3 people 70adaff793 feat: add option to use x.509 certificate system-api-user tokens (#11876) ...

# Which Problems Are Solved

System API users currently authenticate using raw RSA public keys
configured via Path or KeyData. This approach doesn't integrate well
with Kubernetes tooling.

# How the Problems Are Solved

Allow for the `path`/`keyData` to be an X.509 certificate. 

The `NotBefore` and `NotAfter` fields of the certificate are beeing
respected when validating the JWT.

# Additional Changes

# Additional Context

- Closes #11442

---------

Co-authored-by: Livio Spring <[email protected]>

2026-03-23 13:32:27 +00:00

..

actions

Merge commit from fork

2026-02-25 06:33:28 +01:00

activity

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

admin/repository/eventsourcing

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-22 06:19:34 +00:00

api

feat: add option to use x.509 certificate system-api-user tokens (#11876)

2026-03-23 13:32:27 +00:00

auth/repository

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

auth_request/repository

fix: cleanup information in logs (#10634)

2025-09-03 09:18:54 +00:00

authz

Merge commit from fork

2026-02-16 10:25:19 +01:00

cache

feat: add DSN/URL connection string support for PostgreSQL and Redis (#11729)

2026-03-20 15:21:15 +00:00

command

Merge commit from fork

2026-03-17 12:54:27 +01:00

config

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

crypto

feat(session): IDP Intent Check API with relation tables (#11820)

2026-03-17 10:50:47 +00:00

database

feat: add DSN/URL connection string support for PostgreSQL and Redis (#11729)

2026-03-20 15:21:15 +00:00

denylist

Merge commit from fork

2026-02-25 06:33:28 +01:00

domain

feat: rt recovery code check (#11848)

2026-03-23 10:56:40 +01:00

eventstore

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

execution

Merge commit from fork

2026-02-25 06:33:28 +01:00

feature

fix: revert renaming of (management) console feature flag (#11706)

2026-02-27 09:43:11 +01:00

form

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

i18n

fix: use a single translator for middleware (#10633)

2025-09-09 06:34:59 +00:00

iam

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

id

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

idp

fix: prevent possible nil pointer panics (#11728)

2026-03-16 14:30:17 +00:00

integration

feat: supporting metadata updates in actions v2 via RetrieveIdentityProviderIntent API (#11810)

2026-03-12 16:01:58 +00:00

logstore

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

migration

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

net

Merge commit from fork

2026-02-25 06:33:28 +01:00

notification

feat(session): IDP Intent Check API with relation tables (#11820)

2026-03-17 10:50:47 +00:00

org

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

project

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

protoc

feat: exchange gRPC server implementation to connectRPC (#10145)

2025-07-04 14:06:20 +00:00

qrcode

docs(legal): Updated agreements and policies v2 (#3823)

2022-06-15 08:30:58 +02:00

query

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

queue

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

renderer

fix: use a single translator for middleware (#10633)

2025-09-09 06:34:59 +00:00

repository

Merge commit from fork

2026-03-17 12:54:27 +01:00

serviceping

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

static

feat: rt recovery code check (#11848)

2026-03-23 10:56:40 +01:00

statik

chore: initial version of a devcontainer (#6352)

2023-08-15 10:49:05 +02:00

telemetry/tracing

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

test

feat: list users scim v2 endpoint (#9187)

2025-01-21 13:31:54 +01:00

user

fix(login v1): only check password expiry for local users with password (#11344)

2026-01-15 12:41:14 +00:00

v2

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

view/repository

perf(query): remove transactions for queries (#8614)

2024-11-04 10:06:14 +01:00

webauthn

chore: management console naming inconsistency (#11390)

2026-01-26 14:52:15 +00:00

zerrors

fix: recover from request panics (#11713)

2026-03-03 11:55:17 +00:00

AGENTS.md

chore(agents): add agents files (#11497)

2026-02-16 20:45:53 -08:00