "Compañías"
+
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_config_settings
+msgid "Config Settings"
+msgstr "Opciones de Configuración"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_uid
+msgid "Created by"
+msgstr "Creado por"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_date
+msgid "Created on"
+msgstr "Creado el"
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Days"
+msgstr "Días"
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Delay the deletion of shares"
+msgstr "Retrasar el borrado de recursos compartidos"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__vault_share_delay
+msgid "Delayed Deletion"
+msgstr "Retrasar borrado"
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_res_config_settings__vault_share_delay
+msgid ""
+"Delays the deletion of a share. After the expiration date it continues to "
+"stay inaccessible"
+msgstr ""
+"Retrasa la eliminación de un recurso compartido. Después de la fecha de "
+"caducidad sigue siendo inaccesible"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
+msgid "Display Name"
+msgstr "Nombre a mostrar"
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Enter the pin:"
+msgstr "Ingresa el pin:"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__expiration
+msgid "Expiration"
+msgstr "Expiración"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__filename
+msgid "Filename"
+msgstr "Nombre del fichero"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__id
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
+msgid "ID"
+msgstr "ID"
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "Invalid token"
+msgstr "Token inválido"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__iv
+msgid "Iv"
+msgstr "Iv"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
+msgid "Last Modified on"
+msgstr "Última modificación el"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_uid
+msgid "Last Updated by"
+msgstr "Última modificación por"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_date
+msgid "Last Updated on"
+msgstr "Última actualización en"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__log_ids
+msgid "Log"
+msgstr "Registro"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__name
+msgid "Name"
+msgstr "Nombre"
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model.constraint,message:vault_share.constraint_vault_share_value_check
+#, python-format
+msgid "No value found"
+msgstr "No se ha encontrado ningún valor"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__pin
+msgid "Pin"
+msgstr "Pin"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__salt
+msgid "Salt"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#, python-format
+msgid "Save in a vault"
+msgstr "Guardar en un vault"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret
+msgid "Secret"
+msgstr "Secreto"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret_file
+msgid "Secret File"
+msgstr "Archivo de secretos"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__share_id
+msgid "Share"
+msgstr "Compartir"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__share_link
+msgid "Share URL"
+msgstr "Compartir url"
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/js/vault_fields.js:0
+#, python-format
+msgid "Share the secret"
+msgstr "Compartir el secreto"
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#, python-format
+msgid "Share the secret with an external user"
+msgstr "Compartir el secreto con usuario externo"
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared file:"
+msgstr "Archivo compartido:"
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared secret:"
+msgstr "Secreto compartido:"
+
+#. module: vault_share
+#: model:ir.actions.act_window,name:vault_share.action_vault_share
+#: model:ir.ui.menu,name:vault_share.menu_vault_share
+msgid "Shares"
+msgstr "Recursos comparidos"
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__expiration
+msgid "Specifies how long a share can be accessed until deletion."
+msgstr ""
+"Especifica el tiempo que se puede acceder a un recurso compartido hasta "
+"su eliminación."
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__accesses
+msgid "Specifies how often a share can be accessed before deletion."
+msgstr ""
+"Especifica la frecuencia con la que se puede acceder a un recurso "
+"compartido antes de eliminarlo."
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__pin
+msgid "The pin needed to decrypt the share."
+msgstr "El pin necesario para descifrar el recurso compartido."
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "The secret expired"
+msgstr "El secreto ha expirado"
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was accessed by %s via %s"
+msgstr "El recurso compartido fue accedido por %s a través de %s"
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was created by %s"
+msgstr "El recurso compartido fue creado por %s"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__token
+msgid "Token"
+msgstr "Token"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__user_id
+msgid "User"
+msgstr "Usuario"
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__share_link
+msgid "Using this link and pin people can access the secret."
+msgstr "Utilizando este enlace y el pin la gente puede acceder al secreto."
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__vault_share_delay
+msgid "Vault Share Delay"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share_log.py:0
+#: model:ir.model,name:vault_share.model_vault_share_log
+#, python-format
+msgid "Vault share log"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model,name:vault_share.model_vault_share
+#, python-format
+msgid "Vault share outgoing secrets"
+msgstr ""
diff --git a/vault_share/i18n/vault_share.pot b/vault_share/i18n/vault_share.pot
index 8fd3ff71c6..eb4b16924a 100644
--- a/vault_share/i18n/vault_share.pot
+++ b/vault_share/i18n/vault_share.pot
@@ -4,8 +4,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: Odoo Server 14.0\n"
+"Project-Id-Version: Odoo Server 13.0\n"
 "Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2022-06-06 07:44+0000\n"
+"PO-Revision-Date: 2022-06-06 07:44+0000\n"
 "Last-Translator: \n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
@@ -70,8 +72,6 @@ msgid ""
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company__display_name
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
 msgid "Display Name"
@@ -93,8 +93,6 @@ msgid "Filename"
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company__id
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
 msgid "ID"
@@ -112,8 +110,6 @@ msgid "Iv"
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company____last_update
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
 msgid "Last Modified on"
@@ -163,8 +159,6 @@ msgstr ""
 #. openerp-web
 #: code:addons/vault_share/static/src/xml/templates.xml:0
 #: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
 #, python-format
 msgid "Save in a vault"
 msgstr ""
@@ -199,7 +193,6 @@ msgstr ""
 #. module: vault_share
 #. openerp-web
 #: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
 msgstr ""

From 3c18165b41ac6e041be5b5e4e3cb2e78a9125cc5 Mon Sep 17 00:00:00 2001
From: oca-ci <oca-ci@odoo-community.org>
Date: Thu, 1 Sep 2022 15:53:41 +0000
Subject: [PATCH 07/21] Update vault_share.pot

---
 vault_share/i18n/vault_share.pot | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/vault_share/i18n/vault_share.pot b/vault_share/i18n/vault_share.pot
index eb4b16924a..8fd3ff71c6 100644
--- a/vault_share/i18n/vault_share.pot
+++ b/vault_share/i18n/vault_share.pot
@@ -4,10 +4,8 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: Odoo Server 13.0\n"
+"Project-Id-Version: Odoo Server 14.0\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2022-06-06 07:44+0000\n"
-"PO-Revision-Date: 2022-06-06 07:44+0000\n"
 "Last-Translator: \n"
 "Language-Team: \n"
 "MIME-Version: 1.0\n"
@@ -72,6 +70,8 @@ msgid ""
 msgstr ""
 
 #. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__display_name
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
 msgid "Display Name"
@@ -93,6 +93,8 @@ msgid "Filename"
 msgstr ""
 
 #. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__id
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
 msgid "ID"
@@ -110,6 +112,8 @@ msgid "Iv"
 msgstr ""
 
 #. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company____last_update
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
 msgid "Last Modified on"
@@ -159,6 +163,8 @@ msgstr ""
 #. openerp-web
 #: code:addons/vault_share/static/src/xml/templates.xml:0
 #: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
 #, python-format
 msgid "Save in a vault"
 msgstr ""
@@ -193,6 +199,7 @@ msgstr ""
 #. module: vault_share
 #. openerp-web
 #: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/xml/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
 msgstr ""

From 7510934682c7a5a78e3e9be4c1799ac729086799 Mon Sep 17 00:00:00 2001
From: OCA-git-bot <oca-git-bot@odoo-community.org>
Date: Thu, 1 Sep 2022 15:57:11 +0000
Subject: [PATCH 08/21] vault_share 14.0.1.2.0

---
 vault_share/__manifest__.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
index 80235e1c1f..da4bd99552 100644
--- a/vault_share/__manifest__.py
+++ b/vault_share/__manifest__.py
@@ -5,7 +5,7 @@
     "name": "Vault - Share",
     "summary": "Implementation of a mechanism to share secrets",
     "license": "AGPL-3",
-    "version": "14.0.1.1.0",
+    "version": "14.0.1.2.0",
     "website": "https://github.com/OCA/server-auth",
     "application": False,
     "author": "initOS GmbH, Odoo Community Association (OCA)",

From 5c5b2b6c550fc445e3784facc8e82d67d207eec9 Mon Sep 17 00:00:00 2001
From: fkantelberg <florian.kantelberg@initos.com>
Date: Tue, 29 Nov 2022 18:36:22 +0100
Subject: [PATCH 09/21] Module vault and vault_share

---
 vault_share/__manifest__.py                   | 20 ++++++-
 vault_share/models/vault_share.py             | 10 ++--
 .../static/src/{xml => backend}/templates.xml |  0
 .../src/{scss => backend}/vault_share.scss    |  0
 vault_share/static/src/common/utils.esm.js    | 16 +++++
 vault_share/static/src/frontend/share.esm.js  | 50 ++++++++++++++++
 vault_share/static/src/js/vault_share.js      | 58 -------------------
 vault_share/static/src/js/vault_utils.js      | 19 ------
 .../static/src/{js => legacy}/vault_fields.js | 12 ++--
 .../src/{js => legacy}/vault_share_widget.js  | 22 +++----
 vault_share/tests/test_share.py               | 30 +++++-----
 vault_share/views/assets.xml                  | 33 -----------
 vault_share/views/templates.xml               |  6 +-
 13 files changed, 124 insertions(+), 152 deletions(-)
 rename vault_share/static/src/{xml => backend}/templates.xml (100%)
 rename vault_share/static/src/{scss => backend}/vault_share.scss (100%)
 create mode 100644 vault_share/static/src/common/utils.esm.js
 create mode 100644 vault_share/static/src/frontend/share.esm.js
 delete mode 100644 vault_share/static/src/js/vault_share.js
 delete mode 100644 vault_share/static/src/js/vault_utils.js
 rename vault_share/static/src/{js => legacy}/vault_fields.js (87%)
 rename vault_share/static/src/{js => legacy}/vault_share_widget.js (95%)
 delete mode 100644 vault_share/views/assets.xml

diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
index da4bd99552..9d3f4e693b 100644
--- a/vault_share/__manifest__.py
+++ b/vault_share/__manifest__.py
@@ -5,7 +5,7 @@
     "name": "Vault - Share",
     "summary": "Implementation of a mechanism to share secrets",
     "license": "AGPL-3",
-    "version": "14.0.1.2.0",
+    "version": "15.0.1.1.0",
     "website": "https://github.com/OCA/server-auth",
     "application": False,
     "author": "initOS GmbH, Odoo Community Association (OCA)",
@@ -15,11 +15,25 @@
         "data/ir_cron.xml",
         "security/ir.model.access.csv",
         "security/ir_rule.xml",
-        "views/assets.xml",
         "views/menuitems.xml",
         "views/res_config_settings_views.xml",
         "views/templates.xml",
         "views/vault_share_views.xml",
     ],
-    "qweb": ["static/src/xml/templates.xml"],
+    "assets": {
+        "web.assets_backend": [
+            "vault_share/static/src/common/**/*.js",
+            "vault_share/static/src/backend/**/*.js",
+            "vault_share/static/src/backend/**/*.scss",
+            "vault_share/static/src/legacy/vault_fields.js",
+            "vault_share/static/src/legacy/vault_share_widget.js",
+        ],
+        "vault_share.assets_frontend": [
+            "vault/static/src/common/*.js",
+            "vault_share/static/src/frontend/*.js",
+        ],
+        "web.assets_qweb": [
+            "vault_share/static/src/backend/**/*.xml",
+        ],
+    },
 }
diff --git a/vault_share/models/vault_share.py b/vault_share/models/vault_share.py
index 9eb337bab2..4b0f119f8a 100644
--- a/vault_share/models/vault_share.py
+++ b/vault_share/models/vault_share.py
@@ -62,8 +62,10 @@ def get(self, token, ip=None):
 
         if datetime.now() < rec.expiration and rec.accesses > 0:
             rec.accesses -= 1
-            log = _("The share was accessed by %s via %s")
-            rec.log_ids = [(0, 0, {"name": log % (self.env.user.name, ip)})]
+            log = _("The share was accessed by %(name)s via %(ip)s")
+            rec.log_ids = [
+                (0, 0, {"name": log % {"name": self.env.user.name, "ip": ip or "n/a"}})
+            ]
             return rec
 
         return None
@@ -71,8 +73,8 @@ def get(self, token, ip=None):
     @api.model
     def create(self, vals):
         rec = super().create(vals)
-        log = _("The share was created by %s")
-        rec.log_ids = [(0, 0, {"name": log % self.env.user.name})]
+        log = _("The share was created by %(name)s")
+        rec.log_ids = [(0, 0, {"name": log % {"name": self.env.user.name}})]
         return rec
 
     @api.model
diff --git a/vault_share/static/src/xml/templates.xml b/vault_share/static/src/backend/templates.xml
similarity index 100%
rename from vault_share/static/src/xml/templates.xml
rename to vault_share/static/src/backend/templates.xml
diff --git a/vault_share/static/src/scss/vault_share.scss b/vault_share/static/src/backend/vault_share.scss
similarity index 100%
rename from vault_share/static/src/scss/vault_share.scss
rename to vault_share/static/src/backend/vault_share.scss
diff --git a/vault_share/static/src/common/utils.esm.js b/vault_share/static/src/common/utils.esm.js
new file mode 100644
index 0000000000..790858a529
--- /dev/null
+++ b/vault_share/static/src/common/utils.esm.js
@@ -0,0 +1,16 @@
+/** @odoo-module alias=vault.share.utils **/
+// © 2021-2022 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+const PinSize = 5;
+
+import utils from "vault.utils";
+
+function generate_pin(pin_size) {
+    return utils.generate_secret(pin_size, "0123456789");
+}
+
+export default {
+    PinSize: PinSize,
+    generate_pin: generate_pin,
+};
diff --git a/vault_share/static/src/frontend/share.esm.js b/vault_share/static/src/frontend/share.esm.js
new file mode 100644
index 0000000000..e0b5748ce0
--- /dev/null
+++ b/vault_share/static/src/frontend/share.esm.js
@@ -0,0 +1,50 @@
+/** @odoo-module **/
+// © 2021-2022 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import utils from "vault.utils";
+
+const data = {};
+
+// Find the elements in the document and check if they have values
+function find_elements() {
+    for (const id of ["encrypted", "salt", "iv", "encrypted_file", "filename"])
+        if (!data[id]) {
+            const element = document.getElementById(id);
+            data[id] = element && element.value;
+        }
+}
+
+document.getElementById("pin").onchange = async function () {
+    if (!utils.supported()) return;
+
+    find_elements();
+
+    // Derive the key from the pin
+    const key = await utils.derive_key(this.value, utils.fromBase64(data.salt), 4000);
+
+    const secret = document.getElementById("secret");
+    const secret_file = document.getElementById("secret_file");
+    if (!secret && !secret_file) return;
+
+    // There is no secret to decrypt
+    if (!this.value) {
+        secret.setAttribute("class", "alert alert-danger col-12");
+        secret_file.setAttribute("class", "alert alert-danger col-12");
+        return;
+    }
+
+    // Decrypt the data and show the value
+    if (data.encrypted) {
+        secret.value = await utils.sym_decrypt(key, data.encrypted, data.iv);
+        secret.setAttribute("class", "alert alert-success col-12");
+    }
+
+    if (data.encrypted_file) {
+        const content = await utils.sym_decrypt(key, data.encrypted_file, data.iv);
+        const file = new File([atob(content)], data.filename);
+        secret_file.text = data.filename;
+        secret_file.setAttribute("href", window.URL.createObjectURL(file));
+        secret_file.setAttribute("class", "alert alert-success col-12");
+    }
+};
diff --git a/vault_share/static/src/js/vault_share.js b/vault_share/static/src/js/vault_share.js
deleted file mode 100644
index 81b8482c9f..0000000000
--- a/vault_share/static/src/js/vault_share.js
+++ /dev/null
@@ -1,58 +0,0 @@
-// © 2021 Florian Kantelberg - initOS GmbH
-// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
-
-odoo.define("vault.share", function (require) {
-    "use strict";
-
-    require("web.dom_ready");
-
-    var utils = require("vault.utils");
-    var data = {};
-
-    // Find the elements in the document and check if they have values
-    function find_elements() {
-        for (const id of ["encrypted", "salt", "iv", "encrypted_file", "filename"])
-            if (!data[id]) {
-                const element = document.getElementById(id);
-                data[id] = element && element.value;
-            }
-    }
-
-    document.getElementById("pin").onchange = async function () {
-        if (!utils.supported()) return;
-
-        find_elements();
-
-        // Derive the key from the pin
-        const key = await utils.derive_key(
-            this.value,
-            utils.fromBase64(data.salt),
-            4000
-        );
-
-        const secret = document.getElementById("secret");
-        const secret_file = document.getElementById("secret_file");
-        if (!secret && !secret_file) return;
-
-        // There is no secret to decrypt
-        if (!this.value) {
-            secret.setAttribute("class", "alert alert-danger col-12");
-            secret_file.setAttribute("class", "alert alert-danger col-12");
-            return;
-        }
-
-        // Decrypt the data and show the value
-        if (data.encrypted) {
-            secret.value = await utils.sym_decrypt(key, data.encrypted, data.iv);
-            secret.setAttribute("class", "alert alert-success col-12");
-        }
-
-        if (data.encrypted_file) {
-            const content = await utils.sym_decrypt(key, data.encrypted_file, data.iv);
-            const file = new File([atob(content)], data.filename);
-            secret_file.text = data.filename;
-            secret_file.setAttribute("href", window.URL.createObjectURL(file));
-            secret_file.setAttribute("class", "alert alert-success col-12");
-        }
-    };
-});
diff --git a/vault_share/static/src/js/vault_utils.js b/vault_share/static/src/js/vault_utils.js
deleted file mode 100644
index c85a522f3d..0000000000
--- a/vault_share/static/src/js/vault_utils.js
+++ /dev/null
@@ -1,19 +0,0 @@
-// © 2021 Florian Kantelberg - initOS GmbH
-// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
-
-odoo.define("vault.share.utils", function (require) {
-    "use strict";
-
-    const PinSize = 5;
-
-    var utils = require("vault.utils");
-
-    function generate_pin(pin_size) {
-        return utils.generate_secret(pin_size, "0123456789");
-    }
-
-    return {
-        PinSize: PinSize,
-        generate_pin: generate_pin,
-    };
-});
diff --git a/vault_share/static/src/js/vault_fields.js b/vault_share/static/src/legacy/vault_fields.js
similarity index 87%
rename from vault_share/static/src/js/vault_fields.js
rename to vault_share/static/src/legacy/vault_fields.js
index 13ee282ba7..23c8071051 100644
--- a/vault_share/static/src/js/vault_fields.js
+++ b/vault_share/static/src/legacy/vault_fields.js
@@ -4,13 +4,13 @@
 odoo.define("vault.share.fields", function (require) {
     "use strict";
 
-    var core = require("web.core");
-    var sh_utils = require("vault.share.utils");
-    var utils = require("vault.utils");
-    var vault = require("vault");
-    var vault_fields = require("vault.fields");
+    const core = require("web.core");
+    const sh_utils = require("vault.share.utils");
+    const utils = require("vault.utils");
+    const vault = require("vault");
+    const vault_fields = require("vault.fields");
 
-    var _t = core._t;
+    const _t = core._t;
 
     // Extend the widget to share
     vault_fields.VaultField.include({
diff --git a/vault_share/static/src/js/vault_share_widget.js b/vault_share/static/src/legacy/vault_share_widget.js
similarity index 95%
rename from vault_share/static/src/js/vault_share_widget.js
rename to vault_share/static/src/legacy/vault_share_widget.js
index a897667b52..a985fc06d6 100644
--- a/vault_share/static/src/js/vault_share_widget.js
+++ b/vault_share/static/src/legacy/vault_share_widget.js
@@ -4,18 +4,18 @@
 odoo.define("vault.share.widget", function (require) {
     "use strict";
 
-    var basic_fields = require("web.basic_fields");
-    var core = require("web.core");
-    var registry = require("web.field_registry");
-    var sh_utils = require("vault.share.utils");
-    var utils = require("vault.utils");
-    var vault = require("vault");
-    var vault_fields = require("vault.fields");
+    const basic_fields = require("web.basic_fields");
+    const core = require("web.core");
+    const registry = require("web.field_registry");
+    const sh_utils = require("vault.share.utils");
+    const utils = require("vault.utils");
+    const vault = require("vault");
+    const vault_fields = require("vault.fields");
 
-    var QWeb = core.qweb;
+    const QWeb = core.qweb;
 
     // Widget used to view the encrypted pin
-    var VaultPinField = basic_fields.InputField.extend(vault_fields.VaultAbstract, {
+    const VaultPinField = basic_fields.InputField.extend(vault_fields.VaultAbstract, {
         supportedFieldTypes: ["char"],
         events: _.extend({}, basic_fields.InputField.prototype.events, {
             "click .o_vault_show": "_onShowValue",
@@ -87,7 +87,7 @@ odoo.define("vault.share.widget", function (require) {
     });
 
     // Widget used to create shared outgoing secrets encrypted with a pin
-    var VaultShareField = vault_fields.VaultField.extend({
+    const VaultShareField = vault_fields.VaultField.extend({
         events: _.extend({}, vault_fields.VaultField.prototype.events, {
             "click .o_vault_save": "_onSaveValue",
         }),
@@ -229,7 +229,7 @@ odoo.define("vault.share.widget", function (require) {
     });
 
     // Widget used to view shared incoming secrets encrypted with public keys
-    var VaultShareFile = vault_fields.VaultFile.extend({
+    const VaultShareFile = vault_fields.VaultFile.extend({
         store_model: "vault.file",
         template: "FileVaultShare",
         events: _.extend({}, vault_fields.VaultFile.prototype.events, {
diff --git a/vault_share/tests/test_share.py b/vault_share/tests/test_share.py
index dab6176fbf..bc8ecc4908 100644
--- a/vault_share/tests/test_share.py
+++ b/vault_share/tests/test_share.py
@@ -3,12 +3,13 @@
 
 import logging
 from datetime import datetime
-from unittest.mock import patch
 from uuid import uuid4
 
 from odoo.tests import TransactionCase
 from odoo.tools import mute_logger
 
+from odoo.addons.website.tools import MockRequest
+
 from ..controllers import main
 
