Commit Graph

3024 Commits

Author SHA1 Message Date
Tim Möhlmann
062d153cfe
feat: impersonation roles (#7442)
* partial work done

* test IAM membership roles

* org membership tests

* console :(, translations and docs

* fix integration test

* fix tests

* add EnableImpersonation to security policy API

* fix integration test timestamp checking

* add security policy tests and fix projections

* add impersonation setting in console

* add security settings to the settings v2 API

* fix typo

* move impersonation to instance

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-28 10:21:11 +00:00
Livio Spring
68af4f59c9
fix(api): handle user disabling events correctly in session API (#7380)
This PR makes sure that user disabling events (deactivate, locked, ...) are correctly checked for sessions.
2024-02-28 09:30:05 +00:00
Tim Möhlmann
26d1563643
feat(api): feature flags (#7356)
* feat(api): feature API proto definitions

* update proto based on discussion with @livio-a

* cleanup old feature flag stuff

* authz instance queries

* align defaults

* projection definitions

* define commands and event reducers

* implement system and instance setter APIs

* api getter implementation

* unit test repository package

* command unit tests

* unit test Get queries

* grpc converter unit tests

* migrate the V1 features

* migrate oidc to dynamic features

* projection unit test

* fix instance by host

* fix instance by id data type in sql

* fix linting errors

* add system projection test

* fix behavior inversion

* resolve proto file comments

* rename SystemDefaultLoginInstanceEventType to SystemLoginDefaultOrgEventType so it's consistent with the instance level event

* use write models and conditional set events

* system features integration tests

* instance features integration tests

* error on empty request

* documentation entry

* typo in feature.proto

* fix start unit tests

* solve linting error on key case switch

* remove system defaults after discussion with @eliobischof

* fix system feature projection

* resolve comments in defaults.yaml

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-28 10:55:54 +02:00
Tim Möhlmann
2801167668
chore(make): add docker_image make target (#7440) 2024-02-27 16:29:09 +00:00
Fabi
53099a282a
docs: log module for actions (#7448)
* docs: log module for actions

* Update modules.md

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-27 08:39:21 +00:00
Livio Spring
b877abd7a2
fix(login): ignore domain suffix for email / phone check (#7446)
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-26 14:05:18 +00:00
Fabi
0542b29517
docs: Contribution guidelines (#7443)
* docs: gender neutrality

* docs: gender neutrality

* docs: gender neutrality

* Update docs/docs/concepts/features/identity-brokering.md

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* Update docs/docs/guides/integrate/login-ui/mfa.mdx

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* Update docs/docs/guides/integrate/login-ui/passkey.mdx

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* Update internal/static/i18n/en.yaml

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* Update internal/static/i18n/en.yaml

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-26 13:11:09 +00:00
Stefan Benz
2731099db3
feat: add executions for actions v2 (#7433)
* feat: add events for execution

* feat: add events for execution and command side

* feat: add events for execution and command side

* feat: add api endpoints for set and delete executions with integration tests

* feat: add integration and unit tests and more existence checks

* feat: add integration and unit tests and more existence checks

* feat: unit tests for includes in executions

* feat: integration tests for includes in executions

* fix: linting

* fix: update internal/api/api.go

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* fix: update internal/command/command.go

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* fix: apply suggestions from code review

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* fix: change api return

* fix: change aggregateID with prefix of execution type and add to documentation

* fix: change body in proto for documentation and correct linting

* fix: changed existing check to single query in separate writemodel

* fix: linter changes and list endpoints for conditions in executions

* fix: remove writemodel query on exeuction set as state before is irrelevant

* fix: testing for exists write models and correction

* fix: translations for errors and event types

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-26 12:49:43 +02:00
mffap
ce7ebffa84
docs: update headings for custom login ui (#7453)
update headings for custom login ui
2024-02-26 10:02:07 +00:00
mffap
da8a79f280
docs(integrate): Update login users docs (#7414)
* wip

* update intro of device auth

* add custom domain concept

* wip sidebar

* wip introduction

* add passkeys

* replace azure ad with entra id

* wip

* wip

* login methods

* expand sections automatically

* update selfservice docs

* wip - hosted done

* move onboarding

* clean up

* wip

* unbreak my hrefs

* finish login users

* update managers

* add console as feature

* update b2b with multi-tenancy

* update saml

* update console concept

* add opaque tokens as knowledge

* redirects

* intro b2b

* remove login/saml

* unbreak link

* Apply suggestions from code review

Co-authored-by: Fabi <fabienne@zitadel.com>

* passkeys: add custom domain first

* update passkeys

* Apply suggestions from code review

Co-authored-by: Florian Forster <florian@zitadel.com>

* Update docs/docs/guides/integrate/login/login-users.mdx

Co-authored-by: Florian Forster <florian@zitadel.com>

---------

Co-authored-by: Fabi <fabienne@zitadel.com>
Co-authored-by: Florian Forster <florian@zitadel.com>
2024-02-26 13:04:09 +05:30
Tim Möhlmann
1890e28f79
fix(eventstore): retry push on primary key sequence collision (#7420)
* fix(eventstore): retry push on primary key sequence collision

