Files
zitadel/internal
fbd43ced6e fix(grpc): return 401 for unauthenticated v1 gateway errors (#11786)
Fixes #11730

The v1 gRPC middleware can return native gRPC status errors such as
`codes.Unauthenticated` when the auth header is missing.

Those errors were being passed through the generic gRPC error converter,
which only handled ZITADEL errors and downgraded raw gRPC statuses to
`codes.Unknown`.

Through grpc-gateway that caused `/auth/v1/users/me` to return HTTP 500
instead of HTTP 401.

So this change preserves native gRPC status errors in
`ZITADELToGRPCError`, keeps `ExtractZITADELError` aligned with those
transport codes for activity reporting, and adds regression coverage for
the converter, middleware, and gateway HTTP behavior.

---------

Co-authored-by: Gayathri Vijayan <[email protected]>
2026-04-10 12:22:40 +00:00
..
2026-02-25 06:33:28 +01:00
2026-02-16 10:25:19 +01:00
2026-02-25 06:33:28 +01:00
2026-02-25 06:33:28 +01:00
2026-02-25 06:33:28 +01:00
2024-01-02 14:26:31 +00:00
2025-06-27 17:25:44 +02:00
2026-02-04 11:51:43 +01:00
2026-03-17 12:54:27 +01:00