Overview - Zitadel/zitadel

zitadel/zitadel

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
improve_docs
ac5ed6a7 Merge 543c412e086cb89328c2fa57b221e2eeae03d98f into 5df8a97f9d7132cd0a95b02c3ee66345f4b52dcf
2 days ago by hifabienne
Succeeded
improve_docs
ac5ed6a7 docs: add note about tokens and session lifetimes
2 days ago by hifabienne
Succeeded
improve_docs
883afe7f Apply suggestions from code review Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2 days ago by hifabienne
Succeeded
improve_docs
883afe7f Merge 4b8a81cb249c1a84e4ea22ffad53f4b8bd70e09c into 5df8a97f9d7132cd0a95b02c3ee66345f4b52dcf
2 days ago by hifabienne
Succeeded
improve_docs
d3860da0 feat(repository): implement user repository (#10967) ## Summary This PR introduces the relational user repository for backend v3, including schema, repository APIs, reducers/projections, and tests for both human and machine users. ## What changed * Added user-focused relational migrations (users, verifications, metadata, PATs, machine keys, passkeys, identity provider links) and related FK wiring. * Implemented/expanded repository domain contracts and storage implementations for human and machine user flows. * Added support for machine secret handling and aligned access token type modeling. * Extended user domain models (verifications, password/email/phone/TOTP state, passkeys, metadata, invite handling, identity provider links). * Updated projection/reduction coverage and integration tests for key user lifecycle events. * Regenerated and updated mocks/enums plus supporting database change/column utilities. ## Notes for reviewers * This PR is large because it establishes the foundational relational user storage layer and related test scaffolding. Sorry for that. ## Closes Closes #10218 Closes #10224 Closes #10225 Closes #10209 Closes #10802 --------- Co-authored-by: Iraq Jaber <iraq+github@zitadel.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Marco A. <marco@zitadel.com> Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2 days ago by hifabienne
Succeeded
improve_docs
d3860da0 Merge 72bc2dcc56e4cf7b77b1586b1394c8bb6ea763b3 into 5df8a97f9d7132cd0a95b02c3ee66345f4b52dcf
2 days ago by hifabienne
Succeeded
graphics_naming_inconsistency
63bb1461 docs: update graphics to ensure naming is consistent
7 days ago by hifabienne
Succeeded
graphics_naming_inconsistency
63bb1461 Merge 8efc4f4f148936255d3a8151240d66ed58126de9 into e25220bfab52a2d754988fe8d1619ff9590bc187
7 days ago by hifabienne
Succeeded
examples_sdks
d365eccc docs: update example titles
8 days ago by hifabienne
Succeeded
examples_sdks
d365eccc Merge 5dcae4781786a66d9e4542478ab7157c4c85f2fa into 11d48edd84de9ebc28609c01fa2290aaddf4e555
8 days ago by hifabienne
Succeeded
examples_sdks
6fe0b45f fix(login): update login logic to correctly handle email and phone re… (#11618) ## Problem Enabling `Disable Phone Login` (or `Disable Email Login`) in the login policy caused some users to receive "User not found in the system" even when logging in with a valid, non-phone identifier. Users whose preferred login name looked like an email address (e.g. `user@test.com` in an org-scoped context) were rejected incorrectly. Toggling the setting back off immediately restored login for those users. Fixes #11518 ## Root Cause In `loginname.ts` and `password.ts`, the post-lookup guard that enforces the disable-phone/email restriction used `||` instead of `&&`: ```ts // BEFORE (buggy): rejects if preferredLoginName doesn't match OR email doesn't match // → any user whose preferredLoginName ≠ raw email is rejected if (user.preferredLoginName !== concatLoginname || humanUser?.email?.email !== command.loginName) { return preventUserEnumeration(...); } // AFTER (correct): rejects only if preferredLoginName doesn't match AND email doesn't match // → user passes through if they matched by either their preferred login name or their email if (user.preferredLoginName !== concatLoginname && humanUser?.email?.email !== command.loginName) { return preventUserEnumeration(...); } ``` The intent is to allow the user through if they matched by their preferred login name **or** by the still-permitted identifier. By De Morgan's law, the rejection condition must be `¬A ∧ ¬B`, not `¬A ∨ ¬B`. ## Changes - **`loginname.ts`**: fixed 2 `||` → `&&` in the `disableLoginWithEmail` and `disableLoginWithPhone` guards - **`password.ts`**: fixed 4 `||` → `&&` across the same guards in both `resetPassword` and `sendPassword` - **`loginname.test.ts`**: added two regression tests: - `disableLoginWithPhone=true`, user logs in with their email-format preferred login name → must succeed (was broken) - `disableLoginWithPhone=true`, user logs in with their actual phone number → must be blocked (feature still works) ## Testing All 654 unit tests pass. Co-authored-by: Max Peintner <max@caos.ch>
8 days ago by hifabienne
Succeeded
examples_sdks
6fe0b45f Merge 8ad041566bf6c95d6085561f80093aa8fc392bd7 into 11d48edd84de9ebc28609c01fa2290aaddf4e555
8 days ago by hifabienne
Succeeded
examples_sdks
952de3fd docs: update sdks section
13 days ago by hifabienne
Succeeded
examples_sdks
952de3fd Merge c1df0fd6ac0279dc7d7b5e39cecc3f61e1a2ef86 into b0609aa861cba58f9176157c5f32d1494b6dae0c
13 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
90b368d6 docs: added docs for confguiring caching when provisioning zitadel on k8 (#11492)
15 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
90b368d6 Merge 28c92a48aa72c9833b36637ab8d043c2bb370bd3 into e545d7c5b16e8809b3bb81e93204a26bbfbe146c
15 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
d9c01bf8 docs: add intro
20 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
d9c01bf8 Merge d44f57612fa9718d7c99774a7fff7d43bb13baf2 into e77e0831a60b4f6f6b2272ef1793bd3a7f82eb62
20 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
59dd1a2c docs: fix wrong image
20 days ago by hifabienne
Succeeded
quickstart_add_frameworks_2
59dd1a2c Merge 647f4824b5c933954ab74d3c7c9e77c36f87c6fd into e77e0831a60b4f6f6b2272ef1793bd3a7f82eb62
20 days ago by hifabienne