andwati/zitadel

Fork 0

mirror of https://github.com/andwati/zitadel.git synced 2026-10-18 05:52:51 +00:00

Files

T

History

791d0587aa feat(action v2): add JWT and JWE payload type options (#11196 )

# Which Problems Are Solved

The payload in actions V2 is currently sent as JSON to the target
endpoint. It might get exposed to intermediary infrastructure or logging
systems.
For these scenarios there needs to be an application-layer encryption,
where the provider of the endpoint can define an key to be used for the
encryption.

# How the Problems Are Solved

- Added an additional option to the target to specify the payload type:
`JSON` (current and default), `JWT`, `JWE` (api and console)
- added endpoints to upload and manage public keys (to be used for
encryption) for a target
- updated all action v2 executions (interceptors, oidc, saml, ...) to
provide the `GetActiveSigningWebKey` from queries
- implemented jwt and jwe in the exections incl. refactoring of code and
tests
- changes to the authn_keys table:
  - added a `fingerprint` column
  - dropped not null constraint on expiration
- moved the `GetSignerOnce` into its own package to prevent circular
dependencies

# Additional Changes

None

# Additional Context

closes #11061

---------

Co-authored-by: Marco A. <[email protected]>
Co-authored-by: conblem <[email protected]>
Co-authored-by: Silvan <[email protected]>

2025-12-29 13:35:53 +00:00

src

feat(action v2): add JWT and JWE payload type options (#11196 )

2025-12-29 13:35:53 +00:00

.editorconfig

feat(console): integrate frontend (#95 )

2020-05-13 14:41:43 +02:00

.env.dev

chore: rehaul DevX (#10571 )

2025-10-08 10:27:02 +02:00

.eslintrc.js

fix(console): update eslint, redirect user without roles, private labeling save and icon (#4459 )

2022-09-29 05:25:57 +00:00

.gitignore

chore: 🚀 Migrate monorepo from Yarn to pnpm + Turbo integration + Configuration cleanup (#10165 )

2025-07-16 09:10:19 +02:00

.prettierignore

chore(e2e): formatting with prettier (#4385 )

2022-09-19 19:49:46 +02:00

.prettierrc

fix(console): use authService for auth user page (#5233 )

2023-02-27 12:03:44 +01:00

angular.json

feat(i18n): add Ukrainian language support (#10696 )

2025-12-11 15:37:31 +01:00

buf.gen.yaml

fix(console): pin buf gen versions (#10542 )

2025-08-21 17:32:15 +02:00

karma.conf.js

feat(console): integrate frontend (#95 )

2020-05-13 14:41:43 +02:00

ngsw-config.json

fix: update assets in ngsw-config.json (#1027 )

2020-11-27 16:32:14 +01:00

package.json

chore: rehaul DevX (#10571 )

2025-10-08 10:27:02 +02:00

prebuild.development.js

chore(dev): fix fetching http env json (#5921 )

2023-05-24 13:07:55 +00:00

project.json

chore: rehaul DevX (#10571 )

2025-10-08 10:27:02 +02:00

README.md

chore: rehaul DevX (#10571 )

2025-10-08 10:27:02 +02:00

tsconfig.app.json

chore(console): Angular 20 #10690 (#10768 )

2025-10-08 07:10:50 +00:00

tsconfig.json

chore(console): Angular 20 #10690 (#10768 )

2025-10-08 07:10:50 +00:00

tsconfig.spec.json

chore(console): dependency update (#5653 )

2023-04-18 15:42:29 +02:00

README.md

Zitadel Console

The Console is Zitadels management UI.

It is built using Angular and part of the Zitadel monorepo.

To get started follow the contributing quick start.

Building

To build for production:

pnpm nx run @zitadel/console:build

This will:

Generate proto files (via prebuild script)
Build the Angular app with production optimizations

Linting

To run linting and formatting checks:

pnpm nx @zitadel/console:lint

To auto-fix formatting issues:

pnpm nx @zitadel/console:lint-fix

Project Structure

src/app/proto/generated/ - Generated proto files (Angular-specific format)
buf.gen.yaml - Local proto generation configuration
project.json - Nx orchestration and caching for builds and tests
prebuild.development.js - Development environment configuration script

Dependency Chain

The Console app has the following build dependencies managed by Nx:

@zitadel/proto:generate - Generates the protobuf stubs
@zitadel/client:build - Builds the TypeScript gRPC client library
@zitadel/console:generate - Generates Console-specific protobuf stubs
@zitadel/console:build - Creates a production build from Console

This ensures that the Console always has access to the latest client library and protobuf definitions.

Proto Generation Details

@zitadel/proto generation: Modern ES modules with @bufbuild/protobuf for v2 APIs
Local buf.gen.yaml generation: Traditional protobuf JavaScript classes for v1 APIs

The Console app calls Zitadel v1 and v2 APIs. As long as the Console still calls v1 APIs, it needs to import client stubs from separate sources:

Source outputs from direct buf generation for v1 APIs
@zitadel/client for v2 APIs

Legacy v1 API (Traditional Protobuf)

Uses local buf.gen.yaml configuration
Generates traditional Google protobuf JavaScript classes extending jspb.Message
Uses plugins: protocolbuffers/js, grpc/web, grpc-ecosystem/openapiv2
Output: src/app/proto/generated/
Used for: Most existing Console functionality

Modern v2 API (ES Modules)

Uses @zitadel/proto package generation
Generates modern ES modules with @bufbuild/protobuf
Uses plugin: @bufbuild/es with ES modules and JSON types
Output: login/packages/zitadel-proto/
Used for: New user v2 API and services

Dependency Management

The Console's project.json ensures proper execution order:

@zitadel/proto:generate runs first (modern ES modules)
Console's local generation runs second (traditional protobuf)
Build/lint/start tasks depend on both generations being complete

This approach allows the Console app to use both v1 and v2 APIs while maintaining proper build dependencies.

Legacy Information

This project was originally generated with Angular CLI version 8.3.20 and has been updated over time.