Overview - Zitadel/zitadel

zitadel/zitadel

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
fix-branding-toggle
147974db fix(login): prevent duplicate email-code verification issue (#11893)  # Which Problems Are Solved - With Login V2 and EMAIL_VERIFICATION=true, opening the verify page with send=true can trigger email code generation twice. - The second code invalidates the first one, so users may receive two emails where the first code is always invalid. - This causes failed verification attempts and blocks onboarding for affected users. # How the Problems Are Solved - Removed side-effectful email-code sending from direct server component execution path. - Ensured code sending is executed only once in a safe server-side flow, so React Server Component re-fetches do not generate additional codes. - Kept verify flow behavior intact while preventing duplicate code invalidation. # Additional Changes - Added/updated logic around the verify flow to make repeated render/re-fetch paths idempotent for email-code sending. - Improved reliability of the Login V2 email verification step under App Router navigation behavior. # Additional Context Fixes #11857 - Tested manually with Login V2 and EMAIL_VERIFICATION=true by completing a new user registration flow to /verify?send=true. - Verified that only one verification email is sent and the first received code is valid (no duplicate invalidating code generated). Related bug report with reproduction details: [https://github.com/zitadel/zitadel/issues/11857](vscode-file://vscode-app/Applications/Visual%20Studio%20Code.app/Contents/Resources/app/out/vs/code/electron-browser/workbench/workbench.html) --------- Co-authored-by: Max Peintner <max@caos.ch>
8 days ago by mkdavor
Succeeded
fix-branding-toggle
147974db Merge 70a5f4434d8dac0e61eac82e5071a2eb3afdca66 into 604d5cb0a90100ed7a1cd16eb0be85666356c0e8
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
8 days ago
Succeeded
fix-branding-toggle
417480a5 feat: rt sessions OTP email challenge (#11941) # Which Problems Are Solved Add OTP Email challenge needed for Create/Set session in the RT model. # How the Problems Are Solved Introduce `OTPEmailChallengeCommand` (validate/execute/events) for session creation checks Add unit tests # Additional Changes Remove unused fields from `session_challenge_otp_sms.go` # Additional Context - Related to https://github.com/zitadel/zitadel/issues/11035 --------- Co-authored-by: Marco A. <kwbmm1990@gmail.com>
8 days ago by Gayathri V...
Succeeded
fix-branding-toggle
417480a5 Merge 3b98e3b57ca51e88edaa2de5be73b71e2466086e into 7c3d26b23b7d72eec9b9950d1cf4acd22dc66c83
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
8 days ago
Succeeded
fix-branding-toggle
5c958f0a fix middleware
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
5c958f0a Merge af1deb7d164179da750e9932c5d2bf034c30ed23 into 9bab764796dff9f72730e629e40698f766f1e570
8 days ago by Max Peintner
Failed
fix-branding-toggle
8 days ago
Failed
fix-branding-toggle
abbcf13a fix(login): add OIDC/SAML requestId to resend invite / resend email code (#11927) # Which Problems Are Solved This fixes an issue where resending a code for invite flow did not have the same context it was initially created for # How the Problems Are Solved by passing down thre requestId, the context is preserved though a resend
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
abbcf13a Merge a302e4beb6c3e5c75812d21061aadb3556514631 into 9bab764796dff9f72730e629e40698f766f1e570
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
8 days ago
Failed
fix-branding-toggle
fbabe2d0 fix(login): improve error classification (#11926) Closes #11923 # Which Problems Are Solved Client-side gRPC errors (e.g. NotFound, InvalidArgument, PermissionDenied) were being surfaced as HTTP 500 Internal Server Errors, causing false SRE alerts and poor UI feedback. # How the Problems Are Solved - New transport interceptor (`error-classification.ts`): Automatically enriches every ConnectError with httpStatus and isUserError metadata via a `ClassifiedConnectError` wrapper - Route handler protection (`route.ts`, `flow-initiation.ts`): Catches classified errors from `getAuthRequest` / `getSAMLRequest` and returns correct HTTP status codes instead of 500 - Type safety: Replaced all magic number error.code === 9 checks