Stefan Benz c21e171519

fix: add allowRegister check for register handling in login (#8782) ...

# Which Problems Are Solved

There is currently the possibility that you can jump to the register
path, even if register is disallowed through the settings.

# How the Problems Are Solved

Check before handling the HTTP requests if register is allowed.

# Additional Changes

Function to determine the resourceowner for all register related
functionality in the login.

# Additional Context

closes #8123

2024-10-16 13:09:32 +00:00

..

static

feat(i18n): Add Hungarian language support to ZITADEL (#8645)

2024-10-11 09:00:50 +00:00

statik

feat: device authorization RFC 8628 (#5646)

2023-04-19 08:46:02 +00:00

auth_request.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

change_password_handler.go

feat: password age policy (#8132)

2024-06-18 11:27:44 +00:00

custom_action.go

fix: generalise permission check for query user information (#8458)

2024-08-23 06:44:18 +00:00

device_auth.go

feat(oidc): sid claim for id_tokens issued through login V1 (#8525)

2024-09-03 13:19:00 +00:00

external_provider_handler_test.go

fix: token for post authentication action and change phone and email (#5933)

2023-05-26 07:24:52 +00:00

external_provider_handler.go

fix: add allowRegister check for register handling in login (#8782)

2024-10-16 13:09:32 +00:00

health_handler.go

feat: run on a single port (#3163)

2022-02-14 17:22:30 +01:00

init_password_handler.go

fix: allow login with user created through v2 api without password (#8291)

2024-07-17 06:43:07 +02:00

init_user_handler.go

fix: user registration through IdP (#7893)

2024-05-02 13:21:03 +00:00

invite_user_handler.go

feat: invite user link (#8578)

2024-09-11 10:53:55 +00:00

jwt_handler.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

ldap_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

link_users_handler.go

feat(idp): provide auto only options (#8420)

2024-08-14 13:04:26 +00:00

login_handler.go

fix: potential panics in login and return proper http 405 (#8065)

2024-06-07 07:30:04 +00:00

login_success_handler.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

login.go

feat: org v2 ListOrganizations (#8411)

2024-08-15 06:37:06 +02:00

logout_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

mail_verify_handler.go

fix: add domain as attribute to list user auth methods (#8718)

2024-10-10 16:50:53 +00:00

mfa_init_done_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

mfa_init_sms.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_init_u2f.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_init_verify_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_prompt_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_verify_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_verify_otp_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

mfa_verify_u2f_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

password_complexity_policy_handler.go

perf(oidc): optimize the introspection endpoint (#6909)

2023-11-21 13:11:38 +01:00

password_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

password_reset_handler.go

fix: allow login with user created through v2 api without password (#8291)

2024-07-17 06:43:07 +02:00

passwordless_login_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

passwordless_prompt_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

passwordless_registration_handler.go

fix: potential panics in login and return proper http 405 (#8065)

2024-06-07 07:30:04 +00:00

policy_handler.go

feat: idp v2 api GetIDPByID (#8425)

2024-08-14 18:18:29 +00:00

register_handler.go

fix: add allowRegister check for register handling in login (#8782)

2024-10-16 13:09:32 +00:00

register_option_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

register_org_handler.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

renderer.go

feat: invite user link (#8578)

2024-09-11 10:53:55 +00:00

resources_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

router.go

feat: invite user link (#8578)

2024-09-11 10:53:55 +00:00

select_user_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

username_change_handler.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

webauthn.go

feat: run on a single port (#3163)

2022-02-14 17:22:30 +01:00