 _logger = logging.getLogger(__name__)
@@ -29,10 +30,6 @@ def setUp(self):
 
         self.share = self.env["vault.share"].create(self.vals)
 
-        patcher = patch("odoo.http.request")
-        self.addCleanup(patcher.stop)
-        patcher.start()
-
     @mute_logger("odoo.sql_db")
     def test_share(self):
         self.assertEqual(self.share, self.share.get(self.share.token))
@@ -55,23 +52,22 @@ def test_share(self):
         # Search for invalid token
         self.assertEqual(share.browse(), share.get(uuid4()))
 
-    @patch("odoo.addons.vault_share.controllers.main.request")
     @mute_logger("odoo.sql_db")
-    def test_vault_share(self, request_mock):
+    def test_vault_share(self):
         def return_context(template, context):
             self.assertEqual(template, "vault_share.share")
             return context
 
-        request_mock.env = self.env
-        request_mock.render.side_effect = return_context
-        controller = main.Controller()
+        with MockRequest(self.env) as request_mock:
+            request_mock.render.side_effect = return_context
+            controller = main.Controller()
 
-        response = controller.vault_share("")
-        self.assertIn("error", response)
+            response = controller.vault_share("")
+            self.assertIn("error", response)
 
-        response = controller.vault_share(self.share.token)
-        self.assertEqual(response["salt"], self.share.salt)
+            response = controller.vault_share(self.share.token)
+            self.assertEqual(response["salt"], self.share.salt)
 
-        self.share.accesses = 0
-        response = controller.vault_share(self.share.token)
-        self.assertIn("error", response)
+            self.share.accesses = 0
+            response = controller.vault_share(self.share.token)
+            self.assertIn("error", response)
diff --git a/vault_share/views/assets.xml b/vault_share/views/assets.xml
deleted file mode 100644
index 628e38e8c6..0000000000
--- a/vault_share/views/assets.xml
+++ /dev/null
@@ -1,33 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" ?>
-<odoo>
-    <template id="assets_backend" inherit_id="web.assets_backend">
-        <xpath expr="." position="inside">
-            <script
-                type="text/javascript"
-                src="/vault_share/static/src/js/vault_fields.js"
-            />
-            <script
-                type="text/javascript"
-                src="/vault_share/static/src/js/vault_share_widget.js"
-            />
-            <script
-                type="text/javascript"
-                src="/vault_share/static/src/js/vault_utils.js"
-            />
-            <link
-                rel="stylesheet"
-                type="text/scss"
-                href="/vault_share/static/src/scss/vault_share.scss"
-            />
-        </xpath>
-    </template>
-
-    <template id="share_frontend">
-        <t t-call-assets="web.assets_common" />
-        <script type="text/javascript" src="/vault/static/src/js/vault_utils.js" />
-        <script
-            type="text/javascript"
-            src="/vault_share/static/src/js/vault_share.js"
-        />
-    </template>
-</odoo>
diff --git a/vault_share/views/templates.xml b/vault_share/views/templates.xml
index 65aa8a8f6c..7649731e52 100644
--- a/vault_share/views/templates.xml
+++ b/vault_share/views/templates.xml
@@ -2,7 +2,11 @@
 <odoo>
     <template id="share">
         <t t-call="web.login_layout">
-            <t t-call-assets="vault_share.share_frontend" t-css="false" />
+            <t
+                t-call-assets="vault_share.assets_frontend"
+                t-css="false"
+                defer_load="True"
+            />
 
             <input type="hidden" id="encrypted" t-att-value="encrypted" />
             <input type="hidden" id="encrypted_file" t-att-value="encrypted_file" />

From 395cda53b9703091e0419784ba602d2e1cb19852 Mon Sep 17 00:00:00 2001
From: Carlos Roca <carlos.roca@tecnativa.com>
Date: Wed, 11 Jan 2023 17:00:36 +0100
Subject: [PATCH 10/21] vault_share: File is not downloaded when clicking
 sharing link

---
 vault_share/static/src/frontend/share.esm.js | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/vault_share/static/src/frontend/share.esm.js b/vault_share/static/src/frontend/share.esm.js
index e0b5748ce0..af9b28d0b3 100644
--- a/vault_share/static/src/frontend/share.esm.js
+++ b/vault_share/static/src/frontend/share.esm.js
@@ -41,10 +41,16 @@ document.getElementById("pin").onchange = async function () {
     }
 
     if (data.encrypted_file) {
-        const content = await utils.sym_decrypt(key, data.encrypted_file, data.iv);
-        const file = new File([atob(content)], data.filename);
+        const content = atob(
+            await utils.sym_decrypt(key, data.encrypted_file, data.iv)
+        );
+        const buffer = new ArrayBuffer(content.length);
+        const arr = new Uint8Array(buffer);
+        for (let i = 0; i < content.length; i++) arr[i] = content.charCodeAt(i);
+        const file = new Blob([arr]);
         secret_file.text = data.filename;
         secret_file.setAttribute("href", window.URL.createObjectURL(file));
         secret_file.setAttribute("class", "alert alert-success col-12");
+        secret_file.setAttribute("download", data.filename);
     }
 };

From f74c2143d6ffd80a61c4cc3bef875c8399c76614 Mon Sep 17 00:00:00 2001
From: oca-ci <oca-ci@odoo-community.org>
Date: Thu, 23 Mar 2023 18:03:11 +0000
Subject: [PATCH 11/21] Update vault_share.pot

---
 vault_share/i18n/vault_share.pot | 26 ++++++++++----------------
 1 file changed, 10 insertions(+), 16 deletions(-)

diff --git a/vault_share/i18n/vault_share.pot b/vault_share/i18n/vault_share.pot
index 8fd3ff71c6..9556dfab0d 100644
--- a/vault_share/i18n/vault_share.pot
+++ b/vault_share/i18n/vault_share.pot
@@ -4,7 +4,7 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: Odoo Server 14.0\n"
+"Project-Id-Version: Odoo Server 15.0\n"
 "Report-Msgid-Bugs-To: \n"
 "Last-Translator: \n"
 "Language-Team: \n"
@@ -70,8 +70,6 @@ msgid ""
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company__display_name
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
 msgid "Display Name"
@@ -93,8 +91,6 @@ msgid "Filename"
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company__id
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
 msgid "ID"
@@ -112,8 +108,6 @@ msgid "Iv"
 msgstr ""
 
 #. module: vault_share
-#: model:ir.model.fields,field_description:vault_share.field_res_company____last_update
-#: model:ir.model.fields,field_description:vault_share.field_res_config_settings____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
 msgid "Last Modified on"
@@ -161,10 +155,10 @@ msgstr ""
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Save in a vault"
 msgstr ""
@@ -191,15 +185,15 @@ msgstr ""
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/js/vault_fields.js:0
+#: code:addons/vault_share/static/src/legacy/vault_fields.js:0
 #, python-format
 msgid "Share the secret"
 msgstr ""
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/xml/templates.xml:0
-#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
 msgstr ""
@@ -244,13 +238,13 @@ msgstr ""
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
-msgid "The share was accessed by %s via %s"
+msgid "The share was accessed by %(name)s via %(ip)s"
 msgstr ""
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
-msgid "The share was created by %s"
+msgid "The share was created by %(name)s"
 msgstr ""
 
 #. module: vault_share

From 6ab6e0220f79424a22da0c5cf92f3b131c5e0999 Mon Sep 17 00:00:00 2001
From: OCA-git-bot <oca-git-bot@odoo-community.org>
Date: Thu, 23 Mar 2023 18:06:38 +0000
Subject: [PATCH 12/21] README.rst

---
 vault_share/README.rst                    | 10 +++++-----
 vault_share/static/description/index.html |  6 +++---
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/vault_share/README.rst b/vault_share/README.rst
index 79c29aa762..499ee5f481 100644
--- a/vault_share/README.rst
+++ b/vault_share/README.rst
@@ -14,13 +14,13 @@ Vault - Share
     :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
     :alt: License: AGPL-3
 .. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
-    :target: https://github.com/OCA/server-auth/tree/14.0/vault_share
+    :target: https://github.com/OCA/server-auth/tree/15.0/vault_share
     :alt: OCA/server-auth
 .. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
-    :target: https://translation.odoo-community.org/projects/server-auth-14-0/server-auth-14-0-vault_share
+    :target: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share
     :alt: Translate me on Weblate
 .. |badge5| image:: https://img.shields.io/badge/runbot-Try%20me-875A7B.png
-    :target: https://runbot.odoo-community.org/runbot/251/14.0
+    :target: https://runbot.odoo-community.org/runbot/251/15.0
     :alt: Try me on Runbot
 
 |badge1| |badge2| |badge3| |badge4| |badge5| 
@@ -43,7 +43,7 @@ Bug Tracker
 Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-auth/issues>`_.
 In case of trouble, please check there if your issue has already been reported.
 If you spotted it first, help us smashing it by providing a detailed and welcomed
-`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2014.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2015.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
 
 Do not contact contributors directly about support or help with technical issues.
 
@@ -73,6 +73,6 @@ OCA, or the Odoo Community Association, is a nonprofit organization whose
 mission is to support the collaborative development of Odoo features and
 promote its widespread use.
 
-This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/14.0/vault_share>`_ project on GitHub.
+This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/15.0/vault_share>`_ project on GitHub.
 
 You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/vault_share/static/description/index.html b/vault_share/static/description/index.html
index 915b781b46..4b080257b0 100644
--- a/vault_share/static/description/index.html
+++ b/vault_share/static/description/index.html
@@ -367,7 +367,7 @@ <h1 class="title">Vault - Share</h1>
 !! This file is generated by oca-gen-addon-readme !!
 !! changes will be overwritten.                   !!
 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
-<p><a class="reference external" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external" href="https://github.com/OCA/server-auth/tree/14.0/vault_share"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external" href="https://translation.odoo-community.org/projects/server-auth-14-0/server-auth-14-0-vault_share"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external" href="https://runbot.odoo-community.org/runbot/251/14.0"><img alt="Try me on Runbot" src="https://img.shields.io/badge/runbot-Try%20me-875A7B.png" /></a></p>
+<p><a class="reference external" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external" href="https://github.com/OCA/server-auth/tree/15.0/vault_share"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external" href="https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external" href="https://runbot.odoo-community.org/runbot/251/15.0"><img alt="Try me on Runbot" src="https://img.shields.io/badge/runbot-Try%20me-875A7B.png" /></a></p>
 <p>This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.</p>
 <div class="section" id="share">
 <h1>Share</h1>
@@ -379,7 +379,7 @@ <h1>Bug Tracker</h1>
 <p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-auth/issues">GitHub Issues</a>.
 In case of trouble, please check there if your issue has already been reported.
 If you spotted it first, help us smashing it by providing a detailed and welcomed
-<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2014.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2015.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
 <p>Do not contact contributors directly about support or help with technical issues.</p>
 </div>
 <div class="section" id="credits">
@@ -403,7 +403,7 @@ <h2>Maintainers</h2>
 <p>OCA, or the Odoo Community Association, is a nonprofit organization whose
 mission is to support the collaborative development of Odoo features and
 promote its widespread use.</p>
-<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/14.0/vault_share">OCA/server-auth</a> project on GitHub.</p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/15.0/vault_share">OCA/server-auth</a> project on GitHub.</p>
 <p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
 </div>
 </div>

From ba9da7e9c7e632e548f18418a3d5bc99061a8c69 Mon Sep 17 00:00:00 2001
From: Weblate <noreply@weblate.org>
Date: Thu, 23 Mar 2023 20:10:56 +0000
Subject: [PATCH 13/21] Update translation files

Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: server-auth-15.0/server-auth-15.0-vault_share
Translate-URL: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share/
---
 vault_share/i18n/es.po | 34 +++++++++++++++++++++-------------
 1 file changed, 21 insertions(+), 13 deletions(-)

diff --git a/vault_share/i18n/es.po b/vault_share/i18n/es.po
index 752e01d09a..ff6d234ebd 100644
--- a/vault_share/i18n/es.po
+++ b/vault_share/i18n/es.po
@@ -8,14 +8,14 @@ msgstr ""
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2022-06-06 07:44+0000\n"
 "PO-Revision-Date: 2022-06-06 09:54+0200\n"
+"Last-Translator: \n"
 "Language-Team: \n"
+"Language: es\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Poedit 2.3\n"
-"Last-Translator: \n"
-"Language: es\n"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
@@ -161,7 +161,7 @@ msgstr ""
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Save in a vault"
 msgstr "Guardar en un vault"
@@ -188,14 +188,14 @@ msgstr "Compartir url"
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/js/vault_fields.js:0
+#: code:addons/vault_share/static/src/legacy/vault_fields.js:0
 #, python-format
 msgid "Share the secret"
 msgstr "Compartir el secreto"
 
 #. module: vault_share
 #. openerp-web
-#: code:addons/vault_share/static/src/xml/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
 msgstr "Compartir el secreto con usuario externo"
@@ -220,15 +220,15 @@ msgstr "Recursos comparidos"
 #: model:ir.model.fields,help:vault_share.field_vault_share__expiration
 msgid "Specifies how long a share can be accessed until deletion."
 msgstr ""
-"Especifica el tiempo que se puede acceder a un recurso compartido hasta "
-"su eliminación."
+"Especifica el tiempo que se puede acceder a un recurso compartido hasta su "
+"eliminación."
 
 #. module: vault_share
 #: model:ir.model.fields,help:vault_share.field_vault_share__accesses
 msgid "Specifies how often a share can be accessed before deletion."
 msgstr ""
-"Especifica la frecuencia con la que se puede acceder a un recurso "
-"compartido antes de eliminarlo."
+"Especifica la frecuencia con la que se puede acceder a un recurso compartido "
+"antes de eliminarlo."
 
 #. module: vault_share
 #: model:ir.model.fields,help:vault_share.field_vault_share__pin
@@ -244,14 +244,14 @@ msgstr "El secreto ha expirado"
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
-msgid "The share was accessed by %s via %s"
-msgstr "El recurso compartido fue accedido por %s a través de %s"
+msgid "The share was accessed by %(name)s via %(ip)s"
+msgstr ""
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
-msgid "The share was created by %s"
-msgstr "El recurso compartido fue creado por %s"
+msgid "The share was created by %(name)s"
+msgstr ""
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__token
@@ -286,3 +286,11 @@ msgstr ""
 #, python-format
 msgid "Vault share outgoing secrets"
 msgstr ""
+
+#, python-format
+#~ msgid "The share was accessed by %s via %s"
+#~ msgstr "El recurso compartido fue accedido por %s a través de %s"
+
+#, python-format
+#~ msgid "The share was created by %s"
+#~ msgstr "El recurso compartido fue creado por %s"

From 11b9bcbcde42373b1a13ab639609e18ee08cb5a9 Mon Sep 17 00:00:00 2001
From: Bosd <c5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>
Date: Fri, 5 May 2023 10:45:15 +0000
Subject: [PATCH 14/21] Added translation using Weblate (Dutch)

---
 vault_share/i18n/nl.po | 283 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 283 insertions(+)
 create mode 100644 vault_share/i18n/nl.po

diff --git a/vault_share/i18n/nl.po b/vault_share/i18n/nl.po
new file mode 100644
index 0000000000..eb4f02a0a3
--- /dev/null
+++ b/vault_share/i18n/nl.po
@@ -0,0 +1,283 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* vault_share
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 15.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"Language: nl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
+msgid "Access counter"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.actions.server,name:vault_share.cron_share_clean_ir_actions_server
+#: model:ir.cron,cron_name:vault_share.cron_share_clean
+#: model:ir.cron,name:vault_share.cron_share_clean
+msgid "Clean outgoing share"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_company
+msgid "Companies"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model,name:vault_share.model_res_config_settings
+msgid "Config Settings"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_uid
+msgid "Created by"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__create_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_date
+msgid "Created on"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Days"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
+msgid "Delay the deletion of shares"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_config_settings__vault_share_delay
+msgid "Delayed Deletion"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_res_config_settings__vault_share_delay
+msgid ""
+"Delays the deletion of a share. After the expiration date it continues to "
+"stay inaccessible"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Enter the pin:"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__expiration
+msgid "Expiration"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__filename
+msgid "Filename"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__id
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
+msgid "ID"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "Invalid token"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__iv
+msgid "Iv"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_uid
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__write_date
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__log_ids
+msgid "Log"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__name
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__name
+msgid "Name"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model.constraint,message:vault_share.constraint_vault_share_value_check
+#, python-format
+msgid "No value found"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__pin
+msgid "Pin"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__salt
+msgid "Salt"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#, python-format
+msgid "Save in a vault"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret
+msgid "Secret"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__secret_file
+msgid "Secret File"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share_log__share_id
+msgid "Share"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__share_link
+msgid "Share URL"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/legacy/vault_fields.js:0
+#, python-format
+msgid "Share the secret"
+msgstr ""
+
+#. module: vault_share
+#. openerp-web
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#: code:addons/vault_share/static/src/backend/templates.xml:0
+#, python-format
+msgid "Share the secret with an external user"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared file:"
+msgstr ""
+
+#. module: vault_share
+#: model_terms:ir.ui.view,arch_db:vault_share.share
+msgid "Shared secret:"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.actions.act_window,name:vault_share.action_vault_share
+#: model:ir.ui.menu,name:vault_share.menu_vault_share
+msgid "Shares"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__expiration
+msgid "Specifies how long a share can be accessed until deletion."
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__accesses
+msgid "Specifies how often a share can be accessed before deletion."
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__pin
+msgid "The pin needed to decrypt the share."
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/controllers/main.py:0
+#, python-format
+msgid "The secret expired"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was accessed by %(name)s via %(ip)s"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#, python-format
+msgid "The share was created by %(name)s"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__token
+msgid "Token"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_vault_share__user_id
+msgid "User"
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,help:vault_share.field_vault_share__share_link
+msgid "Using this link and pin people can access the secret."
+msgstr ""
+
+#. module: vault_share
+#: model:ir.model.fields,field_description:vault_share.field_res_company__vault_share_delay
+msgid "Vault Share Delay"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share_log.py:0
+#: model:ir.model,name:vault_share.model_vault_share_log
+#, python-format
+msgid "Vault share log"
+msgstr ""
+
+#. module: vault_share
+#: code:addons/vault_share/models/vault_share.py:0
+#: model:ir.model,name:vault_share.model_vault_share
+#, python-format
+msgid "Vault share outgoing secrets"
+msgstr ""

From 7fdfa68d84708cf190705b0168b2eb58afe94e06 Mon Sep 17 00:00:00 2001
From: Bosd <c5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>
Date: Fri, 5 May 2023 10:45:35 +0000
Subject: [PATCH 15/21] Translated using Weblate (Dutch)

Currently translated at 17.0% (8 of 47 strings)

Translation: server-auth-15.0/server-auth-15.0-vault_share
Translate-URL: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share/nl/
---
 vault_share/i18n/nl.po | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/vault_share/i18n/nl.po b/vault_share/i18n/nl.po
index eb4f02a0a3..14c25e13c0 100644
--- a/vault_share/i18n/nl.po
+++ b/vault_share/i18n/nl.po
@@ -6,13 +6,15 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 15.0\n"
 "Report-Msgid-Bugs-To: \n"
-"Last-Translator: Automatically generated\n"
+"PO-Revision-Date: 2023-05-05 10:45+0000\n"
+"Last-Translator: Bosd <c5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>\n"
 "Language-Team: none\n"
 "Language: nl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: \n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 4.14.1\n"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
@@ -40,13 +42,13 @@ msgstr ""
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_uid
 msgid "Created by"
-msgstr ""
+msgstr "Aangemaakt door"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__create_date
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__create_date
 msgid "Created on"
-msgstr ""
+msgstr "Aangemaakt op"
 
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
@@ -74,7 +76,7 @@ msgstr ""
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__display_name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__display_name
 msgid "Display Name"
-msgstr ""
+msgstr "Schermnaam"
 
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.share
@@ -95,7 +97,7 @@ msgstr ""
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__id
 msgid "ID"
-msgstr ""
+msgstr "ID"
 
 #. module: vault_share
 #: code:addons/vault_share/controllers/main.py:0
@@ -112,19 +114,19 @@ msgstr ""
 #: model:ir.model.fields,field_description:vault_share.field_vault_share____last_update
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log____last_update
 msgid "Last Modified on"
-msgstr ""
+msgstr "Laatst gewijzigd op"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__write_uid
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_uid
 msgid "Last Updated by"
-msgstr ""
+msgstr "Laatst bijgewerkt door"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__write_date
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__write_date
 msgid "Last Updated on"
-msgstr ""
+msgstr "Laatst bijgewerkt op"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__log_ids
@@ -135,7 +137,7 @@ msgstr ""
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__name
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__name
 msgid "Name"
-msgstr ""
+msgstr "Naam"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0

From 701bef7ea8f09e15b1f08501de7b1274953f2bc0 Mon Sep 17 00:00:00 2001
From: Bosd <c5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>
Date: Fri, 5 May 2023 10:45:59 +0000
Subject: [PATCH 16/21] Translated using Weblate (Dutch)

Currently translated at 74.4% (35 of 47 strings)

Translation: server-auth-15.0/server-auth-15.0-vault_share
Translate-URL: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share/nl/
---
 vault_share/i18n/nl.po | 56 +++++++++++++++++++++---------------------
 1 file changed, 28 insertions(+), 28 deletions(-)

diff --git a/vault_share/i18n/nl.po b/vault_share/i18n/nl.po
index 14c25e13c0..09968ce8c6 100644
--- a/vault_share/i18n/nl.po
+++ b/vault_share/i18n/nl.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Odoo Server 15.0\n"
 "Report-Msgid-Bugs-To: \n"
-"PO-Revision-Date: 2023-05-05 10:45+0000\n"
+"PO-Revision-Date: 2023-05-05 13:33+0000\n"
 "Last-Translator: Bosd <c5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>\n"
 "Language-Team: none\n"
 "Language: nl\n"
@@ -19,7 +19,7 @@ msgstr ""
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
 msgid "Access counter"
-msgstr ""
+msgstr "Toegangsteller"
 