with typed Code.FailedPrecondition + instanceof ConnectError across `oidc.ts`, `saml.ts`, `password.ts`, `zitadel.ts` - Classification-aware logging (`session.ts`): Client/user errors log at warn level, server errors at error level - Observability (`otel.ts`): Spans now include error.is_user_error and http.status_code attributes for alert filtering # Additional Changes Gitignore `next-env.d.ts`: This file is auto-generated by Next.js on every next dev and next build invocation. The two modes write slightly different import paths (.next/dev/types/ vs .next/types/), which causes git diff --exit-code to fail in CI whenever a developer runs next dev locally before committing. Since Next.js regenerates it automatically, there's no need to track it --------- Co-authored-by: Ramon <mail@conblem.me> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
8 days ago by Max Peintner
Failed
fix-branding-toggle
fbabe2d0 fix(login): improve error classification (#11926) Closes #11923 # Which Problems Are Solved Client-side gRPC errors (e.g. NotFound, InvalidArgument, PermissionDenied) were being surfaced as HTTP 500 Internal Server Errors, causing false SRE alerts and poor UI feedback. # How the Problems Are Solved - New transport interceptor (`error-classification.ts`): Automatically enriches every ConnectError with httpStatus and isUserError metadata via a `ClassifiedConnectError` wrapper - Route handler protection (`route.ts`, `flow-initiation.ts`): Catches classified errors from `getAuthRequest` / `getSAMLRequest` and returns correct HTTP status codes instead of 500 - Type safety: Replaced all magic number error.code === 9 checks with typed Code.FailedPrecondition + instanceof ConnectError across `oidc.ts`, `saml.ts`, `password.ts`, `zitadel.ts` - Classification-aware logging (`session.ts`): Client/user errors log at warn level, server errors at error level - Observability (`otel.ts`): Spans now include error.is_user_error and http.status_code attributes for alert filtering # Additional Changes Gitignore `next-env.d.ts`: This file is auto-generated by Next.js on every next dev and next build invocation. The two modes write slightly different import paths (.next/dev/types/ vs .next/types/), which causes git diff --exit-code to fail in CI whenever a developer runs next dev locally before committing. Since Next.js regenerates it automatically, there's no need to track it --------- Co-authored-by: Ramon <mail@conblem.me> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
fbabe2d0 Merge b2fa6d403d97f3c94fbf5d95a8e95c327ca0ca83 into ff4aae7b3f4485ac84c00a0d9be9d1c3008ccb9c
8 days ago by Max Peintner
Succeeded
fix-branding-toggle
8 days ago
Failed
fix-branding-toggle
fc398ef1 feat: implement otp sms session challenge (#11919) # Which Problems Are Solved This PR adds the OTP SMS Challenge needed for CreateSession API https://github.com/zitadel/zitadel/issues/11035 # How the Problems Are Solved - Introduce `OTPSMSChallengeCommand` (validate/execute/events) for session creation checks - Introduce `GetOTPCryptoGeneratorConfigWithDefault` to fetch per-instance secret generator settings - Add unit tests # Additional Changes Refactor tests in `session_check_recovery_code_test.go` to make the helper functions reusable in `session_challenge_otp_sms_test.go` # Additional Context Related to https://github.com/zitadel/zitadel/issues/11035
12 days ago by Gayathri V...
Failed
fix-branding-toggle
fc398ef1 feat: implement otp sms session challenge (#11919) # Which Problems Are Solved This PR adds the OTP SMS Challenge needed for CreateSession API https://github.com/zitadel/zitadel/issues/11035 # How the Problems Are Solved - Introduce `OTPSMSChallengeCommand` (validate/execute/events) for session creation checks - Introduce `GetOTPCryptoGeneratorConfigWithDefault` to fetch per-instance secret generator settings - Add unit tests # Additional Changes Refactor tests in `session_check_recovery_code_test.go` to make the helper functions reusable in `session_challenge_otp_sms_test.go` # Additional Context Related to https://github.com/zitadel/zitadel/issues/11035
12 days ago by Gayathri V...
Succeeded
fix-branding-toggle
fc398ef1 Merge f7d614f1c44fa54e6d8bbb07b61d0c511339216d into f99142bc4a30db3f54c652ca61af3189d80610d0
12 days ago by Max Peintner
Succeeded
fix-branding-toggle
12 days ago