andwati/zitadel
1
0
Fork 0
mirror of https://github.com/andwati/zitadel.git synced 2026-10-18 13:52:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
ec0bd5790f21ca367e7d6186098308ce1dec230c
zitadel/internal/query
T
History
Marco A.GitHubFabienne BühlerGayathri Vijayan
 022bf74060 feat(session): Passkey Check API with relation tables (#11858) 
# Which Problems Are Solved

As part of #11035 , this PR implements the Passkey check logic for
session validation

# How the Problems Are Solved

  - Refactor webauth FinishLogin to support new domain model
  - Add webauth config to defaults
  - Implement passkey check logic and tests
- Manual transaction management to avoid stalling the DB while
FinishLogin callback is executed
- Update passkey Type condition to allow passing a text operation
(equal, contains, etc..)

# Additional Context

This is a cherry-picked PR + minor changes, coming from
https://github.com/zitadel/zitadel/pull/11164
- Relates to #11035

---------

Co-authored-by: Fabienne Bühler <[email protected]>
Co-authored-by: Gayathri Vijayan <[email protected]>
2026-03-27 12:38:40 +01:00
..
projection
feat(session): Passkey Check API with relation tables (#11858)
2026-03-27 12:38:40 +01:00
testdata
chore: Service Account Naming Consistency (#11557)
2026-02-13 12:31:43 +01:00
access_token.go
fix(eventstore): use decimal, correct mirror (#9914)
2025-05-28 21:54:18 +00:00
action_flow_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
action_flow.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
action_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
action.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
administrators.go
feat(api): move internal permission service to GA (and deprecate v2beta) (#10898)
2025-10-17 07:35:35 +02:00
app_oidc_project_permission.sql
feat: permission check on OIDC and SAML service session API (#9304)
2025-02-11 18:45:09 +00:00
app_saml_project_permission.sql
feat: permission check on OIDC and SAML service session API (#9304)
2025-02-11 18:45:09 +00:00
app_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
app.go
Merge commit from fork
2026-03-11 08:12:46 +01:00
auth_request_by_id.sql
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
auth_request_test.go
chore: update dependencies (#9784)
2025-05-19 10:16:49 +00:00
auth_request.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
authn_key_test.go
feat(action v2): add JWT and JWE payload type options (#11196)
2025-12-29 13:35:53 +00:00
authn_key_user.sql
Merge commit from fork
2025-03-31 12:45:11 +02:00
authn_key.go
feat(action v2): add JWT and JWE payload type options (#11196)
2025-12-29 13:35:53 +00:00
cache.go
refactor(handler): cache active instances (#9008)
2024-12-06 11:32:53 +00:00
certificate_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
certificate.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
converter.go
feat(api): feature flags (#7356)
2024-02-28 10:55:54 +02:00
current_state_test.go
fix(eventstore): use decimal, correct mirror (#9914)
2025-05-28 21:54:18 +00:00
current_state.go
fix(projections): overhaul the event projection system (#10560)
2025-09-03 15:29:00 +00:00
custom_text_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
custom_text.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
debug_events_state_by_id.sql
feat: add debug events API (#8533)
2024-09-11 08:24:00 +00:00
debug_events_states.sql
feat: add debug events API (#8533)
2024-09-11 08:24:00 +00:00
debug_events.go
feat: add debug events API (#8533)
2024-09-11 08:24:00 +00:00
device_auth_test.go
Merge commit from fork
2026-03-17 12:54:27 +01:00
device_auth.go
Merge commit from fork
2026-03-17 12:54:27 +01:00
domain_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
domain_policy.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
event.go
chore: remove bloating span (#7780)
2024-04-16 11:19:17 +00:00
execution_targets.sql
perf(actionsv2): execution target router (#10564)
2025-09-01 07:21:10 +02:00
execution_test.go
perf(actionsv2): execution target router (#10564)
2025-09-01 07:21:10 +02:00
execution.go
perf(actionsv2): execution target router (#10564)
2025-09-01 07:21:10 +02:00
failed_events_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
failed_events.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
generic.go
perf(actionsv2): execution target router (#10564)
2025-09-01 07:21:10 +02:00
group_test.go
feat(group): add group permissions (#10853)
