Commit Graph

6037 Commits

Author SHA1 Message Date
Max Peintner
cf54b5435b Merge pull request #314 from zitadel/qa
Promote qa to prod: OIDC fixes
2024-12-10 11:37:25 +01:00
Max Peintner
44354b3a85 complete redirect on password change 2024-12-10 11:18:51 +01:00
Max Peintner
6e6c667d5f resend switch 2024-12-10 10:57:26 +01:00
Max Peintner
7dbf2ab6c2 do not rerequest code 2024-12-10 10:07:54 +01:00
Max Peintner
60218306d1 fix url template 2024-12-10 09:59:37 +01:00
Max Peintner
4187028e7b do not propagate click event 2024-12-10 09:20:59 +01:00
Max Peintner
13a1dc30c0 provide more context 2024-12-10 09:03:45 +01:00
Max Peintner
275233e4e1 session context 2024-12-09 15:40:37 +01:00
Max Peintner
574e8de7b6 wait for longer 2024-12-09 15:31:00 +01:00
Max Peintner
096486ac55 log issues when validating 2024-12-09 15:27:03 +01:00
Max Peintner
41f7c5a4b3 wait for 2 seconds 2024-12-09 15:12:51 +01:00
Max Peintner
a749c76f4f let them reauthenticate with a bad session 2024-12-09 14:57:39 +01:00
Max Peintner
40b474821f check user auth methods 2024-12-09 14:44:10 +01:00
Max Peintner
6690a45146 redirect to defaultredirect if authrequest is already handled 2024-12-09 14:21:18 +01:00
Max Peintner
2402a5473e catch already handled 2024-12-09 14:14:23 +01:00
Max Peintner
0d704cc997 resend password reset 2024-12-09 14:00:00 +01:00
Max Peintner
a4d474abe4 check if session is valid according to loginsettings (forceMFA) 2024-12-09 13:35:57 +01:00
Max Peintner
ac08431c7a resend is not submit button 2024-12-09 12:16:36 +01:00
Max Peintner
528a056a34 consistent sorting 2024-12-09 12:10:12 +01:00
Max Peintner
c66fc8662e cleanup login prompt 2024-12-09 11:52:03 +01:00
Max Peintner
40e51e11fe push instead of redirect 2024-12-09 11:44:12 +01:00
Max Peintner
2bc7629cca document, session item 2024-12-09 10:48:50 +01:00
Max Peintner
68066b99af only filter sessions if hint is provided 2024-12-09 10:16:54 +01:00
Max Peintner
c645bcfcfa absolute url for login prompt 2024-12-09 09:58:14 +01:00
Max Peintner
2e2ae590f9 check for valid sessions, cleanup 2024-12-09 09:44:56 +01:00
Tim Möhlmann
ee7beca61f fix(cache): ignore NOSCRIPT errors in redis circuit breaker (#9022)
# Which Problems Are Solved

When Zitadel starts the first time with a configured Redis cache, the
circuit break would open on the first requests, with no explanatory
error and only log-lines explaining the state of the Circuit breaker.

Using a debugger, `NOSCRIPT No matching script. Please use EVAL.` was
found the be passed to `Limiter.ReportResult`. This error is actually
retried by go-redis after a
[`Script.Run`](https://pkg.go.dev/github.com/redis/go-redis/v9@v9.7.0#Script.Run):

> Run optimistically uses EVALSHA to run the script. If script does not
exist it is retried using EVAL.

# How the Problems Are Solved

Add the `NOSCRIPT` error prefix to the whitelist.

# Additional Changes

- none

# Additional Context

- Introduced in: https://github.com/zitadel/zitadel/pull/8890
- Workaround for: https://github.com/redis/go-redis/issues/3203
2024-12-09 08:20:21 +00:00
Max Peintner
1a7d97421f handle error, use redirect response 2024-12-09 09:14:43 +01:00
Max Peintner
cd53ccb3b3 login hint 2024-12-09 09:03:59 +01:00
Livio Spring
5c3e917248 chore: remove stable release tag (#8885)
# Which Problems Are Solved

The current "stable" release tag was no longer maintained.

# How the Problems Are Solved

Remove the tag from the docs.

# Additional Changes

Update the docs to reflect that test run with Ubuntu 22.04 instead of
20.04.

# Additional Context

- relates to https://github.com/zitadel/zitadel/issues/8884
2024-12-09 08:29:13 +01:00
Max Peintner
e572a7a8eb Merge branch 'main' into user-discovery 2024-12-06 14:28:09 +01:00
Max Peintner
84c05d8d65 Merge pull request #289 from zitadel/acceptance-test-suite
chore: fixes to tests
2024-12-06 14:27:52 +01:00
Max Peintner
dfd133c958 Merge branch 'main' into acceptance-test-suite 2024-12-06 14:18:45 +01:00
Silvan
77cd430b3a refactor(handler): cache active instances (#9008)
# Which Problems Are Solved

Scheduled handlers use `eventstore.InstanceIDs` to get the all active
instances within a given timeframe. This function scrapes through all
events written within that time frame which can cause heavy load on the
database.

# How the Problems Are Solved

A new query cache `activeInstances` is introduced which caches the ids
of all instances queried by id or host within the configured timeframe.

