3 people fbd43ced6e fix(grpc): return 401 for unauthenticated v1 gateway errors (#11786) ...

Fixes #11730

The v1 gRPC middleware can return native gRPC status errors such as
`codes.Unauthenticated` when the auth header is missing.

Those errors were being passed through the generic gRPC error converter,
which only handled ZITADEL errors and downgraded raw gRPC statuses to
`codes.Unknown`.

Through grpc-gateway that caused `/auth/v1/users/me` to return HTTP 500
instead of HTTP 401.

So this change preserves native gRPC status errors in
`ZITADELToGRPCError`, keeps `ExtractZITADELError` aligned with those
transport codes for activity reporting, and adds regression coverage for
the converter, middleware, and gateway HTTP behavior.

---------

Co-authored-by: Gayathri Vijayan <[email protected]>

2026-04-10 12:22:40 +00:00

..

connect_middleware

fix: propagate non-NotFound errors from instance interceptor (#12019)

2026-04-10 08:22:56 +00:00

middleware

fix(grpc): return 401 for unauthenticated v1 gateway errors (#11786)

2026-04-10 12:22:40 +00:00

gateway_test.go

fix(grpc): return 401 for unauthenticated v1 gateway errors (#11786)

2026-04-10 12:22:40 +00:00

gateway.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00

probes_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

probes.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

server.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00