Skip to content

Add Origin header to ORSF sign-in request - #2

Closed
Pepo48 wants to merge 3 commits into
Data-Dance:19.0from
Pepo48:issue-1
Closed

Add Origin header to ORSF sign-in request#2
Pepo48 wants to merge 3 commits into
Data-Dance:19.0from
Pepo48:issue-1

Conversation

@Pepo48

@Pepo48 Pepo48 commented Oct 9, 2026

Copy link
Copy Markdown

Closes: #1

data-dance-bot and others added 3 commits October 7, 2026 17:42
data-dance-bot
sync: l10n_cssk@acdde133
a5c9ce4 
45 source commit(s) since 609d9518, 32 of which changed a module here.

Added (17): account_edi_isdoc, account_edi_isdoc_purchase_advance, account_edi_isdoc_sale, account_edi_isdoc_sale_advance, l10n_cssk_receipt_capture, l10n_cssk_receipt_capture_expense, l10n_cz_dppo, l10n_cz_fs, l10n_sk_dppo, l10n_sk_dppo_fs, l10n_sk_ekasa_receipt, l10n_sk_fs, l10n_sk_hr_payroll_annual_tax_report, l10n_sk_hr_payroll_monthly_tax_overview, l10n_sk_vrp2_account, l10n_sk_vrp2_base, pos_vrp2
Removed (2): l10n_sk_hr_payroll_hlasenie, l10n_sk_hr_payroll_prehlad

* [FIX] l10n_cssk_fs_base: SK income statement menu and fiscal-year default
  b63877f6 — l10n_cssk_fs_base

* [ADD] l10n_cssk_core, l10n_cssk_fs_base: statement account mapping and exact drill-down
  2a95fc79 — l10n_cssk_core, l10n_cssk_fs_base

* [IMP] l10n_cssk_fs_base: Balance sheet and Income statement each show their part
  fe493db9 — l10n_cssk_fs_base, l10n_sk_single_entry_closing

* [FIX] the DIČ export constraint missed the partners that actually lack one
  3653b4a7 — l10n_sk_ubl_bis3

* [DOC] revert b85340c: the ORSF batch lookup does carry identity
  28fa618f — partner_autocomplete_orsf_sk

* [ADD] a DIČ-only ORSF backfill, separate from the wholesale refresh
  2e5b8fe7 — partner_autocomplete_orsf_sk

* [FIX] edi_base_peppol, edi_grit_base: a migration must not write res.company through the ORM
  1e7f23b2 — edi_base_peppol

* [FIX] edi_epostak_connector_sapi: a 404 from the Peppol directory is an answer
  cdae05de — edi_epostak_connector_sapi

* [DOC] edi_epostak_connector_sapi: changelog + version for the 404 fix
  e6444468 — edi_epostak_connector_sapi

* [DOC] partner_autocomplete_orsf_sk: the changelog entry 2e5b8fe7 should have carried
  6e7c72b9 — partner_autocomplete_orsf_sk

* [FIX] l10n_sk_kv_dph: label the A.2 product fields
  e95e799e — l10n_sk_kv_dph

* [FIX] l10n_sk_fs: UZPODv14 Súvaha rows cover the l10n_sk chart
  d9ff50e6 — l10n_sk_fs

* [ADD] make the 9950 -> 0245 move re-runnable, and retract a number I could not verify
  05358357 — l10n_sk_ubl_bis3

* [FIX] l10n_cssk_intrastat_base, l10n_sk_intrastat: what INSTAT carries
  e1ec5fb9 — l10n_cssk_intrastat_base, l10n_sk_intrastat

* [IMP] l10n_sk_kv_dph: bound the A.2 commodity code to § 69 ods. 12
  7fa234e1 — l10n_sk_kv_dph

* [FIX] l10n_cssk_kv_kh_base: identify a KV row by the reference the form carries
  3726329a — l10n_cssk_kv_kh_base, l10n_sk_kv_dph

* [FIX] l10n_sk_kv_dph: export B.3 of the vzor that ran to 31. 3. 2016
  a5888ed2 — l10n_sk_kv_dph

* [FIX] l10n_sk_account_asset_profile: profiles for a company that had its chart first
  59fe9be8 — l10n_sk_account_asset_profile

* [FIX] KV DPH / KH: keep the whitespace-free identity to Slovakia; clear stale sections
  dbbeb4a3 — l10n_cssk_kv_kh_base, l10n_cz_kh, l10n_sk_account_asset_profile, l10n_sk_kv_dph

* [FIX] l10n_sk_kv_dph: a bare country code is no VAT number in a row's identity
  bc988748 — l10n_sk_kv_dph

* [DOC] l10n_sk_kv_dph: state the measured figure for the country-code identity
  10812b24 — l10n_sk_kv_dph

* [IMP] l10n_cssk_cash_journal_base, l10n_sk_cash_journal: one row per expense, statutory XLSX
  12f37a0d — l10n_cssk_cash_journal_base, l10n_sk_cash_journal

* [IMP] l10n_sk_kv_dph: O from the tax repartition, D.2 credit notes, C.2 Source Document
  951f3e6b — l10n_sk_kv_dph

* [IMP] l10n_cssk_fs_base: manual figures in the tree, prior-period override, unmapped-accounts dialog
  9b29cfca — l10n_cssk_fs_base, l10n_sk_fs, l10n_sk_single_entry_closing

* [FIX] l10n_cssk_fs_base, l10n_sk_fs: brutto/korekcia on every row; v01 off the ledger
  52ce9b9a — l10n_cssk_fs_base, l10n_sk_fs

* [REF] l10n_sk_fs: one UZPODv14 generator — the Úč POD statement
  a4617f8a — l10n_sk_fs

