mirror of
https://github.com/andwati/zitadel.git
synced 2026-11-14 18:05:12 +00:00
318bfc36d7
# Which Problems Are Solved - Native iOS/Android passkeys need OS trust files on the ZITADEL domain; without them, Associated Domains / App Links verification fails. - Operators could not configure iOS Team ID + Bundle ID or Android package name + SHA-256 fingerprints on OIDC apps. - `/.well-known/apple-app-site-association` and `/.well-known/assetlinks.json` were not served from application config. # How the Problems Are Solved - Add iOS/Android app-link fields on OIDC app create/update (Application API v2 + Management), with validation. - Persist and project those fields; query active app-link configs instance-wide. - Serve AASA (`webcredentials`) and Digital Asset Links (`get_login_creds`) from well-known paths, with configurable `Cache-Control` and fingerprint normalization at serve time. - Console UI to edit the fields, with links to the well-known endpoints. - Operator docs for configuration, endpoints, caching, and verification. # Additional Changes - Document on API fields that well-known responses may be HTTP-cached and platform verifiers may delay propagation. - Runtime config: `WellKnown.AppLinksCacheControlMaxAge` (default `5m`; `0` → `no-store`). # Additional Context - Closes #12497 - Implemented and reviewed as stack: - #12531 API contract - #12532 storage wiring - #12536 well-known endpoints - #12537 console - #12547 docs --------- Co-authored-by: Cursor <[email protected]>
27 lines
1.6 KiB
Plaintext
27 lines
1.6 KiB
Plaintext
---
|
|
title: "Authenticate users with OpenID Connect (OIDC)"
|
|
description: "Comprehensive guide to user authentication in ZITADEL using OpenID Connect (OIDC), including recommended flows and session management."
|
|
---
|
|
|
|
{/* THIS FILE IS AUTO-GENERATED FROM SIDEBAR-DATA.
|
|
ANY MANUAL CHANGES WILL BE OVERWRITTEN.
|
|
*/}
|
|
|
|
import { Card, Cards } from 'fumadocs-ui/components/card';
|
|
import { FileText, Folder, Link as LinkIcon } from 'lucide-react';
|
|
|
|
<Cards>
|
|
<Card title="Oauth Recommended Flows" href="/guides/integrate/login/oidc/oauth-recommended-flows" icon={<FileText />} />
|
|
<Card title="Login Users" href="/guides/integrate/login/oidc/login-users" icon={<FileText />} />
|
|
<Card title="Device Authorization" href="/guides/integrate/login/oidc/device-authorization" icon={<FileText />} />
|
|
<Card title="Endpoints" href="/apis/openidoauth/endpoints" icon={<FileText />} />
|
|
<Card title="Authn Methods" href="/apis/openidoauth/authn-methods" icon={<FileText />} />
|
|
<Card title="Scopes" href="/apis/openidoauth/scopes" icon={<FileText />} />
|
|
<Card title="Claims" href="/apis/openidoauth/claims" icon={<FileText />} />
|
|
<Card title="Grant Types" href="/apis/openidoauth/grant-types" icon={<FileText />} />
|
|
<Card title="Authrequest" href="/apis/openidoauth/authrequest" icon={<FileText />} />
|
|
<Card title="Webkeys" href="/guides/integrate/login/oidc/webkeys" icon={<FileText />} />
|
|
<Card title="Native App Links" href="/guides/integrate/login/oidc/native-app-links" icon={<FileText />} />
|
|
<Card title="Token Exchange" href="/guides/integrate/token-exchange" icon={<FileText />} />
|
|
</Cards>
|