2025-10-21 11:18:21 +02:00
group_users_test.go
feat(group): manage users in user groups (#10940)
2025-10-28 13:23:54 +00:00
group_users.go
feat(group): manage users in user groups (#10940)
2025-10-28 13:23:54 +00:00
group.go
feat(group): add group permissions (#10853)
2025-10-21 11:18:21 +02:00
hosted_login_translation_test.go
feat: Hosted login translation API (#10011)
2025-06-18 13:24:39 +02:00
hosted_login_translation.go
feat: Hosted login translation API (#10011)
2025-06-18 13:24:39 +02:00
iam_member_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
iam_member.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
idp_login_policy_link_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
idp_login_policy_link.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
idp_template_test.go
feat(saml): add SignatureMethod config for SAML IDP (#10520)
2025-08-27 09:07:13 +00:00
idp_template.go
feat(saml): add SignatureMethod config for SAML IDP (#10520)
2025-08-27 09:07:13 +00:00
idp_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
idp_user_link_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
idp_user_link.go
fix(idp): make external id check case insensitive (#10460)
2025-08-13 07:44:39 +00:00
idp.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
instance_by_domain.sql
feat(api): return allowed_languages (#11553)
2026-02-12 08:44:34 +00:00
instance_by_id.sql
feat(api): return allowed_languages (#11553)
2026-02-12 08:44:34 +00:00
instance_domain_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
instance_domain.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
instance_features_model.go
fix: revert renaming of (management) console feature flag (#11706)
2026-02-27 09:43:11 +01:00
instance_features_test.go
chore(oidc): remove feature flag for introspection triggers (#10132)
2025-06-30 05:48:04 +00:00
instance_features.go
feat(oidc): move back-channel logout from beta to GA (#11493)
2026-02-05 10:51:09 +00:00
instance_test.go
chore: management console naming inconsistency (#11390)
2026-01-26 14:52:15 +00:00
instance_trusted_domain_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
instance_trusted_domain.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
instance.go
feat(api): return allowed_languages (#11553)
2026-02-12 08:44:34 +00:00
instanceindex_enumer.go
perf(cache): pgx pool connector (#8703)
2024-10-04 13:15:41 +00:00
introspection_client_by_id.sql
perf(oidc): introspection endpoint query optimization (#10392)
2025-08-20 12:37:00 +00:00
introspection_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
introspection.go
chore(oidc): remove feature flag for introspection triggers (#10132)
2025-06-30 05:48:04 +00:00
key.go
chore(oidc): graduate webkey to stable (#10122)
2025-06-26 19:17:45 +03:00
label_policy.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
lockout_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
lockout_policy.go
chore: rename IAM to instance (#11351)
2026-02-10 20:25:39 +01:00
login_name.go
perf: remove owner removed columns from projections for oidc (#6925)
2023-11-20 17:21:08 +02:00
login_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
login_policy.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
mail_template.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
member_roles.go
fix(query): realtime data on defined requests (#3726)
2022-06-14 07:51:00 +02:00
member.go
feat: user profile requests in resource APIs (#10151)
2025-07-04 18:12:59 +02:00
message_text_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
message_text.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
milestone_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
milestone.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
notification_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
notification_policy.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
notification_provider_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
notification_provider.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
oidc_client_by_id.sql
feat: specify login UI version on instance and apps (#9071)
2024-12-19 10:37:46 +01:00
oidc_client_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
oidc_client.go
chore: management console naming inconsistency (#11390)
2026-01-26 14:52:15 +00:00
oidc_settings_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
oidc_settings.go
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
