Elio Bischof and Livio Spring
d1ec248f05
feat(console): enable ID token mapping for generic OIDC provider ( #6426 )
...
* fix: use IsIdTokenMapping request property
* feat(console): oidc provider id token mapping
* fix scss
* reduce styles
* fix lint
---------
Co-authored-by: peintnermax <[email protected] [email protected] 29fa3d417c
2023-08-25 16:05:06 +02:00
Livio Spring
ccb92b3c8d
fix(api): naming cleanup in user and session service ( #6379 )
...
* fix(api): rename first and last name to given and family name, intent to idp_intent, remove _ actions
* fix merge
* fully rename intent to idp intent in api
---------
Co-authored-by: Tim Möhlmann <[email protected] a9fb2a6e5c
2023-08-25 16:02:14 +02:00
Livio Spring
a628f2222e
fix: restrict AllowRegistration check to local registration ( #5939 )
...
* fix: restrict AllowRegistration check to local registration
* add comment
* add additional tests
* hide registration fields if no registration allowed
* fix: always allow linking and creation of external idps on users in userV2 and admin import
* chore: exclude console dist and node_module folders from cache
* chore: include node_module folders into cache again
* linting
(cherry picked from commit 66772ad0dd
2023-08-25 16:02:05 +02:00
Livio Spring
85194666ff
fix: use system secret config if generator type does not exist on instance ( #6420 )
...
* fix: use system secret config if generator type does not exist on instance
* remove unused idGenerator
(cherry picked from commit cbd2ef0612
2023-08-23 10:18:27 +02:00
Silvan and GitHub
22af4dcd97
feat(storage): read only transactions ( #6417 )
...
feat(storage): read only transactions for queries (#6415 )
* fix: tests
* bastle wie en grosse
* fix(database): scan as callback
* fix tests
* fix merge failures
* remove as of system time
* refactor: remove unused test
* refacotr: remove unused lines
2023-08-22 14:49:02 +02:00
Livio Spring
7442492b8a
fix(login): add some missing translations for OTP ( #6409 )
...
(cherry picked from commit e701e05d23
2023-08-21 15:43:26 +02:00
Livio Spring
74841dfb1c
fix: setMetadata in saml and pre access token triggers ( #6398 )
...
(cherry picked from commit 84faf98bc2
2023-08-21 15:43:25 +02:00
Livio Spring
d029b82f0d
fix: handle metadata from post authentication on auto creation ( #6389 )
...
(cherry picked from commit 90a62b777b
2023-08-18 11:23:06 +02:00
Livio Spring and GitHub
a99f49999a
fix: OTP SMS texts ( #6387 )
2023-08-18 10:28:08 +02:00
6672dcd87d
fix: add spans in auth requests ( #6368 )
...
Co-authored-by: Livio Spring <[email protected]
2023-08-18 07:21:31 +00:00
52f68f8db8
feat: add ldap external idp to login api ( #5938 )
...
* fix: handling of ldap login through separate endpoint
* fix: handling of ldap login through separate endpoint
* fix: handling of ldap login through separate endpoint
* fix: successful intent for ldap
* fix: successful intent for ldap
* fix: successful intent for ldap
* fix: add changes from code review
* fix: remove set intent credentials and handle ldap errors
* fix: remove set intent credentials and handle ldap errors
* refactor into separate methods and fix merge
* remove mocks
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-16 11:29:57 +00:00
26b28ed2af
feat: add saml custom attribute action and translations ( #6341 )
...
* feat: add saml custom attribute action and translations
* chore: update saml dependency
* fix: apply suggestions from code review
Co-authored-by: Livio Spring <[email protected] [email protected] [email protected] [email protected]
2023-08-15 15:04:45 +00:00
d83681a928
fix(login): mfa prompt styles ( #6366 )
...
* feat: login with otp
* fix(i18n): japanese translation
* add missing files
* fix provider change
* add event types translations to en
* add tests
* resourceOwner
* remove unused handler
* fix: secret generators and add comments
* add setup step
* rename
* linting
* fix setup
* improve otp handling
* fix autocomplete
* translations for login and notifications
* translations for event types
* fix: mfa prompt styles
* fix merge
* fix merge
* fix html
* rm unused files
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-15 14:05:00 +00:00
Livio Spring and GitHub
7c494fd219
feat(login): add OTP (email and sms) ( #6353 )
...
