Livio Spring
acb604c045
docs: fix link to enterprise features
2023-12-21 07:47:06 +01:00
Livio Spring and GitHub
f4e73b9b75
docs: update go api client guide ( #7099 )
...
* docs: update go api client guide
* update branch reference
2023-12-20 15:56:48 +00:00
Livio Spring and GitHub
7dc8c19f39
docs: add go authentication example ( #7034 )
...
* docs: add go authentication example
* update sdks and example overview
* update branch name
2023-12-19 12:22:32 +00:00
Livio Spring and GitHub
edaa41903e
fix(projections): handle every instance by default and randomize start ( #7093 )
2023-12-19 13:32:08 +02:00
Livio Spring and GitHub
19d9b8ad41
fix: reduce eventual consistency ( #7075 )
...
* fix: reduce eventual consistency
* fix tests
* fix linting
2023-12-14 11:07:47 +01:00
Livio Spring and GitHub
831bb88ec4
fix: correctly delete sessions created before 2.42 ( #7050 )
...
* fix: correctly delete sessions created before 2.42
* fix test
* fix linting
* fixes requested from review
2023-12-09 08:59:51 +00:00
Livio Spring and GitHub
aa3c352ae7
fix: update external username on idp if auto update is enabled ( #7048 )
...
* fix: update external username on idp if auto update is enabled
* update errors package
2023-12-08 18:22:07 +01:00
Livio Spring and GitHub
6f3afb810d
fix: use host with potential port for instance context ( #7022 )
2023-12-06 16:53:41 +00:00
Livio Spring and GitHub
a87f54b328
docs: update go authorization example to the new version ( #7015 )
...
* docs: update go authorization example to the new version
* fix reference to code
2023-12-06 18:32:43 +02:00
Livio Spring and GitHub
970c062307
fix: projection version of restrictions ( #7028 )
2023-12-06 10:30:56 +00:00
Livio Spring and GitHub
236930f109
docs(api): add session lifetime format for REST calls ( #7019 )
2023-12-05 10:25:52 +01:00
Livio Spring and GitHub
e57076430b
fix: handle context when locking for trigger ( #7006 )
2023-12-01 11:13:57 +01:00
Livio Spring and GitHub
1ef186e338
docs: update session termination documentation ( #6966 )
2023-11-23 11:10:14 +00:00
b563041103
fix: ensure uniqueness ( #6956 )
...
* fix: ensure uniqueness
* only update wrong ones
* Update cmd/setup/16.go
Co-authored-by: Silvan <[email protected] [email protected]
2023-11-22 12:05:14 +00:00
Livio Spring and GitHub
ad3563d58b
fix: handle project deactivate and remove correctly on tokens ( #6947 )
2023-11-21 10:05:22 +01:00
Livio Spring and GitHub
492b7d8676
docs(security.md): update link to disclosure policy ( #6948 )
2023-11-21 09:15:51 +01:00
Livio Spring and GitHub
2e8c3b5a53
feat: allow session deletion without session token ( #6889 )
...
* fix: add resource owner of user and change the one of session to instance
* use user resource owner from session projection
* fix session permission check
* integration tests and fixes
* update api docs
2023-11-16 07:35:50 +01:00
Livio Spring and GitHub
3bc9a60986
fix: allow webauthn checks for users of other orgs ( #6915 )
2023-11-14 09:42:39 +00:00
Livio Spring and GitHub
1344760369
fix: set samesite mode for CSRF cookie based on security policy ( #6914 )
2023-11-14 10:01:59 +01:00
Livio Spring and GitHub
0386fe7f96
fix: improve login_hint usage on IDPs ( #6899 )
...
* only set prompt if no login_hint is set
* update to current state and cleanup
2023-11-13 09:25:26 +01:00
Livio Spring and GitHub
22e2d55999
Merge pull request from GHSA-7h8m-vrxx-vr4m
...
* fix: handle locking policy correctly for multiple simultaneous password checks
* recheck events
2023-11-08 14:19:13 +01:00
Livio Spring and GitHub
e342e3d99b
fix: prevent panic in loginNameInformation ( #6876 )
2023-11-07 11:16:49 +01:00
Livio Spring and GitHub
f3b8a3aece
feat: add possibility to set an expiration to a session ( #6851 )
...
