Commit Graph
100 Commits
Author SHA1 Message Date
Livio SpringandGitHub 12d4d3ea0b fix: enable env vars in setup steps (and deprecate admin subcommand) (#3871)
* fix: enable env vars in setup steps (and deprecate admin subcommand)

* fix tests and error text
2022-06-27 10:32:34 +00:00
Livio SpringandGitHub 30f553dea1 feat: provide instance info on admin api and return version on instances responses (admin and system api) (#3802)
* feat: provide instance info on admin api and return version on instances responses (admin and system api)

* fix GetMyInstance
2022-06-27 09:12:06 +00:00
Livio SpringandGitHub 1b4740c78f fix: primary domain scope (handle context correctly) (#3872) 2022-06-27 09:24:23 +02:00
Livio SpringandGitHub ed5721d39e feat: TLS support (#3862)
* feat: TLS support

* add comment

* fix comment
2022-06-24 12:38:22 +00:00
Livio SpringandGitHub f4e91f0b5b fix: update oidc pkg (state and redirect_uri handling) (#3853) 2022-06-22 07:31:36 +00:00
Livio SpringandGitHub 1daa924fa3 docs: update api introduction (#3781) 2022-06-21 08:03:30 +00:00
Livio SpringandGitHub c2e0c8c37c docs: add curl for introspection_endpoint with basic auth (#3851) 2022-06-21 09:50:23 +02:00
Livio SpringandGitHub f57e3df39d fix: sms providers (#3801) 2022-06-13 08:34:11 +02:00
Livio SpringandGitHub 504d91d424 fix: allow env vars to override setup defaults (#3800) 2022-06-10 13:34:52 +00:00
6bd5799770 fix: idp styling (#3797)
* fix: idp styling

* escape idp a color

* elevation on hover

* css gen

Co-authored-by: Max Peintner <[email protected]>
2022-06-10 13:17:33 +00:00
Livio SpringandGitHub 7b0f0b81a3 fix: set instanceID correctly in org project mapping (#3789) 2022-06-10 13:12:07 +00:00
Livio SpringandGitHub 03a77b381e fix: password check policy correctly (#3787)
* fix: password check policy correctly

* fix: password check policy correctly
2022-06-09 13:48:57 +00:00
Livio SpringandGitHub 7f34ce1891 fix: allow project grants without roles in database (#3786) 2022-06-09 11:48:54 +02:00
Livio SpringandGitHub a377f2816c feat: return instance domains on list instances, fix: login policy and avatar url in oidc responses (#3785)
* feat: return instance domains on list instances

* fix: filter login policy idps correctly

* remove debug

* fix: absolute avatar url in oidc responses
2022-06-08 13:46:24 +02:00
Livio SpringandGitHub ace94917da test: ensure consistency of TestSpooler_awaitError (#3750) 2022-06-07 11:40:46 +00:00
Livio SpringandGitHub 5e4b38d69b fix: improve oidc issuer / endpoints (#3753)
* fix: improve oidc issuer / endpoints

* docs: update endpoints
2022-06-07 10:04:51 +02:00
Livio AmstutzandGitHub 3a1569bd94 fix: grpc gateway interceptors (#3767) 2022-06-03 12:44:04 +00:00
Livio AmstutzandGitHub da1f74fde0 fix: update user sessions after avatar or primary domain change (#3768) 2022-06-03 12:37:24 +00:00
Livio AmstutzandGitHub 0baaaf8a05 fix: handle default org id (#3769) 2022-06-03 14:30:39 +02:00
Livio AmstutzandGitHub 6506ce537d fix: sql error check (#3762) 2022-06-01 16:00:25 +00:00
Livio AmstutzandGitHub d65761f388 fix: render only base language in html (#3759) 2022-06-01 15:32:18 +02:00
32afa77b97 fix: compatibility for cockroach v22.1 (#3754)
* fix: compatability for cockroach v22.1

* update cr version in docs and compose

* bind dev cockroach to 127.0.0.1

* Revert "bind dev cockroach to 127.0.0.1"

This reverts commit 1c7c6304ae6682801f8475a8eac91569442b6b8d.