* MaxRetries config option and unit test
2024-02-23 08:29:10 +00:00
Omar Mokhtar
71373caab3
docs(integrate): fix typo in logout page (#7438)
fix typo in logout.md
2024-02-23 07:49:41 +00:00
Elio Bischof
4f54cfb0a9
fix(projections): stop updating creation dates (#6930)
* feat: return 404 or 409 if org reg disallowed

* fix: system limit permissions

* feat: add iam limits api

* feat: disallow public org registrations on default instance

* add integration test

* test: integration

* fix test

* docs: describe public org registrations

* avoid updating docs deps

* fix system limits integration test

* silence integration tests

* fix linting

* ignore strange linter complaints

* review

* improve reset properties naming

* redefine the api

* use restrictions aggregate

* test query

* simplify and test projection

* test commands

* fix unit tests

* move integration test

* support restrictions on default instance

* also test GetRestrictions

* self review

* lint

* fix(projections): stop updating creation dates

* abstract away resource owner

* fix tests

* update main

* fix tests
2024-02-22 17:25:47 +00:00
Elio Bischof
a88662bb3a
fix(smtp): support UTF-8 subjects (#7432)
fix(smtp): support utf8 subjects
2024-02-22 15:11:55 +01:00
David Schneider
ffdde825ec
fix(backend): respect start flags in all commands (#6621)
* fix(backend): respect start flags in all commands

Currently flags like --externalDomain do only work in the last
registered command which currently is start-from-setup.
This creates the flags globally in the init function in uses them for
all start commands.

* fix(backend): remove viper defaults in start flags

At this point viper is not yet initialized so this defaults would have
not effect either.

* Remove flag name variables and run go mod tidy

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-21 12:26:51 +00:00
Tim Möhlmann
1d6dfadad8
fix(oidc): return bad request for an invalid refresh token (#7419) 2024-02-20 16:54:52 +01:00
Silvan
1791f46424
docs: change examples to psql (#7358)
Replaces CockroachDB as default in self hosting examples. 

* Update docs/docs/concepts/architecture/software.md

Co-authored-by: Elio Bischof <elio@zitadel.com>

* Update docs/docs/concepts/architecture/software.md

Co-authored-by: Elio Bischof <elio@zitadel.com>

---------

Co-authored-by: Elio Bischof <elio@zitadel.com>
2024-02-20 08:33:50 +00:00
Livio Spring
462f5462dc
docs: improve apis description (#7400)
* docs: improve apis description

* focus on version

* link to state
2024-02-19 15:39:36 +01:00
Tim Möhlmann
0b77fd4c17
chore(docs): redirect globs in development mode (#7114)
* chore(docs): redirect globs in development mode

* Update applications.mdx
2024-02-19 09:27:51 +00:00
Elio Bischof
585988bd83
chore(ci): merge test runs (#7388)
* chore(ci): merge test runs

* docs: improve CONTRIBUTING.md

* expect failure

* expect failure unit

* cleanup

* fix: correct binding in integration tests

* fix: correct binding in integration tests

---------

Co-authored-by: Stefan Benz <stefan@caos.ch>
2024-02-19 07:50:37 +01:00
Elio Bischof
19af2f7372
feat: support whole config as env (#6336)
* fix existing env vars

* feat: support all config by env

* cleanup

* remove system users hook

* decode system users in setup
2024-02-16 16:04:42 +00:00
Fabi
32c7efea73
docs: Prevent console access (#7398)
* docs: prevent users from accessing ZITADEL console

* docs: prevent users from accessing ZITADEL console

* docs: prevent users from accessing ZITADEL console

* Update docs/docs/guides/solution-scenarios/disable-console.mdx

Co-authored-by: mffap <mpa@zitadel.com>

* Update docs/docs/guides/solution-scenarios/disable-console.mdx

Co-authored-by: mffap <mpa@zitadel.com>

* Update docs/docs/guides/solution-scenarios/disable-console.mdx

Co-authored-by: mffap <mpa@zitadel.com>

* Update docs/docs/guides/solution-scenarios/disable-console.mdx

Co-authored-by: mffap <mpa@zitadel.com>

* docs: deafult redirect url

* docs: prevent console access

* docs: prevent console access

---------

Co-authored-by: mffap <mpa@zitadel.com>
2024-02-16 15:40:45 +00:00
mffap
882d410283
docs: fix broken links (#7401) 2024-02-16 15:10:12 +00:00
Livio Spring
00d245eaf3
chore(codeql): use go version from go.mod (#6807)
* chore(codeql): use go version from go.mod