* add lifetime to session api
* extend session with lifetime
* check session token expiration
* fix typo
* integration test to check session token expiration
* integration test to check session token expiration
* i18n
* cleanup
* improve tests
* prevent negative lifetime
* fix error message
* fix lifetime check
2023-11-06 10:48:28 +01:00
Livio Spring and GitHub
ce322323aa
perf(oidc): remove db call for discovery configuration ( #6857 )
2023-11-03 15:18:57 +00:00
Livio Spring and GitHub
9378e19090
fix: payload (de)serialization of some events ( #6858 )
2023-11-03 11:02:17 +00:00
Livio Spring and GitHub
585c8af5f2
docs(technical advisory): add version to console branding ( #6852 )
2023-11-02 16:18:14 +01:00
Livio Spring and GitHub
34e9748cba
chore: update dependencies ( #6826 )
2023-10-26 15:03:57 +00:00
Livio Spring and GitHub
73dbf31368
Merge pull request from GHSA-954h-jrpm-72pm
2023-10-25 11:15:22 +02:00
Livio Spring and adlerhurst
426c4acbfe
fix(notification): get origin from all relevant events and fix nil pointer ( #6726 )
2023-10-19 10:34:52 +02:00
cb0a0f996e
fix(api): add remove otp sms and email to management api ( #6721 )
...
* fix(api): add remove otp sms and email to management api
* fix(console): remove otpsms and otpemail from user
---------
Co-authored-by: peintnermax <[email protected]
2023-10-16 10:49:02 +03:00
Livio Spring and GitHub
ce719a3fa4
fix(notification): get origin from all relevant events and fix nil pointer ( #6726 )
2023-10-13 14:45:38 +00:00
Livio Spring and GitHub
95889cf576
fix(api): use organization instead of organisation ( #6720 )
...
* fix(api): use organization instead of organisation
* fix test
* docs: add deprecation notice
* remove validation
2023-10-13 12:37:35 +00:00
Livio Spring and GitHub
27e03120dc
fix(api): extend client_secret length for generic oauth and oidc providers to 1000 ( #6722 )
2023-10-13 14:31:39 +03:00
Livio Spring and GitHub
a272b1201f
fix(api): use (provided) organisation instead of resourceOwner of caller ( #6714 )
2023-10-12 10:00:36 +02:00
f2d1cd2045
docs(technical advisory): add login ui default context ( #6695 )
...
* docs(technical advisory): add login ui default context
* Update docs/docs/support/advisory/a10003.md
Co-authored-by: Fabi <[email protected] [email protected]
2023-10-11 08:20:48 +02:00
Livio Spring and GitHub
4d85013ffb
chore: update stable ( #6690 )
2023-10-10 08:28:09 +02:00
Livio Spring
907a1611ac
fix(login): error case for unknown usernames correctly ( #6689 )
...
(cherry picked from commit 8549dd7a3d
2023-10-10 07:41:16 +02:00
Livio Spring and GitHub
8549dd7a3d
fix(login): error case for unknown usernames correctly ( #6689 )
2023-10-09 15:05:25 +00:00
Livio Spring
dee9d8d3a7
Merge branch 'main' into next
...
# Conflicts:
# cmd/start/start.go
# internal/auth/repository/eventsourcing/eventstore/auth_request.go
# internal/auth/repository/eventsourcing/repository.go
# internal/command/main_test.go
# internal/command/quota.go
# internal/command/quota_model.go
# internal/command/quota_model_test.go
2023-10-09 14:18:29 +02:00
Livio Spring and GitHub
827ce8809d
fix: use enum for instance feature in system api ( #6682 )
...
* fix: use enum for instance feature in system api
* add feature.proto to lint ignore
2023-10-09 12:33:23 +02:00
Livio Spring
8ca053fad3
fix: respect "Ignore unknown usernames" on password reset
...
Merge pull request from GHSA-v683-rcxx-vpff
(cherry picked from commit 54676eda98
2023-10-09 12:12:16 +02:00
Livio Spring and GitHub
9696fde676
fix: reduce origin check to tokens issued through code and implicit flow ( #6681 )
...
fix: only check origin for tokens issued to users through apps (code / implicit flow)
2023-10-09 10:08:18 +00:00
Livio Spring and GitHub
54676eda98
Merge pull request from GHSA-v683-rcxx-vpff
2023-10-09 11:47:43 +02:00
Livio Spring and GitHub
e3ac217424
fix: ensure no events are skipped on token check ( #6663 )
...
fix: ensure no events are skipped on token check
2023-10-09 09:26:27 +02:00
Livio Spring and GitHub
2e99d0fe1b
fix(email): UTF-8 "Q" encode subject header ( #6637 )
...
fix(email): UTF-8 "Q" encode subject header
2023-09-29 08:53:45 +00:00
Livio Spring and GitHub
68bfab2fb3
feat(login): use default org for login without provided org context ( #6625 )
...
