zitadel/internal/api/oidc/integration_test
Livio Spring 5b40af79f0
fix: correctly check user state (#8631)
# Which Problems Are Solved

ZITADEL's user account deactivation mechanism did not work correctly
with service accounts. Deactivated service accounts retained the ability
to request tokens, which could lead to unauthorized access to
applications and resources.

# How the Problems Are Solved

Additionally to checking the user state on the session API and login UI,
the state is checked on all oidc session methods resulting in a new
token or when returning the user information (userinfo, introspection,
id_token / access_token and saml attributes)
2024-09-17 13:21:49 +00:00
..
auth_request_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
client_test.go fix: correctly check app state on authentication (#8630) 2024-09-17 11:34:14 +00:00
keys_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
oidc_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
server_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
token_client_credentials_test.go fix: correctly check user state (#8631) 2024-09-17 13:21:49 +00:00
token_exchange_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
token_jwt_profile_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
userinfo_test.go chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00