* try 2.15.0 explicitly

* tag version

* Update codeql.yml

* Update codeql.yml

* try make

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* Update codeql.yml

* use make compile and remove matrix check

* Update codeql.yml

* Update codeql.yml

* retry autobuild

* Update codeql.yml

* try autobuild with generated stub

* chore: change init step for codeQL

* chore: codeql

* chore: try new codeql version

* chore: new codeql-action version

* chore: new codeql-action version

* chore: new codeql-action version

* chore: new codeql-action version

---------

Co-authored-by: Stefan Benz <stefan@caos.ch>
2024-02-16 10:54:41 +00:00
Stefan Benz
35c313c691
docs: add mocksaml for saml sp example (#7355)
Co-authored-by: Fabi <fabienne@zitadel.com>
2024-02-15 14:34:02 +01:00
Livio Spring
104034c628
chore(api): initial definition of API for user schemas (user v3 and user schema v3 service) (#7372)
Adds the initial proto definition for a new user service (v3) based on user schema and it's corresponding user schema service (v3)
2024-02-15 11:22:48 +01:00
Livio Spring
d5266ea51c
fix: set user agent cookie on host only (without subdomains) (#7297)
This PR changes the domain / prefix of the user agent cookie from including the subdomain to the domain only and therefore changing the prefix from __Secure to __Host.

Note:
As the cookie is used to determine existing session on the login UI, applying the change will require end-users to start a new session on the next login, since the existing ones cannot be retrieved anymore.
2024-02-15 07:53:59 +01:00
Stefan Benz
198bc017b8
feat: actions v2 execution targets command side (#7384)
Adds the API to create, update, delete targets for execution in a new ExecutionService (v3alpha)
2024-02-15 05:39:10 +00:00
Miguel Cabrerizo
518c8f486e
fix(console): broken layout and colors in keyboard shortcuts modal (#7276)
* fix(console): broken styles in keyboards shortcut modal

* fix(e2e): increase timeout for org delete test

* fix: ugly space in button between top border and background color when hovered
2024-02-14 15:45:41 +00:00
Miguel Cabrerizo
e81a24b92d
fix(console): height fit-content for 2FA buttons (#7335)
* fix(console): height fit-content for 2FA buttons

* add flex

---------

Co-authored-by: peintnermax <max@caos.ch>
2024-02-14 13:29:34 +00:00
Yordis Prieto
2e41764d27
docs: Update retrieve-user-roles.md (#7374)
Update retrieve-user-roles.md

I feel this should be an important message to read

Co-authored-by: Fabi <fabienne@zitadel.com>
2024-02-14 12:54:19 +00:00
Miguel Cabrerizo
4789734946
fix(console): change console favicon (#7366)
* feat: initial favicon poc

* feat: reload page if icons changed and we apply config

---------

Co-authored-by: Max Peintner <max@caos.ch>
2024-02-14 08:38:53 +00:00
Stefan Benz
f6995fcb6c
feat: add implementation for resend of email and phone code (#7348)
* fix: add implementation for resend of email and phone code

* fix: add implementation for resend of email and phone code

* fix: add implementation for resend of email and phone code

* fix: add implementation for resend of email and phone code

* fix: add implementation for resend of email and phone code

* fix: add implementation for resend of email and phone code

* fix: apply suggestions from code review

Co-authored-by: Livio Spring <livio.a@gmail.com>

* fix: review changes to remove resourceowner as parameters

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-14 07:22:55 +00:00
Fabi
fb288401b7
docs: Updated outdated information and screenshots for customer portal docs (#7326)
* docs: updating customer portal docs

* docs: portal instance page docs updated

* docs: portal in docs updated

* Update docs/docs/guides/manage/cloud/billing.md

---------

Co-authored-by: Max Peintner <max@caos.ch>
2024-02-13 12:22:42 +00:00
Miguel Cabrerizo
83ed1f37d8
fix: trim whitespaces in redirect, post and origins uris set through console (#7334)
* fix: trim whitespaces in redirect, postlogout and origins uris set through console

* fix: add @livio-a review suggestions
2024-02-12 09:56:55 +01:00
Filip Sandborg
f0ba2b955a
fix: db MaxOpenConns setting (#7360)
* Fix pg MaxOpenConns setting

* fix: crdb open conns

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-09 13:43:01 +01:00
Fabi
a065ddc706
docs: Make Examples and SDK Pages easier to understand (#7291)
* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: first attempt to restructure the sdks and examples to make it better understandable

