5 Commits

Include renames

Author	SHA1	Message	Date
3 people	70adaff793	feat: add option to use x.509 certificate system-api-user tokens (#11876) ... # Which Problems Are Solved System API users currently authenticate using raw RSA public keys configured via Path or KeyData. This approach doesn't integrate well with Kubernetes tooling. # How the Problems Are Solved Allow for the `path`/`keyData` to be an X.509 certificate. The `NotBefore` and `NotAfter` fields of the certificate are beeing respected when validating the JWT. # Additional Changes # Additional Context - Closes #11442 --------- Co-authored-by: Livio Spring <[email protected]>	2026-03-23 13:32:27 +00:00
Livio SpringandGitHub	14383cfe8c	fix: race condition in system jwt signature check (#8618)	2024-09-13 17:18:37 +02:00
Tim MöhlmannandGitHub	fe9bb49caa	chore(deps): update all go deps (#7773) ... This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.	2024-04-15 09:17:36 +00:00
3 people	f680dd934d	refactor: rename package errors to zerrors (#7039) ... * chore: rename package errors to zerrors * rename package errors to gerrors * fix error related linting issues * fix zitadel error assertion * fix gosimple linting issues * fix deprecated linting issues * resolve gci linting issues * fix import structure --------- Co-authored-by: Elio Bischof <[email protected]>	2023-12-08 15:30:55 +01:00
3 people	4980cd6a0c	feat: add SYSTEM_OWNER role (#6765) ... * define roles and permissions * support system user memberships * don't limit system users * cleanup permissions * restrict memberships to aggregates * default to SYSTEM_OWNER * update unit tests * test: system user token test (#6778) * update unit tests * refactor: make authz testable * move session constants * cleanup * comment * comment * decode member type string to enum (#6780) * decode member type string to enum * handle all membership types * decode enums where necessary * decode member type in steps config * update system api docs * add technical advisory * tweak docs a bit * comment in comment * lint * extract token from Bearer header prefix * review changes * fix tests * fix: add fix for activityhandler * add isSystemUser * remove IsSystemUser from activity info * fix: add fix for activityhandler --------- Co-authored-by: Stefan Benz <[email protected]>	2023-10-25 15:10:45 +00:00