* start feature flags
* base feature events on domain const
* setup default features
* allow setting feature in system api
* allow setting feature in admin api
* set settings in login based on feature
* fix rebasing
* unit tests
* i18n
* update policy after domain discovery
* some changes from review
* check feature and value type
* check feature and value type
2023-09-29 08:21:32 +00:00
Livio Spring
41e31aad41
fix: only reuse active session and use correct policies (from user org) ( #6603 )
...
(cherry picked from commit 593d1605ab
2023-09-21 16:57:03 +02:00
Livio Spring and GitHub
593d1605ab
fix: only reuse active session and use correct policies (from user org) ( #6603 )
2023-09-21 16:45:41 +02:00
Livio Spring
b688d6f842
Merge branch 'main' into next
2023-09-15 15:46:06 +02:00
Livio Spring and GitHub
b4d0d2c9a7
chore(webauthn): add logs ( #6569 )
2023-09-15 13:43:38 +00:00
Livio Spring and GitHub
be81570fb5
feat(api): move resource apis to beta ( #6530 )
...
Moves UserService, SessionService, SettingsService and OIDCService to beta state. This includes gRPC and HTTP path changes.
2023-09-13 12:43:01 +00:00
Livio Spring and GitHub
c790715628
fix: improve autofill values ( #6541 )
2023-09-13 08:16:57 +02:00
523dee8801
chore: remove postgres beta warning ( #6394 )
...
fix: remove postgres beta warning
Co-authored-by: Fabi <[email protected]
2023-09-08 15:44:34 +00:00
Livio Spring and adlerhurst
f5060d70d7
fix: handle password data correct on user creation ( #6515 )
2023-09-07 16:21:10 +02:00
Livio Spring and GitHub
62d679e553
fix: handle password data correct on user creation ( #6515 )
2023-09-07 14:06:11 +00:00
Livio Spring
3b0be67627
cleanup merge
2023-09-05 07:18:47 +02:00
Livio Spring
38f7b1bd06
Merge branch 'main' into next
...
# Conflicts:
# docs/docs/guides/integrate/login-ui/external-login.mdx
# internal/command/idp_model.go
# proto/zitadel/user/v2alpha/user_service.proto
2023-09-05 07:04:42 +02:00
Livio Spring and GitHub
e3e17fe742
chore: update stable to 2.35.1 ( #6481 )
2023-09-04 09:40:40 +02:00
3c8640fbfd
fix: rename (t)otp to code in session checks ( #6455 )
...
* fix: rename (t)otp to code in session checks
* update integration tests
---------
Co-authored-by: Fabi <[email protected]
2023-08-31 07:06:50 +00:00
e17b49e4ca
feat: add apple as idp ( #6442 )
...
* feat: manage apple idp
* handle apple idp callback
* add tests for provider
* basic console implementation
* implement flow for login UI and add logos / styling
* tests
* cleanup
* add upload button
* begin i18n
* apple logo positioning, file upload component
* fix add apple instance idp
* add missing apple logos for login
* update to go 1.21
* fix slice compare
* revert permission changes
* concrete error messages
* translate login apple logo -y-2px
* change form parsing
* sign in button
* fix tests
* lint console
---------
Co-authored-by: peintnermax <[email protected]
2023-08-31 08:39:16 +02:00
Livio Spring and GitHub
0d94947d3c
fix: rest path for StartIdentityProviderIntent ( #6447 )
2023-08-30 10:42:24 +02:00
Livio Spring
379437f1d6
fix(api): handle id_token_mapping in generic oidc provider correctly ( #6428 )
...
(cherry picked from commit 94d13fd3e1
2023-08-25 16:05:06 +02:00
Livio Spring
637caba8a0
chore(workflow): exclude console dist folder from cache ( #6414 )
...
* empty line for test
* chore: exclude console dist folder from cache
(cherry picked from commit f03a9d03b6
2023-08-25 16:02:25 +02:00
Livio Spring
ccb92b3c8d
fix(api): naming cleanup in user and session service ( #6379 )
...
