4 people 022bf74060 feat(session): Passkey Check API with relation tables (#11858) ...

# Which Problems Are Solved

As part of #11035 , this PR implements the Passkey check logic for
session validation

# How the Problems Are Solved

  - Refactor webauth FinishLogin to support new domain model
  - Add webauth config to defaults
  - Implement passkey check logic and tests
- Manual transaction management to avoid stalling the DB while
FinishLogin callback is executed
- Update passkey Type condition to allow passing a text operation
(equal, contains, etc..)

# Additional Context

This is a cherry-picked PR + minor changes, coming from
https://github.com/zitadel/zitadel/pull/11164
- Relates to #11035

---------

Co-authored-by: Fabienne Bühler <[email protected]>
Co-authored-by: Gayathri Vijayan <[email protected]>

2026-03-27 12:38:40 +01:00

..

action_test.go

feat: query side for executions and targets for actions v2 (#7524)

2024-03-14 09:56:23 +00:00

action.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

administrator_relational_test.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

administrator_relational.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

app_test.go

feat: specify login UI version on instance and apps (#9071)

2024-12-19 10:37:46 +01:00

app.go

feat: saml application configuration for login version (#9351)

2025-02-13 16:03:05 +00:00

assert_test.go

feat: push telemetry (#6027)

2023-07-06 08:38:13 +02:00

assert.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

auth_request_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

auth_request.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

authn_key_test.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

authn_key.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

authorization_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

config.go

fix(projections): overhaul the event projection system (#10560)

2025-09-03 15:29:00 +00:00

custom_text_test.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

custom_text.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

debug_events.go

feat: add debug events API (#8533)

2024-09-11 08:24:00 +00:00

debug_notification_provider_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

debug_notification.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

device_auth.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

domain_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

domain_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

event_test.go

fix(projections): pass context to statement execution method (#10328)

2025-07-29 08:58:42 +00:00

event_testing_relational_test.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

eventstore_field.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

eventstore_mock_test.go

refactor(handler): cache active instances (#9008)

2024-12-06 11:32:53 +00:00

executer_test.go

fix(handler): optimise snapshot hanlding (#8652)

2024-10-02 18:34:19 +03:00

execution_test.go

fix: correct handling of removed targets (#9824)

2025-04-30 12:58:10 +00:00

execution.go

fix: correct handling of removed targets (#9824)

2025-04-30 12:58:10 +00:00

flow_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

flow.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

group_test.go

feat(group): manage users in user groups (#10940)

2025-10-28 13:23:54 +00:00

group_users_test.go

feat(group): manage users in user groups (#10940)

2025-10-28 13:23:54 +00:00

group_users.go

feat(group): manage users in user groups (#10940)

2025-10-28 13:23:54 +00:00

group.go

feat(group): add user groups to token claims (#11009)

2025-11-11 09:06:45 +01:00

hosted_login_translation.go

feat: Hosted login translation API (#10011)

2025-06-18 13:24:39 +02:00

idp_apple_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_azure_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_github_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_gitlab_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_google_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_intent_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_jwt_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_ldap_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_login_policy_link_test.go

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

idp_login_policy_link.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

idp_oauth_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_oidc_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_saml_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

idp_template_test.go

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

idp_template.go

feat(saml): add SignatureMethod config for SAML IDP (#10520)

2025-08-27 09:07:13 +00:00

idp_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

idp_user_link_test.go

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

idp_user_link.go

fix: update external username on idp if auto update is enabled (#7048)

2023-12-08 18:22:07 +01:00

idp.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_domain_relational_test.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

instance_domain_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

instance_domain_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_domain.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_features_test.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

instance_features.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

instance_member_test.go

fix: combine resourceowner query in reduce function for user grant (#7383)

2024-03-08 07:52:59 +00:00

instance_member.go

perf: user grant owner removed (#6962)

2024-01-08 15:26:30 +00:00

instance_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

instance_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_trusted_domain_test.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

instance_trusted_domain.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

instance.go

chore: management console naming inconsistency (#11390)

2026-01-26 14:52:15 +00:00

key_test.go

feat(v3alpha): web key resource (#8262)

2024-08-14 14:18:14 +00:00

key.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

label_policy_test.go

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-22 06:19:34 +00:00

label_policy.go

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-22 06:19:34 +00:00

limits_test.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

limits.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

lockout_policy_test.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

lockout_policy.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

login_name_query.sql

perf(query): reduce user query duration (#10037)

2025-06-06 08:48:29 +00:00

login_name_test.go

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

login_name.go

perf(query): reduce user query duration (#10037)

2025-06-06 08:48:29 +00:00

login_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

login_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

mail_template_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

mail_template.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

main_test.go

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

member.go

perf: remove owner removed columns from projections for oidc (#6925)

2023-11-20 17:21:08 +02:00

message_text_test.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

message_texts.go

feat: invite user link (#8578)

2024-09-11 10:53:55 +00:00

milestones_test.go

fix(milestones): use previous spelling for milestone types (#8886)