 #. module: vault_share
 #: model:ir.actions.server,name:vault_share.cron_share_clean_ir_actions_server
@@ -31,12 +31,12 @@ msgstr ""
 #. module: vault_share
 #: model:ir.model,name:vault_share.model_res_company
 msgid "Companies"
-msgstr ""
+msgstr "Bedrijven"
 
 #. module: vault_share
 #: model:ir.model,name:vault_share.model_res_config_settings
 msgid "Config Settings"
-msgstr ""
+msgstr "Configuratie-instellingen"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__create_uid
@@ -53,7 +53,7 @@ msgstr "Aangemaakt op"
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
 msgid "Days"
-msgstr ""
+msgstr "Dagen"
 
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.res_config_settings_view_form
@@ -63,7 +63,7 @@ msgstr ""
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_res_config_settings__vault_share_delay
 msgid "Delayed Deletion"
-msgstr ""
+msgstr "Uitgestelde verwijdering"
 
 #. module: vault_share
 #: model:ir.model.fields,help:vault_share.field_res_config_settings__vault_share_delay
@@ -81,17 +81,17 @@ msgstr "Schermnaam"
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.share
 msgid "Enter the pin:"
-msgstr ""
+msgstr "Voer de pincode in:"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__expiration
 msgid "Expiration"
-msgstr ""
+msgstr "Vervaldatum"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__filename
 msgid "Filename"
-msgstr ""
+msgstr "Bestandsnaam"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__id
@@ -103,7 +103,7 @@ msgstr "ID"
 #: code:addons/vault_share/controllers/main.py:0
 #, python-format
 msgid "Invalid token"
-msgstr ""
+msgstr "Ongeldige token"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__iv
@@ -131,7 +131,7 @@ msgstr "Laatst bijgewerkt op"
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__log_ids
 msgid "Log"
-msgstr ""
+msgstr "Log"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__name
@@ -144,12 +144,12 @@ msgstr "Naam"
 #: model:ir.model.constraint,message:vault_share.constraint_vault_share_value_check
 #, python-format
 msgid "No value found"
-msgstr ""
+msgstr "Geen waarde gevonden"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__pin
 msgid "Pin"
-msgstr ""
+msgstr "Pin"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__salt
@@ -164,34 +164,34 @@ msgstr ""
 #: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Save in a vault"
-msgstr ""
+msgstr "Opslaan in een kluis"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__secret
 msgid "Secret"
-msgstr ""
+msgstr "Geheim"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__secret_file
 msgid "Secret File"
-msgstr ""
+msgstr "Secret File"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share_log__share_id
 msgid "Share"
-msgstr ""
+msgstr "Delen"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__share_link
 msgid "Share URL"
-msgstr ""
+msgstr "Share URL"
 
 #. module: vault_share
 #. openerp-web
 #: code:addons/vault_share/static/src/legacy/vault_fields.js:0
 #, python-format
 msgid "Share the secret"
-msgstr ""
+msgstr "Deel het geheim"
 
 #. module: vault_share
 #. openerp-web
@@ -199,17 +199,17 @@ msgstr ""
 #: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
-msgstr ""
+msgstr "Het geheim delen met een externe gebruiker"
 
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.share
 msgid "Shared file:"
-msgstr ""
+msgstr "Gedeeld bestand:"
 
 #. module: vault_share
 #: model_terms:ir.ui.view,arch_db:vault_share.share
 msgid "Shared secret:"
-msgstr ""
+msgstr "Gedeeld geheim:"
 
 #. module: vault_share
 #: model:ir.actions.act_window,name:vault_share.action_vault_share
@@ -236,34 +236,34 @@ msgstr ""
 #: code:addons/vault_share/controllers/main.py:0
 #, python-format
 msgid "The secret expired"
-msgstr ""
+msgstr "Het geheim is verlopen"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
 msgid "The share was accessed by %(name)s via %(ip)s"
-msgstr ""
+msgstr "Het record werd geopend door %(name)s via %(ip)s"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
 msgid "The share was created by %(name)s"
-msgstr ""
+msgstr "Het record is gemaakt door %(name)s"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__token
 msgid "Token"
-msgstr ""
+msgstr "Token"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__user_id
 msgid "User"
-msgstr ""
+msgstr "Gebruiker"
 
 #. module: vault_share
 #: model:ir.model.fields,help:vault_share.field_vault_share__share_link
 msgid "Using this link and pin people can access the secret."
-msgstr ""
+msgstr "Met deze link en pin kunnen mensen toegang krijgen tot het geheim."
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_res_company__vault_share_delay

From 20fdcbe56c8eee51ec967de26158973699e8b1cf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=ADctor=20Mart=C3=ADnez?=
 <victor.martinez@tecnativa.com>
Date: Tue, 13 Jun 2023 08:20:49 +0000
Subject: [PATCH 17/21] Translated using Weblate (Spanish)

Currently translated at 87.2% (41 of 47 strings)

Translation: server-auth-15.0/server-auth-15.0-vault_share
Translate-URL: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share/es/
---
 vault_share/i18n/es.po | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/vault_share/i18n/es.po b/vault_share/i18n/es.po
index ff6d234ebd..4750864d5f 100644
--- a/vault_share/i18n/es.po
+++ b/vault_share/i18n/es.po
@@ -7,15 +7,15 @@ msgstr ""
 "Project-Id-Version: Odoo Server 13.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2022-06-06 07:44+0000\n"
-"PO-Revision-Date: 2022-06-06 09:54+0200\n"
-"Last-Translator: \n"
+"PO-Revision-Date: 2023-06-13 11:09+0000\n"
+"Last-Translator: Víctor Martínez <victor.martinez@tecnativa.com>\n"
 "Language-Team: \n"
 "Language: es\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1);\n"
-"X-Generator: Poedit 2.3\n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 4.17\n"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__accesses
@@ -214,7 +214,7 @@ msgstr "Secreto compartido:"
 #: model:ir.actions.act_window,name:vault_share.action_vault_share
 #: model:ir.ui.menu,name:vault_share.menu_vault_share
 msgid "Shares"
-msgstr "Recursos comparidos"
+msgstr "Recursos compartidos"
 
 #. module: vault_share
 #: model:ir.model.fields,help:vault_share.field_vault_share__expiration

From 8fdda00c8960928fd11403d93376bbd114223d66 Mon Sep 17 00:00:00 2001
From: Carlos Roca <carlos.roca@tecnativa.com>
Date: Thu, 22 Jun 2023 17:55:30 +0200
Subject: [PATCH 18/21] vault, vault_share: Error on test

With the changes introduced on https://github.com/odoo/odoo/commit/a251b14f017b35899663d30a1b38cb75a41cdb1b#diff-99de14b6e0a411718ac3adaaf779395155841c7ca9d95fa258369656dae63d18
the tests of vault and vault_share are failing.
---
 vault_share/tests/test_share.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vault_share/tests/test_share.py b/vault_share/tests/test_share.py
index bc8ecc4908..1627b660ed 100644
--- a/vault_share/tests/test_share.py
+++ b/vault_share/tests/test_share.py
@@ -59,7 +59,7 @@ def return_context(template, context):
             return context
 
         with MockRequest(self.env) as request_mock:
-            request_mock.render.side_effect = return_context
+            request_mock.render = return_context
             controller = main.Controller()
 
             response = controller.vault_share("")

From a24829b49197733dd377098a981b9614599ae626 Mon Sep 17 00:00:00 2001
From: OCA-git-bot <oca-git-bot@odoo-community.org>
Date: Mon, 26 Jun 2023 08:29:27 +0000
Subject: [PATCH 19/21] vault_share 15.0.1.1.1

---
 vault_share/__manifest__.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
index 9d3f4e693b..5af9ada04d 100644
--- a/vault_share/__manifest__.py
+++ b/vault_share/__manifest__.py
@@ -5,7 +5,7 @@
     "name": "Vault - Share",
     "summary": "Implementation of a mechanism to share secrets",
     "license": "AGPL-3",
-    "version": "15.0.1.1.0",
+    "version": "15.0.1.1.1",
     "website": "https://github.com/OCA/server-auth",
     "application": False,
     "author": "initOS GmbH, Odoo Community Association (OCA)",

From a1919ba858775038f85b194ba2106de715951735 Mon Sep 17 00:00:00 2001
From: fkantelberg <florian.kantelberg@initos.com>
Date: Thu, 29 Feb 2024 08:01:23 +0100
Subject: [PATCH 20/21] [MIG][16.0] vault_share: Migration and restructuring
 for 16.0

---
 setup/vault_share/odoo/addons/vault_share     |   1 +
 setup/vault_share/setup.py                    |   6 +
 vault_share/README.rst                        |  28 +-
 vault_share/__manifest__.py                   |  10 +-
 vault_share/controllers/main.py               |   1 +
 vault_share/i18n/es.po                        |  16 +-
 vault_share/i18n/nl.po                        |   4 -
 .../migrations/16.0.1.0.0/post-migrate.py     |  13 +
 vault_share/models/res_config_settings.py     |   2 +-
 vault_share/models/vault_share.py             |  12 +-
 vault_share/readme/DESCRIPTION.rst            |   2 +-
 vault_share/readme/ROADMAP.rst                |   1 +
 vault_share/static/description/icon.png       | Bin 2287 -> 8740 bytes
 vault_share/static/description/index.html     |  24 +-
 .../static/src/backend/fields/templates.xml   |  46 +++
 .../src/backend/fields/vault_field.esm.js     |  45 +++
 .../src/backend/fields/vault_pin_field.esm.js | 110 ++++++
 .../backend/fields/vault_share_field.esm.js   |  15 +
 .../backend/fields/vault_share_file.esm.js    |  15 +
 .../backend/fields/vault_share_mixin.esm.js   | 164 ++++++++
 vault_share/static/src/backend/templates.xml  |  57 ---
 vault_share/static/src/common/utils.esm.js    |   6 +-
 vault_share/static/src/frontend/share.esm.js  |  48 ++-
 vault_share/static/src/legacy/vault_fields.js |  55 ---
 .../static/src/legacy/vault_share_widget.js   | 367 ------------------
 vault_share/tests/test_share.py               |  25 +-
 vault_share/views/templates.xml               |  19 +-
 vault_share/views/vault_share_views.xml       |   5 +-
 28 files changed, 543 insertions(+), 554 deletions(-)
 create mode 120000 setup/vault_share/odoo/addons/vault_share
 create mode 100644 setup/vault_share/setup.py
 create mode 100644 vault_share/migrations/16.0.1.0.0/post-migrate.py
 create mode 100644 vault_share/readme/ROADMAP.rst
 create mode 100644 vault_share/static/src/backend/fields/templates.xml
 create mode 100644 vault_share/static/src/backend/fields/vault_field.esm.js
 create mode 100644 vault_share/static/src/backend/fields/vault_pin_field.esm.js
 create mode 100644 vault_share/static/src/backend/fields/vault_share_field.esm.js
 create mode 100644 vault_share/static/src/backend/fields/vault_share_file.esm.js
 create mode 100644 vault_share/static/src/backend/fields/vault_share_mixin.esm.js
 delete mode 100644 vault_share/static/src/backend/templates.xml
 delete mode 100644 vault_share/static/src/legacy/vault_fields.js
 delete mode 100644 vault_share/static/src/legacy/vault_share_widget.js

diff --git a/setup/vault_share/odoo/addons/vault_share b/setup/vault_share/odoo/addons/vault_share
new file mode 120000
index 0000000000..d8d730a844
--- /dev/null
+++ b/setup/vault_share/odoo/addons/vault_share
@@ -0,0 +1 @@
+../../../../vault_share
\ No newline at end of file
diff --git a/setup/vault_share/setup.py b/setup/vault_share/setup.py
new file mode 100644
index 0000000000..28c57bb640
--- /dev/null
+++ b/setup/vault_share/setup.py
@@ -0,0 +1,6 @@
+import setuptools
+
+setuptools.setup(
+    setup_requires=['setuptools-odoo'],
+    odoo_addon=True,
+)
diff --git a/vault_share/README.rst b/vault_share/README.rst
index 499ee5f481..da29dd4d6c 100644
--- a/vault_share/README.rst
+++ b/vault_share/README.rst
@@ -2,10 +2,13 @@
 Vault - Share
 =============
 
-.. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !! This file is generated by oca-gen-addon-readme !!
    !! changes will be overwritten.                   !!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:9a16926a6329561017dac0fa81e331bcd50b83bc373281609831a25e42fb3e0c
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 
 .. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
     :target: https://odoo-community.org/page/development-status
@@ -14,16 +17,16 @@ Vault - Share
     :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
     :alt: License: AGPL-3
 .. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
-    :target: https://github.com/OCA/server-auth/tree/15.0/vault_share
+    :target: https://github.com/OCA/server-auth/tree/16.0/vault_share
     :alt: OCA/server-auth
 .. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
-    :target: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share
+    :target: https://translation.odoo-community.org/projects/server-auth-16-0/server-auth-16-0-vault_share
     :alt: Translate me on Weblate
-.. |badge5| image:: https://img.shields.io/badge/runbot-Try%20me-875A7B.png
-    :target: https://runbot.odoo-community.org/runbot/251/15.0
-    :alt: Try me on Runbot
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/server-auth&target_branch=16.0
+    :alt: Try me on Runboat
 
-|badge1| |badge2| |badge3| |badge4| |badge5| 
+|badge1| |badge2| |badge3| |badge4| |badge5|
 
 This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
 
@@ -37,13 +40,18 @@ This allows an user to share a secret with external users. A share can be genera
 .. contents::
    :local:
 
+Known issues / Roadmap
+======================
+
+* Secure the download of the encrypted file behind a challenge/response
+
 Bug Tracker
 ===========
 
 Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-auth/issues>`_.
 In case of trouble, please check there if your issue has already been reported.
-If you spotted it first, help us smashing it by providing a detailed and welcomed
-`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2015.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
 
 Do not contact contributors directly about support or help with technical issues.
 
@@ -73,6 +81,6 @@ OCA, or the Odoo Community Association, is a nonprofit organization whose
 mission is to support the collaborative development of Odoo features and
 promote its widespread use.
 
-This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/15.0/vault_share>`_ project on GitHub.
+This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/16.0/vault_share>`_ project on GitHub.
 
 You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/vault_share/__manifest__.py b/vault_share/__manifest__.py
index 5af9ada04d..7e05ea658a 100644
--- a/vault_share/__manifest__.py
+++ b/vault_share/__manifest__.py
@@ -1,11 +1,11 @@
-# © 2021 Florian Kantelberg - initOS GmbH
+# © 2021-2024 Florian Kantelberg - initOS GmbH
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
 {
     "name": "Vault - Share",
     "summary": "Implementation of a mechanism to share secrets",
     "license": "AGPL-3",
-    "version": "15.0.1.1.1",
+    "version": "16.0.1.0.0",
     "website": "https://github.com/OCA/server-auth",
     "application": False,
     "author": "initOS GmbH, Odoo Community Association (OCA)",
@@ -25,15 +25,11 @@
             "vault_share/static/src/common/**/*.js",
             "vault_share/static/src/backend/**/*.js",
             "vault_share/static/src/backend/**/*.scss",
-            "vault_share/static/src/legacy/vault_fields.js",
-            "vault_share/static/src/legacy/vault_share_widget.js",
+            "vault_share/static/src/backend/**/*.xml",
         ],
         "vault_share.assets_frontend": [
             "vault/static/src/common/*.js",
             "vault_share/static/src/frontend/*.js",
         ],
-        "web.assets_qweb": [
-            "vault_share/static/src/backend/**/*.xml",
-        ],
     },
 }
diff --git a/vault_share/controllers/main.py b/vault_share/controllers/main.py
index e51f703cbf..52eb94d1ef 100644
--- a/vault_share/controllers/main.py
+++ b/vault_share/controllers/main.py
@@ -30,6 +30,7 @@ def vault_share(self, token):
                 "iv": secret.iv,
                 "encrypted_file": secret.secret_file,
                 "filename": secret.filename,
+                "iterations": secret.iterations,
             }
         )
         return request.render("vault_share.share", ctx)
diff --git a/vault_share/i18n/es.po b/vault_share/i18n/es.po
index 4750864d5f..a73a93b1cb 100644
--- a/vault_share/i18n/es.po
+++ b/vault_share/i18n/es.po
@@ -7,8 +7,8 @@ msgstr ""
 "Project-Id-Version: Odoo Server 13.0\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2022-06-06 07:44+0000\n"
-"PO-Revision-Date: 2023-06-13 11:09+0000\n"
-"Last-Translator: Víctor Martínez <victor.martinez@tecnativa.com>\n"
+"PO-Revision-Date: 2023-10-30 21:37+0000\n"
+"Last-Translator: Ivorra78 <informatica@totmaterial.es>\n"
 "Language-Team: \n"
 "Language: es\n"
 "MIME-Version: 1.0\n"
@@ -157,7 +157,7 @@ msgstr "Pin"
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__salt
 msgid "Salt"
-msgstr ""
+msgstr "Sal"
 
 #. module: vault_share
 #. openerp-web
@@ -245,13 +245,13 @@ msgstr "El secreto ha expirado"
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
 msgid "The share was accessed by %(name)s via %(ip)s"
-msgstr ""
+msgstr "%(name)s ha accedido a la acción a través de %(ip)s"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #, python-format
 msgid "The share was created by %(name)s"
-msgstr ""
+msgstr "La acción fue creada por %(name)s"
 
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_vault_share__token
@@ -271,21 +271,21 @@ msgstr "Utilizando este enlace y el pin la gente puede acceder al secreto."
 #. module: vault_share
 #: model:ir.model.fields,field_description:vault_share.field_res_company__vault_share_delay
 msgid "Vault Share Delay"
-msgstr ""
+msgstr "Retraso de la Acción de la Bóveda"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share_log.py:0
 #: model:ir.model,name:vault_share.model_vault_share_log
 #, python-format
 msgid "Vault share log"
-msgstr ""
+msgstr "Registro de compartición de la bóveda"
 
 #. module: vault_share
 #: code:addons/vault_share/models/vault_share.py:0
 #: model:ir.model,name:vault_share.model_vault_share
 #, python-format
 msgid "Vault share outgoing secrets"
-msgstr ""
+msgstr "La bóveda comparte secretos de salida"
 
 #, python-format
 #~ msgid "The share was accessed by %s via %s"
diff --git a/vault_share/i18n/nl.po b/vault_share/i18n/nl.po
index 09968ce8c6..5ea11a1ac3 100644
--- a/vault_share/i18n/nl.po
+++ b/vault_share/i18n/nl.po
@@ -159,9 +159,6 @@ msgstr ""
 #. module: vault_share
 #. openerp-web
 #: code:addons/vault_share/static/src/backend/templates.xml:0
-#: code:addons/vault_share/static/src/backend/templates.xml:0
-#: code:addons/vault_share/static/src/backend/templates.xml:0
-#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Save in a vault"
 msgstr "Opslaan in een kluis"
@@ -196,7 +193,6 @@ msgstr "Deel het geheim"
 #. module: vault_share
 #. openerp-web
 #: code:addons/vault_share/static/src/backend/templates.xml:0
-#: code:addons/vault_share/static/src/backend/templates.xml:0
 #, python-format
 msgid "Share the secret with an external user"
 msgstr "Het geheim delen met een externe gebruiker"
diff --git a/vault_share/migrations/16.0.1.0.0/post-migrate.py b/vault_share/migrations/16.0.1.0.0/post-migrate.py
new file mode 100644
index 0000000000..15c3b22717
--- /dev/null
+++ b/vault_share/migrations/16.0.1.0.0/post-migrate.py
@@ -0,0 +1,13 @@
+# © 2024 Florian Kantelberg - initOS GmbH
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import logging
+
+_logger = logging.getLogger(__name__)
+
+
+def migrate(cr, version):
+    # Before the migration the iterations were hardcoded to 4000
+    _logger.info("Setting iterations for previous records")
+
+    cr.execute("UPDATE vault_share SET iterations = 4000 WHERE iterations IS NULL")
diff --git a/vault_share/models/res_config_settings.py b/vault_share/models/res_config_settings.py
index 15b04def40..4a69c1c18b 100644
--- a/vault_share/models/res_config_settings.py
+++ b/vault_share/models/res_config_settings.py
@@ -20,5 +20,5 @@ class ResConfigSettings(models.TransientModel):
     )
 
     @api.onchange("vault_share_delay")
-    def _on_change_mins(self):
+    def _onchange_vault_share_delay(self):
         self.vault_share_delay = max(0, self.vault_share_delay)
diff --git a/vault_share/models/vault_share.py b/vault_share/models/vault_share.py
index 4b0f119f8a..927e5e3269 100644
--- a/vault_share/models/vault_share.py
+++ b/vault_share/models/vault_share.py
@@ -27,6 +27,7 @@ class VaultShare(models.Model):
     secret_file = fields.Char()
     filename = fields.Char()
     salt = fields.Char(required=True)
+    iterations = fields.Integer()
     iv = fields.Char(required=True)
     pin = fields.Char(required=True, help="The pin needed to decrypt the share.")
     accesses = fields.Integer(
@@ -70,12 +71,13 @@ def get(self, token, ip=None):
 
         return None
 
-    @api.model
-    def create(self, vals):
-        rec = super().create(vals)
+    @api.model_create_multi
+    def create(self, vals_list):
+        res = super().create(vals_list)
         log = _("The share was created by %(name)s")
-        rec.log_ids = [(0, 0, {"name": log % {"name": self.env.user.name}})]
-        return rec
+        for rec in res:
+            rec.log_ids = [(0, 0, {"name": log % {"name": self.env.user.name}})]
+        return res
 
