feat: rt sessions OTP email challenge (#11941)

# Which Problems Are Solved

Add OTP Email challenge needed for Create/Set session in the RT model.

# How the Problems Are Solved

Introduce `OTPEmailChallengeCommand` (validate/execute/events) for
session creation checks
Add unit tests

# Additional Changes
Remove unused fields from `session_challenge_otp_sms.go`

# Additional Context
- Related to https://github.com/zitadel/zitadel/issues/11035

---------

Co-authored-by: Marco A. <[email protected]>
This commit is contained in:
Gayathri Vijayan
2026-03-31 11:50:53 +00:00
committed by GitHub
co-authored by Marco A.
parent 9bab764796
commit 7c3d26b23b
11 changed files with 1607 additions and 102 deletions
+1
View File
@@ -212,6 +212,7 @@ func startZitadel(ctx context.Context, config *Config, masterKey string, server
new_domain.SetIDPEncryptionAlgorithm(keys.IDPConfig)
new_domain.SetMFAEncryptionAlgorithm(keys.OTP)
new_domain.SetOTPSMSSecretGeneratorConfig(config.DefaultInstance.SecretGenerators.OTPSMS)
new_domain.SetOTPEmailSecretGeneratorConfig(config.DefaultInstance.SecretGenerators.OTPEmail)
sessionTokenVerifier := internal_authz.SessionTokenVerifier(keys.OIDC)
sessionTokenDecryptor := internal_authz.SessionTokenDecryptor(keys.OIDC)