2024-11-11 11:28:27 +00:00

milestones.go

fix(milestones): use previous spelling for milestone types (#8886)

2024-11-11 11:28:27 +00:00

notification_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

notification_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

oidc_settings_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

oidc_settings.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_domain_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

org_domain_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_domain.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_member_test.go

fix: combine resourceowner query in reduce function for user grant (#7383)

2024-03-08 07:52:59 +00:00

org_member.go

perf: user grant owner removed (#6962)

2024-01-08 15:26:30 +00:00

org_metadata_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

org_metadata_test.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

org_metadata.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

org_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

org_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

organization_settings_test.go

feat: organization settings for user uniqueness (#10246)

2025-07-29 15:56:21 +02:00

organization_settings.go

feat: organization settings for user uniqueness (#10246)

2025-07-29 15:56:21 +02:00

password_age_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

password_age_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

password_complexity_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

password_complexity_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

privacy_policy_test.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

privacy_policy.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

project_grant_member_test.go

fix: combine resourceowner query in reduce function for user grant (#7383)

2024-03-08 07:52:59 +00:00

project_grant_member.go

fix: combine resourceowner query in reduce function for user grant (#7383)

2024-03-08 07:52:59 +00:00

project_grant_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

project_grant_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

project_grant.go

fix: set correct owner on project grants (#9089)

2025-01-15 11:22:16 +01:00

project_member_test.go

fix(permissions_v2): add membership fields migration (#9199)

2025-01-17 16:16:26 +01:00

project_member.go

fix(permissions_v2): add membership fields migration (#9199)

2025-01-17 16:16:26 +01:00

project_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

project_role_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

project_role_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

project_role.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

project_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

project.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

projection_mock.go

fix(projections): added check to make sure there cannot be 2 projections for the same table (#10439)

2025-08-13 13:51:30 +00:00

projection_test.go

fix(projections): overhaul the event projection system (#10560)

2025-09-03 15:29:00 +00:00

projection.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

quota_test.go

chore: use pgx v5 (#7577)

2024-03-27 15:48:22 +02:00

quota.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

relational_common.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00

relational_table.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

restrictions_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

restrictions.go

fix: projection version of restrictions (#7028)

2023-12-06 10:30:56 +00:00

saml_request_test.go

feat: add saml request to link to sessions (#9001)

2024-12-19 11:11:40 +00:00

saml_request.go

feat: add saml request to link to sessions (#9001)

2024-12-19 11:11:40 +00:00

secret_generator_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

secret_generator.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

security_policy.go

feat: impersonation roles (#7442)

2024-02-28 10:21:11 +00:00

session_relational.go

feat: add delete session on relation tables (#11334)

2026-03-19 08:35:53 +01:00

session_test.go

fix: session termination after user deletion/deactivation (#11644)

2026-02-20 10:21:01 +00:00

session.go

fix: session termination after user deletion/deactivation (#11644)

2026-02-20 10:21:01 +00:00

settings_relational.go

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

sms_test.go

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

sms.go

feat: http provider signing key addition (#10641)

2025-09-08 11:00:04 +00:00

smtp_test.go

feat: added xoauth for smtp (#11239)

2026-01-27 15:11:56 +01:00

smtp.go

feat: added xoauth for smtp (#11239)

2026-01-27 15:11:56 +01:00

system_features_test.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

system_features.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

target_test.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

target.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

user_auth_method_test.go

fix: make recovery code active on add (#11734)

2026-03-27 09:47:16 +00:00

user_auth_method.go

fix: make recovery code active on add (#11734)

2026-03-27 09:47:16 +00:00

user_grant_test.go

fix: fill resourceowner of project into usergrant projection (#7605)

2024-03-21 10:31:06 +00:00

user_grant.go

fix: fill resourceowner of project into usergrant projection (#7605)

2024-03-21 10:31:06 +00:00

user_metadata_test.go

fix(projections): stop updating creation dates (#6930)

2024-02-22 17:25:47 +00:00

user_metadata.go

fix: use hash to compare user metadata value (#10749)

2025-09-18 09:50:56 +00:00

user_personal_access_token_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_personal_access_token.go

feat: user api requests to resource API (#9794)

2025-06-04 07:17:23 +00:00

user_relational_test.go

feat: add administrator repository (#11803)

2026-03-18 10:24:09 +01:00

user_relational.go

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

user_schema_test.go

feat: add schema user create and remove (#8494)

2024-08-28 19:46:45 +00:00

user_schema.go

feat: add schema user create and remove (#8494)

2024-08-28 19:46:45 +00:00

user_test.go

feat(users/v2): return prompt information (#9255)

2025-01-29 15:12:31 +00:00

user.go

perf(query): reduce user query duration (#10037)

2025-06-06 08:48:29 +00:00

web_key.go

fix(webkeys): remove include private key from projection index (#8436)

2024-08-16 11:41:09 +00:00