* pipeline runs on ubuntu instead of docker
* added Makefile to build zitadel core (backend) and console (frontend)
* pipeline runs in parallel where possible
* pipeline is split into multiple jobs
* removed goreleaser
* added command to check if zitadel instance is running
This PR adds support for userinfo and introspection of V2 tokens. Further V2 access tokens and session tokens can be used for authentication on the ZITADEL API (like the current access tokens).
This PR starts the OIDC implementation for the API V2 including the Implicit and Code Flow.
Co-authored-by: Livio Spring <livio.a@gmail.com>
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
* feat: add v2alpha policies service
* feat: add v2alpha policies service
* fix: rename of attributes and messages in v2alpha api
* fix: rename of attributes and messages in v2alpha api
* fix: linter corrections
* fix: review corrections
* fix: review corrections
* fix: review corrections
* fix: review corrections
* fix grpc
* refactor: rename to settings and more
* Apply suggestions from code review
Co-authored-by: Fabi <fabienne.gerschwiler@gmail.com>
* add service to docs and rename legal settings
* unit tests for converters
* go mod tidy
* ensure idp name and return list details
* fix: use correct resource owner for active idps
* change query to join
---------
Co-authored-by: Livio Spring <livio.a@gmail.com>
Co-authored-by: Fabi <fabienne.gerschwiler@gmail.com>
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
* chore(proto): update versions
* change protoc plugin
* some cleanups
* define api for setting emails in new api
* implement user.SetEmail
* move SetEmail buisiness logic into command
* resuse newCryptoCode
* command: add ChangeEmail unit tests
Not complete, was not able to mock the generator.
* Revert "resuse newCryptoCode"
This reverts commit c89e90ae35.
* undo change to crypto code generators
* command: use a generator so we can test properly
* command: reorganise ChangeEmail
improve test coverage
* implement VerifyEmail
including unit tests
* add URL template tests
* proto: change context to object
* remove old auth option
* remove old auth option
* fix linting errors
run gci on modified files
* add permission checks and fix some errors
* comments
* comments
---------
Co-authored-by: Livio Spring <livio.a@gmail.com>
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
* docs: update cockroachdb version to 22.2
* feat(adminAPI): ListEventTypes returns the list of event types ZITADEL implements
* feat(adminAPI): ListAggregateTypes returns the list of aggregate types ZITADEL implements
* feat(adminAPI): ListEvents allows `IAM_OWNERS` to search for events
* feat(import): add functionality to import data into an instance
* feat(import): move import to admin api and additional checks for nil pointer
* fix(export): export implementation with filtered members and grants
* fix: export and import implementation
* fix: add possibility to export hashed passwords with the user
* fix(import): import with structure of v1 and v2
* docs: add v1 proto
* fix(import): check im imported user is already existing
* fix(import): add otp import function
* fix(import): add external idps, domains, custom text and messages
* fix(import): correct usage of default values from login policy
* fix(export): fix renaming of add project function
* fix(import): move checks for unit tests
* expect filter
* fix(import): move checks for unit tests
* fix(import): move checks for unit tests
* fix(import): produce prerelease from branch
* fix(import): correctly use provided user id for machine user imports
* fix(import): corrected otp import and added guide for export and import
* fix: import verified and primary domains
* fix(import): add reading from gcs, s3 and localfile with tracing
* fix(import): gcs and s3, file size correction and error logging
* Delete docker-compose.yml
* fix(import): progress logging and count of resources
* fix(import): progress logging and count of resources
* log subscription
* fix(import): incorporate review
* fix(import): incorporate review
* docs: add suggestion for import
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com>
* fix(import): add verification otp event and handling of deleted but existing users
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
Co-authored-by: Fabienne <fabienne.gerschwiler@gmail.com>
Co-authored-by: Silvan <silvan.reusser@gmail.com>
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com>
* fix: compatability for cockroach v22.1
* update cr version in docs and compose
* bind dev cockroach to 127.0.0.1
* Revert "bind dev cockroach to 127.0.0.1"
This reverts commit 1c7c6304ae.
