3 people 70adaff793 feat: add option to use x.509 certificate system-api-user tokens (#11876) ...

# Which Problems Are Solved

System API users currently authenticate using raw RSA public keys
configured via Path or KeyData. This approach doesn't integrate well
with Kubernetes tooling.

# How the Problems Are Solved

Allow for the `path`/`keyData` to be an X.509 certificate. 

The `NotBefore` and `NotAfter` fields of the certificate are beeing
respected when validating the JWT.

# Additional Changes

# Additional Context

- Closes #11442

---------

Co-authored-by: Livio Spring <[email protected]>

2026-03-23 13:32:27 +00:00

..

access_token_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

access_token.go

feat: add SYSTEM_OWNER role (#6765)

2023-10-25 15:10:45 +00:00

api_token_verifier.go

feat: add SYSTEM_OWNER role (#6765)

2023-10-25 15:10:45 +00:00

authorization_test.go

perf(query): org permission function for resources (#9677)

2025-04-15 18:38:25 +02:00

authorization.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00

config.go

feat: user v2alpha email API (#5708)

2023-04-25 09:02:29 +02:00

context_mock.go

feat(domain): Organization APIs with relational tables (#10704)

2025-10-21 15:27:38 +02:00

context.go

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

detach.go

perf: query data AS OF SYSTEM TIME (#5231)

2023-02-27 22:36:43 +01:00

instance_test.go

feat(api): return allowed_languages (#11553)

2026-02-12 08:44:34 +00:00

instance.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00

membertype_enumer.go

feat(permissions): project member permission filter (#9757)

2025-04-22 08:42:59 +00:00

permissions_test.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

permissions.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

session_token.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

system_token_test.go

feat: add option to use x.509 certificate system-api-user tokens (#11876)

2026-03-23 13:32:27 +00:00

system_token.go

feat: add option to use x.509 certificate system-api-user tokens (#11876)

2026-03-23 13:32:27 +00:00

user.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00