Merge commit from fork

mirror of https://github.com/andwati/zitadel.git synced 2026-11-09 07:35:13 +00:00

* Inject DenyList from config to `StartCommands()`

* Implementation draft

* Move address checker to separate package

* Migrate usages of actions.AddressChecker to denylist.AddressChecker

* Rename denylist package files

* Pass []denylist.AddressChecker to StartCommand

* Add DenyList to defaults.yaml and add custom config parser

* net: add HostnameToIPList function

* denylist: Add IsHostBlocked()

* actions: use denylist.IsHostBlocked()

* command: Inject ip lookup function + extend add target validationt test

* command: Unexport ChangeTarget.IsValid()

* command: Add denyList check on ChangeTarget validation

* command: Export ActionsV2DenyList and IPLookupFunction params

* Lint fix

* Check denylist during action execution

* Fix integration tests

* Apply suggestions

* Add `mapstructure.StringToSliceHookFunc()` to decode `HTTPConfigDecodeHook`

This commit is contained in:

Marco A.

2026-02-25 06:33:28 +01:00

committed by

GitHub

parent bac224c56d

commit b2532e9666

38 changed files with 823 additions and 292 deletions

									
										apps/api/test-integration-api.yaml
									
		+3
		
												View File
												
				@@ -76,6 +76,9 @@ LogStore:

				    Stdout:

				      Enabled: true

				Executions:

				  DenyList: # ZITADEL_EXECUTIONS_DENYLIST (comma separated list)

				Projections:

				  HandleActiveInstances: 30m

				  RequeueEvery: 20s