Elio Bischof and GitHub
464ca0bd00
fix: always create SAML with metadata ( #8696 )
...
# Which Problems Are Solved
Adding a SAML IDPs with an empty metadata XML and URL leads to failed
projection events. The main IDP template projection succeeds, but the
subtable projection for SAML template fails, because the metadata field
is not nullable in that table. The SAML IDP shows up in list queries,
because the list method only queries the main template projection.
However, getting a SAML IDP created without metadata by ID misses the
SAML specific IDP data.
# How the Problems Are Solved
- The command for adding a SAML IDP properly ensures that non-empty
metadata is either given by XML or resolved by URL.
- The console doesn't send requests with empty metadata anymore. This
works by explicitly setting a single oneof option for either XML or URL
and emptying the other one.
# Additional Context
Closes #8443
2024-10-11 08:09:51 +00:00
d47ce93025
fix(console): Verify if the LDAP IDP has just been created ( #8496 )
...
# Which Problems Are Solved
After the creation of an LDAP IDP on instance or org level, the button
changes to 'Save' and with each click a new IDP will be created.
# How the Problems Are Solved
Similar to what was done in #7572 , we check if the IDP was just created
# Additional Changes
None
# Additional Context
- Closes #8444
- Follow-up for PR #7572
Co-authored-by: Max Peintner <[email protected] [email protected]
2024-09-04 05:52:42 +00:00
Livio Spring and GitHub
8d13247413
revert: "feat(IDP): use single callback endpoint"
...
This reverts commit e126ccc9aa#8295 introduced the possibility to handle idps on a single callback,
but broke current setups.
# How the Problems Are Solved
- Revert the change until a proper solution is found. Revert is needed
as docs were also changed.
# Additional Changes
None.
# Additional Context
- relates to #8295
2024-07-24 12:29:05 +00:00
Livio Spring and GitHub
e126ccc9aa
feat(IDP): use single callback endpoint ( #8295 )
...
# Which Problems Are Solved
Both the login UI and the IdP intent flow have their own IdP callback
endpoints.
This makes configuration hard to impossible (e.g. Github only allows one
endpoint) for customers.
# How the Problems Are Solved
- The login UI prefixes the `state` parameter when creating an auth /
SAML request.
- All requests now use the `/idp/callback` or the corresponding
variation (e.g. SAML)
- On callback, the state, resp. its prefix is checked. In case of the
login UI prefix, the request will be forwarded to the existing login UI
handler without the prefix state.
Existing setups will therefore not be affected and also requests started
before this release can be handled without any impact.
- Console only lists the "new" endpoint(s). Any
`/login/externalidp/callback` is removed.
# Additional Changes
- Cleaned up some images from the IdP documentation.
- fix the error handling in `handleExternalNotFoundOptionCheck`
# Additional Context
- closes #8236
2024-07-16 13:58:22 +00:00
9d29098aa6
fix(console): identity provider title layout ( #8302 )
...
# Which Problems Are Solved
Fixes the alignment of the identity provider layouts
<img width="432" alt="Screenshot 2024-07-15 at 08 42 21"
src="https://github.com/user-attachments/assets/c45e4226-fc7e-4b5e-a25b-164bd31864c5 ">
# Context
- noted internally while implementing
https://github.com/zitadel/zitadel/pull/8295
---------
Co-authored-by: Livio Spring <[email protected]
2024-07-15 11:25:59 +00:00
e57a9b57c8
feat(saml): allow setting nameid-format and alternative mapping for transient format ( #7979 )
...
# Which Problems Are Solved
ZITADEL currently always uses
`urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` in SAML requests,
relying on the IdP to respect that flag and always return a peristent
nameid in order to be able to map the external user with an existing
user (idp link) in ZITADEL.
In case the IdP however returns a
`urn:oasis:names:tc:SAML:2.0:nameid-format:transient` (transient)
nameid, the attribute will differ between each request and it will not
be possible to match existing users.
# How the Problems Are Solved
This PR adds the following two options on SAML IdP:
- **nameIDFormat**: allows to set the nameid-format used in the SAML
Request
- **transientMappingAttributeName**: allows to set an attribute name,
which will be used instead of the nameid itself in case the returned
nameid-format is transient
# Additional Changes
To reduce impact on current installations, the `idp_templates6_saml`
table is altered with the two added columns by a setup job. New
installations will automatically get the table with the two columns
directly.
All idp unit tests are updated to use `expectEventstore` instead of the
deprecated `eventstoreExpect`.
# Additional Context
Closes #7483
Closes #7743
---------
Co-authored-by: peintnermax <[email protected] [email protected]
2024-05-23 05:04:07 +00:00
2de66dcf95
fix(console): keep default idps active ( #7663 )
...
* fix(console): keep default idps active
* rename var
* rename var
* use Promise.all()
* lint
---------
Co-authored-by: Max Peintner <[email protected]
2024-04-11 08:29:25 +00:00
Livio Spring and GitHub
dcfa2f7955
feat(idp): provide option to auto link user ( #7734 )
...
