feat(oauth/oidc): move token exchange from beta to GA (#11475)

# Which Problems Are Solved

This PR marks the OAuth2 Token Exchange as general available (GA).

# How the Problems Are Solved

- API:
- deprecated the feature toggle (to prevent breaking changes) in v2beta
and v2 API
- removed all related event logic and updated the projection interation
  - removed the toggle usage for token exchange
  - removed related translations
- Management Console:
  - removed the feature toggle and its translations
- Docs:
  - removed all beta labels and feature toggle notes

# Additional Changes

- removed unused `Errors.WebKey.FeatureDisabled` translations

# Additional Context

- closes #11114

---------

Co-authored-by: Marco A. <[email protected]>

internal/api/grpc/feature/v2/converter.go

@@ -20,7 +20,6 @@ func systemFeaturesToCommand(req *feature_pb.SetSystemFeaturesRequest) (*command
 	return &command.SystemFeatures{
 		LoginDefaultOrg:                req.LoginDefaultOrg,
 		UserSchema:                     req.UserSchema,
-		TokenExchange:                  req.OidcTokenExchange,
 		ImprovedPerformance:            improvedPerformanceListToDomain(req.ImprovedPerformance),
 		OIDCSingleV1SessionTermination: req.OidcSingleV1SessionTermination,
 		EnableBackChannelLogout:        req.EnableBackChannelLogout,
@@ -32,10 +31,13 @@ func systemFeaturesToCommand(req *feature_pb.SetSystemFeaturesRequest) (*command
 
 func systemFeaturesToPb(f *query.SystemFeatures) *feature_pb.GetSystemFeaturesResponse {
 	return &feature_pb.GetSystemFeaturesResponse{
-		Details:                        object.DomainToDetailsPb(f.Details),
-		LoginDefaultOrg:                featureSourceToFlagPb(&f.LoginDefaultOrg),
-		UserSchema:                     featureSourceToFlagPb(&f.UserSchema),
-		OidcTokenExchange:              featureSourceToFlagPb(&f.TokenExchange),
+		Details:         object.DomainToDetailsPb(f.Details),
+		LoginDefaultOrg: featureSourceToFlagPb(&f.LoginDefaultOrg),
+		UserSchema:      featureSourceToFlagPb(&f.UserSchema),
+		OidcTokenExchange: &feature_pb.FeatureFlag{ // TODO: remove in next major version
+			Enabled: true,
+			Source:  feature_pb.Source_SOURCE_SYSTEM,
+		},
 		ImprovedPerformance:            featureSourceToImprovedPerformanceFlagPb(&f.ImprovedPerformance),
 		OidcSingleV1SessionTermination: featureSourceToFlagPb(&f.OIDCSingleV1SessionTermination),
 		EnableBackChannelLogout:        featureSourceToFlagPb(&f.EnableBackChannelLogout),
@@ -53,7 +55,6 @@ func instanceFeaturesToCommand(req *feature_pb.SetInstanceFeaturesRequest) (*com
 	return &command.InstanceFeatures{
 		LoginDefaultOrg:                req.LoginDefaultOrg,
 		UserSchema:                     req.UserSchema,
-		TokenExchange:                  req.OidcTokenExchange,
 		ImprovedPerformance:            improvedPerformanceListToDomain(req.ImprovedPerformance),
 		DebugOIDCParentError:           req.DebugOidcParentError,
 		OIDCSingleV1SessionTermination: req.OidcSingleV1SessionTermination,
@@ -67,10 +68,13 @@ func instanceFeaturesToCommand(req *feature_pb.SetInstanceFeaturesRequest) (*com
 
 func instanceFeaturesToPb(f *query.InstanceFeatures) *feature_pb.GetInstanceFeaturesResponse {
 	return &feature_pb.GetInstanceFeaturesResponse{
-		Details:                        object.DomainToDetailsPb(f.Details),
-		LoginDefaultOrg:                featureSourceToFlagPb(&f.LoginDefaultOrg),
-		UserSchema:                     featureSourceToFlagPb(&f.UserSchema),
-		OidcTokenExchange:              featureSourceToFlagPb(&f.TokenExchange),
+		Details:         object.DomainToDetailsPb(f.Details),
+		LoginDefaultOrg: featureSourceToFlagPb(&f.LoginDefaultOrg),
+		UserSchema:      featureSourceToFlagPb(&f.UserSchema),
+		OidcTokenExchange: &feature_pb.FeatureFlag{ // TODO: remove in next major version
+			Enabled: true,
+			Source:  feature_pb.Source_SOURCE_SYSTEM,
+		},
 		ImprovedPerformance:            featureSourceToImprovedPerformanceFlagPb(&f.ImprovedPerformance),
 		DebugOidcParentError:           featureSourceToFlagPb(&f.DebugOIDCParentError),
 		OidcSingleV1SessionTermination: featureSourceToFlagPb(&f.OIDCSingleV1SessionTermination),

