zitadel/internal/api/grpc/auth
Elio Bischof 4980cd6a0c
feat: add SYSTEM_OWNER role (#6765)
* define roles and permissions

* support system user memberships

* don't limit system users

* cleanup permissions

* restrict memberships to aggregates

* default to SYSTEM_OWNER

* update unit tests

* test: system user token test (#6778)

* update unit tests

* refactor: make authz testable

* move session constants

* cleanup

* comment

* comment

* decode member type string to enum (#6780)

* decode member type string to enum

* handle all membership types

* decode enums where necessary

* decode member type in steps config

* update system api docs

* add technical advisory

* tweak docs a bit

* comment in comment

* lint

* extract token from Bearer header prefix

* review changes

* fix tests

* fix: add fix for activityhandler

* add isSystemUser

* remove IsSystemUser from activity info

* fix: add fix for activityhandler

---------

Co-authored-by: Stefan Benz <stefan@caos.ch>
2023-10-25 15:10:45 +00:00
..
avatar.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
email_converter.go fix: make user creation errors helpful (#5382) 2023-03-14 19:20:38 +00:00
email.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
idp_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
idp.go feat(eventstore): increase parallel write capabilities (#5940) 2023-10-19 12:19:10 +02:00
information.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
language.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
metadata_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
multi_factor.go feat(api): add and remove OTP (SMS and email) (#6295) 2023-08-02 18:57:53 +02:00
password_complexity.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
password.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
passwordless.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
permission_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
permission.go feat(eventstore): increase parallel write capabilities (#5940) 2023-10-19 12:19:10 +02:00
phone_converter.go fix: make user creation errors helpful (#5382) 2023-03-14 19:20:38 +00:00
phone.go feat(login): add OTP (email and sms) (#6353) 2023-08-15 12:47:05 +00:00
policy.go feat(auth api): expose login policy of authenticated user (#4979) 2023-01-05 13:04:38 +00:00
profile_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
profile.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
refresh_token.go fix(current_sequence): no error if not found (#3740) 2022-05-31 11:50:51 +00:00
server.go feat: add SYSTEM_OWNER role (#6765) 2023-10-25 15:10:45 +00:00
user_grant.go chore(console): remove first and lastName fallback from user (#5629) 2023-04-11 15:56:51 +00:00
user.go feat: limit audit trail (#6744) 2023-10-25 11:42:00 +00:00