* remove --listen-addr flag

* use v2.0.0-v2-alpha.16

* use v2.0.0-v2-alpha.17

Co-authored-by: Elio Bischof <[email protected]>
2022-06-01 11:41:01 +02:00
Livio AmstutzandGitHub 21a0e4a972 feat: get current label and privacy policies (#3748) 2022-06-01 09:50:28 +02:00
Livio AmstutzandGitHub b0436c995b fix: return correct empty flow if not found (#3749) 2022-06-01 08:11:48 +02:00
Livio AmstutzandGitHub 81c0ca3337 fix: use issuer for jwt profile check on system api (#3741) 2022-05-31 13:11:49 +02:00
Livio AmstutzandGitHub 992892a8bb fix: read key data for system api users from config (#3731) 2022-05-30 12:53:21 +00:00
b3f50702f8 feat: directly specify factors/idps on addCustomLoginPolicy and return on LoginPolicy responses (#3711)
* feat: directly specify factors on addCustomLoginPolicy and return on LoginPolicy responses

* fix proto

* update login policy

* feat: directly specify idp on addCustomLoginPolicy and return on LoginPolicy responses

* fix: tests

Co-authored-by: Max Peintner <[email protected]>
Co-authored-by: Fabi <[email protected]>
2022-05-30 11:51:07 +00:00
Livio AmstutzandGitHub 2fc39c0da0 feat: system api requires authenticated requests (#3570)
* begin auth

* feat: system api requires authenticated requests

* fix tests
2022-05-30 13:38:30 +02:00
Livio AmstutzandGitHub 41d78ef523 fix: return absolute url for avatar in user sessions (#3724)
* fix: return absolute url for avatar in user sessions

* fix: refresh token unique constraint
2022-05-30 11:27:52 +00:00
Livio AmstutzandGitHub 737e01bfd2 fix: fix and improve primary keys on projections (#3708)
* fix: org_domain projection

* fix: projection reset

* fix test

* improve foreign keys on suffixed tables
2022-05-25 14:15:13 +02:00
Livio AmstutzandGitHub 79452da7d6 fix: check membership from projection (#3710)
* fix: check membership from projection

* remove authz setup
2022-05-25 14:07:16 +02:00
Livio AmstutzandGitHub e1ee89982a fix: unify commands (and remove todos for checking existence) (#3696) 2022-05-24 09:28:17 +00:00
Livio AmstutzandGitHub cf6f4d6894 fix(tracing): parsing of fraction (#3705)
* fix(tracing): parsing of fraction

* log id
2022-05-24 09:18:25 +00:00
Livio AmstutzandGitHub 62c4a4d08d fix: return absolute asset urls (#3676) 2022-05-20 10:30:12 +02:00
Livio AmstutzandGitHub 0906c2d513 fix: CORS on assets api (#3659) 2022-05-19 14:09:02 +00:00
c71ccc8a80 fix: improve context handling in projections (#3638)
* fix: improve context handling in projections

* fix tests

* use as of system time for current sequence

* use as of system time for current sequence

Co-authored-by: Silvan <[email protected]>
2022-05-19 08:25:19 +00:00
Livio AmstutzandGitHub 5901991dd3 fix: asset service (CORS and path in console) and user init (#3655)
* fix: asset service (CORS and path in console) and user init

* fix tests

* improve comment
2022-05-18 14:10:49 +02:00
Livio AmstutzandGitHub 616b31c959 fix: token check and error unwrapping (#3648)
* fix: token check and error unwrapping

* remove unused code
2022-05-18 10:49:16 +02:00
Livio AmstutzandGitHub 4ec006dd02 fix: remove custom domain from default instance (#3653) 2022-05-17 19:23:51 +02:00
Livio AmstutzandGitHub 3a63fb765a fix: cleanup some todos (#3642)
* cleanup todo

* fix: some todos
2022-05-16 16:35:49 +02:00
411d7c6c5c feat: add default redirect uri and handling of unknown usernames (#3616)
* feat: add possibility to ignore username errors on first login screen

* console changes

* fix: handling of unknown usernames (#3445)

