Stefan Benz 6780c5a07c fix: add resourceowner to check for project in project grant (#8785) ...

# Which Problems Are Solved

Resource owner can be different than expected if the provided
x-zitadel-orgid header is provided.

# How the Problems Are Solved

Check that the project is only checked with the correct resource owner
to avoid unexpected situations.

# Additional Changes

None

# Additional Context

Closes #8685

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>

2024-10-30 08:53:00 +00:00

..

actions

fix: correctly check denied domains and ips for actions (#8810)

2024-10-22 16:16:44 +02:00

activity

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

admin/repository/eventsourcing

feat(cmd): mirror (#7004)

2024-05-30 09:35:30 +00:00

api

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

auth/repository

fix: only allow domain discovery if no organization was preselected (#8748)

2024-10-10 15:29:53 +00:00

auth_request/repository

fix(login): correctly reload policies on auth request (#7839)

2024-04-24 08:44:55 +00:00

authz

docs: standardize multi-factor spelling and related string updates (#8752)

2024-10-22 14:59:16 +00:00

cache

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

command

fix: add resourceowner to check for project in project grant (#8785)

2024-10-30 08:53:00 +00:00

config

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

crypto

feat(v3alpha): web key resource (#8262)

2024-08-14 14:18:14 +00:00

database

perf(cache): pgx pool connector (#8703)

2024-10-04 13:15:41 +00:00

domain

fix: pass sessionID to OTP email link (#8745)

2024-10-10 13:53:32 +00:00

eventstore

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

execution

feat: add schema user create and remove (#8494)

2024-08-28 19:46:45 +00:00

feature

perf(oidc): disable push of user token meta-event (#8691)

2024-09-26 13:55:41 +00:00

form

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

i18n

fix(middleware): init translation messages (#7778)

2024-04-16 12:08:18 +00:00

iam

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

id

feat(cmd): Added machine ID mode to zitadel start up logs (#8251)

2024-07-16 09:53:57 +00:00

idp

fix(SAML): log underlying error if SAML response validation fails (#8721)

2024-10-11 07:04:15 +00:00

integration

chore: add await for project to oidc integration tests (#8809)

2024-10-23 07:36:50 +00:00

logstore

…

migration

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

net

…

notification

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

org

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

project

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

protoc

…

qrcode

…

query

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

renderer

fix(login): (re)allow HTML in custom login texts (#7575)

2024-03-15 16:29:10 +01:00

repository

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

static

docs: standardize multi-factor spelling and related string updates (#8752)

2024-10-22 14:59:16 +00:00

statik

…

telemetry

feat: enable application performance profiling (#8442)

2024-08-16 13:26:53 +00:00

test

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

user

fix: add domain as attribute to list user auth methods (#8718)

2024-10-10 16:50:53 +00:00

v2

fix(eventstore): revert precise decimal (#8527) (#8679)

2024-09-24 18:43:29 +02:00

view/repository

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

webauthn

fix: add domain as attribute to list user auth methods (#8718)

2024-10-10 16:50:53 +00:00

zerrors

fix(crypto): reject decrypted strings with non-UTF8 characters. (#8374)

2024-08-02 08:38:37 +00:00