Livio SpringandGitHub 71fab2e574 feat: allow adding trusted domains in instance setup (#11169) ...

# Which Problems Are Solved

When running Zitadel behind a reverse proxy and especially when the API
and the login UI don't run on the same domain, Zitadel needs to be
configured to trust the corresponding domains and use them in public
responses, like email links and more.
This can be done by adding a trusted domain. However it's currently only
possible through the API and not in the instance setup process.

# How the Problems Are Solved

Added a possibility to configure multiple trusted domains in the first
instance setup process.

# Additional Changes

None

# Additional Context

- closes #11153

2026-02-23 06:06:33 +00:00

..

01_sql

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

06

fix(setup): create indexes only if not exists (#4801)

2022-12-01 14:31:01 +01:00

07

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

08

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

10

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

12

feat(login): add OTP (email and sms) (#6353)

2023-08-15 12:47:05 +00:00

13

fix: set quotas (#6597)

2023-09-22 13:06:59 +02:00

14

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

15

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

34

fix(setup): ensure PostgreSQL 18 compatibility (#11484)

2026-02-03 16:23:24 +00:00

35

perf(oidc): nest position clause for session terminated query (#8738)

2024-10-07 12:49:55 +00:00

40

fix(projection): Prevent race condition with event push (#10676)

2025-09-10 10:06:51 +00:00

43

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

44

perf(eventstore): redefine current sequences index (#9142)

2025-01-08 16:54:17 +00:00

46

fix(setup): Fix query alias on 46-06 (#9298)

2025-02-04 10:47:22 +00:00

49

fix(permission): sql error in cmd/setup/49/01-permitted_orgs_function.sql (#9465)

2025-03-05 21:48:20 +00:00

52

fix(migration): check if ldap2 already exists (#9674)

2025-03-31 10:06:40 +00:00

53

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

58

perf(query): reduce user query duration (#10037)

2025-06-06 08:48:29 +00:00

integration_test

chore: rehaul DevX (#10571)

2025-10-08 10:27:02 +02:00

01.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

02.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

03.go

feat: allow adding trusted domains in instance setup (#11169)

2026-02-23 06:06:33 +00:00

05.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

05.sql

fix(database): create column only if not exists (#4812)

2022-12-02 10:48:39 +00:00

06.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

07.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

08.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

10.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

12.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

13.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

14.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

15.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

16.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

16.sql

fix: ensure uniqueness (#6956)

2023-11-22 12:05:14 +00:00

17.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

17.sql

fix(eventstore): improve pagination of handler filter (#6968)

2023-12-01 12:25:41 +00:00

18.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

18.sql

fix(query): user performance (#6537)

2023-12-08 13:14:22 +01:00

19.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

19.sql

fix(eventstore): increase performance on push (#7125)

2023-12-31 15:30:25 +01:00

20.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

20.sql

fix(auth): efficient user session projection (#7187)

2024-01-09 18:36:46 +00:00

21.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

21.sql

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

22.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

22.sql

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

23.go

fix(eventstore): consider IsGlobal-flag of constraints (#7518)

2024-03-08 13:33:53 +00:00

23.sql

fix(eventstore): consider IsGlobal-flag of constraints (#7518)

2024-03-08 13:33:53 +00:00

24.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

24.sql

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

25.go

fix(login): fix migration to allow login by email again (#9315)

2025-02-06 09:45:22 +00:00

25.sql

feat(users/v2): return prompt information (#9255)

2025-01-29 15:12:31 +00:00

26.go

fix(login): improve auth handlers (#7969)

2024-05-22 15:26:02 +00:00

26.sql

fix(login): improve auth handlers (#7969)

2024-05-22 15:26:02 +00:00

27.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

27.sql

feat(saml): allow setting nameid-format and alternative mapping for transient format (#7979)

2024-05-23 05:04:07 +00:00

28.go

feat(eventstore): add search table (#8191)

2024-07-03 15:00:56 +00:00

28.sql

feat(eventstore): add search table (#8191)

2024-07-03 15:00:56 +00:00

29.go

refactor(handler): cache active instances (#9008)

2024-12-06 11:32:53 +00:00

30.go

refactor(handler): cache active instances (#9008)

