Livio Spring 6d6e96cc87 fix(login v1): update password verification handling (#11202) ...

# Which Problems Are Solved

Failed password attempts in login V1 potentially created new session
entries.

# How the Problems Are Solved

Correct handling to only update existing sessions.

# Additional Changes

None

# Additional Context

- reported through support
- requires backport to v4.x

(cherry picked from commit d79bfe6eba)

2025-12-17 09:32:46 +01:00

..

actions

fix(actions v1): return org metadata again (#11040)

2025-11-05 15:44:46 +00:00

activity

…

admin/repository/eventsourcing

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-30 07:11:26 +02:00

api

fix: Force v2 permission checks on user listing

2025-12-10 13:15:15 +01:00

auth/repository

fix(login v1): update password verification handling (#11202)

2025-12-17 09:32:46 +01:00

auth_request/repository

fix: cleanup information in logs (#10634)

2025-09-03 16:42:47 +02:00

authz

fix: check for 2fa even if not enforced

2025-10-29 10:14:15 +01:00

cache

fix(cache): use key versioning (#10657)

2025-09-16 07:19:12 +02:00

command

fix test

2025-11-05 09:59:51 +01:00

config

fix linting

2025-12-08 10:49:58 +01:00

crypto

feat(api): integrates drupal7 hash verifier from passwap (#10918)

2025-10-29 06:57:44 +01:00

database

feat: await initial database connection (#10869)

2025-10-16 08:04:30 +02:00

domain

fix(api): correct permission check in organization v2beta service

2025-11-05 09:36:48 +01:00

eventstore

fix(projection): locking behavior based on configuration (#11014)

2025-10-31 16:22:35 +01:00

execution

fix(actionsV2): executing request/response type for 'all' condition (#11071)

2025-12-08 07:39:16 +01:00

feature

fix: remove legacy events (#10464)

2025-08-21 09:24:03 +02:00

form

…

i18n

fix: use a single translator for middleware (#10633)

2025-09-15 08:30:05 +02:00

iam

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-30 07:11:26 +02:00

id

…

idp

fix(zitadel): LDAP binding error with non-ASCII characters in DN (#10578)

2025-10-16 08:05:48 +02:00

integration

feat(api): move instance service to v2 (#10919)

2025-10-28 15:10:54 +01:00

logstore

…

migration

feat(service ping): add additional resource counts (#10621)

2025-09-15 08:30:02 +02:00

net

…

notification

fix: sanitize host headers before use

2025-10-29 10:07:05 +01:00

org

…

project

…

protoc

…

qrcode

…

query

fix: Force v2 permission checks on user listing

2025-12-10 13:15:15 +01:00

queue

fix: correct river otel metrics units (#10425)

2025-09-01 13:10:52 +02:00

renderer

fix: use a single translator for middleware (#10633)

2025-09-15 08:30:05 +02:00

repository

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-30 07:11:26 +02:00

serviceping

fix(service ping): log body size of reports (#10686)

2025-09-16 15:20:27 +02:00

static

chore(console): more natural phrasing for grant type warning message (#11111)

2025-12-08 07:38:57 +01:00

statik

…

telemetry

fix: drop default otel scope info from metrics (#10306)

2025-08-15 14:46:31 +02:00

test

…

user

fix(login v1): handle old sessions in logout (#10926)

2025-10-27 08:35:20 +01:00

v2

…

view/repository

…

webauthn

fix: sanitize host headers before use

2025-10-29 10:07:05 +01:00

zerrors

…