* fix: handling of unknown usernames

* fix: handle HideLoginNameSuffix on unknown users

* feat: add default redirect uri on login policy (#3607)

* feat: add default redirect uri on login policy

* fix tests

* feat: Console login policy default redirect (#3613)

* console default redirect

* placeholder

* validate default redirect uri

* allow empty default redirect uri

Co-authored-by: Max Peintner <[email protected]>

* remove wonrgly cherry picked migration

Co-authored-by: Max Peintner <[email protected]>
2022-05-16 13:39:09 +00:00
Livio AmstutzandGitHub f1fa74a2c0 fix: loginnames in login and mails (eventstore v1 queries) (#3636)
* fix: loginnames in login and mails (eventstore v1 queries)

* fix: loginnames in login and mails (eventstore v1 queries)
2022-05-16 13:10:10 +00:00
Livio AmstutzandGitHub 8bcea0ef1a docs: add assets (#3639) 2022-05-16 12:29:09 +00:00
Livio AmstutzandGitHub d401439427 fix: unique constraints on instance domain events (#3635) 2022-05-16 11:52:54 +02:00
Livio AmstutzandGitHub 4fcf03c9c8 fix: email sender and template (#3633) 2022-05-16 09:52:10 +02:00
024eedc1b5 feat: enable default smtp config on setup (#3622)
* feat: enable default smtp config on setup

* fix tests

* fix channel order

Co-authored-by: Fabi <[email protected]>
2022-05-13 12:13:07 +00:00
Livio AmstutzandGitHub 5571db3e1b feat: improve console caching and provide build info (#3621)
* feat: improve console caching and provide build info

* Update info.go
2022-05-13 14:06:44 +02:00
Livio AmstutzandGitHub 734cfdddae fix: return userID on org setup (#3623) 2022-05-13 13:54:48 +02:00
Livio AmstutzandGitHub f70990709b fix: allow single parameter in org unique request (#3620) 2022-05-13 11:25:45 +02:00
Livio AmstutzandGitHub 94e420bb24 fix: env.json caching, readiness and unique lockerIDs (#3596)
* fix: readiness check

* disable cache for env.json

* always generate unique lockerID

* fix tests
2022-05-04 17:09:49 +02:00
Livio AmstutzandGitHub 79db247801 feat: set default language on instance (#3594) 2022-05-03 15:58:38 +02:00
06a1b52adf fix: improve interceptor handling (#3578)
* fix: improve interceptor handling

* fix: improve interceptor handling

Co-authored-by: Florian Forster <[email protected]>
2022-05-02 15:26:54 +00:00
Livio AmstutzandGitHub ef6fd5a843 fix: remove 3rd party assets from mail (#3569) 2022-05-02 14:41:57 +00:00
Livio AmstutzandGitHub 648dd34b0c chore(coverage): upload code coverage correctly (#3568) 2022-05-02 12:31:49 +02:00
Livio AmstutzandGitHub d78e020b0c fix: remove old feature references in console (#3567)
* feat: permit all features to every instance and organisation

* remove old references in console
2022-05-02 09:51:37 +00:00
Livio AmstutzandGitHub 861cf07700 feat: permit all features to every instance and organisation (#3566) 2022-05-02 11:18:17 +02:00
Livio AmstutzandGitHub dc7fdb240b fix: token verification (don't cache zitadel id system wide) (#3542) 2022-04-29 14:16:23 +02:00
Livio AmstutzandGitHub a3fb49db2c chore: test angular on PR (#3541)
* chore: test angular on PR

* publish go test coverage

* fix gorelease

* update node version
2022-04-29 14:08:42 +02:00
Livio AmstutzandGitHub 2af3e228e4 feat: set service name in tracing (#3533) 2022-04-28 17:35:56 +02:00
Livio AmstutzandGitHub 44a2b81bef feat: enable tracing (#3528) 2022-04-28 14:44:13 +02:00
Livio AmstutzandGitHub 00f7dbe875 fix: setup instance domain handling (#3529) 2022-04-28 10:30:41 +02:00
Livio AmstutzandGitHub fd1150f628 fix: check http methods on specific http2 routes (#3527)
* fix: check headers lowercase