2024-12-06 11:32:53 +00:00

31.go

fix(fields): add index to improve search by aggregate (#8267)

2024-07-08 15:54:19 +00:00

31.sql

fix(fields): add index to improve search by aggregate (#8267)

2024-07-08 15:54:19 +00:00

32.go

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

32.sql

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

33.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

33.sql

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

34.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

35.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

36.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

36.sql

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

37.go

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

37.sql

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

38.go

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

38.sql

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

39.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

39.sql

fix(setup): make step 39 repeatable (#9085)

2024-12-18 16:48:22 +01:00

40.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

41.go

fix(setup): split membership fields migration (#9230)

2025-01-24 11:24:35 +01:00

42.go

feat: specify login UI version on instance and apps (#9071)

2024-12-19 10:37:46 +01:00

42.sql

feat: specify login UI version on instance and apps (#9071)

2024-12-19 10:37:46 +01:00

43.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

44.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

45.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

45.sql

fix: set correct owner on project grants (#9089)

2025-01-15 11:22:16 +01:00

46.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

47_fill_membership_fields.go

fix(setup): split membership fields migration (#9230)

2025-01-24 11:24:35 +01:00

48.go

feat: saml application configuration for login version (#9351)

2025-02-13 16:03:05 +00:00

48.sql

feat: saml application configuration for login version (#9351)

2025-02-13 16:03:05 +00:00

49.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

50.go

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

50.sql

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

51.go

chore: updating projections.idp_templates6 to projections.idp_templates7 (#9517)

2025-03-18 16:23:12 +01:00

51.sql

chore: updating projections.idp_templates6 to projections.idp_templates7 (#9517)

2025-03-18 16:23:12 +01:00

52.go

fix(migration): check if ldap2 already exists (#9674)

2025-03-31 10:06:40 +00:00

53.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

54.go

perf: drop instance position index (#10626)

2025-09-10 09:26:22 +00:00

54.sql

perf: drop instance position index (#10626)

2025-09-10 09:26:22 +00:00

55.go

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

55.sql

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

56.go

feat: federated logout for SAML IdPs (#9931)

2025-05-23 13:52:25 +02:00

56.sql

feat: federated logout for SAML IdPs (#9931)

2025-05-23 13:52:25 +02:00

57.go

feat(projections): resource counters (#9979)

2025-06-03 14:15:30 +00:00

57.sql

feat(projections): resource counters (#9979)

2025-06-03 14:15:30 +00:00

58.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

59.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

60.go

feat: implement service ping (#10080)

2025-07-02 13:57:41 +02:00

61.go

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

61.sql

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

62.go

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

62.sql

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

63.go

feat(service ping): add additional resource counts (#10621)

2025-09-08 16:30:03 +00:00

63.sql

feat(service ping): add additional resource counts (#10621)

2025-09-08 16:30:03 +00:00

64.go

fix(projection): Prevent race condition with event push (#10676)

2025-09-10 10:06:51 +00:00

64.sql

fix(projection): Prevent race condition with event push (#10676)

2025-09-10 10:06:51 +00:00

65.go

fix: use hash to compare user metadata value (#10749)

2025-09-18 09:50:56 +00:00

65.sql

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

66.go

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

66.sql

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

67.go

fix(setup): member role synchronization execution check (#11180)

2025-12-12 10:09:03 +00:00

67.sql

fix(fields): sync membership roles from projections (#11178)

2025-12-12 09:09:09 +01:00

68.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

68.sql

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

69.go

fix(setup): ensure PostgreSQL 18 compatibility (#11484)

2026-02-03 16:23:24 +00:00

69.sql

fix(setup): ensure step 69 runs without issues (#11503)

2026-02-04 10:55:46 +00:00

cleanup.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

config_change.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

config_test.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

config.go

fix(log): correct log stream in setup (#11623)

2026-02-18 06:32:03 +00:00

projections.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

river_queue_repeatable.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

setup.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

steps.yaml

feat: allow adding trusted domains in instance setup (#11169)

2026-02-23 06:06:33 +00:00

sync_role_permissions.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

transactional_tables.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

trigger_steps.go

feat(service ping): add additional resource counts (#10621)

2025-09-08 16:30:03 +00:00