# Additional Changes

- Changed `default.yaml`
  - Removed `HandleActiveInstances` from custom handler configs
- Added `MaxActiveInstances` to define the maximal amount of cached
instance ids
- fixed start-from-init and start-from-setup to start auth and admin
projections twice
- fixed org cache invalidation to use correct index

# Additional Context

- part of #8999
2024-12-06 11:32:53 +00:00
Tim Möhlmann
a81d42a61a fix(eventstore): set created filters to exclusion sub-query (#9019)
# Which Problems Are Solved

In eventstore queries with aggregate ID exclusion filters, filters on
events creation date where not passed to the sub-query. This results in
a high amount of returned rows from the sub-query and high overall query
cost.

# How the Problems Are Solved

When CreatedAfter and CreatedBefore are used on the global search query,
copy those filters to the sub-query. We already did this for the
position column filter.

# Additional Changes

- none

# Additional Context

- Introduced in https://github.com/zitadel/zitadel/pull/8940

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-12-06 11:20:10 +01:00
Livio Spring
7a3ae8f499 fix(notifications): bring back legacy notification handling (#9015)
# Which Problems Are Solved

There are some problems related to the use of CockroachDB with the new
notification handling (#8931).
See #9002 for details.

# How the Problems Are Solved

- Brought back the previous notification handler as legacy mode.
- Added a configuration to choose between legacy mode and new parallel
workers.
  - Enabled legacy mode by default to prevent issues.

# Additional Changes

None

# Additional Context

- closes https://github.com/zitadel/zitadel/issues/9002
- relates to #8931
2024-12-06 10:56:19 +01:00
Max Peintner
2e5b3b710e fix: refactor user discovery search 2024-12-06 10:53:44 +01:00
mffap
71d381b5e7 docs(legal): link subprocessors to trust center (#9013)
Link list of subprocessors to our trust center
2024-12-05 13:04:41 +00:00
Elio Bischof
8c97d850ca Merge branch 'main' into add-acceptance-to-pr-template 2024-12-05 13:43:41 +01:00
Elio Bischof
4610ae8764 simulated idp redirects 2024-12-05 13:43:16 +01:00
Elio Bischof
1fc3e7250e chore: add acceptance checkbox to pr template 2024-12-05 13:35:26 +01:00
Elio Bischof
5b6848780b Merge pull request #311 from zitadel/fix-acceptance-against-prod
chore(acceptance): use prod secret on command test:acceptance:prod
2024-12-05 13:34:55 +01:00
Elio Bischof
81468d3fbf chore(acceptance): use prod secret on command test:acceptance:prod 2024-12-05 13:12:59 +01:00
Elio Bischof
e89b873d39 Merge pull request #303 from eliobischof/main
chore: test accepance against QA and Prod
2024-12-05 12:35:24 +01:00
Elio Bischof
ad1731d023 Merge branch 'main' into main 2024-12-05 12:30:26 +01:00
Max Peintner
7f22c05a82 Merge pull request #310 from zitadel/qa
fix: otp template url, improve error handling
2024-12-05 11:42:43 +01:00
Stefan Benz
16902a0fa2 Merge branch 'main' into main 2024-12-05 11:29:34 +01:00
Livio Spring
0017e4daa6 docs: remove autoplay from videos (#9005)
# Which Problems Are Solved

Some videos in the guides start playing automatically. This prevents a
great user / developer experience.

# How the Problems Are Solved

Stop autoplay.

# Additional Changes

None

# Additional Context

Discussed internally
2024-12-05 06:23:59 +00:00
Roman Kolokhanin
d0c23546ec fix(oidc): prompts slice conversion function returns slice which contains unexpected empty strings (#8997)
# Which Problems Are Solved

Slice initialized with a fixed length instead of capacity, this leads to
unexpected results when calling the append function.

# How the Problems Are Solved

fixed slice initialization, slice is initialized with zero length and
with capacity of function's argument

# Additional Changes

test case added

# Additional Context
none

Co-authored-by: Kolokhanin Roman <zuzmic@gmail.com>
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-12-04 20:56:36 +00:00
Livio Spring
7f0378636b fix(notifications): improve error handling (#8994)
# Which Problems Are Solved

While running the latest RC / main, we noticed some errors including
context timeouts and rollback issues.

# How the Problems Are Solved

- The transaction context is passed and used for any event being written
and for handling savepoints to be able to handle context timeouts.
- The user projection is not triggered anymore. This will reduce
unnecessary load and potential timeouts if lot of workers are running.
In case a user would not be projected yet, the request event will log an
error and then be skipped / retried on the next run.
- Additionally, the context is checked if being closed after each event
process.
- `latestRetries` now correctly only returns the latest retry events to
be processed
- Default values for notifications have been changed to run workers less
often, more retry delay, but less transaction duration.

# Additional Changes

None

# Additional Context

relates to #8931

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-12-04 20:17:49 +00:00
Silvan
6614aacf78 feat(fields): add instance domain (#9000)
# Which Problems Are Solved

Instance domains are only computed on read side. This can cause missing
domains if calls are executed shortly after a instance domain (or
instance) was added.

# How the Problems Are Solved

The instance domain is added to the fields table which is filled on
command side.

# Additional Changes

- added setup step to compute instance domains
- instance by host uses fields table instead of instance_domains table

# Additional Context

- part of https://github.com/zitadel/zitadel/issues/8999
2024-12-04 18:10:10 +00:00