* Update .releaserc.js

* fix: check http methods on specific http2 routes
2022-04-27 13:10:44 +02:00
Livio AmstutzandGitHub ab04655019 chore(v2): fix .goreleaser.yaml 2022-04-27 09:08:54 +00:00
Livio AmstutzandGitHub 9ffd83af7d fix: header matcher of grpc-web route (#3524) 2022-04-27 08:10:54 +00:00
Livio AmstutzandGitHub b867eff84c test: ensure consistency of update multiple sequences test (#3501) 2022-04-26 19:41:11 +00:00
Livio AmstutzandGitHub e9e332b909 feat: handle CORS for grpc-web (#3498) 2022-04-26 16:50:41 +02:00
Livio AmstutzandGitHub 32986aa60a feat: handle missing trailing slashes for console and login (#3490)
* handle calls without trailing slash

* build redirect uris correctly

* handle missing trailing slash for login

* sentry as http middleware

* import

* fix build origin
2022-04-26 12:13:16 +02:00
7a507fe63c fix: use correct encryption keys in addHuman and set primary instance domain (#3486)
Co-authored-by: Fabi <[email protected]>
2022-04-25 14:36:10 +00:00
Livio AmstutzandGitHub 81c010adaa fix(console): remove clear view (#3483) 2022-04-25 11:34:08 +00:00
Livio AmstutzandGitHub 2c4799c223 feat: complete dynamic domain handling (#3482)
* feat: dynamic issuer

* feat: default language from context

* remove zitadel docs from defaults

* remove ConsoleOverwriteDir

* remove notification endpoints from defaults

* custom domains in emails

* remove (external) domain

* external domain completely removed, console handling fixed

* fix test

* fix defaults.yaml
2022-04-25 11:16:36 +02:00
Livio AmstutzandGitHub 75ec73ca4a feat: dynamic issuer (#3481)
* feat: dynamic issuer

* dynamic domain handling

* key rotation durations

* feat: dynamic issuer

* make webauthn displayname dynamic
2022-04-25 10:01:17 +02:00
Livio AmstutzandGitHub a7816a43b1 refactor: remove commandNew struct (#3465)
* refactor: remove commandNew struct

* requested fixes
2022-04-20 14:59:37 +00:00
Livio AmstutzandGitHub 1305c14e49 feat: handle instanceID in projections (#3442)
* feat: handle instanceID in projections

* rename functions

* fix key lock

* fix import
2022-04-19 08:26:12 +02:00
Livio AmstutzandGitHub 4a0d61d75a feat: store assets in database (#3290)
* feat: use database as asset storage

* being only uploading assets if allowed

* tests

* fixes

* cleanup after merge

* renaming

* various fixes

* fix: change to repository event types and removed unused code

* feat: set default features

* error handling

* error handling and naming

* fix tests

* fix tests

* fix merge

* rename
2022-04-06 06:13:40 +00:00
Livio AmstutzandGitHub b949b8fc65 chore(deps): update oidc to 1.2.0 (#3363)
* chore(deps): update oidc to 1.2.0

* add comment
2022-04-05 07:22:00 +00:00
Livio AmstutzandGitHub 7d6a10015a feat: read masterkey from file or env (#3389)
* feat: read masterkey from file

* add read from env
2022-04-04 08:10:57 +00:00
Livio AmstutzandGitHub 5112aae177 feat: embed console into go binary (#3391) 2022-04-04 09:51:35 +02:00
Livio AmstutzandGitHub 87560157c1 fix: change to repository event types and removed unused code (#3386)
* fix: change to repository event types and removed unused code

* some fixes

* remove unused code
2022-03-31 11:36:26 +02:00
958362e6c9 feat: handle instance from context (#3382)
* commander

* commander

* selber!

