Marco A.andGitHub 701bca6003 feat(session): TOTP Check API with relation tables (#11886) ...

# Which Problems Are Solved

As part of #11035 , this PR implements the TOTP check logic for session
validation

# How the Problems Are Solved

  - Implement TOTP check logic and tests
- The tarpit function has been moved to a common file so that it can be
used by both TOTP and password checks
- Manual transaction management to avoid stalling the DB while verifier
function is executed
- Update `database.Change` `Matches()` function to allow comparison of
`time.Time` values
  - A converter package from GRPC to Domain model has been added

# Additional Context

This is a cherry-picked PR + changes, coming from
https://github.com/zitadel/zitadel/pull/11164
- Relates to #11035

2026-04-01 11:34:03 +02:00

..

mock

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

accesstokentype_enumer.go

feat(repository): implement user repository (#10967)

2026-02-23 16:03:47 +01:00

administrator.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

administratorscope_enumer.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

authorization.go

feat(rt): authorizations (#11066)

2025-12-19 07:03:27 +01:00

authorizationstate_enumer.go

feat(rt): authorizations (#11066)

2025-12-19 07:03:27 +01:00

azuretenanttype_enumer.go

feat(idp_table_relational): adding inital idp tables for relational repository (#10334)

2025-09-24 13:19:09 +00:00

create_user.go

chore(docs): User (Human) naming consistency (#11512)

2026-02-06 09:46:24 +00:00

crypto.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

defaults.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

domain_test.go

feat(session): Password Check API with relation tables (#11804)

2026-03-13 11:40:48 +01:00

domain.go

fix(eventstore): Make Eventstore Compatible with Relational Table Package (#10687)

2025-09-16 18:58:49 +02:00

domaintype_enumer.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

domainvalidationtype_enumer.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

email_verification.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

errors_test.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

errors.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

executor_batch_test.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

executor_batch.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

humangender_enumer.go

feat(domain): define user repositories (#11059)

2025-11-25 11:54:32 +01:00

id_provider.go

refactor: relational identity provider table and projection (#11739)

2026-03-05 09:43:14 +00:00

idp_intent.go

feat(rt): IDP Intents Relational Table (#11374)

2026-02-05 03:44:07 +00:00

idpautolinkingfield_enumer.go

refactor: relational identity provider table and projection (#11739)

2026-03-05 09:43:14 +00:00

idpintentstate_enumer.go

feat(rt): IDP Intents Relational Table (#11374)

2026-02-05 03:44:07 +00:00

idpstate_enumer.go

feat(idp_table_relational): adding inital idp tables for relational repository (#10334)

2025-09-24 13:19:09 +00:00

idptype_enumer.go

feat(idp_table_relational): adding inital idp tables for relational repository (#10334)

2025-09-24 13:19:09 +00:00

instance_delete_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_delete.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_domain_add_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_domain_add.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_domain_list_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_domain_list.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_domain_remove_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_domain_remove.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_domain.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_get_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_get.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_list_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_list.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_trusted_domain_list_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_trusted_domain_list.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance_update_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

instance_update.go

feat: instance domain APIs with relational tables (#11051)

2025-12-17 12:01:09 +01:00

instance.go

chore: management console naming inconsistency (#11390)

2026-01-26 14:52:15 +00:00

invoke_option_test.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

invoke_option.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

invoke.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

invoker_event_test.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

invoker_event.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

invoker_logging.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

invoker_noop.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

invoker_tracing.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

invoker_transaction_test.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

invoker_transaction.go

feat(session): Password Check API with relation tables (#11804)

2026-03-13 11:40:48 +01:00

invoker_validation.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

machinekeytype_enumer.go

feat(repository): implement user repository (#10967)

2026-02-23 16:03:47 +01:00

metadata.go

feat(relational): org metadata (#10761)

2025-10-14 10:15:16 +01:00

oidc_configuration_update.go

chore: management console naming inconsistency (#11390)

2026-01-26 14:52:15 +00:00

org_activate_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

org_activate.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

org_add.go

fix(eventstore): Make Eventstore Compatible with Relational Table Package (#10687)

2025-09-16 18:58:49 +02:00

org_deactivate_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

org_deactivate.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

org_delete_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

org_delete.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

org_domain_add.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

org_domain_remove.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

org_domain_set.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

org_list_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

org_list.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

org_update_test.go

chore(domain): Assert errors using ErrorIS for instance and organization tests (#11789)