     @api.model
     def clean(self):
diff --git a/vault_share/readme/DESCRIPTION.rst b/vault_share/readme/DESCRIPTION.rst
index 51e526ca52..6348479690 100644
--- a/vault_share/readme/DESCRIPTION.rst
+++ b/vault_share/readme/DESCRIPTION.rst
@@ -1,6 +1,6 @@
 This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
 
 Share
-=====
+~~~~~
 
 This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn't be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.
diff --git a/vault_share/readme/ROADMAP.rst b/vault_share/readme/ROADMAP.rst
new file mode 100644
index 0000000000..3a2ad3154c
--- /dev/null
+++ b/vault_share/readme/ROADMAP.rst
@@ -0,0 +1 @@
+* Secure the download of the encrypted file behind a challenge/response
diff --git a/vault_share/static/description/icon.png b/vault_share/static/description/icon.png
index a0c9035d9b2247bbe8008a1601aafb0524a2c13d..d79aa6f5751719b79f296262aa20dbfb68d1ba92 100644
GIT binary patch
literal 8740
zcmV+<BHP`GP)<h;3K|Lk000e1NJLTq004{t004{#1^@s6uE0S)00001b5ch_0Itp)
z=>PyA07*naRCr$PT?v$3MVbEZ+j`$SNp~k{lF$TER!3ZBTo@V5I7HDI7!{2W91R|i
zU_cW^J#2Cmlt4h1%m^ZzII;;OfuJTKk~kP5Q36>Zd#Ah8Nq5re<@NH0x^<V@tL}YE
zzt`zLoI|?befQR_`s@3@|NH-{vVizmvhvaTNKyQXh!y)nMWVFD0)P|%c>m}AKwMzo
zhrEFOjd&1w!&C|^3;jX=V_%m_0Z6X*Z;P&Tn!`L6|LQ!CZm#=R?sNZf%=>Z8!T0sv
zhUz%t?{1r%8*^_j`8(fF_yO$SE%N=y_h<Tzy^j3-NPq8Jv1sJ+l2p+x|8mL)I=v>l
z|5&o-v5Tt9Y96st5Z8~N(@?M=g&J)CU(_LDgYp_Cvk|AGQAeZ{24!L(RJ&}0liCaY
z0rfugkV*~6eO=08a%Vu^I4~BdG7Q=fh>2vszXijok!0^+{}(Pe<zr8Jli}8t_s^bM
z+4O8rvJVdTABFzG0XR0;#|<ZLkYmvl^w5{$21=$l1rXxv{Qjn=Fn2YBIP6TNI*_&;
z9toTdawh=!MluA%h{xHP*6?V9BQTFOG#NtK*YVSiLmIAqyg|@_>-S)3yckO2MNnB(
z2IYxT=ty>5__<Tgd&2tV%BQMJt4i7q9_vc%JJRm79uJgmhWpm(BMs-7s1B7Fl5-=O
z%TYl#ZI-;tU`?5G8AOk928R&NLC{PX5IuhW(^vzdCJgy}!hoo@axTnqjV#izE=gff
zq;qYosE3-8%4BpXGTFLs-BZ`T^S$e~b?)|NhI&~2uEPf9PzoWSh&!Bg;rRP<q_J<y
z%rwrQx`^g<0Pj+X4&;yqyHw851#?(7f#?Ay`iJ2Xgo)tCaa4;PXmZ&6j$qp>L>7{}
zaP44`#+gP=KjZ$R4SIUbWCSADTMzx^*=<`7?rs?x873}qr##`5J;af6POpg^STgp&
zb{y;bXan&_m@_MlOLAXYYCxRj;U@^&FEJny3FkQj^B{V>{E6yYp2B64oJeF)JeN%0
zpe%?+BG6pjxW&5n<=-CL)zw<c#6xt0*%2jNh(}6=tk<2m63n73nzm~9H;%Ltq(N*z
zqM7Tr!$U0Uo!E{iujdUYW1NOVL~%PP!zW&Vwl70Y69{<-pJo9}shZShEn4+p>fo_1
zO_W1&8Z(5Ue7^u;upvlXk;irAuFA)BpGEUm6Ba3m#<}RuoB2dXksT}x=LLVqsIDf(
z{>Sw5f^r(pfGyT|SXYOqBin3}#8akgVUw*Ztpe-%7w%1=sEGFAWY;UgW(Ik5QIvmI
z*?_Pz3)7Kg*eZYu?ygzqG;VwOc6tWQ&1l-d{f-|^PD5}QN=L#5?;2KdtO%^{EnSTM
z!~wLz!#Ho|Mp0&nqk2Goa2kgE5;Mr0({Mrz!$laEV?c^2gW{+Vqkpl{lEd+gI1J@|
zXp%*8GV8m~ElyEEiXe*ce5hDmp~&vIPUBCFv8dAs5rzvMSkg;au1bmZ?=!B`U`k`k
zY3KkTD5pU_gz^~~)M;#l@dlO@R;5WKMUIH&G~+sr&?S)*iM)Vy&H1R)I0!>x3eR37
zK{1_`9M@?${YI`_vmAjVC$ynCcp*m`m+2UA8bQv_h~v1tI5@)4LK^F>$lobtbX=#=
zx+E^ioQFEis3FX_PE(jVjrHB<Zs)>kse|%-)3{DU>sG!?pb>WL=`>zgE%q34rFC4V
zaU+=^xu?R{Y19ZKjhe(5Bqhhr<vJypjvmJAY52l9R^n&kD(_d~x^#0-OnFKugc;Xq
zyct0KgH27?q<@Un(+~)wD4}z^Wn8CW3JEc$9#8c&Sh%A(te~)GT&JPs112X#xq={^
zMqJdM&-FA}K$vlz#^)ZHbxHZ4)A$HOOd&aW4Hz|%VR%3#cwDE+Po2hE_}uL&-V7KY
z#TRdiWC-a3Ch0O1Hut1il`vjU<Me<cnaCH#ljSF@D;0AvRjL5HBr?mza$l!_W?ZN7
zGsxl^;p3y8COw21*J*HRD+keHQtataY{8nU^fS-aJ;@Qqbr&HJW?ZKkyE=`HFruKD
zFVY^@X<XNRJg<9lToOU11RQ2ur(tVxX$(D{);)~^!i?)Qg{;$HgwaGvY*an2(=bk4
zvYcfsu6v>ohOM5Ht1;s`4Hly4bvu6lvDsqUz|3<``BzWFgw>>!?S@B8m^7}_cuE+X
zomQ{q9veDMb`fR_>ogItARdWBED`}LWkE7E1jDIe7_pTZzXETp=`;?9@uAOOT(3cx
z<4C7TL}JibTnm#cCqh%@1gI;khRU*XZk51DY6QA_k3wfpH|+0jhy6Vr(As|(Mqor-
zH^UY@v8j?gtfx^TjGohoxQx7bliHo50M<P<mrj6FC!PrJYMcSFXpHR+?ssyPggf#2
zlLPSPfgSLA`wnPNb{Bj-jXJD$_n2cg>|u48v8K~ZD{p|0oNy*I)=Z>~LSzsoD?i<v
z?CjVJf7-nf+6KD3<SqY?{H~|TLxdSUou(pM0_RRU8)i06*P@B&0+B(9uKU}bEwE<q
zYtWw>RJy9H=bl2Wd%_0e3BCTVmF~>pHVl#}!9>p#qE2&SX#>nY?HnkIC#1%bF2Z<Z
z*s|bgUk^O<#!JxJe~8|uRk+=uL!$Fwe;RASbGN0m+n`Fia4hIF=p8;Z;ob1zlix>e
z0?AF75SXJw97K{=ytx)Ob?qdOCP<BN?sXa?mqZpW`IT^muhT><3(jqNFT8igsUge(
z@5aCyRuE3(K6K6Y4e(0)8+0+bM{a^}n(VK8vKBZMcVT)gZG;(3ohFrn^QOEH&YJ!n
zUpL8+0g$f86scBkT@ULIZXR7uBU$v18f7a0XzMbP!|>6LJA=lSPJ>YLL$#;C$KLaS
zF!Lni2IeBw^KZOtyC+7Tp|-;%8$258o;(iYZviiWK*Mh35hwq28Z_f44_CpQb3Utm
zt4z5ZQ^Xk_8G%PPEX8__$R#n+1h@5}WUGDO0O@3gZaIr+e;S&@xDE2&(D8{>^T}Fo
z2Z0Jjr%3?}w;zLVU+`6BG^Dj8Sr9-BSZCKE=;=KM<)vj%S6yp-%Okx<;a7iK2FZ~j
z3DN}NG?`!bL?Dd$&Qh|s&ke$a(`gX0v~Al9m(RKwPM$nN_zEgSF(I>qLxb?_AD@R8
zUj8E-JnS6+0`;}^@UI{KILtn07Q|z5?UwxO-~KzSZr#WT70e+Qxi}j^pwlQhjGWW(
z(E)u<4ts76JwCbCX<TDDW7@l5?ztBk&-Ne}b|3AAo9?|8w(lW02ty)UnrFZ@mtO@{
z<(1l7Kd}B8IFvj}@1N{=6qyX7+;EzCA||n>d+zzJ%tja*Tiktl>HllrP;f!oQIzyJ
zCi>2*bx*djY~O3Q?mM6P8ceR86y{YhqmV>V!z06R&22Zr_FZpz_m0Km5RFA)cz76w
z2ZubTK682t+;rvlA%e2pg8R8Qcys>_ShjOrnz^UU>ojT(W7xI%s?(t6AK13Xp691b
zX@PmOF3yN<!gkBDHNS^n{O_+I60x9iQXN#**FY>0^X4Hkm?IrsaHRbZjEtmU-sdiX
zSsy-E*}EtRx&M{lLDx`^6D8$GJq?90WbQ)0MnG>(X(LP;I*o@c&Wp_b_=RxBv{Uqr
zR$L)Nm<2z*7IwDohDj|`p{TT&BO5ND5A^oiXg6cZ3GkDvu2muoYR1dk{|f8cHs#g2
zr$8L0P;?q(BW>IEctc+tFM=O^@oI=iW84XECS+D+W$63=Ie#upI%x_Nm6cLXl+sh2
zN~(dLK4{;u7k;zoe(lkP-Mu|<-)m1(C0Vv>bQ?4Z^)x~b<6<d|IN9Jdnb&DB!Ntbn
z-u<-ZnebodeLgL85q%jU&OmYizV_p9LtQiCMtB58hC=?mb59#A`R-34!6Z6G2=<Ft
zo`kN!UWY?zjzr9XPJ>ees&Vrx4*d}zEu8qAyG@SkY0%k4HfNzKwE!-7|9SAwr+!eG
z`!SX9MTYb3|G5c95M|-QKd}KthXHQ>$~D^X8a-?IrZw<J_b%qKg8LFv#Qbc8;5v;0
zVO;y5Pcu<&hNzjt+0<!LsS#Ue5&eAQlV66JP1Djw7#W9oVCCcR_g!1KEt6#ibo#WD
z;gWOygKLlI{;%%b1S|J#aLmEkxS1Ag#mJT=oyJ<Y)L$xVx5{AUqpadiDW&V~OLSjQ
zoyJ8L5BSLQmfm^pb)UNes>|Ow>qj7+r^{i`Gk10DgT>E1;CBn}lf3zlX8#qRx&)@y
zH5nnyTWx#b$sMbyV`zMUXLtU_pJY>~aS(>}F=`(r;x=KXZ`x55vTw%?*&QV?2z2z^
zt(SgZOEAN<pZw1Ae|-sF+_*-do6wwQ)|nrLPn`J?qsO85Idr58?*IF<VwWUzf!VF6
z@i>fo*e7@Br;5WEy*4QeW_H~ZYU_b*yQMP<HLoO53^#vyp;Uj7)w6`*G^<|!Gc4V(
z$`<Re0sDv@jl|&me>jKAkeehod;9y~?pGgodfMSGLYI^qokkfYsTJUC<epSWM_VTu
z4f(E!KN!8LtO9QM{Cq>xPVX{g0Ec_J;gxM0VQ0ra=pE>TvZ4~0HgO7^-Es!h7^DQq
z7NGkf6?xIRM?IHDeeNDGZ$h>+#A&PrOYxRv-Ve)ab=*Voxj%z4TTkP<Az6_$`8ri4
z<#6K{uMUhb?maTWab#v_f-oqdx%mGcBM^p2z8aEWF5GwT7Gm8~C=N54I*p4g%4p4*
zacDq_A~CpS?ltK_N62rR7=-TDM|*o<$zPwwzAfu(xp{=PU8@h_;313$6l|$3dyu&Z
zQCLqR`8{o&22yZftFPcv(V7HuhmwP^=qo>jqC_H)4x{5Xx`7V!xyZm;JKEsktt*5s
zNxha^rU<83PZNm4u&f0eKyGvzq_Z5bbryqDZV7}z2D9)p^PstLN|-SW^qq9;X+#g(
zxOEe}*nxEz5@AFL>t*c?T~(NMPdvg1PVAyyBqN+ASUn9gN`x$u;J}+oq7E1t9)^p~
zngt&{`yT@#OfEPKYak+nTk+?WuyGg*lDt0U&5WGsG!hP@^D(*8X-3@KkT89Y+o9VB
z__V5N@YRbh34|8exHt@_`S0I71l{!x!0;9(G!)8JQBdUfm&gM78ezVk#zq*{JScN8
z;WRS)GVFE#d9+T08g^joZsIN)17W71i#VzFKDhIHKM8~|It~*?r!njf?=oay-@pH6
zsGiwKxFpd*>Er;2&Jh<F3SlwkxhDXOFl4e0sbRX+_L9#tSx@6dLo(7Wm?E6Za{4iK
zxE~hHzY*dw{SFL42Q|p`K@sNdy}RJf7axYknayIC#3WhS_op}whcw}8gryutT0oTp
zod)#|jVv^TNnMZtVQR{&;hUeF19g=(8AX^}aGXb$Jq~a7?S<-wI@&IYt>fw8pgSPg
z?w*7JIZqR<doqlYluk>ENMY(}Y*Ee*oqdxP&J+VqQ&&+9SDb$d)RtEV0fL-et3sTC
zfdRPs&g-D*tP>$#oN&5>#t{EEHTlgPr?IdO6NuuPa2l2q>mEQ1QR|l7I0vKrp&uYZ
zoZ5<NxN`QTP*X-{se^Kpu-EI}K==9bKm7roS^s;OaW*O|b#h2t{S;l#!grhVJ;N}Y
z6lAIPIp0V9Eaos7;WWYOX++4v={|-vzI7EfaK-tTLT!1KZd`Kuxv5Um*WV8d@45j>
znrfhK>Lf~OCDY+tm`y0b+0to@IgFIkuw5R4Gut}L7E~$chH*@l05`01gt6VwY-B8E
zZYW&@$wsc}!RLMht2VBKlm6*+h{X|6m$)JU=@oLC4DKUr7$uqd6tzAh%0byW%huiW
zf-Q}KkUp6#$3VpP%JVOUnmj`mQy4=C^yZE&aLcdnhU%sXUUbAUNUxh^oW^6V8P{nj
z4#U2f+b$*LHQ_W8d&9_rbQY4d(MdM1PDi6aBR6#A?75s93X33_{+@}^9O*d<KUi`z
z^b8z>mJgl^u|yn))0BY_+3JjP8nb#DYr#@?<)iaTY$cWG_YCMXEV78R&nm=nQY$Hd
zde>Mgs_Zg`Li|Y%CgCR!+yQU3?uLe$Q*G`dt2pv-Mdy;TpwoorFzM(t9<sPElm@~e
zWck+YxuM-qrjdl@G$tGeRp|Zf!Mos%J=>wQx*VpRb+WLelwA!$0yiDiNTMnx8x=;U
zArQtffl!E|bXwF*v9r!(i30Ja9P8I`8H_BKL9K%<ZWK~T2s4mO!lGZ@4Vznc09ubd
z<Nfc3coE*1(FX`|&+wiq`#Mc14ilEsAY`$17S{KABh0uUCTt>q4T~%?1jrWB$nJ|?
z85MZ{?EX7pUw1n|)Pm_}o(v_`XoqnrcI1%Li0f&T24lA_L!1WdEMy{)#{pA>sjsZ{
z+>psY=Of~5-26J+@yHSwLQ!+Xg67j(prVeE0*F`uzXOjTbc%@X!EER>n8T3z2e<i0
zxKt!LNN7;i$U=sJlCaD9GeVa6voC|{fCbfIjmE?vRoiy3h}PY61Ri|)F<8C+Whkww
zu($n~dRhyV*Hsa9J+2NVaYf|1D}f+kOp2ME!&puuI`2t<FbthF;xv-D8CA90oMpG4
z3t`u>c)zO=2ek?z%Y265iUu^Sab)v*N00Tu(p4|OGb^8mfuR8?tEq%oQ39r(b|REk
zm3#Psd!HBiX-*?{S>~LEoS?FD2=UTiY%px}YS?o+od&rxge<ZjQP50Z>tBIHxvR2(
zEMXDE<a<NI!|=B)uft1!Sqtl4dj<NFNr=UxP*zg~<+YVC<<uDvjmLNcVSpt+I1Scm
z^c;qTJVQ?7Mnlv_&<eUMGAg&<CJ>xOXUir7sk?{j^W`tS2(efk8tNxPd1*NmClY|x
z>Gb#aLr-5Xw0E?_{*D8%b?0{2{PuQ8CI`GJ9FNDKVp0t>v`mGX#tG7eT^L~m%9N1P
z@Yfl;q!2odwO|=um!w=Z5OB%04p~%D7ByIwWs7q2Km8S`DZ~51<=O?2&-?Y#C*YB1
ze@kT3B_xzzg%3p~MbLc4Nwy$|P=);AYLO+-D>Wp~!^n1HV5UGC^)vwx#!RO{$kOU?
z7LH6)YoD3>ak~Hj*vRs!%RFN-L56H0%!-#+!W|DS5zc&{J1|j-WkE?r8Pra$hpDHx
zKqMMv<^$q*BCg=ZL}baTfa4jEU%Qtna^v5Jc6Da!o@|7nW<0@pJt0;yQY?otMHUlI
zV-s8gS={er8(~B`&HC40gB$L-1xAKPpmJgjz(@)PlY@X(B&3GXX=@flq7jJ1q7YBS
zAy%A#;<6GbE-!(ivSO&6+F;8QIGPfXOqRJZq&JT^4NZDYrZ9Vr(*w57vSk;86YdOA
zIU(K$BV?J6kfl8R+)%oR^XH9!fuG)YC-e^tK<(rSP}Agd57BNBWcMI9RBPvi#6Q&c
z#mO}Li@`VzjUbuUX&esYLmwuo!8lF2$U>Tv3|VBIo(aU+u<14U&GO$-m44`Gn$E+A
zp!HyzJzy0Rs$t@^CU4=MYHlH9P81hGE!xJ+^$7tH#t#<w9Hc)!xz}k7I1C3VbZ%(G
z;VhodkS{vmIgKwQqmHdAtAvH0o#!D-CUQe22K9$^tKrsP-o-^N?#wQ&uCOB;JNc*h
zaobx|>LLpsP~EyIf5JEu*C}}7mjaW5o{H0uQ&507T2AA9M^JbrL>L*T@m|0u6tI8G
zE(S7X%L?@VZr&$84`&j`(dfUCnW*XaYgfaq5B%I2SbFVoSxp5@I&m^sRzzq}6cPYH
zq9g%zQybI;Vb07cL{8(AUQubKV#KiA&u-Sok~iHBX!OFh+b;Vdpe<5GKO|C^7*Y@y
zwrc%ac=)BKXnobP>;k4(5h`NB$fCv<02^7ROk%Qjih?JmkzRN$K^PK=MoXu$7A#xr
z=rH0f<3*eXHMVuLI*}M=Q189`N0iPI<{l<4h`sOX4Qt`IufE{<(je=eT!cZ$Vn;*7
zkJP{@gu&61($(1;2T8UfBLF=YIt>+8+l?lXM(`FU$U=QhQ54Q{8e}jg$PmVmd@t&T
zxBmZEy}A}2->`z-HdR<5Cgvoru~5P(^?gR4k(PHb2u+6JLg6>}I*k#+c(0L4!T!yd
zv-thNZui0NKca{inUQA^CJgBfgD{V+cnbcs>oo=&{5Mn~PNFygb<HlaNTL>*fso`g
zU=+nc8HF^y^Ab(2bZUfogkhiH3bOAUs-WX6x|z=_-n340&pbK8aLw{M*wY<#j~9O4
zbF2rhzT-NG)s<1pTm-^1=dy|zH)Mt|G^bIzB2pR86P?CdxNNa9TaA1t`p-rd!9p@y
zw<8TYjqww?q;$!y3~^9t<d&V=V98^@goFLvFkyOAAcV1_ArD#D4v^%SSnEgwVMa@*
z(IQMLU1X6(*#d5(;xJ(mroFQr<}CcW{dHNAuWrgjsBS`=u&}uxS|@TpW_1=>{KPpZ
zO8+o$dCW`eq9|I><FSiLPRlF!6gmy&FjU2zA1#TH#h<Zmk+LefV)o?~rtN);$_B!;
zb+*Hok-<nHJsOSLMNH8|TpKnc!?4{DLKZgXCJeg+avBe)@POo_PU9d9%Pz1W*1B1(
zvxFiIQs4(za`{c6!)lr9YVYiTISVi65XOpFP+VSWyA}J4BLQh)U2vkbNU&Z=PA=q}
zM(o1G=H+*o4q^PeO77(R*^lDo28}z6U+ix!T)voQ9X4fgqalItCM&rm{~pqkOk7e>
zPSe)e0oOl%C$Vj5xRsT5B9TNE_Z|J)2@pzc0)?p4a0p}9vt$`rD0?EHeaY8pgb5N>
z%Ms=vT=&Es4#EUm<nMAC%vl-)>pl6nPxS<|C`ww0$4x`ZW#vexp%4ajI@Vbfl0Jtp
zw6C=XE~HNL^RHeHF{a2!MRrXLYG2!axasM8oZB#OrdapnJ{RYP&>nLPl;{M>OmLbs
zqA0507@+f!O^k6WoyJ<Q9H$1*;gz<|B3vbqp}1M&s;-)KDV#k0BpQH1>Mbtfta)`U
zJi2~)D1>p5MZ`F;y<`Jn@>{2|5k^IDb-8C*O}NV;gXlD6-4@*Po$DaxoXu!Lg;bmd
zZOrqno3DXrLm9r6s=k6jPOP&u`e#Hc5QQZ#a^?~+YDxoPvZd2l-&uBh3Ud}$(j`~2
zIV{;^<icJ<SmcgZ-mp(xz2M{j22GP1A)-pkNe3_m!>JM2y?-w}vEmu%?CFB$(`nR_
zBL@B?QBouj<@gsA;frIL>XY6D4w8mI`p)@OPh)*)(R_N<K+sKBjX8~4uR#X8XVcrz
z-_vWLhqygXZ&^iF1-QdoURwnXEmI^i49{uYdKS_=NI{HRHp6frnTHa!i#II)iMsIG
zMat38X>5a`=MFP<m7FFltcbtYf8-eKdvm9E>~1iIzz;F1(x39488%{we%Sk?(3zL}
z<?om_!Wiz^C*2g0X<9CH8fy+R7+$yYni4?S$G1sSr$L8-cei!IV1E*~f!KnIm$oH?
zX<4?BR5#Sy1yIr%>n)40AW`b%hA0KsJrg0b=RKKXNj~Z{d4({-;n#()l!21x{g9kY
zjs@tMuH4V%ngRkS|CC@DSqM4}hcHxB6L7_&7-2G}(*ztp?sC!aQ3Th$fMvx3l4_e{
zj?d-h5GRc&it3yII*kBf*nSSeY1kf5cZlili)OG}Ldug!7Ml3BV7VXdgG&~K>1%go
zZ<QN_8C{*mnsXZ>y~L}!5JUF2V%&47)1+&D<bc|VL?-L3mbmF-j@ddJ?Rnos;|p1*
z35hVSuga}XgGq4sbx&?MYAd*Q@spTih|Wj|W2|XMQQWqwM8Av9V$d{F7e$fsfiSAH
z033uNJ{EbPFkHqRjtuHF;<TK+yg>BQh~U<p&?qi;59v{lC!Gchcdj1b7>3$VgK(NK
z^V0k~su;x0^^iiFSE68qEaq8bb56suX|+U`kM%S>hhf*5h+KdGkla7%QZDK0H0I_+
zU&$ehaf4MZ@c7edtS{Z>qy`ArQ78yw%4ra1!3wS(llXI*#3_w1hMSux${ZQP)YAk;
zm_pNOP;RLHghuraTRJ<E=rZhDbM7`{P^a-oujfhx(thR;CnT#hoX+fk`MDvTMTp}W
z{MX!^%Pp!YW?$P(3C^xgW6inkDkk};aqb18)1cf?J*sDsI3lSHYDt(0rwMj0cOli&
zaACD)J%+*^H!~=M8XcX6=PZUk#gOA1&pM3&VGP3}QN2|dy(Ystja|=zbQS^#RKcvS
zV$iF#5Zy4at7O(`6<|FLVK6kL2surj>ogu`QI=wc_c=7Om`5XHNvE;q-0pA~sS8qd
zumn;@L8sAi7M+=RO%7ZDWWs62PCbppCHW&RLYmA)O@^4Rxy(kE6C9nz=xhWwDpESF
zKshIN3$q|^SO_|ek1%9#M7?D&gvqr|gDd4QXW_z7#)ZntU8sRFIm1$CZxW6@7IYfg
zB}olMy$x&T5GR;UgQFp_vG^{=pk~xCI^uSBI1Y6h+hAl9#_n{9N+Yc^$dOLtDYzng
z2otUG+u@4mfsPC*%P)9+#@l&ZcVD74qghWwyCk7;(0|Maokoo;CfW3mKE)7;#<ETm
z0%1m1r{Q!KO><Q4GGm-ZrVAP}-a@LU;YqL54UN7|;~`5Rs>8&|CiNADNWx~nj|ZK`
zy7=aArqEGxE+^sk<t3vh;Xnn8qF7F3Dtlng;_vnECk2C_jSwys>2!o?gLRz5=3a$W
zPczt;1nZ(}=cS5koW<%agc@=hdjPUnPh%sCBlqj}5$3%>7*3<(IA$g%;xdJ-)AV#4
z0qZjhE=yH5)#wpslyn+3vf$hdMIi|L@D?^oxP*+uC}q6kSkDP!=Kuf!(n&-?RHy0O
z*#_39uf8-@*;EZyG@_SNa;(!($RcZ<aaLV&gRF5Hm*I?!dYX};VQAaBZ@YET^<Pg7
z9O;AV<~rP?r~?VoC*?F!#1WAm0>TY-8nkW*RmuqqT8Ocyxs1P2v@m(f6uX-_7I9&x
zbaokV7x^v^`K!~kZ`p^=o%=DW=^gIe-WDmTDuwcim2#a<89n*kmkFK52wAiSYXV8^
z3GZ(Gj*i2~;%GAyEHs^_YfmTi96T~qSv|1<y&+uuvnxjqz141^SzT0K46))k#EbE<
zFToKeJ)Oow7B?sn)yoj4dx#K5#%b6ZT%AmEJnJ+A$NB+9MZJf6VBlyUR5nle_q#6n
z!Be)upr0??^39R1U7Z$^sxi!9tdM2~*xr`fi3vvIo1p_X%WA7M<EXhGdrYf>qmXAV
z@=IT_r5a23Y_nL;EKEJ95XtWbE)~FMF{w3@^3(y1jQS0U>^0}fs=BHR@BYRO&!TU8
z27`Y2;-YU24fQ6Y$zuc1*WF7G97zf^97hT0lJSnm<4|6Q&!(n+(ok}B2$JsS^5Hf!
z1orts7p~F6FW5xDYX<&@e(N*mI<&t|MalMP3VvN$J!#SHbLV%t&-#BDbI<nDHz`~I
O0000<MNUMnLSTZ|Rh{Di

