Livio Spring
40082745f4
fix(login): allow fallback to local auth in case of IdP errors ( #9178 )
...
# Which Problems Are Solved
The current login will always prefer external authentication (through an
IdP) over local authentication. So as soon as either the user had
connected to an IdP or even when the login policy was just set up to
have an IdP allowed, users would be redirected to that IdP for
(re)authentication.
This could lead to problems, where the IdP was not available or any
other error occurred in the process (such as secret expired for
EntraID).
Even when local authentication (passkeys or password) was allowed for
the corresponding user, they would always be redirected to the IdP
again, preventing any authentication. If admins were affected, they
might not even be able to update the client secret of the IdP.
# How the Problems Are Solved
Errors during the external IdP flow are handled in an
`externalAuthFailed` function, which will check if the organisation
allows local authentication and if the user has set up such.
If either password or passkeys is set up, the corresponding login page
will be presented to the user. As already with local auth passkeys is
preferred over password authentication.
The user is informed that the external login failed and fail back to
local auth as an error on the corresponding page in a focused mode. Any
interaction or after 5 second the focus mode is disabled.
# Additional Changes
None.
# Additional Context
closes #6466
2025-01-15 10:39:28 +00:00
Miguel Cabrerizo
3f4aea1a75
fix: replace password back button with arrow ( #7120 )
...
Co-authored-by: Livio Spring <livio.a@gmail.com >
2024-01-08 11:23:34 +00:00
Livio Spring
c790715628
fix: improve autofill values ( #6541 )
2023-09-13 08:16:57 +02:00
Florian Forster
bcf4bfc585
fix: autofill related issues ( #6201 )
2023-07-14 12:35:25 +00:00
Fabi
8b5894c0bb
fix: add description to password screen ( #5096 )
2023-01-24 09:46:31 +00:00
Max Peintner
05d875c992
fix(login, console): correctly fill username on initialization, password and change password view ( #4546 )
...
* fix(login): add loginname as query param, send with inituserlink
* set loginname as username autofill on password site
* add loginname input on change password
* fix console password change autocomplete
* fix(console): apply labelpolicy if icon is provided, signout page (#4499 )
* label policy as observable
* signedout policy via state
* add caching
* disable loading spinner on signedout
* cleanup
* catch error
* update deps
* move policy to localstorage
* handle labelpolicy for users without org
Co-authored-by: Livio Spring <livio.a@gmail.com >
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com >
* fix(email): set sender address as return-path header (#4569 )
* feat(login): additionally use email/phone for authentication (#4563 )
* feat: add ability to disable login by email and phone
* feat: check login by email and phone
* fix: set verified email / phone correctly on notify users
* update projection version
* fix merge
* fix email/phone verified reduce tests
* fix user tests
* loginname check
* cleanup
* fix: update user projection version to handle fixed statement
* ci(e2e): give console init time (#4567 )
* fix: idp usage (#4571 )
* fix: send email verification instead of init code for idp users
* fix: select single idp of external only users
* fix: use single idp on login
* fix(import): add import for app and machine keys (#4536 )
* fix(import): add import for app and machine keys
* fix(export): add review changes
* fix(import): Apply suggestions from code review
Co-authored-by: Livio Spring <livio.a@gmail.com >
* fix(import): add review changes
Co-authored-by: Livio Spring <livio.a@gmail.com >
* fix(console): hide metadata on auth side if no `user.read` role present (#4512 )
* check for role
* require user.read for showing metadata section in auth-user
* remove aggregate id from role check
Co-authored-by: Livio Spring <livio.a@gmail.com >
* update stable release to 2.8.2 (#4574 )
* fix: import of trigger actions and export of idp links (#4576 )
Co-authored-by: Livio Spring <livio.a@gmail.com >
* fix(console): split password from contact information, initialization mail on top (#4380 )
* chore(console): split password from contact information
* change user detail, initialization mail
* fix translation
* Update console/src/assets/i18n/de.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/de.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/en.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/fr.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/fr.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/it.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/en.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* i18n
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* fix(import): import json marshal to jsonpb (#4580 )
* fix(import): import json marshal to jsonpb
* fix: add unmarshaloptions discard unknown
Co-authored-by: Livio Spring <livio.a@gmail.com >
* fix(import): import json marshal to jsonpb
Co-authored-by: Livio Spring <livio.a@gmail.com >
* feat(console): rename org (#4542 )
* rename org
* add data-e2e
* e2e test
* restore state after
* use ngIf instead of hasrole directive and initialized regex
* rm h2 check
* Update e2e/cypress/e2e/organization/organizations.cy.ts
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/de.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/de.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* Update console/src/assets/i18n/en.json
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* change e2e test
* org param
* reintroduct org param
* use org query param
* org rename test
* no initial focus on button
* contain name
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* feat: instance remove (#4345 )
* feat(instance): add remove instance event with projections cleanup
* fix(instance): corrected used id to clean up projections
* fix merge
* fix: correct unit test projection names
* fix: current sequence of lists and query for ensuring keypair based projections
Co-authored-by: Livio Spring <livio.a@gmail.com >
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com >
* docs: change nextjs quickstart (#4566 )
* docs: change nextjs repo update readme
* Update docs/docs/examples/login/nextjs.md
Co-authored-by: Florian Forster <florian@zitadel.com >
* Update docs/docs/examples/login/nextjs.md
Co-authored-by: Florian Forster <florian@zitadel.com >
Co-authored-by: Florian Forster <florian@zitadel.com >
* fix(console): preserve logo and icon aspect ratios, remove border radius in header (#4585 )
* chore(e2e): Skip asking for new password on Admin in dev environment (#4599 )
* feat(e2e): Skip asking for new password on Admin
* remove password changing
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
* docs(contributing): remove guides folder (#4603 )
* preferredLoginName as queryParam
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com >
Co-authored-by: Livio Spring <livio.a@gmail.com >
Co-authored-by: Elio Bischof <eliobischof@gmail.com >
Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com >
Co-authored-by: Florian Forster <florian@zitadel.com >
Co-authored-by: p_0g_8mm3_ <37022952+pr0gr8mm3r@users.noreply.github.com >
2022-10-24 16:33:06 +02:00
Max Peintner
ebb73186b6
fix(console, login): Idp detail and create layout optimization, login - sub formfield link spacing ( #3755 )
...
* idp detail, create layout
* fat finger fix
Co-authored-by: Livio Amstutz <livio.a@gmail.com >
2022-06-03 07:20:56 +00:00
Max Peintner
e79aab3671
fix: login ui for v2 ( #3712 )
...
* fix: login ui for v2
* a color
* footer
Co-authored-by: Livio Amstutz <livio.a@gmail.com >
2022-05-30 09:03:40 +00:00
Livio Amstutz
389eb4a27a
feat: run on a single port ( #3163 )
...
* start v2
* start
* run
* some cleanup
* remove v2 pkg again
* simplify
* webauthn
* remove unused config
* fix login path in Dockerfile
* fix asset_generator.go
* health handler
* fix grpc web
* refactor
* merge
* build new main.go
* run new main.go
* update logging pkg
* fix error msg
* update logging
* cleanup
* cleanup
* go mod tidy
* change localDevMode
* fix customEndpoints
* update logging
* comments
* change local flag to external configs
* fix location generated go code
* fix
Co-authored-by: fforootd <florian@caos.ch >
2022-02-14 17:22:30 +01:00