2026-03-06 19:20:54 +01:00

org_update.go

refactor: invoker implementations and clean up code (#10962)

2025-10-27 14:04:06 +00:00

organization_domain.go

refactor(rt): add primary key columns to repo interfaces (#10843)

2025-10-22 08:40:21 +00:00

organization_metadata.go

feat(relational): org metadata (#10761)

2025-10-14 10:15:16 +01:00

organization.go

refactor: relational organization projection to use repository (#11621)

2026-03-05 14:55:42 +01:00

orgstate_enumer.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

passkey_test.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

passkey.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

passkeytype_enumer.go

feat(repository): implement user repository (#10967)

2026-02-23 16:03:47 +01:00

permission.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

project_grant.go

feat(rt): project grants (#10951)

2025-11-14 11:04:16 +00:00

project.go

feat(rt): project grants (#10951)

2025-11-14 11:04:16 +00:00

projectgrantstate_enumer.go

feat(rt): project grants (#10951)

2025-11-14 11:04:16 +00:00

projectstate_enumer.go

feat(rt): project repository (#10789)

2025-10-01 09:47:04 +00:00

repository.go

refactor(rt): add primary key columns to repo interfaces (#10843)

2025-10-22 08:40:21 +00:00

session_challenge_otp_email_test.go

feat: rt sessions OTP email challenge (#11941)

2026-03-31 11:50:53 +00:00

session_challenge_otp_email.go

feat: rt sessions OTP email challenge (#11941)

2026-03-31 11:50:53 +00:00

session_challenge_otp_sms_test.go

feat: rt sessions OTP email challenge (#11941)

2026-03-31 11:50:53 +00:00

session_challenge_otp_sms.go

feat: rt sessions OTP email challenge (#11941)

2026-03-31 11:50:53 +00:00

session_challenge_util_test.go

feat: implement otp sms session challenge (#11919)

2026-03-26 11:33:44 +00:00

session_challenge_util.go

feat: implement otp sms session challenge (#11919)

2026-03-26 11:33:44 +00:00

session_check_idp_intent_test.go

fix(domain): Fix session checks failing tests (#11881)

2026-03-20 06:57:36 +01:00

session_check_idp_intent.go

fix(domain): Fix session checks failing tests (#11881)

2026-03-20 06:57:36 +01:00

session_check_passkey_test.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

session_check_passkey.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

session_check_password_test.go

fix(domain): Fix session checks failing tests (#11881)

2026-03-20 06:57:36 +01:00

session_check_password.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

session_check_recovery_code_test.go

feat: rt sessions OTP email challenge (#11941)

2026-03-31 11:50:53 +00:00

session_check_recovery_code.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

session_check_totp_test.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

session_check_totp.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

session_check_user_test.go

feat(session): User Check API with relation tables (#11777)

2026-03-10 09:10:31 +00:00

session_check_user.go

feat(session): User Check API with relation tables (#11777)

2026-03-10 09:10:31 +00:00

session_check_util.go

feat(session): TOTP Check API with relation tables (#11886)

2026-04-01 11:34:03 +02:00

session_delete_test.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

session_delete.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

session_factor.go

feat(relational): implement session repository (#11109)

2026-01-06 08:08:11 +01:00

session_metadata.go

feat(domain): define user repositories (#11059)

2025-11-25 11:54:32 +01:00

session_user_agent.go

feat(relational): implement session repository (#11109)

2026-01-06 08:08:11 +01:00

session.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

sessionfactortype_enumer.go

feat(relational): implement session repository (#11109)

2026-01-06 08:08:11 +01:00

set_email.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

settings.go

feat: implement otp sms session challenge (#11919)

2026-03-26 11:33:44 +00:00

settingstate_enumer.go

feat(settings_relational): adding settings table for relational db (#10769)

2025-12-02 08:16:21 +01:00

settingtype_enumer.go

feat(settings): add secret generator type to settings RT implementation (#11152)

2025-12-11 12:33:19 +01:00

token_verifier.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

user_identity_provider_link.go

feat(repository): implement user repository (#10967)

2026-02-23 16:03:47 +01:00

user_repo.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

user.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

userstate_enumer.go

feat(domain): define user repositories (#11059)

2025-11-25 11:54:32 +01:00

usertype_enumer.go

feat(domain): define user repositories (#11059)

2025-11-25 11:54:32 +01:00

verification.go

feat(repository): implement user repository (#10967)

2026-02-23 16:03:47 +01:00