literal 2287
zcmV<L2oU#)P)<h;3K|Lk000e1NJLTq002e+002e^1^@s6aW3M700004b3#c}2nYxW
zd<bNS000Q4Nkl<Zc%1E<U2Ggz6~})wyZ*{zJ8_7e=EENfF^Sr`F0E6<M};Z`qJ;-O
z6iU(}QBXsicV2k|#1jvoiU&|Zsz69kRSho)s7MtsZAgT0qR=L!NgVR!HU3<$cW3tU
zFn8wOJ2PwV?Cv;-?7WP}bI!Tv{O|vsbLL*#LS8?5{bwTA+f7?XI{=pdLjGh~Amm;B
zUMNY+d$zEYoc3B%l#k(OUtB7N-s^h0AHjI0yAcNrzYK%ktz0g%GQY&vpZt;){Q8G~
zctzZtze}N9#I3m6;Nf6Rrwu1X)M;JLaMH36hya{GkFXxvxKd6iy<jqoXKl(9dYT`;
zVPV9Xu`RmVIvL1q=Y{dlS=RS|^^&+=%14~l2dUTDKu$#UBF++{7n%f<pdsc2;Ku0b
z&tc|harr;&bh@$UMFA|l;E;oZhp0qeEfWwz4laZgQ^EKG7M7F?6wF|ezT$!E|H5F7
zkUt6EtS~{5{`mt3&jtumPm9Z&d<_(#;*vnH+*ZOaxFx8lAgkWR`tL13Y-Fdhv7HUy
z*D_8OJA~g?v9n4E+i@K|leL&5z^w>u1JM?9g1fDd5-sLv%rO|#VvfNWiDip926JK=
z(_)Um4v=awN51v&u-B{S_cL>B2{A3^n9NZ*ro|kCIkrNO7IOk{;;K@MIWos+2)CG{
zn3D|<)Am(_27=meiONxl(UW&{JLqy@yB4CN>1A>}uwyU7TX(UmyOXX=7Th9BYjfPV
zd!2Xkvn*AFniO9TwVxF0ha4xY7x72h$qLkr>p~`Tf~oUnHnKUT>G@NqF~Zmh6!JOb
zbY{z54juR?Pwp9Hpq=<@6e#DpJad-cT|CdfN)^qI80J{<aT)&0xO6*M7S{2fd|UX!
z2A%Xl^k=PY4)jD=FTA6t>?k?kr%s0Uf10m6e2{@m6+q&y@*L;RpXAq9?@|o>_eW}c
zC(u?-M%QNQImh14#1miR#CSqb0NVO^bo>a%$M(^eLe8;4)Rx_wUafi=KXjNQgT1sR
z#6(?Lc8`3PZ;TDmU3HxLs+Ib>W^<X-Kl(I>2YVBM;7~5Du<Ay^=^uH9FAw!JwOR#L
z$xjvG?4C-s+A_}J2Z!jY5t7yX8Gdo*6w}KNRwl>b&{I4+rZ2xv4m|it9=rJ)&Xk%{
zt?V#T9)f8y$7cV*5A%U)l_z|y{DYsL{v*>%j>ibMz_lwUd3pNZly$kb5uO@-fNYcc
zoS6NXlyi=~kB<y)tq~QNyEV<FwWystGt*oR$@cFaW1qcIZmTWl1UY82n3L@vt(`5N
zoADj83xxAc=UyJ_wSBdQm}3(NZ4Pt#wr!^;0W5tx4>D*)zpb|IIlxe)#OLVm$<|mE
z*Jq9`0>~hJ=49y3<r2UG<R0a#AAf=mcG+^qJJ>b+8D4y3Fs96Bd0(!lDc@FEA0gGj
z##J2&S`(^Oo1IMt4A9g6364GUF&0-=aN2V8wXb8t&dPWQ`J1d-d0*FZ#?xm`g+jTQ
z7#Q!$(v$059~8hT7Jc^`Vvejz6;HI{8%Zzc+*w#L%WP9Ghq=OnS!HVRH|F=Yfz&22
zr!YIi?bLv|!{xlI7|;N7LVZly%(2-$uqRPfN^+I+?{cvaUuBXq#}3MO>deWo`@m5q
zA0J8ym?D?2OmoNYbM(0CU`~~j$YwLgX87O{CMVJY1<Luq^7@tK>VEj~)W{rLVo7?;
z$uRuzQI1axrv?h8Yn=Ss+uV%nkn3cQy*`4CGRJ24p`%QGXqYXjAOg5~PEWnYsRdW{
zQ%yL1$a)BZ!5oRW+B1#r{RT~&GN76&ED#-xj6KWbV=02NdX3-z<u!ggTR=Lhnl)4$
zUh`(gWim&LQ_5$(8JBd5=>)xd#WPlOhnzMj4!39C<kfRiTr6ml682j^eTa)|oenvx
z7||@|bTTsb948*%({xY@%eT3D=K^oNbB?p~Yr%}KcluB-bF_0Mn!ub6MkbDOVyrPx
z%6Cum(y6zZYs=By)d}tz%S(CkWe4ME$ImIoGHMQUvigiS#+(jDC!XWj*xtrKS@=6I
z|LG0hErL~CVQz__DmHR%m6SQz@K<qt%;{kNq31dFNFAW8zQ-FEF0*JkluHX-dhegy
zC}RYb%8BO&%<-xcniF*}XUo3N^UZod0Vv&K>inO%5n>=ArvYQxrp=t7j|sL0f_p8U
zt=H!a?0A1e%cqvFa$r;c%EFedA3AfqxBha9VUA}7Pcf^$jq15d%LF?#LGF^nRow~n
zgOrX-f0UZf9F-Q(!Lc^(kc}NY->GCdNBLIERW8huF9EKDQ<`P!>>2X9J&4*5Er-p>
zIoV(>`bMZD=Onmpo&P1@o1P8E@h8~KCDE$4**Pb=gI8D1NdnEiIxA0>b8KUc1<Xm3
zbDTPIjQMR9bex*AzQDc8In{UY5-{i5r3+kNs{xO-D@@JICa8M%jycu~KlqkVOFPs7
z$`^X#HRb$>Eok4$&Yn*1tS3%SI4myaS#-@@;@=`UC-4I`<9f~^oJ%k}WdAuPu3G-b
zQ~PTNJv&#-tX)gBD$R3iHk$bKX3%#wT6Me^ssEKlf@)<4$Qx_3k(?9mb5w_{Eqawp
zg2ny6m2<otQ+16tTCHO21fbPpXY+E7txa)@IT~}!s?=gmaJLPlTFeQU6MwGMVvc`y
z9a>{8=B)oek@qumY=6dE%rTj>!Aa!(%N)DnI_9@Zi#b#r7uzkCYnuseM*rWL<181k
zt!2lDs>K{>$NA5yXX8^Zeo^%8+Ch6)2X-c_4eAFQdJdusZz1U0gE4w4CJiJ_4;@?u
zlA#y3<q_7?<*1^k$sq);>ryJLk-vVMSHJsHW&R73&x`q`c}k@c7=tSF`bk~PYt5OE
zlMow>8YlE<1Se-QPB3i0id|z8<J`9_+S}XN*3-)?-}$ix@LygOcaE+cnFRm<002ov
JPDHLkV1n|ya*F@}

diff --git a/vault_share/static/description/index.html b/vault_share/static/description/index.html
index 4b080257b0..4f0f75df63 100644
--- a/vault_share/static/description/index.html
+++ b/vault_share/static/description/index.html
@@ -1,20 +1,20 @@
-<?xml version="1.0" encoding="utf-8" ?>
+<?xml version="1.0" encoding="utf-8"?>
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta name="generator" content="Docutils 0.15.1: http://docutils.sourceforge.net/" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
 <title>Vault - Share</title>
 <style type="text/css">
 
 /*
 :Author: David Goodger (goodger@python.org)
-:Id: $Id: html4css1.css 7952 2016-07-26 18:15:59Z milde $
+:Id: $Id: html4css1.css 8954 2022-01-20 10:10:25Z milde $
 :Copyright: This stylesheet has been placed in the public domain.
 
 Default cascading style sheet for the HTML output of Docutils.
 
-See http://docutils.sf.net/docs/howto/html-stylesheets.html for how to
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
 customize this style sheet.
 */
 
