mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 04:18:01 +00:00
7caa43ab23
# Which Problems Are Solved The action v2 messages were didn't contain anything providing security for the sent content. # How the Problems Are Solved Each Target now has a SigningKey, which can also be newly generated through the API and returned at creation and through the Get-Endpoints. There is now a HTTP header "Zitadel-Signature", which is generated with the SigningKey and Payload, and also contains a timestamp to check with a tolerance if the message took to long to sent. # Additional Changes The functionality to create and check the signature is provided in the pkg/actions package, and can be reused in the SDK. # Additional Context Closes #7924 --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
41 lines
1.8 KiB
SQL
41 lines
1.8 KiB
SQL
WITH RECURSIVE
|
|
matched AS (SELECT *
|
|
FROM projections.executions1
|
|
WHERE instance_id = $1
|
|
AND id = ANY($2)
|
|
ORDER BY id DESC
|
|
LIMIT 1),
|
|
matched_targets_and_includes AS (SELECT pos.*
|
|
FROM matched m
|
|
JOIN
|
|
projections.executions1_targets pos
|
|
ON m.id = pos.execution_id
|
|
AND m.instance_id = pos.instance_id
|
|
ORDER BY execution_id,
|
|
position),
|
|
dissolved_execution_targets(execution_id, instance_id, position, "include", "target_id")
|
|
AS (SELECT execution_id
|
|
, instance_id
|
|
, ARRAY [position]
|
|
, "include"
|
|
, "target_id"
|
|
FROM matched_targets_and_includes
|
|
UNION ALL
|
|
SELECT e.execution_id
|
|
, p.instance_id
|
|
, e.position || p.position
|
|
, p."include"
|
|
, p."target_id"
|
|
FROM dissolved_execution_targets e
|
|
JOIN projections.executions1_targets p
|
|
ON e.instance_id = p.instance_id
|
|
AND e.include IS NOT NULL
|
|
AND e.include = p.execution_id)
|
|
select e.execution_id, e.instance_id, e.target_id, t.target_type, t.endpoint, t.timeout, t.interrupt_on_error, t.signing_key
|
|
FROM dissolved_execution_targets e
|
|
JOIN projections.targets2 t
|
|
ON e.instance_id = t.instance_id
|
|
AND e.target_id = t.id
|
|
WHERE "include" = ''
|
|
ORDER BY position DESC;
|