* init auto linking
* prompt handling
* working
* translations
* console
* fixes
* unify
* custom texts
* fix tests
* linting
* fix check of existing user
* fix bg translation
* set unspecified as default in the form
2024-04-10 15:46:30 +00:00
Elio Bischof and GitHub
6ca35009be
fix(console): show callback urls on update idp ( #7668 )
...
* fix(console): show callback urls on update idp
* styles
* lint
* center links
2024-03-28 16:22:08 +00:00
d26391a642
feat(console): guide users when configuring IDPs ( #7572 )
...
* feat(console): show external idp remote config
* reuse copy-row
* finish google and saml sp
* finish apps
* add next steps modal
* rollout
* activate
* fix saml urls
* fix saml provider
* complete providers
* translate
* update google docs
* update entra id oidc docs
* update entra id saml docs
* update github docs
* update gitlab docs
* update apple docs
* update okta oidc docs
* update okta saml docs
* update keycloak docs
* update mocksaml
* cleanup
* lint
* lint
* fix overriden classes
* encapsulate styles
* fix icon classes
---------
Co-authored-by: peintnermax <[email protected]
2024-03-27 20:10:31 +00:00
fc34896092
fix(cnsl): some saml provider issues ( #7220 )
...
Co-authored-by: Max Peintner <[email protected]
2024-01-15 15:10:45 +00:00
aa805d18a2
chore(npm): dependencies ( #7141 )
...
* chore(deps): bump flag-icons from 6.9.3 to 7.1.0 in /console (#7092 )
Bumps [flag-icons](https://github.com/lipis/flag-icons ) from 6.9.3 to 7.1.0.
- [Release notes](https://github.com/lipis/flag-icons/releases )
- [Changelog](https://github.com/lipis/flag-icons/blob/main/CHANGELOG.md )
- [Commits](https://github.com/lipis/flag-icons/compare/v6.9.3...v7.1.0 )
---
updated-dependencies:
- dependency-name: flag-icons
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] #7058 )
Bumps [prettier](https://github.com/prettier/prettier ) from 3.0.3 to 3.1.1.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.0.3...3.1.1 )
---
updated-dependencies:
- dependency-name: prettier
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] #6993 )
Bumps [uuid](https://github.com/uuidjs/uuid ) and [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid ). These dependencies needed to be updated together.
Updates `uuid` from 9.0.0 to 9.0.1
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/uuidjs/uuid/compare/v9.0.0...v9.0.1 )
Updates `@types/uuid` from 9.0.2 to 9.0.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid )
---
updated-dependencies:
- dependency-name: uuid
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: "@types/uuid"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] #6991 )
Bumps [@types/jasmine](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jasmine ) from 4.3.6 to 5.1.4.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jasmine )
---
updated-dependencies:
- dependency-name: "@types/jasmine"
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] #6990 )
Bumps [i18n-iso-countries](https://github.com/michaelwittig/node-i18n-iso-countries ) from 7.6.0 to 7.7.0.
- [Release notes](https://github.com/michaelwittig/node-i18n-iso-countries/releases )
- [Commits](https://github.com/michaelwittig/node-i18n-iso-countries/compare/v7.6.0...v7.7.0 )
---
updated-dependencies:
- dependency-name: i18n-iso-countries
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] #6985 )
Bumps [@types/opentype.js](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/opentype.js ) from 1.3.4 to 1.3.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/opentype.js )
---
updated-dependencies:
- dependency-name: "@types/opentype.js"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] #6674 )
Bumps [postcss](https://github.com/postcss/postcss ) from 8.4.21 to 8.4.31.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.4.21...8.4.31 )
---
updated-dependencies:
- dependency-name: postcss
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] #7073 )
Bumps [axios](https://github.com/axios/axios ) to 1.6.2 and updates ancestor dependency [wait-on](https://github.com/jeffbski/wait-on ). These dependencies need to be updated together.
Updates `axios` from 0.25.0 to 1.6.2
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v0.25.0...v1.6.2 )
Updates `wait-on` from 6.0.1 to 7.2.0
- [Release notes](https://github.com/jeffbski/wait-on/releases )
- [Commits](https://github.com/jeffbski/wait-on/compare/v6.0.1...v7.2.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-type: indirect
- dependency-name: wait-on
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2024-01-08 10:25:21 +00:00
a50d1408be
feat(console): add-saml-to-idp ( #6687 ) ( #6750 )
...
Co-authored-by: Max Peintner <[email protected]
2023-11-07 10:58:31 +01:00
b099a26a16
feat(console): MDC components ( #6482 )
...
mdc components
---------
Co-authored-by: Elio Bischof <[email protected]
2023-10-26 08:29:06 +00:00
Dishan Sivakumaran and GitHub
e5083b62a6
fix: apple idp configuration ( #6575 )
...
* docs(apple-idp): remove client id and secret from documentation, as it is not needed
* fix(apple-idp): fix reading of key file by using content type of file
2023-09-18 05:39:55 +00:00
e17b49e4ca
feat: add apple as idp ( #6442 )
...