@@ -366,20 +366,28 @@ <h1 class="title">Vault - Share</h1>
 <!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 !! This file is generated by oca-gen-addon-readme !!
 !! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:9a16926a6329561017dac0fa81e331bcd50b83bc373281609831a25e42fb3e0c
 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
-<p><a class="reference external" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external" href="https://github.com/OCA/server-auth/tree/15.0/vault_share"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external" href="https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-vault_share"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external" href="https://runbot.odoo-community.org/runbot/251/15.0"><img alt="Try me on Runbot" src="https://img.shields.io/badge/runbot-Try%20me-875A7B.png" /></a></p>
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/server-auth/tree/16.0/vault_share"><img alt="OCA/server-auth" src="https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/server-auth-16-0/server-auth-16-0-vault_share"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/server-auth&amp;target_branch=16.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
 <p>This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.</p>
 <div class="section" id="share">
 <h1>Share</h1>
 <p>This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn’t be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.</p>
 <p><strong>Table of contents</strong></p>
 </div>
+<div class="section" id="known-issues-roadmap">
+<h1>Known issues / Roadmap</h1>
+<ul class="simple">
+<li>Secure the download of the encrypted file behind a challenge/response</li>
+</ul>
+</div>
 <div class="section" id="bug-tracker">
 <h1>Bug Tracker</h1>
 <p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-auth/issues">GitHub Issues</a>.
 In case of trouble, please check there if your issue has already been reported.
-If you spotted it first, help us smashing it by providing a detailed and welcomed
-<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2015.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/server-auth/issues/new?body=module:%20vault_share%0Aversion:%2016.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
 <p>Do not contact contributors directly about support or help with technical issues.</p>
 </div>
 <div class="section" id="credits">
@@ -403,7 +411,7 @@ <h2>Maintainers</h2>
 <p>OCA, or the Odoo Community Association, is a nonprofit organization whose
 mission is to support the collaborative development of Odoo features and
 promote its widespread use.</p>
-<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/15.0/vault_share">OCA/server-auth</a> project on GitHub.</p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-auth/tree/16.0/vault_share">OCA/server-auth</a> project on GitHub.</p>
 <p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
 </div>
 </div>
diff --git a/vault_share/static/src/backend/fields/templates.xml b/vault_share/static/src/backend/fields/templates.xml
new file mode 100644
index 0000000000..90dab33f05
--- /dev/null
+++ b/vault_share/static/src/backend/fields/templates.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<templates id="template" xml:space="preserve">
+    <t
+        t-name="vault.FieldShareVault"
+        t-inherit="vault.FieldVault"
+        t-inherit-mode="primary"
+        owl="1"
+    >
+        <xpath expr="//div[@t-elif='props.readonly']" position="attributes">
+            <attribute name="t-elif">!isNew</attribute>
+        </xpath>
+    </t>
+
+    <t
+        t-name="vault.FileShareVault"
+        t-inherit="web.BinaryField"
+        t-inherit-mode="primary"
+        owl="1"
+    >
+        <xpath expr="//t[@t-if='!props.readonly']" position="attributes">
+            <attribute name="t-if">isNew</attribute>
+        </xpath>
+    </t>
+
+    <t t-name="vault.FieldPinVault" owl="1">
+        <div class="o_vault o_vault_error" t-if="!supported()">
+            <span>*******</span>
+        </div>
+        <div class="o_vault" t-else="">
+            <t t-call="vault.Field.buttons" />
+            <span t-esc="formattedValue" t-ref="span" />
+        </div>
+    </t>
+
+    <t t-inherit="vault.FieldVault" t-inherit-mode="extension" owl="1">
+        <xpath expr="//span[hasclass('o_vault_buttons')]" position="inside">
+            <button
+                t-if="shareButton"
+                class="btn btn-secondary btn-sm fa fa-external-link o_vault_share"
+                title="Share the secret with an external user"
+                aria-label="Share the secret with an external user"
+                t-on-click="_onShareValue"
+            />
+        </xpath>
+    </t>
+</templates>
diff --git a/vault_share/static/src/backend/fields/vault_field.esm.js b/vault_share/static/src/backend/fields/vault_field.esm.js
new file mode 100644
index 0000000000..57190388cb
--- /dev/null
+++ b/vault_share/static/src/backend/fields/vault_field.esm.js
@@ -0,0 +1,45 @@
+/** @odoo-module **/
+// © 2021-2024 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import VaultField from "vault.field";
+import {_lt} from "@web/core/l10n/translation";
+import {patch} from "@web/core/utils/patch";
+import sh_utils from "vault.share.utils";
+import utils from "vault.utils";
+import vault from "vault";
+
+// Extend the widget to share
+patch(VaultField.prototype, "vault_share", {
+    /**
+     * Share the value for an external user
+     *
+     * @private
+     */
+    async _onShareValue() {
+        const iv = await utils.generate_iv_base64();
+        const pin = sh_utils.generate_pin(sh_utils.PinSize);
+        const salt = utils.generate_bytes(utils.SaltLength).buffer;
+        const key = await utils.derive_key(pin, salt, utils.Derive.iterations);
+        const public_key = await vault.get_public_key();
+        const value = await this._decrypt(this.value);
+
+        this.action.doAction({
+            type: "ir.actions.act_window",
+            title: _lt("Share the secret"),
+            target: "new",
+            res_model: "vault.share",
+            views: [[false, "form"]],
+            context: {
+                default_secret: await utils.sym_encrypt(key, value, iv),
+                default_pin: await utils.asym_encrypt(
+                    public_key,
+                    pin + utils.generate_iv_base64()
+                ),
+                default_iterations: utils.Derive.iterations,
+                default_iv: iv,
+                default_salt: utils.toBase64(salt),
+            },
+        });
+    },
+});
diff --git a/vault_share/static/src/backend/fields/vault_pin_field.esm.js b/vault_share/static/src/backend/fields/vault_pin_field.esm.js
new file mode 100644
index 0000000000..b64a6a2ba9
--- /dev/null
+++ b/vault_share/static/src/backend/fields/vault_pin_field.esm.js
@@ -0,0 +1,110 @@
+/** @odoo-module **/
+// © 2021-2024 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import {Component, useRef, useState} from "@odoo/owl";
+import VaultMixin from "vault.mixin";
+import {_lt} from "@web/core/l10n/translation";
+import {registry} from "@web/core/registry";
+import sh_utils from "vault.share.utils";
+import {useService} from "@web/core/utils/hooks";
+import utils from "vault.utils";
+import vault from "vault";
+
+export default class VaultPinField extends VaultMixin(Component) {
+    setup() {
+        super.setup();
+
+        this.action = useService("action");
+        this.span = useRef("span");
+        this.state = useState({
+            decrypted: false,
+            decryptedValue: "",
+        });
+
+        this.context = this.env.searchModel.context;
+        this.props.readonly = true;
+    }
+
+    get sendButton() {
+        return false;
+    }
+    get generateButton() {
+        return false;
+    }
+    get saveButton() {
+        return false;
+    }
+
+    /**
+     * Get the decrypted value or a placeholder
+     *
+     * @returns the decrypted value or a placeholder
+     */
+    get formattedValue() {
+        if (!this.props.value) return "";
+        if (this.state.decrypted) return this.state.decryptedValue || "*******";
+        return "*******";
+    }
+
+    /**
+     * Decrypt the value using the private key of the vault and slice it to
+     * the actual pin size because there is a salt following
+     *
+     * @private
+     * @param {String} data
+     * @returns the decrypted data
+     */
+    async _decrypt(data) {
+        if (!data) return data;
+
+        const pin_size = this.context.pin_size || sh_utils.PinSize;
+
+        const private_key = await vault.get_private_key();
+        const plain = await utils.asym_decrypt(private_key, data);
+        return plain.slice(0, pin_size);
+    }
+
+    /**
+     * Copy the decrypted secret to the clipboard
+     *
+     * @param {Object} ev
+     */
+    async _onCopyValue(ev) {
+        ev.stopPropagation();
+
+        const value = await this._decrypt(this.props.value);
+        await navigator.clipboard.writeText(value);
+    }
+
+    /**
+     * Toggle between visible and invisible secret
+     *
+     * @param {Object} ev
+     */
+    async _onShowValue(ev) {
+        ev.stopPropagation();
+
+        this.state.decrypted = !this.state.decrypted;
+        if (this.state.decrypted) {
+            this.state.decryptedValue = await this._decrypt(this.props.value);
+        } else {
+            this.state.decryptedValue = "";
+        }
+
+        await this.showValue();
+    }
+
+    /**
+     * Update the value shown
+     */
+    async showValue() {
+        this.span.el.innerHTML = this.formattedValue;
+    }
+}
+
+VaultPinField.displayName = _lt("Vault Pin Field");
+VaultPinField.supportedTypes = ["char"];
+VaultPinField.template = "vault.FieldPinVault";
+
+registry.category("fields").add("vault_pin", VaultPinField);
diff --git a/vault_share/static/src/backend/fields/vault_share_field.esm.js b/vault_share/static/src/backend/fields/vault_share_field.esm.js
new file mode 100644
index 0000000000..a7fd110fef
--- /dev/null
+++ b/vault_share/static/src/backend/fields/vault_share_field.esm.js
@@ -0,0 +1,15 @@
+/** @odoo-module alias=vault.share.field **/
+// © 2021-2024 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import VaultField from "vault.field";
+import VaultShareMixin from "vault.share.mixin";
+import {_lt} from "@web/core/l10n/translation";
+import {registry} from "@web/core/registry";
+
+export default class VaultShareField extends VaultShareMixin(VaultField) {}
+
+VaultShareField.displayName = _lt("Vault Share Field");
+VaultShareField.template = "vault.FieldShareVault";
+
+registry.category("fields").add("vault_share_field", VaultShareField);
diff --git a/vault_share/static/src/backend/fields/vault_share_file.esm.js b/vault_share/static/src/backend/fields/vault_share_file.esm.js
new file mode 100644
index 0000000000..4b8f45130f
--- /dev/null
+++ b/vault_share/static/src/backend/fields/vault_share_file.esm.js
@@ -0,0 +1,15 @@
+/** @odoo-module alias=vault.share.file **/
+// © 2021-2024 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import VaultFile from "vault.file";
+import VaultShareMixin from "vault.share.mixin";
+import {_lt} from "@web/core/l10n/translation";
+import {registry} from "@web/core/registry";
+
+export default class VaultShareFile extends VaultShareMixin(VaultFile) {}
+
+VaultShareFile.displayName = _lt("Vault Share Field");
+VaultShareFile.template = "vault.FileShareVault";
+
+registry.category("fields").add("vault_share_file", VaultShareFile);
diff --git a/vault_share/static/src/backend/fields/vault_share_mixin.esm.js b/vault_share/static/src/backend/fields/vault_share_mixin.esm.js
new file mode 100644
index 0000000000..ac84f3b822
--- /dev/null
+++ b/vault_share/static/src/backend/fields/vault_share_mixin.esm.js
@@ -0,0 +1,164 @@
+/** @odoo-module alias=vault.share.mixin **/
+// © 2021-2024 Florian Kantelberg - initOS GmbH
+// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
+
+import sh_utils from "vault.share.utils";
+import utils from "vault.utils";
+import vault from "vault";
+
+export default (x) => {
+    class Extended extends x {
+        setup() {
+            super.setup();
+
+            this.context = this.env.searchModel.context;
+        }
+
+        get shareButton() {
+            return false;
+        }
+        get sendButton() {
+            return false;
+        }
+        get isNew() {
+            return this.props.record.isNew;
+        }
+
+        /**
+         * Encrypt the pin with a random salt to make it hard to guess him by
+         * encrypting every possilbilty with the public key. Store the pin in the
+         * proper field
+         *
+         * @private
+         * @param {String} pin
+         */
+        async _storePin(pin) {
+            const salt = utils.generate_iv_base64();
+            const crypted_pin = await utils.asym_encrypt(
+                await vault.get_public_key(),
+                pin + salt
+            );
+            await this._setFieldValue(this.props.fieldPin, crypted_pin);
+        }
+
+        /**
+         * Get the iterations
+         *
+         * @returns iterations for the password derivation
+         */
+        async _getIterations() {
+            const record = this.props.record;
+            if (!record) return utils.Derive.iterations;
+            const iterations = record.data.iterations || utils.Derive.iterations;
+            await this._setFieldValue(this.props.fieldIterations, iterations);
+            return iterations;
+        }
+
+        /**
+         * Returns the pin from the class, record data, or generate a new pin if
+         * none s currently available
+         *
+         * @private
+         * @returns the pin
+         */
+        async _getPin() {
+            const record = this.props.record;
+            if (!record) return null;
+
+            const pin_size = this.context.pin_size || sh_utils.PinSize;
+
+            let pin = record.data[this.props.fieldPin];
+            if (pin) {
+                // Decrypt the pin and slice him to the configured pin size
+                const private_key = await vault.get_private_key();
+                const plain = await utils.asym_decrypt(private_key, pin);
+                if (!plain) return null;
+
+                pin = plain.slice(0, pin_size);
+                return pin;
+            }
+
+            // Generate a new pin and store it
+            pin = sh_utils.generate_pin(pin_size);
+            await this._storePin(pin);
+            return pin;
+        }
+
+        /**
+         * Returns the salt from the class, record data, or generate a new salt if
+         * none is currently available
+         *
+         * @private
+         * @returns the salt
+         */
+        async _getSalt() {
+            const record = this.props.record;
+            if (!record) return null;
+
+            let salt = record.data[this.props.fieldSalt];
+            if (salt) return salt;
+
+            // Generate a new salt and store him
+            salt = utils.toBase64(utils.generate_bytes(utils.SaltLength).buffer);
+            await this._setFieldValue(this.props.fieldSalt, salt);
+            return salt;
+        }
+
+        /**
+         * Decrypt the encrypted data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} crypted
+         * @returns the decrypted secret
+         */
+        async _decrypt(crypted) {
+            if (!utils.supported()) return null;
+
+            if (crypted === false) return false;
+
+            if (!this.props.value) return this.props.value;
+
+            const iv = await this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(await this._getSalt());
+            const iterations = await this._getIterations();
+
+            const key = await utils.derive_key(pin, salt, iterations);
+            return await utils.sym_decrypt(key, crypted, iv);
+        }
+
+        /**
+         * Encrypt the data using the pin, IV and salt
+         *
+         * @private
+         * @param {String} data
+         * @returns the encrypted secret
+         */
+        async _encrypt(data) {
+            if (!utils.supported()) return null;
+
+            const iv = await this._getIV();
+            const pin = await this._getPin();
+            const salt = utils.fromBase64(await this._getSalt());
+            const iterations = await this._getIterations();
+
+            const key = await utils.derive_key(pin, salt, iterations);
+            return await utils.sym_encrypt(key, data, iv);
+        }
+    }
+
+    Extended.defaultProps = {
+        ...x.defaultProps,
+        fieldPin: "pin",
+        fieldSalt: "salt",
+        fieldIterations: "iterations",
+    };
+    Extended.props = {
+        ...x.props,
+        fieldIterations: {type: String, optional: true},
+        fieldPin: {type: String, optional: true},
+        fieldSalt: {type: String, optional: true},
+    };
+
+    return Extended;
+};
diff --git a/vault_share/static/src/backend/templates.xml b/vault_share/static/src/backend/templates.xml
deleted file mode 100644
index f8a2c9b9c9..0000000000
--- a/vault_share/static/src/backend/templates.xml
+++ /dev/null
@@ -1,57 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" ?>
-<templates id="template" xml:space="preserve">
-    <t t-name="FieldVaultShare">
-        <div class="o_vault o_vault_error" t-if="!widget.supported()">
-            <span>*******</span>
-        </div>
-        <input class="o_vault_share" t-elif="widget.mode == 'edit'" t-esc="value" />
-        <div class="o_vault" t-else="">
-            <t t-call="vault.buttons" />
-            <button
-                class="btn fa fa-save o_vault_save"
-                title="Save in a vault"
-                aria-label="Save in a vault"
-            />
-
-            <span class="o_vault_share" t-esc="value" />
-        </div>
-    </t>
-
-    <t t-name="FileVaultShare">
-        <div class="o_vault o_vault_error" t-if="!widget.supported()">
-            <span>*******</span>
-        </div>
-        <t t-elif="widget.mode == 'edit'" t-call="FieldBinaryFile" />
-        <div class="o_vault" t-else="">
-            <button
-                class="btn fa fa-save o_vault_save"
-                title="Save in a vault"
-                aria-label="Save in a vault"
-            />
-
-            <span class="link"><span class="fa fa-download" /> <t
-                    t-esc="filename"
-                /></span>
-        </div>
-    </t>
-
-    <t t-name="FieldPinVault">
-        <div class="o_vault o_vault_error" t-if="!widget.supported()">
-            <span>*******</span>
-        </div>
-        <div class="o_vault" t-else="">
-            <t t-call="vault.buttons" />
-            <span class="o_vault_value" t-esc="value" />
-        </div>
-    </t>
-
-    <t t-extend="FieldVault">
-        <t t-jquery="span.o_vault_value" t-operation="before">
-            <button
-                class="btn fa fa-external-link o_vault_share"
-                title="Share the secret with an external user"
-                aria-label="Share the secret with an external user"
-            />
-        </t>
-    </t>
-</templates>
diff --git a/vault_share/static/src/common/utils.esm.js b/vault_share/static/src/common/utils.esm.js
index 790858a529..0523dbb47b 100644
--- a/vault_share/static/src/common/utils.esm.js
+++ b/vault_share/static/src/common/utils.esm.js
@@ -1,11 +1,11 @@
 /** @odoo-module alias=vault.share.utils **/
-// © 2021-2022 Florian Kantelberg - initOS GmbH
+// © 2021-2024 Florian Kantelberg - initOS GmbH
 // License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
-const PinSize = 5;
-
 import utils from "vault.utils";
 
+const PinSize = 5;
+
 function generate_pin(pin_size) {
     return utils.generate_secret(pin_size, "0123456789");
 }
diff --git a/vault_share/static/src/frontend/share.esm.js b/vault_share/static/src/frontend/share.esm.js
index af9b28d0b3..db8b771856 100644
--- a/vault_share/static/src/frontend/share.esm.js
+++ b/vault_share/static/src/frontend/share.esm.js
@@ -1,5 +1,5 @@
 /** @odoo-module **/
-// © 2021-2022 Florian Kantelberg - initOS GmbH
+// © 2021-2024 Florian Kantelberg - initOS GmbH
 // License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
 import utils from "vault.utils";
@@ -8,36 +8,68 @@ const data = {};
 
 // Find the elements in the document and check if they have values
 function find_elements() {
-    for (const id of ["encrypted", "salt", "iv", "encrypted_file", "filename"])
+    for (const id of [
+        "encrypted",
+        "salt",
+        "iv",
+        "encrypted_file",
+        "filename",
+        "iterations",
+    ])
         if (!data[id]) {
             const element = document.getElementById(id);
             data[id] = element && element.value;
         }
 }
 
+function toggle_alert(element, successful) {
+    if (element) {
+        element.classList.add(successful ? "alert-success" : "alert-danger");
+        element.classList.remove(successful ? "alert-danger" : "alert-success");
+    }
+}
+
+function show(selector) {
+    const element = document.querySelector(selector);
+    if (element) element.classList.remove("o_hidden");
+}
+
+function hide(selector) {
+    const element = document.querySelector(selector);
+    if (element) element.classList.add("o_hidden");
+}
+
 document.getElementById("pin").onchange = async function () {
     if (!utils.supported()) return;
 
     find_elements();
 
     // Derive the key from the pin
-    const key = await utils.derive_key(this.value, utils.fromBase64(data.salt), 4000);
+    const key = await utils.derive_key(
+        this.value,
+        utils.fromBase64(data.salt),
+        data.iterations
+    );
 
+    hide("#secret_group");
+    hide("#file_group");
+
+    const pin = document.getElementById("pin");
     const secret = document.getElementById("secret");
     const secret_file = document.getElementById("secret_file");
     if (!secret && !secret_file) return;
 
     // There is no secret to decrypt
     if (!this.value) {
-        secret.setAttribute("class", "alert alert-danger col-12");
-        secret_file.setAttribute("class", "alert alert-danger col-12");
+        toggle_alert(pin, false);
         return;
     }
 
     // Decrypt the data and show the value
     if (data.encrypted) {
         secret.value = await utils.sym_decrypt(key, data.encrypted, data.iv);
-        secret.setAttribute("class", "alert alert-success col-12");
+        toggle_alert(pin, secret.value);
+        show("#secret_group");
     }
 
     if (data.encrypted_file) {
@@ -48,9 +80,11 @@ document.getElementById("pin").onchange = async function () {
         const arr = new Uint8Array(buffer);
         for (let i = 0; i < content.length; i++) arr[i] = content.charCodeAt(i);
         const file = new Blob([arr]);
+
         secret_file.text = data.filename;
         secret_file.setAttribute("href", window.URL.createObjectURL(file));
-        secret_file.setAttribute("class", "alert alert-success col-12");
         secret_file.setAttribute("download", data.filename);
+        toggle_alert(pin, content);
+        show("#file_group");
     }
 };
diff --git a/vault_share/static/src/legacy/vault_fields.js b/vault_share/static/src/legacy/vault_fields.js
deleted file mode 100644
index 23c8071051..0000000000
--- a/vault_share/static/src/legacy/vault_fields.js
+++ /dev/null
@@ -1,55 +0,0 @@
-// © 2021 Florian Kantelberg - initOS GmbH
-// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
-
-odoo.define("vault.share.fields", function (require) {
-    "use strict";
-
-    const core = require("web.core");
-    const sh_utils = require("vault.share.utils");
-    const utils = require("vault.utils");
-    const vault = require("vault");
-    const vault_fields = require("vault.fields");
-
-    const _t = core._t;
-
-    // Extend the widget to share
-    vault_fields.VaultField.include({
-        events: _.extend(vault_fields.VaultField.prototype.events, {
-            "click .o_vault_share": "_onShareValue",
-        }),
-
-        /**
-         * Share the value for an external user
-         *
-         * @private
-         * @param {OdooEvent} ev
-         */
-        _onShareValue: async function (ev) {
-            ev.stopPropagation();
-
-            const iv = await utils.generate_iv_base64();
-            const pin = sh_utils.generate_pin(sh_utils.PinSize);
-            const salt = utils.generate_bytes(utils.SaltLength).buffer;
-            const key = await utils.derive_key(pin, salt, 4000);
-            const public_key = await vault.get_public_key();
-            const value = await this._decrypt(this.value);
-
-            this.do_action({
-                type: "ir.actions.act_window",
-                title: _t("Share the secret"),
-                target: "new",
-                res_model: "vault.share",
-                views: [[false, "form"]],
-                context: {
-                    default_secret: await utils.sym_encrypt(key, value, iv),
-                    default_pin: await utils.asym_encrypt(
-                        public_key,
-                        pin + utils.generate_iv_base64()
-                    ),
-                    default_iv: iv,
-                    default_salt: utils.toBase64(salt),
-                },
-            });
-        },
-    });
-});
diff --git a/vault_share/static/src/legacy/vault_share_widget.js b/vault_share/static/src/legacy/vault_share_widget.js
deleted file mode 100644
index a985fc06d6..0000000000
--- a/vault_share/static/src/legacy/vault_share_widget.js
+++ /dev/null
@@ -1,367 +0,0 @@
-// © 2021 Florian Kantelberg - initOS GmbH
-// License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
-
-odoo.define("vault.share.widget", function (require) {
-    "use strict";
-
-    const basic_fields = require("web.basic_fields");
-    const core = require("web.core");
-    const registry = require("web.field_registry");
-    const sh_utils = require("vault.share.utils");
-    const utils = require("vault.utils");
-    const vault = require("vault");
-    const vault_fields = require("vault.fields");
-
-    const QWeb = core.qweb;
-
-    // Widget used to view the encrypted pin
-    const VaultPinField = basic_fields.InputField.extend(vault_fields.VaultAbstract, {
-        supportedFieldTypes: ["char"],
-        events: _.extend({}, basic_fields.InputField.prototype.events, {
-            "click .o_vault_show": "_onShowValue",
-            "click .o_vault_clipboard": "_onCopyValue",
-        }),
-        template: "FieldPinVault",
-
-        /**
-         * Prepare the widget by evaluating the field attributes and setting the defaults
-         *
-         * @override
-         */
-        init: function () {
-            this._super.apply(this, arguments);
-
-            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
-        },
-
-        /**
-         * Decrypt the value using the private key of the vault and slice it to
-         * the actual pin size because there is a salt following
-         *
-         * @private
-         * @param {String} data
-         * @returns the decrypted data
-         */
-        _decrypt: async function (data) {
-            if (!data) return data;
-
-            const private_key = await vault.get_private_key();
-            const plain = await utils.asym_decrypt(private_key, data);
-            return plain.slice(0, this.pin_size);
-        },
-
-        /**
-         * Render the decrypted value or the stars
-         *
-         * @private
-         */
-        _renderReadonly: function () {
-            this._renderValue(this.decrypted_value || "********");
-        },
-
-        /**
-         * Render the decrypted value or the stars
-         *
-         * @private
-         */
-        _renderEdit: function () {
-            this._renderValue(this.decrypted_value || "********");
-        },
-
-        /**
-         * Render the field using the template
-         *
-         * @private
-         * @param {String} value
-         */
-        _renderValue: function (value) {
-            const self = this;
-            this.$el.html(
-                QWeb.render(this.template, {
-                    widget: self,
-                    value: value,
-                    show: !this.decrypted,
-                })
-            );
-        },
-    });
-
-    // Widget used to create shared outgoing secrets encrypted with a pin
-    const VaultShareField = vault_fields.VaultField.extend({
-        events: _.extend({}, vault_fields.VaultField.prototype.events, {
-            "click .o_vault_save": "_onSaveValue",
-        }),
-        template: "FieldVaultShare",
-
-        /**
-         * Prepare the widget by evaluating the field attributes and setting the defaults
-         *
-         * @override
-         */
-        init: function () {
-            this._super.apply(this, arguments);
-
-            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
-            this.field_salt = this.attrs.salt || "salt";
-            this.field_pin = this.attrs.pin || "pin";
-        },
-
-        /**
-         * Encrypt the pin with a random salt to make it hard to guess him by
-         * encrypting every possilbilty with the public key. Store the pin in the
-         * proper field
-         *
-         * @private
-         */
-        _storePin: async function () {
-            const salt = utils.generate_iv_base64();
-            const crypted_pin = await utils.asym_encrypt(
-                await vault.get_public_key(),
-                this.pin + salt
-            );
-            this._setFieldValue(this.field_pin, crypted_pin);
-        },
-
-        /**
-         * Returns the pin from the class, record data, or generate a new pin if
-         * none s currently available
-         *
-         * @private
-         * @returns the pin
-         */
-        _getPin: async function () {
-            if (this.pin) return this.pin;
-
-            this.pin = this.recordData[this.field_pin];
-            if (this.pin) {
-                // Decrypt the pin and slice him to the configured pin size
-                const private_key = await vault.get_private_key();
-                const plain = await utils.asym_decrypt(private_key, this.pin);
-                this.pin = plain.slice(0, this.pin_size);
-                return this.pin;
-            }
-
-            // Generate a new pin and store it
-            this.pin = sh_utils.generate_pin(this.pin_size);
-            await this._storePin();
-            return this.pin;
-        },
-
-        /**
-         * Returns the salt from the class, record data, or generate a new salt if
-         * none is currently available
-         *
-         * @private
-         * @returns the salt
-         */
-        _getSalt: function () {
-            if (this.salt) return this.salt;
-
-            this.salt = this.recordData[this.field_salt];
-            if (this.salt) return this.salt;
-
-            // Generate a new salt and store him
-            this.salt = utils.toBase64(utils.generate_bytes(utils.SaltLength).buffer);
-            this._setFieldValue(this.field_salt, this.salt);
-            return this.salt;
-        },
-
-        /**
-         * Decrypt the encrypted data using the pin, IV and salt
-         *
-         * @private
-         * @param {String} crypted
-         */
-        _decrypt: async function (crypted) {
-            if (crypted === false) return false;
-
-            if (!utils.supported()) return null;
-
-            const iv = this._getIV();
-            const pin = await this._getPin();
-            const salt = utils.fromBase64(this._getSalt());
-
-            const key = await utils.derive_key(pin, salt, 4000);
-            return await utils.sym_decrypt(key, crypted, iv);
-        },
-
-        /**
-         * Encrypt the data using the pin, IV and salt
-         *
-         * @private
-         * @param {String} data
-         */
-        _encrypt: async function (data) {
-            if (!utils.supported()) return null;
-
-            const iv = this._getIV();
-            const pin = await this._getPin();
-            const salt = utils.fromBase64(this._getSalt());
-
-            const key = await utils.derive_key(pin, salt, 4000);
-            return await utils.sym_encrypt(key, data, iv);
-        },
-
-        /**
-         * Resets the content to the formated value in readonly mode.
-         *
-         * @override
-         * @private
-         */
-        _renderReadonly: function () {
-            const self = this;
-            this.$el.html(
-                QWeb.render(this.template, {
-                    widget: self,
-                    value: this.decrypted_value || "********",
-                    show: !this.decrypted,
-                })
-            );
-        },
-
-        /**
-         * @override
-         * @returns {String} the content of the input
-         */
-        _getValue: function () {
-            return this.$input.val();
-        },
-    });
-
-    // Widget used to view shared incoming secrets encrypted with public keys
-    const VaultShareFile = vault_fields.VaultFile.extend({
-        store_model: "vault.file",
-        template: "FileVaultShare",
-        events: _.extend({}, vault_fields.VaultFile.prototype.events, {
-            "click .o_vault_save": "_onSaveValue",
-        }),
-
-        /**
-         * Prepare the widget by evaluating the field attributes and setting the defaults
-         *
-         * @override
-         */
-        init: function () {
-            this._super.apply(this, arguments);
-
-            this.field_key = this.attrs.key || "key";
-            this.pin_size = this.attrs.pin_size || sh_utils.PinSize;
-            this.field_salt = this.attrs.salt || "salt";
-            this.field_pin = this.attrs.pin || "pin";
-        },
-
-        /**
-         * Encrypt the pin with a random salt to make it hard to guess him by
-         * encrypting every possilbilty with the public key. Store the pin in the
-         * proper field
-         *
-         * @private
-         */
-        _storePin: async function () {
-            const salt = utils.generate_iv_base64();
-            const crypted_pin = await utils.asym_encrypt(
-                await vault.get_public_key(),
-                this.pin + salt
-            );
-            this._setFieldValue(this.field_pin, crypted_pin);
-        },
-
-        /**
-         * Returns the pin from the class, record data, or generate a new pin if
-         * none s currently available
-         *
-         * @private
-         * @returns the pin
-         */
-        _getPin: async function () {
-            if (this.pin) return this.pin;
-
-            this.pin = this.recordData[this.field_pin];
-            if (this.pin) {
-                // Decrypt the pin and slice him to the configured pin size
-                const private_key = await vault.get_private_key();
-                const plain = await utils.asym_decrypt(private_key, this.pin);
-                this.pin = plain.slice(0, this.pin_size);
-                return this.pin;
-            }
-
-            // Generate a new pin and store it
-            this.pin = sh_utils.generate_pin(this.pin_size);
-            await this._storePin();
-            return this.pin;
-        },
-
-        /**
-         * Returns the salt from the class, record data, or generate a new salt if
-         * none is currently available
-         *
-         * @private
-         * @returns the salt
-         */
-        _getSalt: function () {
-            if (this.salt) return this.salt;
-
-            this.salt = this.recordData[this.field_salt];
-            if (this.salt) return this.salt;
-
-            // Generate a new salt and store him
-            this.salt = utils.toBase64(utils.generate_bytes(utils.SaltLength).buffer);
-            this._setFieldValue(this.field_salt, this.salt);
-            return this.salt;
-        },
-
-        _renderReadonly: function () {
-            this.do_toggle(Boolean(this.value));
-            if (this.value) {
-                this.$el.html(
-                    QWeb.render(this.template, {
-                        widget: this,
-                        filename: this.filename_value,
-                    })
-                );
-
-                const $el = this.$(".link");
-                if (this.recordData.id) $el.css("cursor", "pointer");
-                else $el.css("cursor", "not-allowed");
-            }
-        },
-
-        /**
-         * Decrypt the encrypted data using the pin, IV and salt
-         *
-         * @private
-         * @param {String} crypted
-         */
-        _decrypt: async function (crypted) {
-            if (!utils.supported()) return null;
-
-            const iv = this._getIV();
-            const pin = await this._getPin();
-            const salt = utils.fromBase64(this._getSalt());
-
-            const key = await utils.derive_key(pin, salt, 4000);
-            return await utils.sym_decrypt(key, crypted, iv);
-        },
-
-        /**
-         * Encrypt the data using the pin, IV and salt
-         *
-         * @private
-         * @param {String} data
-         */
-        _encrypt: async function (data) {
-            if (!utils.supported()) return null;
-
-            const iv = this._getIV();
-            const pin = await this._getPin();
-            const salt = utils.fromBase64(this._getSalt());
-
-            const key = await utils.derive_key(pin, salt, 4000);
-            return await utils.sym_encrypt(key, data, iv);
-        },
-    });
-
-    registry.add("vault_pin", VaultPinField);
-    registry.add("vault_share", VaultShareField);
-    registry.add("vault_share_file", VaultShareFile);
-});
diff --git a/vault_share/tests/test_share.py b/vault_share/tests/test_share.py
index 1627b660ed..5225bdca04 100644
--- a/vault_share/tests/test_share.py
+++ b/vault_share/tests/test_share.py
@@ -1,6 +1,7 @@
 # © 2021 Florian Kantelberg - initOS GmbH
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
+import json
 import logging
 from datetime import datetime
 from uuid import uuid4
@@ -16,19 +17,20 @@
 