* fix(api): rename first and last name to given and family name, intent to idp_intent, remove _ actions
* fix merge
* fully rename intent to idp intent in api
---------
Co-authored-by: Tim Möhlmann <[email protected] a9fb2a6e5c
2023-08-25 16:02:14 +02:00
Livio Spring
a628f2222e
fix: restrict AllowRegistration check to local registration ( #5939 )
...
* fix: restrict AllowRegistration check to local registration
* add comment
* add additional tests
* hide registration fields if no registration allowed
* fix: always allow linking and creation of external idps on users in userV2 and admin import
* chore: exclude console dist and node_module folders from cache
* chore: include node_module folders into cache again
* linting
(cherry picked from commit 66772ad0dd
2023-08-25 16:02:05 +02:00
Livio Spring and GitHub
94d13fd3e1
fix(api): handle id_token_mapping in generic oidc provider correctly ( #6428 )
2023-08-24 10:31:12 +00:00
bb40e173bd
feat(api): add otp (sms and email) checks in session api ( #6422 )
...
* feat: add otp (sms and email) checks in session api
* implement sending
* fix tests
* add tests
* add integration tests
* fix merge main and add tests
* put default OTP Email url into config
---------
Co-authored-by: Stefan Benz <[email protected]
2023-08-24 09:41:52 +00:00
Livio Spring and GitHub
66772ad0dd
fix: restrict AllowRegistration check to local registration ( #5939 )
...
* fix: restrict AllowRegistration check to local registration
* add comment
* add additional tests
* hide registration fields if no registration allowed
* fix: always allow linking and creation of external idps on users in userV2 and admin import
* chore: exclude console dist and node_module folders from cache
* chore: include node_module folders into cache again
* linting
2023-08-23 13:55:52 +02:00
Livio Spring
85194666ff
fix: use system secret config if generator type does not exist on instance ( #6420 )
...
* fix: use system secret config if generator type does not exist on instance
* remove unused idGenerator
(cherry picked from commit cbd2ef0612
2023-08-23 10:18:27 +02:00
Livio Spring and GitHub
cbd2ef0612
fix: use system secret config if generator type does not exist on instance ( #6420 )
...
* fix: use system secret config if generator type does not exist on instance
* remove unused idGenerator
2023-08-23 08:04:29 +00:00
Livio Spring and GitHub
efcabed04f
docs: add technical advisory on allow register ( #6413 )
...
* docs: add technical advisory on `allow register`
* typos
* Update technical_advisory.mdx
2023-08-22 17:00:26 +02:00
a9fb2a6e5c
fix(api): naming cleanup in user and session service ( #6379 )
...
* fix(api): rename first and last name to given and family name, intent to idp_intent, remove _ actions
* fix merge
* fully rename intent to idp intent in api
---------
Co-authored-by: Tim Möhlmann <[email protected]
2023-08-22 10:05:45 +00:00
Livio Spring and GitHub
f03a9d03b6
chore(workflow): exclude console dist folder from cache ( #6414 )
...
* empty line for test
* chore: exclude console dist folder from cache
2023-08-22 07:31:41 +02:00
Livio Spring
7442492b8a
fix(login): add some missing translations for OTP ( #6409 )
...
(cherry picked from commit e701e05d23
2023-08-21 15:43:26 +02:00
Livio Spring
74841dfb1c
fix: setMetadata in saml and pre access token triggers ( #6398 )
...
(cherry picked from commit 84faf98bc2
2023-08-21 15:43:25 +02:00
Livio Spring and GitHub
e701e05d23
fix(login): add some missing translations for OTP ( #6409 )
2023-08-21 12:41:39 +00:00
Livio Spring and GitHub
84faf98bc2
fix: setMetadata in saml and pre access token triggers ( #6398 )
2023-08-21 14:21:45 +02:00
aa2d547eb2
docs: update passkey usage in session api ( #6386 )
...
Co-authored-by: Stefan Benz <[email protected]
2023-08-19 06:26:51 +00:00
Livio Spring and GitHub
69b49ac0ed
fix(api): return correct http code on assets api ( #6388 )
...
* fix(api): return correct http code on assets api
* add test
* fix test
2023-08-18 13:51:11 +00:00
Livio Spring and GitHub
8b44794c75
fix: delete SMTP correctly ( #6391 )
2023-08-18 14:22:57 +02:00
Livio Spring
d029b82f0d
fix: handle metadata from post authentication on auto creation ( #6389 )
...
