zitadel/internal/api
Tim Möhlmann 328c409271
fix(oidc): roles in service user ID token (#8561)
# Which Problems Are Solved

Return the user's project roles when the
`urn:zitadel:iam:org:projects:roles` scope is requested.
We alreayd returned it for access tokens, now also ID tokens.

# How the Problems Are Solved

Set `idTokenRoleAssertion` to `true` when calling
`accessTokenResponseFromSession` for service users. This parameter is
normally set to the client config. However, service user authentication
does not have a client.

# Additional Changes

- none

# Additional Context

- Introduced in https://github.com/zitadel/zitadel/pull/8046
- Closes https://github.com/zitadel/zitadel/issues/8107

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-09-11 04:45:59 +00:00
..
assets feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00
authz feat(v3alpha): read actions (#8357) 2024-08-12 22:32:01 +02:00
call fix: reset the call timestamp after a bulk trigger (#6080) 2023-07-07 08:15:05 +00:00
grpc fix(tests): check eventual web key state (#8587) 2024-09-10 11:15:25 +00:00
http feat(oidc): use web keys for token signing and verification (#8449) 2024-08-23 14:43:46 +02:00
idp chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
info fix: correct method and path for session api activity (#6880) 2023-11-22 12:12:23 +02:00
oidc fix(oidc): roles in service user ID token (#8561) 2024-09-11 04:45:59 +00:00
robots_txt fix: introduce measures to avoid bots crawling and indexing activities (#5728) 2023-05-05 10:25:02 +02:00
saml fix(eventstore): precise decimal (#8527) 2024-09-06 12:19:19 +03:00
service fix(eventstore): tests 2020-11-26 09:19:14 +01:00
ui feat: add indonesia translation (#8459) 2024-09-03 16:05:47 +00:00
api.go feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00