org_domain_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
org_domain.go
chore: forward port organization v2 API changes (#11207)
2026-01-05 14:14:01 +00:00
org_member_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
org_member.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
org_metadata_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
org_metadata.go
chore: forward port organization v2 API changes (#11207)
2026-01-05 14:14:01 +00:00
org_test.go
fix(cache): prevent org cache overwrite by other instances (#10012)
2025-06-03 14:48:15 +02:00
org.go
fix: query organization directly from event store (#10463)
2025-08-12 09:37:08 +00:00
organization_settings_test.go
feat: organization settings for user uniqueness (#10246)
2025-07-29 15:56:21 +02:00
organization_settings.go
feat: organization settings for user uniqueness (#10246)
2025-07-29 15:56:21 +02:00
orgindex_enumer.go
feat(cache): organization (#8903)
2024-11-21 08:05:03 +02:00
password_age_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
password_age_policy.go
chore: rename IAM to instance (#11351)
2026-02-10 20:25:39 +01:00
password_complexity_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
password_complexity_policy.go
chore: rename IAM to instance (#11351)
2026-02-10 20:25:39 +01:00
permission_example_test.go
chore: naming consistency - Organization ID (#11733)
2026-03-03 10:24:44 +00:00
permission_test.go
feat(permissions): project member permission filter (#9757)
2025-04-22 08:42:59 +00:00
permission.go
feat(permissions): project member permission filter (#9757)
2025-04-22 08:42:59 +00:00
prepare_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
privacy_policy_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
privacy_policy.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
project_grant_member_test.go
feat: user profile requests in resource APIs (#10151)
2025-07-04 18:12:59 +02:00
project_grant_member.go
feat: user profile requests in resource APIs (#10151)
2025-07-04 18:12:59 +02:00
project_grant_test.go
chore: naming consistency - Organization ID (#11733)
2026-03-03 10:24:44 +00:00
project_grant.go
fix: project grant permissions v2 remove (#10337)
2025-07-29 09:55:29 +00:00
project_member_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
project_member.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
project_role_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
project_role.go
fix: correct permissions for projects on v2 api (#9973)
2025-06-04 11:46:10 +00:00
project_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
project.go
fix: project grant permissions v2 remove (#10337)
2025-07-29 09:55:29 +00:00
query_test.go
fix(setup): init projections (#7194)
2024-01-25 17:28:20 +01:00
query.go
feat: http provider signing key addition (#10641)
2025-09-08 11:00:04 +00:00
quota_notifications_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
quota_notifications.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
quota_periods_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
quota_periods.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
quota_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
quota.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
resource_counts_list.sql
feat(projections): resource counters (#9979)
2025-06-03 14:15:30 +00:00
resource_counts_test.go
feat(projections): resource counters (#9979)
2025-06-03 14:15:30 +00:00
resource_counts.go
feat(projections): resource counters (#9979)
2025-06-03 14:15:30 +00:00
restrictions_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
restrictions.go
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
saml_request_by_id.sql
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
saml_request_test.go
chore: update dependencies (#9784)
2025-05-19 10:16:49 +00:00
saml_request.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
saml_sp_by_id.sql
feat: saml application configuration for login version (#9351)
2025-02-13 16:03:05 +00:00
saml_sp_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
saml_sp.go
feat: saml application configuration for login version (#9351)
2025-02-13 16:03:05 +00:00
search_query_test.go
fix: use hash to compare user metadata value (#10749)
2025-09-18 09:50:56 +00:00
search_query.go
fix(query): distinct count in user list (#10840)
2025-10-14 09:43:59 +00:00
secret_generator_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
secret_generators.go