* move to packages

* fix(errors): implement Is interface

* test: command

* test: commands

* add init steps

* setup tenant

* add default step yaml

* possibility to set password

* merge v2 into v2-commander

* fix: rename iam command side to instance

* fix: rename iam command side to instance

* fix: rename iam command side to instance

* fix: rename iam command side to instance

* fix: search query builder can filter events in memory

* fix: filters for add member

* fix(setup): add `ExternalSecure` to config

* chore: name iam to instance

* fix: matching

* remove unsued func

* base url

* base url

* test(command): filter funcs

* test: commands

* fix: rename orgiampolicy to domain policy

* start from init

* commands

* config

* fix indexes and add constraints

* fixes

* fix: merge conflicts

* fix: protos

* fix: md files

* setup

* add deprecated org iam policy again

* typo

* fix search query

* fix filter

* Apply suggestions from code review

* remove custom org from org setup

* add todos for verification

* change apps creation

* simplify package structure

* fix error

* move preparation helper for tests

* fix unique constraints

* fix config mapping in setup

* fix error handling in encryption_keys.go

* fix projection config

* fix query from old views to projection

* fix setup of mgmt api

* set iam project and fix instance projection

* fix tokens view

* fix steps.yaml and defaults.yaml

* fix projections

* change instance context to interface

* instance interceptors and additional events in setup

* cleanup

* tests for interceptors

* fix label policy

* add todo

* single api endpoint in environment.json

Co-authored-by: adlerhurst <[email protected]>
Co-authored-by: fabi <[email protected]>
2022-03-29 11:53:19 +02:00
504fe5b761 cherry pick changes from main (#3371)
* feat: remove exif data from uploaded images (#3221)

* feat: remove exif tags from images

* feat: remove exif data

* feat: remove exif

* fix: add preferredLoginName to user grant response (#3271)

* chore: log webauthn parse error (#3272)

* log error

* log error

* feat: Help link in privacy policy

* fix: convert correct detail data on organization (#3279)

* fix: handle empty editor users

* fix: add some missing translations (#3291)

* fix: org policy translations

* fix: metadata event types translation

* fix: translations

* fix: filter resource owner correctly on project grant members (#3281)

* fix: filter resource owner correctly on project grant members

* fix: filter resource owner correctly on project grant members

* fix: add orgIDs to zitadel permissions request

Co-authored-by: fabi <[email protected]>

* fix: get IAM memberships correctly in MyZitadelPermissions (#3309)

* fix: correct login names on auth and notification users (#3349)

* fix: correct login names on auth and notification users

* fix: migration

* fix: handle resource owner in action flows (#3361)

* fix merge

* fix: exchange exif library (#3366)

* fix: exchange exif library

* ignore tiffs

* requested fixes

* feat: Help link in privacy policy

Co-authored-by: Fabi <[email protected]>
Co-authored-by: fabi <[email protected]>
2022-03-24 14:00:24 +01:00
Livio AmstutzandGitHub 56b916a2b0 feat: projections auto create their tables (#3324)
* begin init checks for projections

* first projection checks

* debug notification providers with query fixes

* more projections and first index

* more projections

* more projections

* finish projections

* fix tests (remove db name)

* create tables in setup

* fix logging / error handling

* add tenant to views

* rename tenant to instance_id

* add instance_id to all projections

* add instance_id to all queries

* correct instance_id on projections

* add instance_id to failed_events

* use separate context for instance

* implement features projection

* implement features projection

* remove unique constraint from setup when migration failed

* add error to failed setup event

* add instance_id to primary keys

* fix IAM projection

* remove old migrations folder

* fix keysFromYAML test
2022-03-23 09:02:39 +01:00
Livio AmstutzandGitHub 5463244376 feat: encryption keys in database (#3265)
* enable overwrite of adminUser fields in defaults.yaml

* create schema and table

* cli: create keys

* cli: create keys

* read encryptionkey from db

* merge v2

* file names

* cleanup defaults.yaml

* remove custom errors

* load encryptionKeys on start

* cleanup

* fix merge

* update system defaults

* fix error message
2022-03-14 07:55:09 +01:00
389eb4a27a feat: run on a single port (#3163)
* start v2

