zitadel/internal/repository
Tim Möhlmann 5fd2061770
feat(oidc): allow returning of parent errors to client (#8376)
# Which Problems Are Solved

Currently the OIDC API of ZITADEL only prints parent errors to the logs.
Where 4xx status are typically warn level and 5xx error level. This
makes it hard to debug certain errors for client in multi-instance
environments like ZITADEL cloud, where there is no direct access to
logs. In case of support requests we often can't correlate past
log-lines to the error that was reported.

This change adds the possibility to return the parent error in the
response to the OIDC client. For the moment this only applies to JSON
body responses, not error redirects to the RP.

# How the Problems Are Solved

- New instance-level feature flag: `debug_oidc_parent_error`
- Use the new `WithReturnParentToClient()` function from the oidc lib
introduced in https://github.com/zitadel/oidc/pull/629 for all cases
where `WithParent` was already used and the request context is
available.

# Additional Changes

none

# Additional Context

- Depends on: https://github.com/zitadel/oidc/pull/629
- Related to: https://github.com/zitadel/zitadel/issues/8362

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-08-20 06:45:24 +00:00
..
action fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
asset refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
authrequest fix(oidc): store requested response_mode (#8145) 2024-06-17 09:50:12 +00:00
deviceauth perf(oidc): optimize token creation (#7822) 2024-05-16 07:07:56 +02:00
execution feat(v3alpha): write actions (#8225) 2024-07-31 14:42:12 +02:00
feature feat(oidc): allow returning of parent errors to client (#8376) 2024-08-20 06:45:24 +00:00
flow refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
idp feat(saml): allow setting nameid-format and alternative mapping for transient format (#7979) 2024-05-23 05:04:07 +00:00
idpconfig refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
idpintent fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
instance feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00
keypair feat(v3alpha): web key resource (#8262) 2024-08-14 14:18:14 +00:00
limits fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
member refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
metadata refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
milestone fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
oidcsession perf(oidc): optimize token creation (#7822) 2024-05-16 07:07:56 +02:00
org perf(import): optimize search for domains claimed by other organizations (#8200) 2024-07-05 09:36:00 +02:00
policy feat(cnsl): docs link can be customized and custom button is available (#7840) 2024-05-13 16:01:50 +02:00
project perf(command): user grant pre-condition check using the search table (#8230) 2024-07-04 16:18:43 +00:00
pseudo feat: push telemetry (#6027) 2023-07-06 08:38:13 +02:00
quota fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
restrictions fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
session feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00
settings refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
target feat: add action v2 execution on requests and responses (#7637) 2024-05-04 11:55:57 +02:00
user feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00
usergrant refactor(fmt): run gci on complete project (#7557) 2024-04-03 10:43:43 +00:00
webkey feat(v3alpha): web key resource (#8262) 2024-08-14 14:18:14 +00:00