 
 class TestShare(TransactionCase):
-    def setUp(self):
-        super().setUp()
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
 
-        self.user = self.env.user
-        self.vals = {
-            "name": f"Share {self.user.name}",
+        cls.user = cls.env.user
+        cls.vals = {
+            "name": f"Share {cls.user.name}",
             "secret": "secret",
             "salt": "sa17",
             "iv": "1v",
             "pin": "12345",
         }
 
-        self.share = self.env["vault.share"].create(self.vals)
+        cls.share = cls.env["vault.share"].create(cls.vals)
 
     @mute_logger("odoo.sql_db")
     def test_share(self):
@@ -56,18 +58,21 @@ def test_share(self):
     def test_vault_share(self):
         def return_context(template, context):
             self.assertEqual(template, "vault_share.share")
-            return context
+            return json.dumps(context)
+
+        def load(response):
+            return json.loads(response.data)
 
         with MockRequest(self.env) as request_mock:
             request_mock.render = return_context
             controller = main.Controller()
 
-            response = controller.vault_share("")
+            response = load(controller.vault_share(""))
             self.assertIn("error", response)
 
-            response = controller.vault_share(self.share.token)
+            response = load(controller.vault_share(self.share.token))
             self.assertEqual(response["salt"], self.share.salt)
 
             self.share.accesses = 0
-            response = controller.vault_share(self.share.token)
+            response = load(controller.vault_share(self.share.token))
             self.assertIn("error", response)
diff --git a/vault_share/views/templates.xml b/vault_share/views/templates.xml
index 7649731e52..093369c127 100644
--- a/vault_share/views/templates.xml
+++ b/vault_share/views/templates.xml
@@ -13,10 +13,11 @@
             <input type="hidden" id="filename" t-att-value="filename" />
             <input type="hidden" id="salt" t-att-value="salt" />
             <input type="hidden" id="iv" t-att-value="iv" />
+            <input type="hidden" id="iterations" t-att-value="iterations" />
 
-            <div class="form-group">
+            <div class="form-group" t-if="not error">
                 <label for="pin">Enter the pin:</label>
-                <input type="text" id="pin" class="form-control" />
+                <input type="text" id="pin" class="form-control col-12 alert-danger" />
             </div>
 
             <p class="alert alert-danger" t-if="error" role="alert" t-esc="error" />
@@ -27,21 +28,21 @@
                 t-esc="message"
             />
 
-            <div class="form-group" t-if="encrypted">
+            <div id="secret_group" class="form-group o_hidden" t-if="encrypted">
                 <label for="secret">Shared secret:</label>
                 <input
                     type="text"
                     id="secret"
                     readonly="readonly"
-                    class="alert alert-danger col-12"
+                    class="col-12 form-control"
                 />
             </div>
 
-            <div class="form-group" t-if="encrypted_file">
-                <label for="secret">Shared file:</label><vr /><a
-                    href=""
-                    id="secret_file"
-                />
+            <div id="file_group" class="form-group o_hidden" t-if="encrypted_file">
+                <label for="secret">Shared file:</label>
+                <div class="col-12">
+                    <a href="" id="secret_file" class="form-control" />
+                </div>
             </div>
         </t>
     </template>
diff --git a/vault_share/views/vault_share_views.xml b/vault_share/views/vault_share_views.xml
index da61c5ec4c..ad45e74b05 100644
--- a/vault_share/views/vault_share_views.xml
+++ b/vault_share/views/vault_share_views.xml
@@ -19,14 +19,15 @@
                         <field name="token" invisible="1" />
                         <field name="iv" invisible="1" />
                         <field name="salt" invisible="1" />
+                        <field name="iterations" invisible="1" />
                         <field name="filename" invisible="1" />
 
                         <field name="name" />
-                        <field name="share_link" widget="url" class="oe_read_only" />
+                        <field name="share_link" widget="url" />
                         <field name="pin" widget="vault_pin" />
                         <field name="expiration" />
                         <field name="accesses" />
-                        <field name="secret" widget="vault_share" />
+                        <field name="secret" widget="vault_share_field" />
                         <field
                             name="secret_file"
                             filename="filename"

From 5b32c41fdaff0ec6b73682c7f43f7a8d77a25a50 Mon Sep 17 00:00:00 2001
From: fkantelberg <florian.kantelberg@initos.com>
Date: Thu, 29 Feb 2024 12:35:55 +0100
Subject: [PATCH 21/21] [IMP] vault: Resize icon

