Gayathri VijayanandGitHub 6ad1ef859b fix: set refresh token in the RetrieveIdentityIntentResponse (#11613) ...

# Which Problems Are Solved

This PR adds support for storing and retrieving refresh tokens from
external identity providers during the IDP intent flow.

# How the Problems Are Solved

* Updated `idp.proto` (v2 and v2beta): added an optional `refresh_token`
field to `IDPOAuthAccessInformation`, which, in turn, is used in
`RetrieveIdentityProviderIntentResponse`
* Added the `IDPRefreshToken` field to the IDP intent `SucceededEvent`
struct, and updated the corresponding constructor to set the refresh
token
* Added the `IDPRefreshToken` field to `IDPIntentWriteModel`, and
updated `reduceOAuthSucceededEvent` to populate refresh token from
events
* Updated `tokensForSucceededIDPIntent` function to extract and encrypt
the refresh token from IDP session, if set
* Updated `idpOAuthTokensToPb` function to decrypt refresh token before
returning to clients
* Updated unit and integration tests

# Additional Changes
Updated the link to the JWT IDP docs linked in the Console

# Additional Context
- Closes https://github.com/zitadel/zitadel/issues/11047

2026-02-19 06:06:30 +00:00

..

zitadel

fix: set refresh token in the RetrieveIdentityIntentResponse (#11613)

2026-02-19 06:06:30 +00:00

AGENTS.md

chore(agents): add agents files (#11497)

2026-02-16 20:45:53 -08:00

buf.lock

chore(console): buf stub build (#5215)

2023-02-17 14:09:11 +00:00

buf.yaml

fix: query organization directly from event store (#10463)

2025-08-12 09:37:08 +00:00