* [ADD] fiscal receipt capture: framework, SK eKasa QR lookup, expense + AI readers
  4335f51b — l10n_cssk_receipt_capture, l10n_cssk_receipt_capture_expense, l10n_sk_ekasa_receipt

* [IMP] account_qr_code_*, account_debit_note_dd, partner_autocomplete_dispatcher: a summary that says what the module does
  43219056 — account_debit_note_dd, account_qr_code_frame_provider, account_qr_code_pay_by_square_sk, account_qr_code_payme_sk, account_qr_code_qr_platba_cz, partner_autocomplete_dispatcher

* [REF] l10n_sk_hr_payroll_{hlasenie,prehlad}: English technical names
  c81297e1 — l10n_sk_base, l10n_sk_hr_payroll_annual_tax_report, l10n_sk_hr_payroll_monthly_tax_overview, l10n_sk_hr_payroll_oca, l10n_sk_hr_payroll_parity

* [IMP] l10n_sk_vrp2_base, l10n_sk_vrp2_account, pos_vrp2: sale and storno verified, receipt at the till
  8a07c624 — l10n_sk_vrp2_account, l10n_sk_vrp2_base, pos_vrp2

  Verified against a capture of the official VRP2 web app (a two-item sale,
  then its storno) and the app's own receipt builder. The tests replay both
  and compare the bytes sent, not just the values.

  pos_vrp2 (19.0.5.0.0):
  - Sale receipt as VRP2 takes it: per item the UNIT priceWithVat, an
    absolute per-unit discount, quantity, POSITIVE, the catalogue
    serviceCode and vatRate as a fraction. The body that was there before
    was a guess and would not have been accepted.
  - Only the cash share is rounded to 0.05; priceWithVat is the item total
    plus that rounding. A negative receipt with returns is never rounded.
  - Refunds become REFUND items against the original receipt, named as VRP2
    printed them (taken from dataBase64): VRP2's storno of a sale.
    Returned deposit packaging becomes NEGATIVE.
  - Invoiced orders are fiscalized as "Úhrada faktúry".
  - Automatic fiscalization AFTER the sync transaction commits (a receipt
    issued inside it would outlive a rollback of the batch and be issued
    again on re-sync); the order is locked NOWAIT; a failure never blocks
    the sale; a concurrent fiscalization is never recorded as an error.
  - Odoo's cash rounding must match VRP2's, enforced.
  - At the till: the fiscal block (number, DKP, ID, OKP, QR of the
    receiptId) on the ticket, the official PDF one click away, and a
    failed receipt announced instead of hidden. Two browser tours.
  - VRP2 payment type per POS payment method; list action and filters;
    Slovak catalogue.

  l10n_sk_vrp2_base (19.0.2.4.0): register version and vatPayer from the
  dashboard (a valid receipt carries cashRegister.version, not the clock);
  the web app's zaokruhli2/4/5; getdata; receiptlist is a POST; app 3.1.9.

  l10n_sk_vrp2_account (19.0.2.3.0): the printed QR encoded the whole
  dataBase64 dump; the QR on every official receipt (four decoded) is just
  the receiptId. Storno vatPayer/version from the dashboard.

  Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* [REF] modules: no client, partner or private person named in shipped code
  ec55a176 — account_fio, account_fio_base, account_payment_fio, account_statement_fio, edi_base, edi_base_peppol, l10n_cssk_cash_journal_base, l10n_cssk_core, l10n_cssk_registry_verify, l10n_sk_cash_journal, l10n_sk_kv_dph, l10n_sk_vat_return, partner_autocomplete_ares_cz, partner_autocomplete_dispatcher, partner_autocomplete_orsf_sk, sale_order_advance_invoice

* [FIX] l10n_sk_ekasa_receipt: anonymise the eKasa test fixtures
  b60c5b5d — l10n_cssk_receipt_capture, l10n_cssk_receipt_capture_expense, l10n_sk_ekasa_receipt

166 modules in this repository.
data-dance-bot
sync: l10n_cssk@7fa863dd
1dd85c2 
1 source commit(s) since acdde133, 1 of which changed a module here.

* [FIX] partner_autocomplete_ares_cz: link ARES at ares.gov.cz, not the retired wwwinfo.mfcr.cz
  7fa863dd — partner_autocomplete_ares_cz

  The manifest summary and README still pointed at wwwinfo.mfcr.cz; ARES
  moved to https://ares.gov.cz/, which is what the module has been calling
  all along. The README badge also said "Other proprietary" for an AGPL-3
  module.

  Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

166 modules in this repository.
@Pepo48
Add Origin header to ORSF sign-in request
4c0a3e6 
Closes: Data-Dance#1

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
@github-actions

github-actions Bot commented Oct 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Thank you for this pull request.

Before we can merge it, we need a signed Contributor Licence
Agreement from every commit author on the branch. It takes about a
minute and covers all your future contributions to this repository.

Please read the Individual CLA,
then post the sentence below as a new comment on this pull request:

I have read the Contributor Licence Agreement and I hereby sign it.

0 out of 2 committers have signed the CLA.
❌ @data-dance-bot
❌ @Pepo48
data-dance-bot seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.

@Rad0van

Rad0van commented Oct 29, 2026

Copy link
Copy Markdown
Member

Thank you for this, and for the issue behind it. Without a signed CLA we can't merge it, so the fix was made independently in the source repository and has now landed here; see the linked issue for the details. Closing this as superseded. If you'd like future pull requests to be mergeable, the CLA link in the bot's comment above takes about a minute.

@Rad0van Rad0van closed this Oct 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

ORSF sign-in fails with "Invalid origin"

2 participants

@Pepo48 @Rad0van