* start

* run

* some cleanup

* remove v2 pkg again

* simplify

* webauthn

* remove unused config

* fix login path in Dockerfile

* fix asset_generator.go

* health handler

* fix grpc web

* refactor

* merge

* build new main.go

* run new main.go

* update logging pkg

* fix error msg

* update logging

* cleanup

* cleanup

* go mod tidy

* change localDevMode

* fix customEndpoints

* update logging

* comments

* change local flag to external configs

* fix location generated go code

* fix

Co-authored-by: fforootd <[email protected]>
2022-02-14 17:22:30 +01:00
Livio AmstutzandGitHub 2d208dd8ba fix: remove operator (#3195) 2022-02-11 15:00:14 +01:00
5d4351f47c feat: merge main into v2 (#3193)
* feat(console): personal access tokens (#3185)

* token dialog, pat module

* pat components

* i18n, warn dialog, add token dialog

* cleanup dialog

* clipboard

* return creationDate of pat

* i18n

Co-authored-by: Livio Amstutz <[email protected]>

* fix(cockroach): update to 21.2.5 (#3189)

Co-authored-by: Max Peintner <[email protected]>
Co-authored-by: Silvan <[email protected]>
2022-02-11 13:33:31 +01:00
699fdaf68e feat: add personal access tokens for service users (#2974)
* feat: add machine tokens

* fix test

* rename to pat

* fix merge and tests

* fix scopes

* fix migration version

* fix test

* Update internal/repository/user/personal_access_token.go

Co-authored-by: Fabi <[email protected]>

Co-authored-by: Fabi <[email protected]>
2022-02-08 09:37:28 +01:00
Livio AmstutzandGitHub 78af86db98 fix: checkAdditionalActionAllowed for unlimited (#3165) 2022-02-07 10:36:18 +01:00
ab62f2d79d fix: return full url of assets in admin and mgmt api (#3157)
* fix: return full url of assets in admin and mgmt api

* remove asset loading over asset service

* remove unused code

Co-authored-by: Max Peintner <[email protected]>
2022-02-04 15:02:18 +01:00
Livio AmstutzandGitHub 1367a2e139 feat: limit amount of active actions (#3143)
* max actions

* fix: max allowed actions

* fix: max allowed actions

* fix tests
2022-02-02 09:04:05 +01:00
Livio AmstutzandGitHub 585ebf9a81 fix: user search with login_name (e.g. password reset) (#3149) 2022-02-02 08:21:54 +01:00
Livio AmstutzandGitHub f96f62a1ab fix: set correct state of idp in old view (#3148)
* fix: set correct state of idp in old view

* add italian to language selection in login
2022-02-01 18:12:18 +01:00
Livio AmstutzandGitHub bf6cb59b87 fix: list IDPs on Org (#3141)
* fix: idp query

* fix: remove failed events
2022-02-01 08:32:59 +01:00
Livio AmstutzandGitHub f1b02254b2 fix: update OIDC lib to handle keys without use (#3123) 2022-01-28 14:03:22 +00:00
Livio AmstutzandGitHub 990be687c0 fix: handle first key rotation on newly created instance (#3118) 2022-01-28 08:24:34 +00:00
Livio AmstutzandGitHub e99b7f4972 fix: move activity log to queries and remove old code (#3096)
* move changes to queries and remove old code

* fix changes query

* remove unused code

* fix sorting

* fix sorting

* refactor and remove old code

* remove accidental go.mod replace

* add missing file

* remove listDetail from ChangesResponse
2022-01-26 10:16:33 +01:00
Livio AmstutzandGitHub 52da2354a3 fix: set gender correctly in userinfo (#3112) 2022-01-25 16:00:38 +01:00
Livio AmstutzandGitHub 542651707a fix: state on user projection (#3109)
* fix: state on user projection

* fix: state on user projection

* don't change user state on HumanEmailVerifiedEvent
2022-01-25 11:35:38 +01:00
Livio AmstutzandGitHub 37d8e23186 fix: nil pointer in my user changes (#3086) 2022-01-21 12:29:40 +00:00
Livio AmstutzandGitHub 5af7d8315d fix: metadata query (#3084) 2022-01-21 10:30:43 +00:00
Livio AmstutzandGitHub 3ee3b8f6d3 fix: internal api health check (#3083) 2022-01-21 09:32:51 +00:00