* docs: adding more example pages

* docs: adding more example pages

* docs: add all sdk/examples

* docs: add tile component

* docs: introduction page

* docs: introduction page

* docs: add react

* docs: remove old sdk and example pages

* docs: fix broken links

* docs: fix broken links

* styles

* Update docs/docs/sdk-examples/introduction.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update docs/docs/sdk-examples/java.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update docs/docs/sdk-examples/python.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update docs/docs/sdk-examples/python.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* docs: review changes

* docs: smaller tiles

* docs: changes from go and java review

* docs: correct python description

* Update docs/docs/sdk-examples/python.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update docs/docs/sdk-examples/introduction.mdx

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* Update docs/docs/sdk-examples/python.mdx

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* docs: flask logo

* flask, rust imgs

* docs: flask logo

* Update go.mdx

* Update java.mdx

* Update docs/docs/sdk-examples/flutter.mdx

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update docs/src/css/tile.module.css

Co-authored-by: Livio Spring <livio.a@gmail.com>

* docs: sidebar alphabetic

* docs: sidebar alphabetic

* docs: django logo

---------

Co-authored-by: peintnermax <max@caos.ch>
Co-authored-by: Livio Spring <livio.a@gmail.com>
Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
Co-authored-by: Stefan Benz <stefan@caos.ch>
2024-02-07 12:44:20 +01:00
mffap
59dcd6f498
docs: logo jumps to home page (#7329) 2024-02-06 14:52:45 +00:00
Max Peintner
ca49e0f532
fix(console): simplify instance page (#7274)
* move settings, rm nav for single org

* move instance pages to settings

* i18n

* revalidate orgs on create

* Update bg.json

* show custome portal link

* Update console/src/app/modules/settings-list/settings.ts

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update console/src/app/modules/settings-list/settings.ts

Co-authored-by: Livio Spring <livio.a@gmail.com>

* Update console/src/app/modules/settings-list/settings.ts

Co-authored-by: Livio Spring <livio.a@gmail.com>

* add org page to instance settings

* iam.read for org list

* i18n

* instance imgs, cleanup

* rm unused imgs

* remove unused imgs, replace default settings imgs

* event image

* e2e url

* instance url

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-06 14:35:43 +01:00
Livio Spring
7f7fb55f34
fix: use configured binding on SAML IDPs and make sure CSP doesn't block POST binding (#7341)
fix: use configured binding on SAML IDPs and make sure CSP doesn't block POST binding
2024-02-05 14:45:15 +00:00
Stefan Benz
c081f72d85
docs: python django example for login in secure api (#7285)
* docs: python django example docs

* docs: python django example docs

* docs: python django example docs

* docs: change django example with review

* docs: python django example docs

* docs: python django example docs

* docs: apply suggestions from code review

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

* docs: python django example docs

* docs: python django example docs

* docs: python django example docs

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-02 15:20:45 +00:00
Fabi
e699103303
chore: update pm board action (#7330)
automatically ad prs of non engineers to board and label community prs
2024-02-02 10:59:37 +00:00
Max Peintner
a9ddb464a8
docs: react sdk guide, update quickstart guide to use @zitadel/react (#7300)
* docs: react sdk

* docs

* doc

* checkbox, screen

* update quick start guide for react

* rm old react

* react

* cleanup quickstart guide

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* Update docs/docs/examples/login/react.md

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>

* react + / vue -

* remove welcome from screenshot

---------

Co-authored-by: Dakshitha Ratnayake <dakshitha@users.noreply.github.com>
2024-02-02 08:29:02 +01:00
Fabi
55c9eb08f1
docs: add missing word (#7324)
Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-02-01 07:59:53 +00:00
Livio Spring
6bfa66cfa3
docs: fix init-projections flag value (#7325) 2024-02-01 07:12:29 +00:00
Dominik Müller
6f3f67cde7
docs: self-hosting doc link (#7249)
* fix: self-hosting doc link

exchanged localhost link for relative link to docs

* fix: updated base path for relative doc link
2024-01-31 12:34:34 +00:00
Livio Spring
e000fdd792
fix: handle context correctly in processEvents (#7320) 2024-01-31 11:25:28 +01:00
Miguel Cabrerizo
46bffd24ee
feat(console): allow filter org by primary domain on instance (#7283)
* feat: i18n translations

* feat: add primary domain to filter-org component

* fix: add listOrgs service to admin and use it for org-table component

---------

Co-authored-by: Max Peintner <max@caos.ch>
2024-01-30 16:09:47 +00:00
Silvan
aa407c3c3e
fix(auth): optimise user sessions (#7199)
* fix(auth): start optimise user sessions

* reduce and query user sessions directly without gorm statements

* cleanup

* cleanup

* fix requested changes

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-30 15:17:54 +00:00
Livio Spring
c20204d84d
fix: set userAgentID in password change event if available (#7319) 2024-01-30 15:36:34 +01:00