zitadel/internal/auth/repository
Livio Spring df2033253d
fix: only allow domain discovery if no organization was preselected (#8748)
# Which Problems Are Solved

If an organization was preselected using an orgID or primaryDomain
scope, users could still switch to another organization, if the latter
allowed domain discovery and the entered username / or login_hint
included the corresponding domain suffix.

# How the Problems Are Solved

Domain discovery will only be done in case no org was preselected.

# Additional Changes

None

# Additional Context

- closes https://github.com/zitadel/zitadel/issues/8464
- closes https://github.com/zitadel/zitadel/issues/8588
2024-10-10 15:29:53 +00:00
..
eventsourcing fix: only allow domain discovery if no organization was preselected (#8748) 2024-10-10 15:29:53 +00:00
auth_request.go feat(idp): provide option to auto link user (#7734) 2024-04-10 15:46:30 +00:00
org.go feat(login): use new IDP templates (#5315) 2023-02-28 21:20:58 +01:00
refresh_token.go chore: upgrade to oidc v2 release (#5437) 2023-03-28 11:28:56 +00:00
repository.go fix: move activity log to queries and remove old code (#3096) 2022-01-26 10:16:33 +01:00
token.go feat(eventstore): increase parallel write capabilities (#5940) 2023-10-19 12:19:10 +02:00
user_session.go refactor: cleanup unused code (#7130) 2024-01-02 14:26:31 +00:00
user.go feat(oidc): end session by id_token_hint and without cookie (#8542) 2024-09-04 10:14:50 +00:00