* feat: login with otp
* fix(i18n): japanese translation
* add missing files
* fix provider change
* add event types translations to en
* add tests
* resourceOwner
* remove unused handler
* fix: secret generators and add comments
* add setup step
* rename
* linting
* fix setup
* improve otp handling
* fix autocomplete
* translations for login and notifications
* translations for event types
* changes from review
* check selected mfa type
2023-08-15 12:47:05 +00:00
0017542aa2
feat(api/v2): implement TOTP session check ( #6362 )
...
* feat(api/v2): implement TOTP session check
* add integration test
* correct typo in projection test
* fix event type typos
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-15 09:50:42 +00:00
Florian Forster and GitHub
8953353210
chore: initial version of a devcontainer ( #6352 )
...
* chore: initial version of a devcontainer
* test
* add make
2023-08-15 10:49:05 +02:00
Fabian Haenel and GitHub
c5c773531c
fix: Improve and sync checkSSL functions for CockroachDB and PostgreSQL ( #6271 )
...
* Improve and sync checkSSL functions for cockroach and postgres
* Add missing prefer mode
* Fix missing return in postgres checkSSL on disable
2023-08-14 13:51:33 +00:00
Ahmed Fwela and GitHub
133789fee9
feat: get multiple users by id ( #6210 )
...
* feat: introduce InTextQuery, and the ability to get multiple users by id
* added in query tests
* remove append call
* fix lints
2023-08-12 15:37:42 +02:00
Tim Möhlmann and GitHub
86af67d1be
feat(api/v2): implement U2F session check ( #6339 )
2023-08-11 15:36:18 +00:00
Livio Spring and GitHub
372755bddd
feat(api): add organisation service ( #6340 )
...
* setup org with multiple admins
* tests
* add missing proto
* remove machine users (for now)
* update tests with idp case
* fix package
* organisation -> organization
* fix test
2023-08-11 14:19:14 +00:00
Miguel Cabrerizo and GitHub
4123ab7ba7
fix: add Date header to email headers RFC822 ( #6302 )
2023-08-11 09:17:24 +00:00
Miguel Cabrerizo and GitHub
6ca789ad44
fix: footerText has no effect ( #6297 )
2023-08-11 08:16:30 +00:00
Miguel Cabrerizo and GitHub
dfd469c66f
fix: go back to user selection from other user ( #6255 )
...
* fix: go back to user selection from other user
* fix: replace button with left arrow
2023-08-10 17:35:52 +00:00
85423b73e9
fix: avatar missing on login after going back ( #6238 )
...
* fix: avatar missing on login after going back
* fix: apply @livio-a suggestion
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-10 14:19:39 +00:00
Livio Spring and GitHub
e5acfb76b3
test: fix oidc session test ( #6342 )
...
* test: fix oidc session test
* fix test
2023-08-10 13:38:30 +00:00
343a9428b3
feat: SMS and email OTP texts ( #6281 )
...
* manage 2 custom texts proto
* implement methods
* default texts
* console
* improve translations
* lint
* test: fix e2e timeout
* fix translations
* add missing console translations
* remove unused text parts
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-09 05:49:12 +00:00
Livio Spring and GitHub
8dc1fd06a1
fix: provide tokens in azuread idp session ( #6334 )
2023-08-08 09:28:47 +00:00
57857b8d30
fix: check if session is reused on reauthentication ( #6322 )
...
* fix: check if session is reused on reauth steps
* add nolint directive
---------
Co-authored-by: Silvan <[email protected]
2023-08-07 08:01:24 +00:00
Elio Bischof and GitHub
d937ee3dda
fix: add texts after template reset ( #6237 )
...
* fix: add texts after template reset
* fix unit tests
2023-08-04 18:12:44 +00:00
Tim Möhlmann and GitHub
3c7b603650
fix: always update the timestamp in trigger ( #6326 )
...
* always reset timestamp
* re-enable test
2023-08-04 16:17:16 +00:00
Tim Möhlmann and GitHub
11b5a73551
fix: trigger session by id in verifySessionToken ( #6325 )
2023-08-04 18:16:27 +03:00
Livio Spring and GitHub
45262e6829
fix: migrate external id of federated users ( #6312 )
...
* feat: migrate external id
* implement tests and some renaming
* fix projection
* cleanup
* i18n
* fix event type
* handle migration for new services as well
* typo
2023-08-04 11:35:36 +02:00
Elio Bischof and GitHub
d33a4fbb2f
fix: project telemetry once for all instances ( #6323 )
2023-08-04 09:05:20 +00:00
ef012d0081
feat: user v2 phone verification ( #6309 )
...
