zitadel/internal/api
Stefan Benz 539e8ed5cc
fix: add allowRegister check for register handling in login (#8782)
# Which Problems Are Solved

There is currently the possibility that you can jump to the register
path, even if register is disallowed through the settings.

# How the Problems Are Solved

Check before handling the HTTP requests if register is allowed.

# Additional Changes

Function to determine the resourceowner for all register related
functionality in the login.

# Additional Context

closes #8123
2024-10-16 15:52:26 +02:00
..
assets feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00
authz fix(API): select org context by domain (#8706) 2024-10-02 06:38:54 +00:00
call fix: reset the call timestamp after a bulk trigger (#6080) 2023-07-07 08:15:05 +00:00
grpc fix: add domain as attribute to list user auth methods (#8718) 2024-10-10 16:50:53 +00:00
http feat(oidc): use web keys for token signing and verification (#8449) 2024-08-23 14:43:46 +02:00
idp chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
info fix: correct method and path for session api activity (#6880) 2023-11-22 12:12:23 +02:00
oidc fix: ignore projectID and origin check for service accounts (#8704) 2024-10-01 16:38:28 +02:00
robots_txt fix: introduce measures to avoid bots crawling and indexing activities (#5728) 2023-05-05 10:25:02 +02:00
saml fix(eventstore): revert precise decimal (#8527) (#8679) 2024-09-24 18:43:29 +02:00
service fix(eventstore): tests 2020-11-26 09:19:14 +01:00
ui fix: add allowRegister check for register handling in login (#8782) 2024-10-16 15:52:26 +02:00
api.go feat: trusted (instance) domains (#8369) 2024-07-31 18:00:38 +03:00