3 people 8e82ec1cb9 Merge commit from fork ...

* Add DenyLists parsing

* Remove unneeded returned error

* Plug global denylist into Command

* app creation: apply denylist to backchannel logout URI

* Inject denylist to backchannel logout worker

* webhook config: validate against blocked URLs

* Add notificationsWebhook denylist target

* command: Add SMTP endpoint validation against blocklist

* command: Add SMS endpoint validation against blocklist

* Validate webhook endpoint against denylist on channel notification

* Remove unused tests

* handle deprecated denylists

* remove unintended denylist entry in deprecated list

* use single http client

* fix tests

* update comments

* fixes

* cleanup

* address comments

* fix merge

---------

Co-authored-by: Livio Spring <[email protected]>

2026-06-15 15:36:14 +02:00

..

01_sql

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

06

fix(setup): create indexes only if not exists (#4801)

2022-12-01 14:31:01 +01:00

07

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

08

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

10

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

12

feat(login): add OTP (email and sms) (#6353)

2023-08-15 12:47:05 +00:00

13

fix: set quotas (#6597)

2023-09-22 09:37:16 +00:00

14

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

15

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

34

fix(setup): ensure PostgreSQL 18 compatibility (#11484)

2026-02-03 16:23:24 +00:00

35

perf(oidc): nest position clause for session terminated query (#8738)

2024-10-07 12:49:55 +00:00

40

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 11:24:37 +02:00

43

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

44

perf(eventstore): redefine current sequences index (#9142)

2025-01-08 16:54:17 +00:00

46

fix(setup): Fix query alias on 46-06 (#9298)

2025-02-04 10:47:22 +00:00

49

fix(permission): sql error in cmd/setup/49/01-permitted_orgs_function.sql (#9465)

2025-03-05 21:48:20 +00:00

52

fix(migration): check if ldap2 already exists (#9674)

2025-03-31 10:06:40 +00:00

53

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

58

perf(query): reduce user query duration (#10037)

2025-06-06 08:48:29 +00:00

integration_test

chore: rehaul DevX (#10571)

2025-10-08 10:27:02 +02:00

01.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

02.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

03.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

05.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

05.sql

fix(database): create column only if not exists (#4812)

2022-12-02 10:48:39 +00:00

06.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

07.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

08.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

10.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

12.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

13.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

14.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

15.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

16.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

16.sql

fix: ensure uniqueness (#6956)

2023-11-22 12:05:14 +00:00

17.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

17.sql

fix(eventstore): improve pagination of handler filter (#6968)

2023-12-01 12:25:41 +00:00

18.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

18.sql

fix(query): user performance (#6537)

2023-12-08 13:14:22 +01:00

19.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

19.sql

fix(eventstore): increase performance on push (#7125)

2023-12-31 15:30:25 +01:00

20.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

20.sql

fix(auth): efficient user session projection (#7187)

2024-01-09 18:36:46 +00:00

21.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

21.sql

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

22.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

22.sql

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

23.go

fix(eventstore): consider IsGlobal-flag of constraints (#7518)

2024-03-08 13:33:53 +00:00

23.sql

fix(eventstore): consider IsGlobal-flag of constraints (#7518)

2024-03-08 13:33:53 +00:00

24.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

24.sql

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

25.go

fix(login): fix migration to allow login by email again (#9315)

2025-02-06 09:45:22 +00:00

25.sql

feat(users/v2): return prompt information (#9255)

2025-01-29 15:12:31 +00:00

26.go

fix(login): improve auth handlers (#7969)

2024-05-22 15:26:02 +00:00

26.sql

fix(login): improve auth handlers (#7969)

2024-05-22 15:26:02 +00:00

27.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

27.sql

feat(saml): allow setting nameid-format and alternative mapping for transient format (#7979)

2024-05-23 05:04:07 +00:00

28.go

feat(eventstore): add search table (#8191)

2024-07-03 15:00:56 +00:00

28.sql

feat(eventstore): add search table (#8191)

2024-07-03 15:00:56 +00:00

29.go

refactor(handler): cache active instances (#9008)

2024-12-06 11:32:53 +00:00

30.go

refactor(handler): cache active instances (#9008)

2024-12-06 11:32:53 +00:00

31.go

fix(fields): add index to improve search by aggregate (#8267)

2024-07-08 15:54:19 +00:00

31.sql

fix(fields): add index to improve search by aggregate (#8267)

