Files
zitadel/internal
Livio Spring ffe6d41588 fix(login v1): handle password reset when authenticating with email or phone number (#10228)
# Which Problems Are Solved

When authenticating with email or phone number in the login V1, users
were not able to request a password reset and would be given a "User not
found" error.
This was due to a check of the loginname of the auth request, which in
those cases would not match the user's stored loginname.

# How the Problems Are Solved

Switch to a check of the resolved userID in the auth request. (We still
check the user again, since the ID might be a placeholder for an unknown
user and we do not want to disclose any information by omitting a check
and reduce the response time.)

# Additional Changes

None

# Additional Context

- reported through support
- requires backport to v3.x
2025-07-10 09:29:26 +02:00
..
2025-06-27 17:25:44 +02:00
2025-05-02 13:44:24 +02:00
2024-01-02 14:26:31 +00:00
2025-04-02 16:53:06 +02:00
2024-01-02 14:26:31 +00:00
2025-06-27 17:25:44 +02:00
2025-07-02 13:57:41 +02:00