* feat: add phone change and code verification for user v2 api
* feat: add phone change and code verification for user v2 api
* fix: add ignored phone.proto
* fix: integration tests
* Update proto/zitadel/user/v2alpha/user_service.proto
* Update idp_template.go
---------
Co-authored-by: Livio Spring <[email protected]
2023-08-03 06:42:59 +02:00
Livio Spring and GitHub
a1942ecdaa
feat(api): add and remove OTP (SMS and email) ( #6295 )
...
* refactor: rename otp to totp
* feat: add otp sms and email
* implement tests
2023-08-02 18:57:53 +02:00
Tim Möhlmann and GitHub
4d09409328
feat(crypto): add pbkdf2 support ( #6303 )
...
This change brings pbkdf2 support for password hashing and verification.
2023-08-02 11:27:18 +00:00
Livio Spring and GitHub
dd480f8a8d
feat(login): reuse existing session if no prompt is provided and only single session exists ( #6272 )
...
* feat: reuse existing session if no prompt is provided and only single session exists
* fix tests
2023-08-01 11:21:44 +00:00
Livio Spring and GitHub
782f7ad647
fix(OIDC): introspection ( #6298 )
...
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect for PAT
* fix(OIDC): introspect
* remove adding projectID into audience
2023-07-31 13:55:26 +00:00
Livio Spring and GitHub
43cb62ca4e
fix(i18n): do not translate language itself ( #6286 )
2023-07-28 09:58:05 +02:00
Livio Spring and GitHub
789dcd8615
fix: password hash update and add missing i18n ( #6285 )
2023-07-28 09:09:15 +02:00
31ec1d83b9
feat: enable otp email and sms ( #6260 )
...
* feat: enable otp email and sms
* feat: enable otp factors in login settings
* remove tests without value
* translate second factors
* don't add new factors yet
* add comment
* add factors to docs
* backward compatible settings api
* compile tests
* add available 2fa types
* test: add mapping tests
---------
Co-authored-by: Livio Spring <[email protected]
2023-07-28 07:39:30 +02:00
d3e403f645
perf: reduce events read from eventstore ( #6280 )
...
* fix: events query user
* fix: events query user
* user events query
* fix tests
* fix query
* cleanup
---------
Co-authored-by: Fabienne <[email protected]
2023-07-27 12:10:19 +00:00
Livio Spring and GitHub
2fe76acd14
feat: add secret generators for OTP ( #6262 )
...
This PR adds configuration options for OTP codes through Admin API.
2023-07-26 11:00:41 +00:00
Elio Bischof and GitHub
f6bc0479f4
fix: emit project.grant.member.changed event ( #6252 )
2023-07-21 16:57:09 +02:00
Livio Spring and GitHub
13e284dd56
fix: ensure resource owner in update human profile ( #6253 )
2023-07-21 13:42:24 +00:00
Livio Spring and GitHub
cd5e176e30
fix: user grant by id ( #6242 )
2023-07-21 11:04:55 +00:00
fcc1acbf81
feat: Brazilian Portuguese internationalization ( #6185 )
...
* feat: Brazilian Portuguese internationalization
Co-authored-by: Daniel Michalichyn <[email protected]
2023-07-20 04:40:45 +00:00
Livio Spring and GitHub
fed15574f6
feat: allow to force MFA local only ( #6234 )
...
This PR adds an option to the LoginPolicy to "Force MFA for local users", so that users authenticated through an IDP must not configure (and verify) an MFA.
2023-07-20 04:06:16 +00:00
Livio Spring and GitHub
59f3c328ec
feat(OIDC): add support for end_session for V2 tokens ( #6226 )
...
This PR adds support for the OIDC end_session_endpoint for V2 tokens. Sending an id_token_hint as parameter will directly terminate the underlying (SSO) session and all its tokens. Without this param, the user will be redirected to the Login UI, where he will able to choose if to logout.
2023-07-19 13:17:39 +02:00
ffb587f9ee
fix: sanitize primary domain for orgs ( #6125 )
...
* fix: sanitize primary domain for orgs
* fix: add @stebenz requested changes
---------
Co-authored-by: Stefan Benz <[email protected]
2023-07-18 12:42:57 +00:00
Elio BischofandLivio Spring
SilvanandGitHub
Florian ForsterandGitHub
Fabian HaenelandGitHub
Ahmed FwelaandGitHub
Miguel CabrerizoandGitHub
