feat(IDP): use single callback endpoint (#8295)

# Which Problems Are Solved Both the login UI and the IdP intent flow have their own IdP callback endpoints. This makes configuration hard to impossible (e.g. Github only allows one endpoint) for customers. # How the Problems Are Solved - The login UI prefixes the `state` parameter when creating an auth / SAML request. - All requests now use the `/idp/callback` or the corresponding variation (e.g. SAML) - On callback, the state, resp. its prefix is checked. In case of the login UI prefix, the request will be forwarded to the existing login UI handler without the prefix state. Existing setups will therefore not be affected and also requests started before this release can be handled without any impact. - Console only lists the "new" endpoint(s). Any `/login/externalidp/callback` is removed. # Additional Changes - Cleaned up some images from the IdP documentation. - fix the error handling in `handleExternalNotFoundOptionCheck` # Additional Context - closes #8236
2025-08-11 21:27:42 +00:00 · 2024-07-16 15:58:22 +02:00
parent 19561a092c
commit e126ccc9aa
24 changed files with 81 additions and 66 deletions
--- a/docs/static/img/guides/azure_app_redirects.png
+++ b/docs/static/img/guides/azure_app_redirects.png
--- a/docs/static/img/guides/azure_app_register.png
+++ b/docs/static/img/guides/azure_app_register.png
--- a/docs/static/img/guides/azure_app_registration.png
+++ b/docs/static/img/guides/azure_app_registration.png
--- a/docs/static/img/guides/github_oauth_app_registration.png
+++ b/docs/static/img/guides/github_oauth_app_registration.png
--- a/docs/static/img/guides/gitlab_app_id_secret.png
+++ b/docs/static/img/guides/gitlab_app_id_secret.png
--- a/docs/static/img/guides/gitlab_app_registration.png
+++ b/docs/static/img/guides/gitlab_app_registration.png
--- a/docs/static/img/guides/google_oauth_app_registration.png
+++ b/docs/static/img/guides/google_oauth_app_registration.png
--- a/docs/static/img/guides/zitadel_apple_create_provider.png
+++ b/docs/static/img/guides/zitadel_apple_create_provider.png
--- a/docs/static/img/guides/zitadel_azure_provider2.png
+++ b/docs/static/img/guides/zitadel_azure_provider2.png
--- a/docs/static/img/guides/zitadel_azure_saml_provider_urls.png
+++ b/docs/static/img/guides/zitadel_azure_saml_provider_urls.png
--- a/docs/static/img/guides/zitadel_generic_oidc_create_provider.png
+++ b/docs/static/img/guides/zitadel_generic_oidc_create_provider.png
--- a/docs/static/img/guides/zitadel_github_create_provider.png
+++ b/docs/static/img/guides/zitadel_github_create_provider.png
--- a/docs/static/img/guides/zitadel_gitlab_create_provider.png
+++ b/docs/static/img/guides/zitadel_gitlab_create_provider.png
--- a/docs/static/img/guides/zitadel_google_create_provider.png
+++ b/docs/static/img/guides/zitadel_google_create_provider.png
--- a/docs/static/img/guides/zitadel_okta_saml_provider_urls.png
+++ b/docs/static/img/guides/zitadel_okta_saml_provider_urls.png
--- a/docs/static/img/guides/zitadel_saml_provider_urls.png
+++ b/docs/static/img/guides/zitadel_saml_provider_urls.png