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
security_policy.go
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
session.go
feat: Add recovery code MFA support (#9954)
2025-11-24 06:44:48 +00:00
sessions_test.go
feat: Add recovery code MFA support (#9954)
2025-11-24 06:44:48 +00:00
sms_test.go
feat: http provider signing key addition (#10641)
2025-09-08 11:00:04 +00:00
sms.go
feat: http provider signing key addition (#10641)
2025-09-08 11:00:04 +00:00
smtp_test.go
feat: added xoauth for smtp (#11239)
2026-01-27 15:11:56 +01:00
smtp.go
fix: return auth none when no auth is configured for smtp + scopes in grpc response (#11554)
2026-02-11 11:48:41 +01:00
system_features_model.go
feat(oidc): move back-channel logout from beta to GA (#11493)
2026-02-05 10:51:09 +00:00
system_features_test.go
feat: Feature flag for relational tables (#10599)
2025-09-02 09:48:46 +00:00
system_features.go
feat(oidc): move back-channel logout from beta to GA (#11493)
2026-02-05 10:51:09 +00:00
target_test.go
feat(action v2): add JWT and JWE payload type options (#11196)
2025-12-29 13:35:53 +00:00
target.go
feat(action v2): add JWT and JWE payload type options (#11196)
2025-12-29 13:35:53 +00:00
user_auth_method_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
user_auth_method_types_required.sql
fix(authz): ignore unready auth methods for mfa requirement check (#11056)
2025-11-11 05:55:59 +00:00
user_auth_method.go
Merge commit from fork
2025-10-29 10:12:50 +01:00
user_by_id.sql
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
user_by_login_name.sql
fix: correctly use single matching user (by loginname) (#9865)
2025-05-08 07:32:41 +00:00
user_claimed_user_ids.sql
perf: improve org and org domain creation (#10232)
2025-07-10 15:17:49 +00:00
user_grant_test.go
chore: naming consistency - Organization ID (#11733)
2026-03-03 10:24:44 +00:00
user_grant.go
feat(api): move authorization service to v2 (#10914)
2025-10-28 12:11:12 +00:00
user_membership_test.go
feat: user profile requests in resource APIs (#10151)
2025-07-04 18:12:59 +02:00
user_membership.go
fix(api): implement missing filters on ListAdministrators endpoint (#11319)
2026-01-12 06:22:34 +00:00
user_metadata_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
user_metadata.go
chore: move converter methods users v2 to separate converter package + add tests (#10567)
2025-08-27 13:08:13 +02:00
user_notify_by_id.sql
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
user_notify_by_login_name.sql
fix: correctly use single matching user (by loginname) (#9865)
2025-05-08 07:32:41 +00:00
user_otp.go
refactor: rename package errors to zerrors (#7039)
2023-12-08 15:30:55 +01:00
user_password.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
user_personal_access_token_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
user_personal_access_token.go
perf(query): reduce user query duration (#10037)
2025-06-06 08:48:29 +00:00
user_schema_test.go
feat: add schema user create and remove (#8494)
2024-08-28 19:46:45 +00:00
user_schema.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
user_test.go
chore(docs): User (Human) naming consistency (#11512)
2026-02-06 09:46:24 +00:00
user.go
Merge commit from fork
2025-12-10 13:13:56 +01:00
userinfo_by_id.sql
feat(group): add user groups to token claims (#11009)
2025-11-11 09:06:45 +01:00
userinfo_client_by_id.sql
feat(oidc): optimize the userinfo endpoint (#7706)
2024-04-09 15:15:35 +02:00
userinfo_test.go
chore: Service Account Naming Consistency (#11557)
2026-02-13 12:31:43 +01:00
userinfo.go
feat(group): add user groups to token claims (#11009)
2025-11-11 09:06:45 +01:00
v2-default.json
chore: rename login data to login details (#11127)
2026-02-16 09:42:50 +00:00
web_key_by_state.sql
fix(webkeys): remove include private key from projection index (#8436)
2024-08-16 11:41:09 +00:00
web_key_list.sql
fix(webkeys): remove include private key from projection index (#8436)
2024-08-16 11:41:09 +00:00
web_key_model.go
feat(v3alpha): web key resource (#8262)
2024-08-14 14:18:14 +00:00
web_key_public_keys.sql
fix(webkeys): remove include private key from projection index (#8436)
2024-08-16 11:41:09 +00:00
web_key_test.go
chore!: Introduce ZITADEL v3 (#9645)
2025-04-02 16:53:06 +02:00
web_key.go
feat(v3alpha): web key resource (#8262)
2024-08-14 14:18:14 +00:00
zitadel_permission.go
perf: remove owner removed columns from projections for oidc (#6925)
2023-11-20 17:21:08 +02:00