* remove --listen-addr flag
* use v2.0.0-v2-alpha.16
* use v2.0.0-v2-alpha.17
Co-authored-by: Elio Bischof <eliobischof@gmail.com>
* feat: add system api proto
* Update proto/zitadel/instance.proto
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* Update proto/zitadel/instance.proto
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* Update proto/zitadel/instance.proto
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* feat: add system api proto
* feat: add system api proto
* feat: add system api proto
* feat: add system api proto
* generate grpc
* feat: remove region from system proto
* fix: remove metrics endpoint
* fix: add md file
* rebuild proto
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* not working
* test ci
* correct path
* test
* test
* test
* remove k8s & test
* test
* test image
* typo
* test
* fix
* test
* fix
* test
* fix
* fix windows
* fix
* fix
* fix codecov
* fix with arch
* test
* test
* test
* test
* trial
* trial
* trial
* trial
* trial
* trial
* trial
* try
* try
* first improvement
* trial
* improve
* improve
* improve
* use bash
* trial
* random test
* wip
* test with goreleaser and semrel
* fix typo
* trial
* add buildx
* define default
* force buildkit
* use buildx
* debug GH docker
* use images
* debug docker
* work around image name issues
* trial
* test
* test with prebuilt image
* fix
* use load
* test
* use only docker
* trial
* test
* use load
* test
* test with docker driver
* trial
* trial
* trial
* use arm
* upload artifacts
* try to cache grpc base
* try to use a cache
* fall back
* test
* fix
* improve
* upload artifacts
* fix
* name things
* add tag if poc
* args for protos
* remove v2 build
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* feat(actions): begin api
* feat(actions): begin api
* api and projections
* fix: handle multiple statements for a single event in projections
* export func type
* fix test
* update to new reduce interface
* flows in login
* feat: jwt idp
* feat: command side
* feat: add tests
* actions and flows
* fill idp views with jwt idps and return apis
* add jwtEndpoint to jwt idp
* begin jwt request handling
* add feature
* merge
* merge
* handle jwt idp
* cleanup
* bug fixes
* autoregister
* get token from specific header name
* fix: proto
* fixes
* i18n
* begin tests
* fix and log http proxy
* remove docker cache
* fixes
* usergrants in actions api
* tests adn cleanup
* cleanup
* fix add user grant
* set login context
* i18n
Co-authored-by: fabi <fabienne.gerschwiler@gmail.com>
* feat: user meta data events
* feat: user meta data set tests
* feat: user meta data tests
* feat: user meta data in protos
* feat: user meta data command api
* feat: user meta data query side
* feat: proto correct order, fix handlers
* feat: proto correct order
* feat: fixes of pr comments
* feat: fixes of pr comments
* feat: value as byte array
* feat: metadata feature
* Update internal/auth/repository/eventsourcing/handler/meta_data.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update internal/command/user_meta_data.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update proto/zitadel/metadata.proto
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update proto/zitadel/metadata.proto
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* fix: rename metadata files and table
* fix: rename meta data to metadat in protos
* Update internal/domain/metadata.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* fix: rename vars
* fix: rebiuld docs
* Update internal/iam/repository/view/metadata_view.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* feat: comprehensive sentry instrumentation
* test: pass
* fix: only fetch zitadel dsn in zitadel-operator
* chore: use dns for sentry environment as soon as parsed
* fix: trust ca certs
* ci: update orbos
* docs: add usage data explanation
* fix: dont send validation errors
* docs: improve ingestion data explanation
* style: rename flag --disable-ingestion to --disable-analytics
* fix: pass --disable-analytics flag to self deployments
* fix: destroy command for sentry
* fix: update orbos
* fix: only switch environment if analytics is enabled
* fix: ensure SENTRY_DSN is always set
* test: test empty sentry dsn
* ci: invalidate build caches
* chore: use zitadel-dev if no version is passed
* chore: combine dev releases in sentry
* refactor: only check for semrel if sentry is enabled
* early prototyp
* fix some errors
* remove docker image cache
* add comment
* add false
* typo
* test cache speed
* upload artifact
* remove tag
* seperate after build step
* debug
* debug
* debug
* debug
* debug
* test gh
* test
* test
* test
* test
* test golang
* test go
* test with release image
* fix
* use scratch to export
* test
* fix path
* ref
* typo
* debug
* test
* debug
* speed up docker
* test
* debug
* debug
* try scope
* test cache
* restore cache
* reenable operator build
* fix duplicate
* fix buildpush version
* test cache
* improve caching
* test release IF
* only run console and zitadel without dispatch
* test with reworked operator
* testing without release step
* lint yaml
* fix if
* improve wording
* enable release step & only notify sentry on main
* console from file system
* update docker file paths
* remove migration line
* add statik for operator
* console files using go 1.15
* fix console default path
* improve code QL
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* fix: generate admin api
* fix: generate admin api
* fix: generate admin api
* fix: http option
* fix: admin api
* fix: md files
* fix: correct headers
* fix: proto definitions
* fix: proto api
* fix: proto api
* fix: proto api
* fix: proto api
* initital ide
* init
* it is alive
* go test is running
* wip with buildkit
* it definitly alive
* all done, now the github actions
* pretty
* before i delete the generated proto stub
* delete generated code
* mount of grpc does not yet work
* save before
* level of insanity 1000%
* huhur
* gh action new dockerfile
* fix
* fix
* fix
* fix
* amd64 only
* try caching
* try with reg
* test with artifact upload
* trial
* add comments
* publish branchname
* correct vars
* correct id
* mode max for cache
* remove unused code
* cleanup
* test action which uploads coverage
* use
* proper path
* debug file location
* path
* test if ci still works
* correct docker file name
