TheArchive/zitadel

mirror of https://github.com/zitadel/zitadel.git synced 2025-11-14 22:53:36 +00:00

Files

History

Livio Spring 8f88c4cf5b feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373 )

# Which Problems Are Solved

Some OAuth2 and OIDC providers require the use of PKCE for all their
clients. While ZITADEL already recommended the same for its clients, it
did not yet support the option on the IdP configuration.

# How the Problems Are Solved

- A new boolean `use_pkce` is added to the add/update generic OAuth/OIDC
endpoints.
- A new checkbox is added to the generic OAuth and OIDC provider
templates.
- The `rp.WithPKCE` option is added to the provider if the use of PKCE
has been set.
- The `rp.WithCodeChallenge` and `rp.WithCodeVerifier` options are added
to the OIDC/Auth BeginAuth and CodeExchange function.
- Store verifier or any other persistent argument in the intent or auth
request.
- Create corresponding session object before creating the intent, to be
able to store the information.
- (refactored session structs to use a constructor for unified creation
and better overview of actual usage)

Here's a screenshot showing the URI including the PKCE params:


![use_pkce_in_url](https://github.com/zitadel/zitadel/assets/30386061/eaeab123-a5da-4826-b001-2ae9efa35169)

# Additional Changes

None.

# Additional Context

- Closes #6449
- This PR replaces the existing PR (#8228) of @doncicuto. The base he
did was cherry picked. Thank you very much for that!

---------

Co-authored-by: Miguel Cabrerizo <doncicuto@gmail.com>
Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>

2025-02-26 12:20:47 +00:00

..

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373 )

2025-02-26 12:20:47 +00:00

.editorconfig

feat(console): integrate frontend (#95 )

2020-05-13 14:41:43 +02:00

.eslintrc.js

fix(console): update eslint, redirect user without roles, private labeling save and icon (#4459 )

2022-09-29 05:25:57 +00:00

.gitignore

chore(console): buf stub build (#5215 )

2023-02-17 14:09:11 +00:00

.prettierignore

chore(e2e): formatting with prettier (#4385 )

2022-09-19 19:49:46 +02:00

.prettierrc

fix(console): use authService for auth user page (#5233 )

2023-02-27 12:03:44 +01:00

angular.json

feat: Use V2 API's in Console (#9312 )

2025-02-17 19:25:46 +01:00

buf.gen.yaml

chore(console): buf stub build (#5215 )

2023-02-17 14:09:11 +00:00

karma.conf.js

feat(console): integrate frontend (#95 )

2020-05-13 14:41:43 +02:00

ngsw-config.json

fix: update assets in ngsw-config.json (#1027 )

2020-11-27 16:32:14 +01:00

package.json

feat: Use V2 API's in Console (#9312 )

2025-02-17 19:25:46 +01:00

prebuild.development.js

chore(dev): fix fetching http env json (#5921 )

2023-05-24 13:07:55 +00:00

README.md

docs(contributing): remove guides folder (#4603 )

2022-10-24 08:43:24 +02:00

tsconfig.app.json

fix(console): angular 15 (#4809 )

2023-01-11 13:23:16 +00:00

tsconfig.json

feat: Posthog integration (#9077 )

2025-01-30 07:57:51 +01:00

tsconfig.spec.json

chore(console): dependency update (#5653 )

2023-04-18 15:42:29 +02:00

yarn.lock

feat: Use V2 API's in Console (#9312 )

2025-02-17 19:25:46 +01:00

README.md

Console

This project was generated with Angular CLI version 8.3.20.

Development server

Run ng serve for a dev server. Navigate to http://localhost:4200/. The app will automatically reload if you change any of the source files.

Code scaffolding

Run ng generate component component-name to generate a new component. You can also use ng generate directive|pipe|service|class|guard|interface|enum|module.

Build

Run ng build to build the project. The build artifacts will be stored in the dist/ directory. Use the --prod flag for a production build.

Running unit tests

Run ng test to execute the unit tests via Karma.

Running end-to-end tests

Please refer to the contributing guide

Further help

To get more help on the Angular CLI use ng help or go check out the Angular CLI README.