(cherry picked from commit 90a62b777b
2023-08-18 11:23:06 +02:00
Livio Spring and GitHub
90a62b777b
fix: handle metadata from post authentication on auto creation ( #6389 )
2023-08-18 09:16:58 +00:00
Livio Spring
21e35e0ce3
Merge branch 'main' into next
...
# Conflicts:
# internal/auth/repository/eventsourcing/eventstore/auth_request.go
2023-08-18 10:36:05 +02:00
Livio Spring and GitHub
a99f49999a
fix: OTP SMS texts ( #6387 )
2023-08-18 10:28:08 +02:00
Livio Spring and GitHub
7c494fd219
feat(login): add OTP (email and sms) ( #6353 )
...
* feat: login with otp
* fix(i18n): japanese translation
* add missing files
* fix provider change
* add event types translations to en
* add tests
* resourceOwner
* remove unused handler
* fix: secret generators and add comments
* add setup step
* rename
* linting
* fix setup
* improve otp handling
* fix autocomplete
* translations for login and notifications
* translations for event types
* changes from review
* check selected mfa type
2023-08-15 12:47:05 +00:00
Livio Spring and GitHub
372755bddd
feat(api): add organisation service ( #6340 )
...
* setup org with multiple admins
* tests
* add missing proto
* remove machine users (for now)
* update tests with idp case
* fix package
* organisation -> organization
* fix test
2023-08-11 14:19:14 +00:00
Livio Spring and GitHub
e5acfb76b3
test: fix oidc session test ( #6342 )
...
* test: fix oidc session test
* fix test
2023-08-10 13:38:30 +00:00
Livio Spring and GitHub
8dc1fd06a1
fix: provide tokens in azuread idp session ( #6334 )
2023-08-08 09:28:47 +00:00
Livio Spring
b9de36778f
fix: check if session is reused on reauthentication ( #6322 )
...
* fix: check if session is reused on reauth steps
* add nolint directive
---------
Co-authored-by: Silvan <[email protected] 57857b8d30
2023-08-08 09:13:00 +02:00
57857b8d30
fix: check if session is reused on reauthentication ( #6322 )
...
* fix: check if session is reused on reauth steps
* add nolint directive
---------
Co-authored-by: Silvan <[email protected]
2023-08-07 08:01:24 +00:00
Livio Spring
6959392fab
Merge branch 'main' into next
...
# Conflicts:
# console/src/assets/i18n/pt.json
2023-08-04 17:17:10 +02:00
Livio Spring
e000213817
fix: migrate external id of federated users ( #6312 )
...
* feat: migrate external id
* implement tests and some renaming
* fix projection
* cleanup
* i18n
* fix event type
* handle migration for new services as well
* typo
(cherry picked from commit 45262e6829
2023-08-04 11:49:01 +02:00
Livio Spring and GitHub
45262e6829
fix: migrate external id of federated users ( #6312 )
...
* feat: migrate external id
* implement tests and some renaming
* fix projection
* cleanup
* i18n
* fix event type
* handle migration for new services as well
* typo
2023-08-04 11:35:36 +02:00
Livio Spring and GitHub
a1942ecdaa
feat(api): add and remove OTP (SMS and email) ( #6295 )
...
* refactor: rename otp to totp
* feat: add otp sms and email
* implement tests
2023-08-02 18:57:53 +02:00
Livio Spring and GitHub
dd480f8a8d
feat(login): reuse existing session if no prompt is provided and only single session exists ( #6272 )
...
* feat: reuse existing session if no prompt is provided and only single session exists
* fix tests
2023-08-01 11:21:44 +00:00
Livio Spring
660a7b2576
fix(OIDC): introspection ( #6298 )
...
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect
* remove adding projectID into audience
(cherry picked from commit 782f7ad647
2023-07-31 15:56:09 +02:00
Livio Spring and GitHub
782f7ad647
fix(OIDC): introspection ( #6298 )
...
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect
* remove adding projectID into audience
2023-07-31 13:55:26 +00:00
Livio Spring
993808cbcb
fix(i18n): do not translate language itself ( #6286 )
...
(cherry picked from commit 43cb62ca4e
2023-07-28 10:09:20 +02:00
Livio Spring
9d2ae1e9fa
fix: password hash update and add missing i18n ( #6285 )
...
(cherry picked from commit 789dcd8615
2023-07-28 10:09:20 +02:00
Livio Spring and GitHub
43cb62ca4e
fix(i18n): do not translate language itself ( #6286 )
2023-07-28 09:58:05 +02:00
Livio Spring