2024-07-08 15:54:19 +00:00

32.go

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

32.sql

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

33.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

33.sql

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

34.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

35.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

36.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

36.sql

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

37.go

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

37.sql

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

38.go

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

38.sql

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

39.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

39.sql

fix(setup): make step 39 repeatable (#9085)

2024-12-18 16:48:22 +01:00

40.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

41.go

fix(setup): split membership fields migration (#9230)

2025-01-24 11:24:35 +01:00

42.go

feat: specify login UI version on instance and apps (#9071)

2024-12-19 10:37:46 +01:00

42.sql

feat: specify login UI version on instance and apps (#9071)

2024-12-19 10:37:46 +01:00

43.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

44.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

45.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

45.sql

fix: set correct owner on project grants (#9089)

2025-01-15 11:22:16 +01:00

46.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

47_fill_membership_fields.go

fix(setup): split membership fields migration (#9230)

2025-01-24 11:24:35 +01:00

48.go

feat: saml application configuration for login version (#9351)

2025-02-13 16:03:05 +00:00

48.sql

feat: saml application configuration for login version (#9351)

2025-02-13 16:03:05 +00:00

49.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

50.go

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

50.sql

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

51.go

chore: updating projections.idp_templates6 to projections.idp_templates7 (#9517)

2025-03-18 16:23:12 +01:00

51.sql

chore: updating projections.idp_templates6 to projections.idp_templates7 (#9517)

2025-03-18 16:23:12 +01:00

52.go

fix(migration): check if ldap2 already exists (#9674)

2025-03-31 10:06:40 +00:00

53.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

54.go

perf: drop instance position index (#10626)

2025-09-10 09:26:22 +00:00

54.sql

perf: drop instance position index (#10626)

2025-09-10 09:26:22 +00:00

55.go

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

55.sql

fix: add current state for execution handler into setup (#9863)

2025-05-07 14:26:53 +00:00

56.go

feat: federated logout for SAML IdPs (#9931)

2025-05-23 13:52:25 +02:00

56.sql

feat: federated logout for SAML IdPs (#9931)

2025-05-23 13:52:25 +02:00

57.go

feat(projections): resource counters (#9979)

2025-06-03 14:15:30 +00:00

57.sql

feat(projections): resource counters (#9979)

2025-06-03 14:15:30 +00:00

58.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

59.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

60.go

feat: implement service ping (#10080)

2025-07-02 13:57:41 +02:00

61.go

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

61.sql

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

62.go

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

62.sql

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

63.go

feat(service ping): add additional resource counts (#10621)

2025-09-08 16:30:03 +00:00

63.sql

feat(service ping): add additional resource counts (#10621)

2025-09-08 16:30:03 +00:00

64.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 11:24:37 +02:00

64.sql

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 11:24:37 +02:00

65.go

fix: use hash to compare user metadata value (#10749)

2025-09-18 09:50:56 +00:00

65.sql

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

66.go

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

66.sql

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

67.go

fix(setup): member role synchronization execution check (#11180)

2025-12-12 10:09:03 +00:00

67.sql

fix(fields): sync membership roles from projections (#11178)

2025-12-12 09:09:09 +01:00

68.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

68.sql

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

69.go

fix(setup): ensure PostgreSQL 18 compatibility (#11484)

2026-02-03 16:23:24 +00:00

69.sql

Prevent failure in setup step 69 if cache.objects does not exist (#11673)

2026-02-24 09:51:22 +00:00

70.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 11:24:37 +02:00

70.sql

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 11:24:37 +02:00

71.go

Merge commit from fork

2026-06-15 15:27:47 +02:00

71.sql

Merge commit from fork

2026-06-15 15:27:47 +02:00

cleanup.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

config_change.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

config_test.go

fix: revert feature key for configs back to ConsoleUseV2UserApi (#11928)

2026-03-30 15:59:57 +00:00

config.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

projections.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

river_queue_repeatable.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

setup.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

steps.yaml

feat: allow transactional table setup step to recreate the whole schema (#11833)

2026-03-18 03:53:57 +00:00

sync_role_permissions.go

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

transactional_tables.go

feat: allow transactional table setup step to recreate the whole schema (#11833)

2026-03-18 03:53:57 +00:00

trigger_steps.go

fix(telemetry): count IDP template data (#11720)

2026-03-17 05:12:43 +00:00