internal/api/grpc/feature/v2/converter_test.go

@@ -23,7 +23,6 @@ func Test_systemFeaturesToCommand(t *testing.T) {
 	arg := &feature_pb.SetSystemFeaturesRequest{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		OidcTokenExchange:              gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OidcSingleV1SessionTermination: gu.Ptr(true),
 		LoginV2: &feature_pb.LoginV2{
@@ -37,7 +36,6 @@ func Test_systemFeaturesToCommand(t *testing.T) {
 	want := &command.SystemFeatures{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		TokenExchange:                  gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OIDCSingleV1SessionTermination: gu.Ptr(true),
 		LoginV2: &feature.LoginV2{
@@ -75,10 +73,6 @@ func Test_systemFeaturesToPb(t *testing.T) {
 			Level: feature.LevelSystem,
 			Value: true,
 		},
-		TokenExchange: query.FeatureSource[bool]{
-			Level: feature.LevelSystem,
-			Value: false,
-		},
 		ImprovedPerformance: query.FeatureSource[[]feature.ImprovedPerformanceType]{
 			Level: feature.LevelSystem,
 			Value: []feature.ImprovedPerformanceType{feature.ImprovedPerformanceTypeOrgDomainVerified},
@@ -122,7 +116,7 @@ func Test_systemFeaturesToPb(t *testing.T) {
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		OidcTokenExchange: &feature_pb.FeatureFlag{
-			Enabled: false,
+			Enabled: true,
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		ImprovedPerformance: &feature_pb.ImprovedPerformanceFeatureFlag{
@@ -165,7 +159,6 @@ func Test_instanceFeaturesToCommand(t *testing.T) {
 	arg := &feature_pb.SetInstanceFeaturesRequest{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		OidcTokenExchange:              gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		DebugOidcParentError:           gu.Ptr(true),
 		OidcSingleV1SessionTermination: gu.Ptr(true),
@@ -181,7 +174,6 @@ func Test_instanceFeaturesToCommand(t *testing.T) {
 	want := &command.InstanceFeatures{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		TokenExchange:                  gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		DebugOIDCParentError:           gu.Ptr(true),
 		OIDCSingleV1SessionTermination: gu.Ptr(true),
@@ -220,10 +212,6 @@ func Test_instanceFeaturesToPb(t *testing.T) {
 			Level: feature.LevelInstance,
 			Value: true,
 		},
-		TokenExchange: query.FeatureSource[bool]{
-			Level: feature.LevelSystem,
-			Value: false,
-		},
 		ImprovedPerformance: query.FeatureSource[[]feature.ImprovedPerformanceType]{
 			Level: feature.LevelSystem,
 			Value: []feature.ImprovedPerformanceType{feature.ImprovedPerformanceTypeOrgDomainVerified},
@@ -271,7 +259,7 @@ func Test_instanceFeaturesToPb(t *testing.T) {
 			Source:  feature_pb.Source_SOURCE_INSTANCE,
 		},
 		OidcTokenExchange: &feature_pb.FeatureFlag{
-			Enabled: false,
+			Enabled: true,
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		ImprovedPerformance: &feature_pb.ImprovedPerformanceFeatureFlag{

internal/api/grpc/feature/v2beta/converter.go

@@ -12,7 +12,6 @@ func systemFeaturesToCommand(req *feature_pb.SetSystemFeaturesRequest) *command.
 	return &command.SystemFeatures{
 		LoginDefaultOrg:                req.LoginDefaultOrg,
 		UserSchema:                     req.UserSchema,
-		TokenExchange:                  req.OidcTokenExchange,
 		ImprovedPerformance:            improvedPerformanceListToDomain(req.ImprovedPerformance),
 		OIDCSingleV1SessionTermination: req.OidcSingleV1SessionTermination,
 	}
@@ -20,10 +19,13 @@ func systemFeaturesToCommand(req *feature_pb.SetSystemFeaturesRequest) *command.
 
 func systemFeaturesToPb(f *query.SystemFeatures) *feature_pb.GetSystemFeaturesResponse {
 	return &feature_pb.GetSystemFeaturesResponse{
-		Details:                        object.DomainToDetailsPb(f.Details),
-		LoginDefaultOrg:                featureSourceToFlagPb(&f.LoginDefaultOrg),
-		UserSchema:                     featureSourceToFlagPb(&f.UserSchema),
-		OidcTokenExchange:              featureSourceToFlagPb(&f.TokenExchange),
+		Details:         object.DomainToDetailsPb(f.Details),
+		LoginDefaultOrg: featureSourceToFlagPb(&f.LoginDefaultOrg),
+		UserSchema:      featureSourceToFlagPb(&f.UserSchema),
+		OidcTokenExchange: &feature_pb.FeatureFlag{ // TODO: remove in next major version
+			Enabled: true,
+			Source:  feature_pb.Source_SOURCE_SYSTEM,
+		},
 		ImprovedPerformance:            featureSourceToImprovedPerformanceFlagPb(&f.ImprovedPerformance),
 		OidcSingleV1SessionTermination: featureSourceToFlagPb(&f.OIDCSingleV1SessionTermination),
 	}
@@ -33,7 +35,6 @@ func instanceFeaturesToCommand(req *feature_pb.SetInstanceFeaturesRequest) *comm
 	return &command.InstanceFeatures{
 		LoginDefaultOrg:                req.LoginDefaultOrg,
 		UserSchema:                     req.UserSchema,
-		TokenExchange:                  req.OidcTokenExchange,
 		ImprovedPerformance:            improvedPerformanceListToDomain(req.ImprovedPerformance),
 		DebugOIDCParentError:           req.DebugOidcParentError,
 		OIDCSingleV1SessionTermination: req.OidcSingleV1SessionTermination,
@@ -42,10 +43,13 @@ func instanceFeaturesToCommand(req *feature_pb.SetInstanceFeaturesRequest) *comm
 
