3 people 5344a7f584 fix: invalid jwt assertion error handling (#11933) ...

# Which Problems Are Solved

Incorrectly mapped errors on the `/oauth/v2/token` endpoint lead to a
large number of HTTP status 500 errors.

# How the Problems Are Solved

By mapping invalid jwt assertion errors to OIDC `invalid_client` errors,
which returns a HTTP status 400.

# Additional Changes

N/A

# Additional Context

- Closes https://github.com/zitadel/zitadel/issues/11924
- Follow-up: 
- Fix the [error
handling](https://github.com/zitadel/oidc/blob/main/pkg/oidc/verifier.go#L195)
in the oidc package

---------

Co-authored-by: Copilot <[email protected]>

2026-04-01 10:44:02 +02:00

..

integration_test

fix: invalid jwt assertion error handling (#11933)

2026-04-01 10:44:02 +02:00

sign

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

access_token.go

chore(oidc): remove feature flag for introspection triggers (#10132)

2025-06-30 05:48:04 +00:00

amr_test.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

amr.go

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

auth_request_converter_test.go

fix(oidc): prompts slice conversion function returns slice which contains unexpected empty strings (#8997)

2024-12-04 20:56:36 +00:00

auth_request_converter_v2.go

fix(oidc): store requested response_mode (#8145)

2024-06-17 09:50:12 +00:00

auth_request_converter.go

Merge commit from fork

2026-03-17 12:54:27 +01:00

auth_request_test.go

Merge commit from fork

2025-12-08 10:01:49 +01:00

auth_request.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

client_converter.go

feat(group): add user groups to token claims (#11009)

2025-11-11 09:06:45 +01:00

client_credentials.go

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

client.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

device_auth.go

Merge commit from fork

2026-03-17 12:54:27 +01:00

error_test.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

error.go

fix: recover from request panics (#11713)

2026-03-03 11:55:17 +00:00

introspect.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

jwt-profile.go

chore(oidc): remove legacy storage methods (#10061)

2025-06-26 08:08:37 +00:00

key_test.go

feat(oidc): use web keys for token signing and verification (#8449)

2024-08-23 14:43:46 +02:00

key.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

op.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00

server_test.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

server.go

feat(api): return allowed_languages (#11553)

2026-02-12 08:44:34 +00:00

token_client_credentials.go

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

token_code.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

token_device.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

token_exchange_converter.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

token_exchange.go

feat(oauth/oidc): move token exchange from beta to GA (#11475)

2026-02-02 09:47:56 +00:00

token_jwt_profile.go

fix: invalid jwt assertion error handling (#11933)

2026-04-01 10:44:02 +02:00

token_refresh.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

token.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

userinfo_test.go

feat(group): add user groups to token claims (#11009)

2025-11-11 09:06:45 +01:00

userinfo.go

chore: update go dependencies (#11883)

2026-03-24 12:27:43 +01:00