mirror of
https://github.com/andwati/zitadel.git
synced 2026-11-08 07:05:12 +00:00
Elio BischofandGitHub
dd33538c0a
* feat: return 404 or 409 if org reg disallowed * fix: system limit permissions * feat: add iam limits api * feat: disallow public org registrations on default instance * add integration test * test: integration * fix test * docs: describe public org registrations * avoid updating docs deps * fix system limits integration test * silence integration tests * fix linting * ignore strange linter complaints * review * improve reset properties naming * redefine the api * use restrictions aggregate * test query * simplify and test projection * test commands * fix unit tests * move integration test * support restrictions on default instance * also test GetRestrictions * self review * lint * abstract away resource owner * fix tests * configure supported languages * fix allowed languages * fix tests * default lang must not be restricted * preferred language must be allowed * change preferred languages * check languages everywhere * lint * test command side * lint * add integration test * add integration test * restrict supported ui locales * lint * lint * cleanup * lint * allow undefined preferred language * fix integration tests * update main * fix env var * ignore linter * ignore linter * improve integration test config * reduce cognitive complexity * compile * check for duplicates * remove useless restriction checks * review * revert restriction renaming * fix language restrictions * lint * generate * allow custom texts for supported langs for now * fix tests * cleanup * cleanup * cleanup * lint * unsupported preferred lang is allowed * fix integration test * finish reverting to old property name * finish reverting to old property name * load languages * refactor(i18n): centralize translators and fs * lint * amplify no validations on preferred languages * fix integration test * lint * fix resetting allowed languages * test unchanged restrictions
1.5 KiB
1.5 KiB
title
| title |
|---|
| Feature Restrictions |
New self-hosted and ZITADEL Cloud instances are unrestricted by default. Self-hosters can change this default using the DefaultInstance.Restrictions configuration section. Users with the role IAM_OWNER can change the restrictions of their instance using the Feature Restrictions Admin API. Currently, the following restrictions are available:
- Disallow public organization registrations - If restricted, only users with the role IAM_OWNERS can create new organizations. The endpoint /ui/login/register/org returns HTTP status 404 on GET requests, and 409 on POST requests.
- AllowedLanguages - The following rules apply if languages are restricted:
- Only allowed languages are listed in the OIDC discovery endpoint /.well-kown/openid-configuration.
- Login UI texts are only rendered in allowed languages.
- Notification message texts are only rendered in allowed languages.
- Custom Texts can be created for disallowed languages as long as ZITADEL supports that language. Therefore, all texts can be customized before allowing a language.
Feature restrictions for an instance are intended to be configured by a user that is managed within that instance. However, if you are self-hosting and need to control your virtual instances usage, read about the APIs for limits and quotas that are intended to be used by system users.