---
 vault/static/description/icon.png | Bin 2287 -> 8740 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/vault/static/description/icon.png b/vault/static/description/icon.png
index a0c9035d9b2247bbe8008a1601aafb0524a2c13d..d79aa6f5751719b79f296262aa20dbfb68d1ba92 100644
GIT binary patch
literal 8740
zcmV+<BHP`GP)<h;3K|Lk000e1NJLTq004{t004{#1^@s6uE0S)00001b5ch_0Itp)
z=>PyA07*naRCr$PT?v$3MVbEZ+j`$SNp~k{lF$TER!3ZBTo@V5I7HDI7!{2W91R|i
zU_cW^J#2Cmlt4h1%m^ZzII;;OfuJTKk~kP5Q36>Zd#Ah8Nq5re<@NH0x^<V@tL}YE
zzt`zLoI|?befQR_`s@3@|NH-{vVizmvhvaTNKyQXh!y)nMWVFD0)P|%c>m}AKwMzo
zhrEFOjd&1w!&C|^3;jX=V_%m_0Z6X*Z;P&Tn!`L6|LQ!CZm#=R?sNZf%=>Z8!T0sv
zhUz%t?{1r%8*^_j`8(fF_yO$SE%N=y_h<Tzy^j3-NPq8Jv1sJ+l2p+x|8mL)I=v>l
z|5&o-v5Tt9Y96st5Z8~N(@?M=g&J)CU(_LDgYp_Cvk|AGQAeZ{24!L(RJ&}0liCaY
z0rfugkV*~6eO=08a%Vu^I4~BdG7Q=fh>2vszXijok!0^+{}(Pe<zr8Jli}8t_s^bM
z+4O8rvJVdTABFzG0XR0;#|<ZLkYmvl^w5{$21=$l1rXxv{Qjn=Fn2YBIP6TNI*_&;
z9toTdawh=!MluA%h{xHP*6?V9BQTFOG#NtK*YVSiLmIAqyg|@_>-S)3yckO2MNnB(
z2IYxT=ty>5__<Tgd&2tV%BQMJt4i7q9_vc%JJRm79uJgmhWpm(BMs-7s1B7Fl5-=O
z%TYl#ZI-;tU`?5G8AOk928R&NLC{PX5IuhW(^vzdCJgy}!hoo@axTnqjV#izE=gff
zq;qYosE3-8%4BpXGTFLs-BZ`T^S$e~b?)|NhI&~2uEPf9PzoWSh&!Bg;rRP<q_J<y
z%rwrQx`^g<0Pj+X4&;yqyHw851#?(7f#?Ay`iJ2Xgo)tCaa4;PXmZ&6j$qp>L>7{}
zaP44`#+gP=KjZ$R4SIUbWCSADTMzx^*=<`7?rs?x873}qr##`5J;af6POpg^STgp&
zb{y;bXan&_m@_MlOLAXYYCxRj;U@^&FEJny3FkQj^B{V>{E6yYp2B64oJeF)JeN%0
zpe%?+BG6pjxW&5n<=-CL)zw<c#6xt0*%2jNh(}6=tk<2m63n73nzm~9H;%Ltq(N*z
zqM7Tr!$U0Uo!E{iujdUYW1NOVL~%PP!zW&Vwl70Y69{<-pJo9}shZShEn4+p>fo_1
zO_W1&8Z(5Ue7^u;upvlXk;irAuFA)BpGEUm6Ba3m#<}RuoB2dXksT}x=LLVqsIDf(
z{>Sw5f^r(pfGyT|SXYOqBin3}#8akgVUw*Ztpe-%7w%1=sEGFAWY;UgW(Ik5QIvmI
z*?_Pz3)7Kg*eZYu?ygzqG;VwOc6tWQ&1l-d{f-|^PD5}QN=L#5?;2KdtO%^{EnSTM
z!~wLz!#Ho|Mp0&nqk2Goa2kgE5;Mr0({Mrz!$laEV?c^2gW{+Vqkpl{lEd+gI1J@|
zXp%*8GV8m~ElyEEiXe*ce5hDmp~&vIPUBCFv8dAs5rzvMSkg;au1bmZ?=!B`U`k`k
zY3KkTD5pU_gz^~~)M;#l@dlO@R;5WKMUIH&G~+sr&?S)*iM)Vy&H1R)I0!>x3eR37
zK{1_`9M@?${YI`_vmAjVC$ynCcp*m`m+2UA8bQv_h~v1tI5@)4LK^F>$lobtbX=#=
zx+E^ioQFEis3FX_PE(jVjrHB<Zs)>kse|%-)3{DU>sG!?pb>WL=`>zgE%q34rFC4V
zaU+=^xu?R{Y19ZKjhe(5Bqhhr<vJypjvmJAY52l9R^n&kD(_d~x^#0-OnFKugc;Xq
zyct0KgH27?q<@Un(+~)wD4}z^Wn8CW3JEc$9#8c&Sh%A(te~)GT&JPs112X#xq={^
zMqJdM&-FA}K$vlz#^)ZHbxHZ4)A$HOOd&aW4Hz|%VR%3#cwDE+Po2hE_}uL&-V7KY
z#TRdiWC-a3Ch0O1Hut1il`vjU<Me<cnaCH#ljSF@D;0AvRjL5HBr?mza$l!_W?ZN7
zGsxl^;p3y8COw21*J*HRD+keHQtataY{8nU^fS-aJ;@Qqbr&HJW?ZKkyE=`HFruKD
zFVY^@X<XNRJg<9lToOU11RQ2ur(tVxX$(D{);)~^!i?)Qg{;$HgwaGvY*an2(=bk4
zvYcfsu6v>ohOM5Ht1;s`4Hly4bvu6lvDsqUz|3<``BzWFgw>>!?S@B8m^7}_cuE+X
zomQ{q9veDMb`fR_>ogItARdWBED`}LWkE7E1jDIe7_pTZzXETp=`;?9@uAOOT(3cx
z<4C7TL}JibTnm#cCqh%@1gI;khRU*XZk51DY6QA_k3wfpH|+0jhy6Vr(As|(Mqor-
zH^UY@v8j?gtfx^TjGohoxQx7bliHo50M<P<mrj6FC!PrJYMcSFXpHR+?ssyPggf#2
zlLPSPfgSLA`wnPNb{Bj-jXJD$_n2cg>|u48v8K~ZD{p|0oNy*I)=Z>~LSzsoD?i<v
z?CjVJf7-nf+6KD3<SqY?{H~|TLxdSUou(pM0_RRU8)i06*P@B&0+B(9uKU}bEwE<q
zYtWw>RJy9H=bl2Wd%_0e3BCTVmF~>pHVl#}!9>p#qE2&SX#>nY?HnkIC#1%bF2Z<Z
z*s|bgUk^O<#!JxJe~8|uRk+=uL!$Fwe;RASbGN0m+n`Fia4hIF=p8;Z;ob1zlix>e
z0?AF75SXJw97K{=ytx)Ob?qdOCP<BN?sXa?mqZpW`IT^muhT><3(jqNFT8igsUge(
z@5aCyRuE3(K6K6Y4e(0)8+0+bM{a^}n(VK8vKBZMcVT)gZG;(3ohFrn^QOEH&YJ!n
zUpL8+0g$f86scBkT@ULIZXR7uBU$v18f7a0XzMbP!|>6LJA=lSPJ>YLL$#;C$KLaS
zF!Lni2IeBw^KZOtyC+7Tp|-;%8$258o;(iYZviiWK*Mh35hwq28Z_f44_CpQb3Utm
zt4z5ZQ^Xk_8G%PPEX8__$R#n+1h@5}WUGDO0O@3gZaIr+e;S&@xDE2&(D8{>^T}Fo
z2Z0Jjr%3?}w;zLVU+`6BG^Dj8Sr9-BSZCKE=;=KM<)vj%S6yp-%Okx<;a7iK2FZ~j
z3DN}NG?`!bL?Dd$&Qh|s&ke$a(`gX0v~Al9m(RKwPM$nN_zEgSF(I>qLxb?_AD@R8
zUj8E-JnS6+0`;}^@UI{KILtn07Q|z5?UwxO-~KzSZr#WT70e+Qxi}j^pwlQhjGWW(
z(E)u<4ts76JwCbCX<TDDW7@l5?ztBk&-Ne}b|3AAo9?|8w(lW02ty)UnrFZ@mtO@{
z<(1l7Kd}B8IFvj}@1N{=6qyX7+;EzCA||n>d+zzJ%tja*Tiktl>HllrP;f!oQIzyJ
zCi>2*bx*djY~O3Q?mM6P8ceR86y{YhqmV>V!z06R&22Zr_FZpz_m0Km5RFA)cz76w
z2ZubTK682t+;rvlA%e2pg8R8Qcys>_ShjOrnz^UU>ojT(W7xI%s?(t6AK13Xp691b
zX@PmOF3yN<!gkBDHNS^n{O_+I60x9iQXN#**FY>0^X4Hkm?IrsaHRbZjEtmU-sdiX
zSsy-E*}EtRx&M{lLDx`^6D8$GJq?90WbQ)0MnG>(X(LP;I*o@c&Wp_b_=RxBv{Uqr
zR$L)Nm<2z*7IwDohDj|`p{TT&BO5ND5A^oiXg6cZ3GkDvu2muoYR1dk{|f8cHs#g2
zr$8L0P;?q(BW>IEctc+tFM=O^@oI=iW84XECS+D+W$63=Ie#upI%x_Nm6cLXl+sh2
zN~(dLK4{;u7k;zoe(lkP-Mu|<-)m1(C0Vv>bQ?4Z^)x~b<6<d|IN9Jdnb&DB!Ntbn
z-u<-ZnebodeLgL85q%jU&OmYizV_p9LtQiCMtB58hC=?mb59#A`R-34!6Z6G2=<Ft
zo`kN!UWY?zjzr9XPJ>ees&Vrx4*d}zEu8qAyG@SkY0%k4HfNzKwE!-7|9SAwr+!eG
z`!SX9MTYb3|G5c95M|-QKd}KthXHQ>$~D^X8a-?IrZw<J_b%qKg8LFv#Qbc8;5v;0
zVO;y5Pcu<&hNzjt+0<!LsS#Ue5&eAQlV66JP1Djw7#W9oVCCcR_g!1KEt6#ibo#WD
z;gWOygKLlI{;%%b1S|J#aLmEkxS1Ag#mJT=oyJ<Y)L$xVx5{AUqpadiDW&V~OLSjQ
zoyJ8L5BSLQmfm^pb)UNes>|Ow>qj7+r^{i`Gk10DgT>E1;CBn}lf3zlX8#qRx&)@y
zH5nnyTWx#b$sMbyV`zMUXLtU_pJY>~aS(>}F=`(r;x=KXZ`x55vTw%?*&QV?2z2z^
zt(SgZOEAN<pZw1Ae|-sF+_*-do6wwQ)|nrLPn`J?qsO85Idr58?*IF<VwWUzf!VF6
z@i>fo*e7@Br;5WEy*4QeW_H~ZYU_b*yQMP<HLoO53^#vyp;Uj7)w6`*G^<|!Gc4V(
z$`<Re0sDv@jl|&me>jKAkeehod;9y~?pGgodfMSGLYI^qokkfYsTJUC<epSWM_VTu
z4f(E!KN!8LtO9QM{Cq>xPVX{g0Ec_J;gxM0VQ0ra=pE>TvZ4~0HgO7^-Es!h7^DQq
z7NGkf6?xIRM?IHDeeNDGZ$h>+#A&PrOYxRv-Ve)ab=*Voxj%z4TTkP<Az6_$`8ri4
z<#6K{uMUhb?maTWab#v_f-oqdx%mGcBM^p2z8aEWF5GwT7Gm8~C=N54I*p4g%4p4*
zacDq_A~CpS?ltK_N62rR7=-TDM|*o<$zPwwzAfu(xp{=PU8@h_;313$6l|$3dyu&Z
zQCLqR`8{o&22yZftFPcv(V7HuhmwP^=qo>jqC_H)4x{5Xx`7V!xyZm;JKEsktt*5s
zNxha^rU<83PZNm4u&f0eKyGvzq_Z5bbryqDZV7}z2D9)p^PstLN|-SW^qq9;X+#g(
zxOEe}*nxEz5@AFL>t*c?T~(NMPdvg1PVAyyBqN+ASUn9gN`x$u;J}+oq7E1t9)^p~
zngt&{`yT@#OfEPKYak+nTk+?WuyGg*lDt0U&5WGsG!hP@^D(*8X-3@KkT89Y+o9VB
z__V5N@YRbh34|8exHt@_`S0I71l{!x!0;9(G!)8JQBdUfm&gM78ezVk#zq*{JScN8
z;WRS)GVFE#d9+T08g^joZsIN)17W71i#VzFKDhIHKM8~|It~*?r!njf?=oay-@pH6
zsGiwKxFpd*>Er;2&Jh<F3SlwkxhDXOFl4e0sbRX+_L9#tSx@6dLo(7Wm?E6Za{4iK
zxE~hHzY*dw{SFL42Q|p`K@sNdy}RJf7axYknayIC#3WhS_op}whcw}8gryutT0oTp
zod)#|jVv^TNnMZtVQR{&;hUeF19g=(8AX^}aGXb$Jq~a7?S<-wI@&IYt>fw8pgSPg
z?w*7JIZqR<doqlYluk>ENMY(}Y*Ee*oqdxP&J+VqQ&&+9SDb$d)RtEV0fL-et3sTC
zfdRPs&g-D*tP>$#oN&5>#t{EEHTlgPr?IdO6NuuPa2l2q>mEQ1QR|l7I0vKrp&uYZ
zoZ5<NxN`QTP*X-{se^Kpu-EI}K==9bKm7roS^s;OaW*O|b#h2t{S;l#!grhVJ;N}Y
z6lAIPIp0V9Eaos7;WWYOX++4v={|-vzI7EfaK-tTLT!1KZd`Kuxv5Um*WV8d@45j>
znrfhK>Lf~OCDY+tm`y0b+0to@IgFIkuw5R4Gut}L7E~$chH*@l05`01gt6VwY-B8E
zZYW&@$wsc}!RLMht2VBKlm6*+h{X|6m$)JU=@oLC4DKUr7$uqd6tzAh%0byW%huiW
zf-Q}KkUp6#$3VpP%JVOUnmj`mQy4=C^yZE&aLcdnhU%sXUUbAUNUxh^oW^6V8P{nj
z4#U2f+b$*LHQ_W8d&9_rbQY4d(MdM1PDi6aBR6#A?75s93X33_{+@}^9O*d<KUi`z
z^b8z>mJgl^u|yn))0BY_+3JjP8nb#DYr#@?<)iaTY$cWG_YCMXEV78R&nm=nQY$Hd
zde>Mgs_Zg`Li|Y%CgCR!+yQU3?uLe$Q*G`dt2pv-Mdy;TpwoorFzM(t9<sPElm@~e
zWck+YxuM-qrjdl@G$tGeRp|Zf!Mos%J=>wQx*VpRb+WLelwA!$0yiDiNTMnx8x=;U
zArQtffl!E|bXwF*v9r!(i30Ja9P8I`8H_BKL9K%<ZWK~T2s4mO!lGZ@4Vznc09ubd
z<Nfc3coE*1(FX`|&+wiq`#Mc14ilEsAY`$17S{KABh0uUCTt>q4T~%?1jrWB$nJ|?
z85MZ{?EX7pUw1n|)Pm_}o(v_`XoqnrcI1%Li0f&T24lA_L!1WdEMy{)#{pA>sjsZ{
z+>psY=Of~5-26J+@yHSwLQ!+Xg67j(prVeE0*F`uzXOjTbc%@X!EER>n8T3z2e<i0
zxKt!LNN7;i$U=sJlCaD9GeVa6voC|{fCbfIjmE?vRoiy3h}PY61Ri|)F<8C+Whkww
zu($n~dRhyV*Hsa9J+2NVaYf|1D}f+kOp2ME!&puuI`2t<FbthF;xv-D8CA90oMpG4
z3t`u>c)zO=2ek?z%Y265iUu^Sab)v*N00Tu(p4|OGb^8mfuR8?tEq%oQ39r(b|REk
zm3#Psd!HBiX-*?{S>~LEoS?FD2=UTiY%px}YS?o+od&rxge<ZjQP50Z>tBIHxvR2(
zEMXDE<a<NI!|=B)uft1!Sqtl4dj<NFNr=UxP*zg~<+YVC<<uDvjmLNcVSpt+I1Scm
z^c;qTJVQ?7Mnlv_&<eUMGAg&<CJ>xOXUir7sk?{j^W`tS2(efk8tNxPd1*NmClY|x
z>Gb#aLr-5Xw0E?_{*D8%b?0{2{PuQ8CI`GJ9FNDKVp0t>v`mGX#tG7eT^L~m%9N1P
z@Yfl;q!2odwO|=um!w=Z5OB%04p~%D7ByIwWs7q2Km8S`DZ~51<=O?2&-?Y#C*YB1
ze@kT3B_xzzg%3p~MbLc4Nwy$|P=);AYLO+-D>Wp~!^n1HV5UGC^)vwx#!RO{$kOU?
z7LH6)YoD3>ak~Hj*vRs!%RFN-L56H0%!-#+!W|DS5zc&{J1|j-WkE?r8Pra$hpDHx
zKqMMv<^$q*BCg=ZL}baTfa4jEU%Qtna^v5Jc6Da!o@|7nW<0@pJt0;yQY?otMHUlI
zV-s8gS={er8(~B`&HC40gB$L-1xAKPpmJgjz(@)PlY@X(B&3GXX=@flq7jJ1q7YBS
zAy%A#;<6GbE-!(ivSO&6+F;8QIGPfXOqRJZq&JT^4NZDYrZ9Vr(*w57vSk;86YdOA
zIU(K$BV?J6kfl8R+)%oR^XH9!fuG)YC-e^tK<(rSP}Agd57BNBWcMI9RBPvi#6Q&c
z#mO}Li@`VzjUbuUX&esYLmwuo!8lF2$U>Tv3|VBIo(aU+u<14U&GO$-m44`Gn$E+A
zp!HyzJzy0Rs$t@^CU4=MYHlH9P81hGE!xJ+^$7tH#t#<w9Hc)!xz}k7I1C3VbZ%(G
z;VhodkS{vmIgKwQqmHdAtAvH0o#!D-CUQe22K9$^tKrsP-o-^N?#wQ&uCOB;JNc*h
zaobx|>LLpsP~EyIf5JEu*C}}7mjaW5o{H0uQ&507T2AA9M^JbrL>L*T@m|0u6tI8G
zE(S7X%L?@VZr&$84`&j`(dfUCnW*XaYgfaq5B%I2SbFVoSxp5@I&m^sRzzq}6cPYH
zq9g%zQybI;Vb07cL{8(AUQubKV#KiA&u-Sok~iHBX!OFh+b;Vdpe<5GKO|C^7*Y@y
zwrc%ac=)BKXnobP>;k4(5h`NB$fCv<02^7ROk%Qjih?JmkzRN$K^PK=MoXu$7A#xr
z=rH0f<3*eXHMVuLI*}M=Q189`N0iPI<{l<4h`sOX4Qt`IufE{<(je=eT!cZ$Vn;*7
zkJP{@gu&61($(1;2T8UfBLF=YIt>+8+l?lXM(`FU$U=QhQ54Q{8e}jg$PmVmd@t&T
zxBmZEy}A}2->`z-HdR<5Cgvoru~5P(^?gR4k(PHb2u+6JLg6>}I*k#+c(0L4!T!yd
zv-thNZui0NKca{inUQA^CJgBfgD{V+cnbcs>oo=&{5Mn~PNFygb<HlaNTL>*fso`g
zU=+nc8HF^y^Ab(2bZUfogkhiH3bOAUs-WX6x|z=_-n340&pbK8aLw{M*wY<#j~9O4
zbF2rhzT-NG)s<1pTm-^1=dy|zH)Mt|G^bIzB2pR86P?CdxNNa9TaA1t`p-rd!9p@y
zw<8TYjqww?q;$!y3~^9t<d&V=V98^@goFLvFkyOAAcV1_ArD#D4v^%SSnEgwVMa@*
z(IQMLU1X6(*#d5(;xJ(mroFQr<}CcW{dHNAuWrgjsBS`=u&}uxS|@TpW_1=>{KPpZ
zO8+o$dCW`eq9|I><FSiLPRlF!6gmy&FjU2zA1#TH#h<Zmk+LefV)o?~rtN);$_B!;
zb+*Hok-<nHJsOSLMNH8|TpKnc!?4{DLKZgXCJeg+avBe)@POo_PU9d9%Pz1W*1B1(
zvxFiIQs4(za`{c6!)lr9YVYiTISVi65XOpFP+VSWyA}J4BLQh)U2vkbNU&Z=PA=q}
zM(o1G=H+*o4q^PeO77(R*^lDo28}z6U+ix!T)voQ9X4fgqalItCM&rm{~pqkOk7e>
zPSe)e0oOl%C$Vj5xRsT5B9TNE_Z|J)2@pzc0)?p4a0p}9vt$`rD0?EHeaY8pgb5N>
z%Ms=vT=&Es4#EUm<nMAC%vl-)>pl6nPxS<|C`ww0$4x`ZW#vexp%4ajI@Vbfl0Jtp
zw6C=XE~HNL^RHeHF{a2!MRrXLYG2!axasM8oZB#OrdapnJ{RYP&>nLPl;{M>OmLbs
zqA0507@+f!O^k6WoyJ<Q9H$1*;gz<|B3vbqp}1M&s;-)KDV#k0BpQH1>Mbtfta)`U
zJi2~)D1>p5MZ`F;y<`Jn@>{2|5k^IDb-8C*O}NV;gXlD6-4@*Po$DaxoXu!Lg;bmd
zZOrqno3DXrLm9r6s=k6jPOP&u`e#Hc5QQZ#a^?~+YDxoPvZd2l-&uBh3Ud}$(j`~2
zIV{;^<icJ<SmcgZ-mp(xz2M{j22GP1A)-pkNe3_m!>JM2y?-w}vEmu%?CFB$(`nR_
zBL@B?QBouj<@gsA;frIL>XY6D4w8mI`p)@OPh)*)(R_N<K+sKBjX8~4uR#X8XVcrz
z-_vWLhqygXZ&^iF1-QdoURwnXEmI^i49{uYdKS_=NI{HRHp6frnTHa!i#II)iMsIG
zMat38X>5a`=MFP<m7FFltcbtYf8-eKdvm9E>~1iIzz;F1(x39488%{we%Sk?(3zL}
z<?om_!Wiz^C*2g0X<9CH8fy+R7+$yYni4?S$G1sSr$L8-cei!IV1E*~f!KnIm$oH?
zX<4?BR5#Sy1yIr%>n)40AW`b%hA0KsJrg0b=RKKXNj~Z{d4({-;n#()l!21x{g9kY
zjs@tMuH4V%ngRkS|CC@DSqM4}hcHxB6L7_&7-2G}(*ztp?sC!aQ3Th$fMvx3l4_e{
zj?d-h5GRc&it3yII*kBf*nSSeY1kf5cZlili)OG}Ldug!7Ml3BV7VXdgG&~K>1%go
zZ<QN_8C{*mnsXZ>y~L}!5JUF2V%&47)1+&D<bc|VL?-L3mbmF-j@ddJ?Rnos;|p1*
z35hVSuga}XgGq4sbx&?MYAd*Q@spTih|Wj|W2|XMQQWqwM8Av9V$d{F7e$fsfiSAH
z033uNJ{EbPFkHqRjtuHF;<TK+yg>BQh~U<p&?qi;59v{lC!Gchcdj1b7>3$VgK(NK
z^V0k~su;x0^^iiFSE68qEaq8bb56suX|+U`kM%S>hhf*5h+KdGkla7%QZDK0H0I_+
zU&$ehaf4MZ@c7edtS{Z>qy`ArQ78yw%4ra1!3wS(llXI*#3_w1hMSux${ZQP)YAk;
zm_pNOP;RLHghuraTRJ<E=rZhDbM7`{P^a-oujfhx(thR;CnT#hoX+fk`MDvTMTp}W
z{MX!^%Pp!YW?$P(3C^xgW6inkDkk};aqb18)1cf?J*sDsI3lSHYDt(0rwMj0cOli&
zaACD)J%+*^H!~=M8XcX6=PZUk#gOA1&pM3&VGP3}QN2|dy(Ystja|=zbQS^#RKcvS
zV$iF#5Zy4at7O(`6<|FLVK6kL2surj>ogu`QI=wc_c=7Om`5XHNvE;q-0pA~sS8qd
zumn;@L8sAi7M+=RO%7ZDWWs62PCbppCHW&RLYmA)O@^4Rxy(kE6C9nz=xhWwDpESF
zKshIN3$q|^SO_|ek1%9#M7?D&gvqr|gDd4QXW_z7#)ZntU8sRFIm1$CZxW6@7IYfg
zB}olMy$x&T5GR;UgQFp_vG^{=pk~xCI^uSBI1Y6h+hAl9#_n{9N+Yc^$dOLtDYzng
z2otUG+u@4mfsPC*%P)9+#@l&ZcVD74qghWwyCk7;(0|Maokoo;CfW3mKE)7;#<ETm
z0%1m1r{Q!KO><Q4GGm-ZrVAP}-a@LU;YqL54UN7|;~`5Rs>8&|CiNADNWx~nj|ZK`
zy7=aArqEGxE+^sk<t3vh;Xnn8qF7F3Dtlng;_vnECk2C_jSwys>2!o?gLRz5=3a$W
zPczt;1nZ(}=cS5koW<%agc@=hdjPUnPh%sCBlqj}5$3%>7*3<(IA$g%;xdJ-)AV#4
z0qZjhE=yH5)#wpslyn+3vf$hdMIi|L@D?^oxP*+uC}q6kSkDP!=Kuf!(n&-?RHy0O
z*#_39uf8-@*;EZyG@_SNa;(!($RcZ<aaLV&gRF5Hm*I?!dYX};VQAaBZ@YET^<Pg7
z9O;AV<~rP?r~?VoC*?F!#1WAm0>TY-8nkW*RmuqqT8Ocyxs1P2v@m(f6uX-_7I9&x
zbaokV7x^v^`K!~kZ`p^=o%=DW=^gIe-WDmTDuwcim2#a<89n*kmkFK52wAiSYXV8^
z3GZ(Gj*i2~;%GAyEHs^_YfmTi96T~qSv|1<y&+uuvnxjqz141^SzT0K46))k#EbE<
zFToKeJ)Oow7B?sn)yoj4dx#K5#%b6ZT%AmEJnJ+A$NB+9MZJf6VBlyUR5nle_q#6n
z!Be)upr0??^39R1U7Z$^sxi!9tdM2~*xr`fi3vvIo1p_X%WA7M<EXhGdrYf>qmXAV
z@=IT_r5a23Y_nL;EKEJ95XtWbE)~FMF{w3@^3(y1jQS0U>^0}fs=BHR@BYRO&!TU8
z27`Y2;-YU24fQ6Y$zuc1*WF7G97zf^97hT0lJSnm<4|6Q&!(n+(ok}B2$JsS^5Hf!
z1orts7p~F6FW5xDYX<&@e(N*mI<&t|MalMP3VvN$J!#SHbLV%t&-#BDbI<nDHz`~I
O0000<MNUMnLSTZ|Rh{Di

literal 2287
zcmV<L2oU#)P)<h;3K|Lk000e1NJLTq002e+002e^1^@s6aW3M700004b3#c}2nYxW
zd<bNS000Q4Nkl<Zc%1E<U2Ggz6~})wyZ*{zJ8_7e=EENfF^Sr`F0E6<M};Z`qJ;-O
z6iU(}QBXsicV2k|#1jvoiU&|Zsz69kRSho)s7MtsZAgT0qR=L!NgVR!HU3<$cW3tU
zFn8wOJ2PwV?Cv;-?7WP}bI!Tv{O|vsbLL*#LS8?5{bwTA+f7?XI{=pdLjGh~Amm;B
zUMNY+d$zEYoc3B%l#k(OUtB7N-s^h0AHjI0yAcNrzYK%ktz0g%GQY&vpZt;){Q8G~
zctzZtze}N9#I3m6;Nf6Rrwu1X)M;JLaMH36hya{GkFXxvxKd6iy<jqoXKl(9dYT`;
zVPV9Xu`RmVIvL1q=Y{dlS=RS|^^&+=%14~l2dUTDKu$#UBF++{7n%f<pdsc2;Ku0b
z&tc|harr;&bh@$UMFA|l;E;oZhp0qeEfWwz4laZgQ^EKG7M7F?6wF|ezT$!E|H5F7
zkUt6EtS~{5{`mt3&jtumPm9Z&d<_(#;*vnH+*ZOaxFx8lAgkWR`tL13Y-Fdhv7HUy
z*D_8OJA~g?v9n4E+i@K|leL&5z^w>u1JM?9g1fDd5-sLv%rO|#VvfNWiDip926JK=
z(_)Um4v=awN51v&u-B{S_cL>B2{A3^n9NZ*ro|kCIkrNO7IOk{;;K@MIWos+2)CG{
zn3D|<)Am(_27=meiONxl(UW&{JLqy@yB4CN>1A>}uwyU7TX(UmyOXX=7Th9BYjfPV
zd!2Xkvn*AFniO9TwVxF0ha4xY7x72h$qLkr>p~`Tf~oUnHnKUT>G@NqF~Zmh6!JOb
zbY{z54juR?Pwp9Hpq=<@6e#DpJad-cT|CdfN)^qI80J{<aT)&0xO6*M7S{2fd|UX!
z2A%Xl^k=PY4)jD=FTA6t>?k?kr%s0Uf10m6e2{@m6+q&y@*L;RpXAq9?@|o>_eW}c
zC(u?-M%QNQImh14#1miR#CSqb0NVO^bo>a%$M(^eLe8;4)Rx_wUafi=KXjNQgT1sR
z#6(?Lc8`3PZ;TDmU3HxLs+Ib>W^<X-Kl(I>2YVBM;7~5Du<Ay^=^uH9FAw!JwOR#L
z$xjvG?4C-s+A_}J2Z!jY5t7yX8Gdo*6w}KNRwl>b&{I4+rZ2xv4m|it9=rJ)&Xk%{
zt?V#T9)f8y$7cV*5A%U)l_z|y{DYsL{v*>%j>ibMz_lwUd3pNZly$kb5uO@-fNYcc
zoS6NXlyi=~kB<y)tq~QNyEV<FwWystGt*oR$@cFaW1qcIZmTWl1UY82n3L@vt(`5N
zoADj83xxAc=UyJ_wSBdQm}3(NZ4Pt#wr!^;0W5tx4>D*)zpb|IIlxe)#OLVm$<|mE
z*Jq9`0>~hJ=49y3<r2UG<R0a#AAf=mcG+^qJJ>b+8D4y3Fs96Bd0(!lDc@FEA0gGj
z##J2&S`(^Oo1IMt4A9g6364GUF&0-=aN2V8wXb8t&dPWQ`J1d-d0*FZ#?xm`g+jTQ
z7#Q!$(v$059~8hT7Jc^`Vvejz6;HI{8%Zzc+*w#L%WP9Ghq=OnS!HVRH|F=Yfz&22
zr!YIi?bLv|!{xlI7|;N7LVZly%(2-$uqRPfN^+I+?{cvaUuBXq#}3MO>deWo`@m5q
zA0J8ym?D?2OmoNYbM(0CU`~~j$YwLgX87O{CMVJY1<Luq^7@tK>VEj~)W{rLVo7?;
z$uRuzQI1axrv?h8Yn=Ss+uV%nkn3cQy*`4CGRJ24p`%QGXqYXjAOg5~PEWnYsRdW{
zQ%yL1$a)BZ!5oRW+B1#r{RT~&GN76&ED#-xj6KWbV=02NdX3-z<u!ggTR=Lhnl)4$
zUh`(gWim&LQ_5$(8JBd5=>)xd#WPlOhnzMj4!39C<kfRiTr6ml682j^eTa)|oenvx
z7||@|bTTsb948*%({xY@%eT3D=K^oNbB?p~Yr%}KcluB-bF_0Mn!ub6MkbDOVyrPx
z%6Cum(y6zZYs=By)d}tz%S(CkWe4ME$ImIoGHMQUvigiS#+(jDC!XWj*xtrKS@=6I
z|LG0hErL~CVQz__DmHR%m6SQz@K<qt%;{kNq31dFNFAW8zQ-FEF0*JkluHX-dhegy
zC}RYb%8BO&%<-xcniF*}XUo3N^UZod0Vv&K>inO%5n>=ArvYQxrp=t7j|sL0f_p8U
zt=H!a?0A1e%cqvFa$r;c%EFedA3AfqxBha9VUA}7Pcf^$jq15d%LF?#LGF^nRow~n
zgOrX-f0UZf9F-Q(!Lc^(kc}NY->GCdNBLIERW8huF9EKDQ<`P!>>2X9J&4*5Er-p>
zIoV(>`bMZD=Onmpo&P1@o1P8E@h8~KCDE$4**Pb=gI8D1NdnEiIxA0>b8KUc1<Xm3
zbDTPIjQMR9bex*AzQDc8In{UY5-{i5r3+kNs{xO-D@@JICa8M%jycu~KlqkVOFPs7
z$`^X#HRb$>Eok4$&Yn*1tS3%SI4myaS#-@@;@=`UC-4I`<9f~^oJ%k}WdAuPu3G-b
zQ~PTNJv&#-tX)gBD$R3iHk$bKX3%#wT6Me^ssEKlf@)<4$Qx_3k(?9mb5w_{Eqawp
zg2ny6m2<otQ+16tTCHO21fbPpXY+E7txa)@IT~}!s?=gmaJLPlTFeQU6MwGMVvc`y
z9a>{8=B)oek@qumY=6dE%rTj>!Aa!(%N)DnI_9@Zi#b#r7uzkCYnuseM*rWL<181k
zt!2lDs>K{>$NA5yXX8^Zeo^%8+Ch6)2X-c_4eAFQdJdusZz1U0gE4w4CJiJ_4;@?u
zlA#y3<q_7?<*1^k$sq);>ryJLk-vVMSHJsHW&R73&x`q`c}k@c7=tSF`bk~PYt5OE
zlMow>8YlE<1Se-QPB3i0id|z8<J`9_+S}XN*3-)?-}$ix@LygOcaE+cnFRm<002ov
JPDHLkV1n|ya*F@}