* feat: manage apple idp
* handle apple idp callback
* add tests for provider
* basic console implementation
* implement flow for login UI and add logos / styling
* tests
* cleanup
* add upload button
* begin i18n
* apple logo positioning, file upload component
* fix add apple instance idp
* add missing apple logos for login
* update to go 1.21
* fix slice compare
* revert permission changes
* concrete error messages
* translate login apple logo -y-2px
* change form parsing
* sign in button
* fix tests
* lint console
---------
Co-authored-by: peintnermax <[email protected]
2023-08-31 08:39:16 +02:00
29fa3d417c
feat(console): enable ID token mapping for generic OIDC provider ( #6426 )
...
* fix: use IsIdTokenMapping request property
* feat(console): oidc provider id token mapping
* fix scss
* reduce styles
* fix lint
---------
Co-authored-by: peintnermax <[email protected] [email protected]
2023-08-23 12:57:20 +00:00
Max Peintner and GitHub
c420de1533
fix(console): LDAP UI optimization for better required field recognition, improve onboarding all done visibility ( #5659 )
...
* fix: onboarding all done styles
* ldap UI change
* rm log
* set required marker to formfield, max width of string-list comp
* seperate formfields
* formarray
* clear action
* validator
* hide pwd field
* rm dead code
* lint
2023-04-18 17:37:26 +02:00
0ed2906b5d
chore(console): dependency update ( #5653 )
...
* cli, core
* cli, core
* material, cdk
* chore(deps-dev): bump @types/node from 18.13.0 to 18.15.11 in /console (#5594 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 18.13.0 to 18.15.11.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] #5592 )
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v4.5.0...v4.6.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] #5586 )
Bumps [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js ) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/angular/angular/releases )
- [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md )
- [Commits](https://github.com/angular/angular/commits/zone.js-0.13.0/packages/zone.js )
---
updated-dependencies:
- dependency-name: zone.js
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] #5589 )
Bumps [prettier](https://github.com/prettier/prettier ) from 2.8.4 to 2.8.7.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/2.8.4...2.8.7 )
---
updated-dependencies:
- dependency-name: prettier
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] #5498 )
Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js ) from 1.10.19 to 1.10.24.
- [Release notes](https://gitlab.com/catamphetamine/libphonenumber-js/tags )
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md )
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.10.19...v1.10.24 )
---
updated-dependencies:
- dependency-name: libphonenumber-js
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2023-04-18 15:42:29 +02:00
Max Peintner and GitHub
e79e280dc7
fix(console): set options ( #5605 )
...
fix: set idp options
2023-04-14 17:20:53 +02:00
4f5b195420
fix(console): link to azure-ad ( #5599 )
...
fix: link to azure-ad
Co-authored-by: Livio Spring <[email protected]
2023-04-03 13:27:26 +00:00
Max Peintner and GitHub
542271b467
feat(console): Active Directory / LDAP, cleanup idp component routing ( #5506 )
...
feat(console): LDAP
2023-03-28 07:38:17 +00:00
Max Peintner and GitHub
e9df06df38
fix(console): initialize provider options ( #5520 )
...
fix: provider options initializer
2023-03-22 08:53:07 +00:00
Max Peintner and GitHub
9b41758af0
fix(console): delete provider, refactor add and update methods ( #5515 )
...
fix: provider deletion
2023-03-21 17:48:35 +01:00
Max Peintner and GitHub
f0e0191c7b
refactor(console): common idp provider styles ( #5450 )
...
common idp provider styles
2023-03-16 06:53:46 +00:00
Max Peintner and GitHub
bc116247ea
feat(console): azure ad provider ( #5440 )
...
azure ad provider for console
2023-03-15 13:53:50 +01:00
Max Peintner and GitHub
0d832ef67f
feat(console): gitlab, gitlab self hosted - templates ( #5422 )
...
gitlab provider
2023-03-15 07:49:32 +00:00
93e1fe0056
fix(console): better error messages ( #5409 )
...
* fix(console): better error messages
* fix: fix i18n error labels
* rollout cnsl-i18n-errors
* move errors to form-field
* fix: form control errors
* rollout validators
* translate
* replace variables
* lint
* self review
* fix confirm validation
* use help observable
* fix validation errors
* cleanup
* custom validator for idp templates
* lint
* validate on blur
* remove element
---------
Co-authored-by: Max Peintner <[email protected]
2023-03-14 21:29:45 +00:00
Max Peintner and GitHub
77595cd723
feat(console): Github Enterprise Server ( #5410 )
...
github enterprise server console template
2023-03-13 18:59:11 +01:00
Max Peintner and GitHub
f55877eb70
feat(console): GitHub identity provider template ( #5403 )
...
Github idp template for console
2023-03-13 10:01:09 +00:00
Max Peintner and GitHub
0c704966a2
feat(console): OAuth provider template ( #5377 )
...
implements oauth template for console
Co-authored-by: Elio Bischof <[email protected]
2023-03-10 15:28:18 +00:00
Max Peintner and GitHub
2ee381f414
feat(console): Google, Generic OIDC, Generic JWT - Identity provider templates ( #5265 )
...
implement Google, Generic OIDC, Generic JWT provider templates in console
2023-03-06 10:20:31 +00:00
Elio BischofandGitHub
Dishan SivakumaranandGitHub