Tim Möhlmann 328c409271

fix(oidc): roles in service user ID token (#8561) ...

# Which Problems Are Solved

Return the user's project roles when the
`urn:zitadel:iam:org:projects:roles` scope is requested.
We alreayd returned it for access tokens, now also ID tokens.

# How the Problems Are Solved

Set `idTokenRoleAssertion` to `true` when calling
`accessTokenResponseFromSession` for service users. This parameter is
normally set to the client config. However, service user authentication
does not have a client.

# Additional Changes

- none

# Additional Context

- Introduced in https://github.com/zitadel/zitadel/pull/8046
- Closes https://github.com/zitadel/zitadel/issues/8107

Co-authored-by: Livio Spring <livio.a@gmail.com>

2024-09-11 04:45:59 +00:00

..

actions

feat(actions): allow getting metadata of organizations from user grants (#7782)

2024-04-22 11:34:23 +00:00

activity

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

admin/repository/eventsourcing

feat(cmd): mirror (#7004)

2024-05-30 09:35:30 +00:00

api

fix(oidc): roles in service user ID token (#8561)

2024-09-11 04:45:59 +00:00

auth/repository

fix: check if pw login allowed (#8584)

2024-09-10 12:55:32 +02:00

auth_request/repository

fix(login): correctly reload policies on auth request (#7839)

2024-04-24 08:44:55 +00:00

authz

fix: internal check of JWT access tokens (#8486)

2024-08-26 09:26:13 +00:00

command

feat: add http as sms provider (#8540)

2024-09-06 13:11:36 +00:00

config

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

crypto

feat(v3alpha): web key resource (#8262)

2024-08-14 14:18:14 +00:00

database

fix(eventstore): precise decimal (#8527)

2024-09-06 12:19:19 +03:00

domain

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

eventstore

fix(eventstore): precise decimal (#8527)

2024-09-06 12:19:19 +03:00

execution

feat: add schema user create and remove (#8494)

2024-08-28 19:46:45 +00:00

feature

feat(oidc): end session by id_token_hint and without cookie (#8542)

2024-09-04 10:14:50 +00:00

form

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

i18n

fix(middleware): init translation messages (#7778)

2024-04-16 12:08:18 +00:00

iam

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

id

feat(cmd): Added machine ID mode to zitadel start up logs (#8251)

2024-07-16 09:53:57 +00:00

idp

fix: encode ldap values to make valid UTF8 (#8210)

2024-06-28 13:46:54 +00:00

integration

chore(tests): use a coverage server binary (#8407)

2024-09-06 14:47:57 +02:00

logstore

perf: project quotas and usages (#6441)

2023-09-15 16:58:45 +02:00

migration

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

net

perf: project quotas and usages (#6441)

2023-09-15 16:58:45 +02:00

notification

feat: add http as sms provider (#8540)

2024-09-06 13:11:36 +00:00

org

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

project

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

protoc

merge main into next

2023-10-19 12:34:00 +02:00

qrcode

docs(legal): Updated agreements and policies v2 (#3823)

2022-06-15 08:30:58 +02:00

query

feat: add http as sms provider (#8540)

2024-09-06 13:11:36 +00:00

renderer

fix(login): (re)allow HTML in custom login texts (#7575)

2024-03-15 16:29:10 +01:00

repository

feat: add http as sms provider (#8540)

2024-09-06 13:11:36 +00:00

static

feat: add indonesia translation (#8459)

2024-09-03 16:05:47 +00:00

statik

chore: initial version of a devcontainer (#6352)

2023-08-15 10:49:05 +02:00

telemetry

feat: enable application performance profiling (#8442)

2024-08-16 13:26:53 +00:00

test

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

user

feat(oidc): end session by id_token_hint and without cookie (#8542)

2024-09-04 10:14:50 +00:00

v2

fix(eventstore): precise decimal (#8527)

2024-09-06 12:19:19 +03:00

view/repository

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

webauthn

chore(tests): use a coverage server binary (#8407)

2024-09-06 14:47:57 +02:00

zerrors

fix(crypto): reject decrypted strings with non-UTF8 characters. (#8374)

2024-08-02 08:38:37 +00:00