 func instanceFeaturesToPb(f *query.InstanceFeatures) *feature_pb.GetInstanceFeaturesResponse {
 	return &feature_pb.GetInstanceFeaturesResponse{
-		Details:                        object.DomainToDetailsPb(f.Details),
-		LoginDefaultOrg:                featureSourceToFlagPb(&f.LoginDefaultOrg),
-		UserSchema:                     featureSourceToFlagPb(&f.UserSchema),
-		OidcTokenExchange:              featureSourceToFlagPb(&f.TokenExchange),
+		Details:         object.DomainToDetailsPb(f.Details),
+		LoginDefaultOrg: featureSourceToFlagPb(&f.LoginDefaultOrg),
+		UserSchema:      featureSourceToFlagPb(&f.UserSchema),
+		OidcTokenExchange: &feature_pb.FeatureFlag{ // TODO: remove in next major version
+			Enabled: true,
+			Source:  feature_pb.Source_SOURCE_SYSTEM,
+		},
 		ImprovedPerformance:            featureSourceToImprovedPerformanceFlagPb(&f.ImprovedPerformance),
 		DebugOidcParentError:           featureSourceToFlagPb(&f.DebugOIDCParentError),
 		OidcSingleV1SessionTermination: featureSourceToFlagPb(&f.OIDCSingleV1SessionTermination),

internal/api/grpc/feature/v2beta/converter_test.go

@@ -20,14 +20,12 @@ func Test_systemFeaturesToCommand(t *testing.T) {
 	arg := &feature_pb.SetSystemFeaturesRequest{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		OidcTokenExchange:              gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OidcSingleV1SessionTermination: gu.Ptr(true),
 	}
 	want := &command.SystemFeatures{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		TokenExchange:                  gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OIDCSingleV1SessionTermination: gu.Ptr(true),
 	}
@@ -50,10 +48,6 @@ func Test_systemFeaturesToPb(t *testing.T) {
 			Level: feature.LevelSystem,
 			Value: true,
 		},
-		TokenExchange: query.FeatureSource[bool]{
-			Level: feature.LevelSystem,
-			Value: false,
-		},
 		ImprovedPerformance: query.FeatureSource[[]feature.ImprovedPerformanceType]{
 			Level: feature.LevelSystem,
 			Value: []feature.ImprovedPerformanceType{feature.ImprovedPerformanceTypeOrgDomainVerified},
@@ -78,7 +72,7 @@ func Test_systemFeaturesToPb(t *testing.T) {
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		OidcTokenExchange: &feature_pb.FeatureFlag{
-			Enabled: false,
+			Enabled: true,
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		ImprovedPerformance: &feature_pb.ImprovedPerformanceFeatureFlag{
@@ -98,14 +92,12 @@ func Test_instanceFeaturesToCommand(t *testing.T) {
 	arg := &feature_pb.SetInstanceFeaturesRequest{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		OidcTokenExchange:              gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OidcSingleV1SessionTermination: gu.Ptr(true),
 	}
 	want := &command.InstanceFeatures{
 		LoginDefaultOrg:                gu.Ptr(true),
 		UserSchema:                     gu.Ptr(true),
-		TokenExchange:                  gu.Ptr(true),
 		ImprovedPerformance:            nil,
 		OIDCSingleV1SessionTermination: gu.Ptr(true),
 	}
@@ -128,10 +120,6 @@ func Test_instanceFeaturesToPb(t *testing.T) {
 			Level: feature.LevelInstance,
 			Value: true,
 		},
-		TokenExchange: query.FeatureSource[bool]{
-			Level: feature.LevelSystem,
-			Value: false,
-		},
 		ImprovedPerformance: query.FeatureSource[[]feature.ImprovedPerformanceType]{
 			Level: feature.LevelSystem,
 			Value: []feature.ImprovedPerformanceType{feature.ImprovedPerformanceTypeOrgDomainVerified},
@@ -156,7 +144,7 @@ func Test_instanceFeaturesToPb(t *testing.T) {
 			Source:  feature_pb.Source_SOURCE_INSTANCE,
 		},
 		OidcTokenExchange: &feature_pb.FeatureFlag{
-			Enabled: false,
+			Enabled: true,
 			Source:  feature_pb.Source_SOURCE_SYSTEM,
 		},
 		ImprovedPerformance: &feature_pb.ImprovedPerformanceFeatureFlag{