mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-14 11:58:02 +00:00
5b40af79f0
# Which Problems Are Solved ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to unauthorized access to applications and resources. # How the Problems Are Solved Additionally to checking the user state on the session API and login UI, the state is checked on all oidc session methods resulting in a new token or when returning the user information (userinfo, introspection, id_token / access_token and saml attributes) |
||
|---|---|---|
| .. | ||
| assets | ||
| authz | ||
| call | ||
| grpc | ||
| http | ||
| idp | ||
| info | ||
| oidc | ||
| robots_txt | ||
| saml | ||
| service | ||
| ui | ||
| api.go | ||