zitadel/internal/api/grpc/management
Livio Spring 07b2bac463
fix: allow login with user created through v2 api without password (#8291)
# Which Problems Are Solved

User created through the User V2 API without any authentication method
and possibly unverified email address was not able to login through the
current hosted login UI.

An unverified email address would result in a mail verification and not
an initialization mail like it would with the management API. Also the
login UI would then require the user to enter the init code, which the
user never received.

# How the Problems Are Solved

- When verifying the email through the login UI, it will check for
existing auth methods (password, IdP, passkeys). In case there are none,
the user will be prompted to set a password.
- When a user was created through the V2 API with a verified email and
no auth method, the user will be prompted to set a password in the login
UI.
- Since setting a password requires a corresponding code, the code will
be generated and sent when login in.

# Additional Changes

- Changed `RequestSetPassword` to get the codeGenerator from the
eventstore instead of getting it from query.

# Additional Context

- closes https://github.com/zitadel/zitadel/issues/6600
- closes https://github.com/zitadel/zitadel/issues/8235

---------

Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
2024-07-17 06:43:07 +02:00
..
actions_converter.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
actions.go fix: error handling to prevent panics (#8248) 2024-07-04 14:11:06 +00:00
auth_checks.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
custom_text_converter.go feat(idp): provide option to auto link user (#7734) 2024-04-10 15:46:30 +00:00
custom_text.go feat: SMS and email OTP texts (#6281) 2023-08-09 05:49:12 +00:00
flow.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
iam.go fix(query): realtime data on defined requests (#3726) 2022-06-14 07:51:00 +02:00
idp_converter_test.go feat: V2 alpha import and export of organizations (#3798) 2022-07-28 13:42:35 +00:00
idp_converter.go feat(saml): allow setting nameid-format and alternative mapping for transient format (#7979) 2024-05-23 05:04:07 +00:00
idp.go feat(eventstore): increase parallel write capabilities (#5940) 2023-10-19 12:19:10 +02:00
information.go merge main into next 2023-10-19 12:34:00 +02:00
language.go refactor(fmt): run gci on complete project (#7557) 2024-04-03 10:43:43 +00:00
oneof.go feat: protos refactoring 2021-03-09 10:30:11 +01:00
org_converter.go fix(api): correct mapping of metadata queries (#7609) 2024-03-21 14:56:58 +00:00
org_integration_test.go feat: impersonation roles (#7442) 2024-02-28 10:21:11 +00:00
org.go perf(oidc): optimize the introspection endpoint (#6909) 2023-11-21 13:11:38 +01:00
policy_label_converter.go feat: add attribute to only enable specific themes (#6798) 2023-10-26 05:54:09 +00:00
policy_label.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
policy_lockout_converter.go feat: provide option to limit (T)OTP checks (#7693) 2024-04-10 09:14:55 +00:00
policy_lockout.go feat: provide option to limit (T)OTP checks (#7693) 2024-04-10 09:14:55 +00:00
policy_login_converter.go feat: allow to force MFA local only (#6234) 2023-07-20 04:06:16 +00:00
policy_login.go fix: keep user idp links (#7079) 2023-12-19 10:25:50 +00:00
policy_notification.go feat: add notification policy and password change message (#5065) 2023-01-25 09:49:41 +01:00
policy_password_age_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
policy_password_age.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
policy_password_complexity_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
policy_password_complexity.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
policy_privacy_converter.go feat(cnsl): docs link can be customized and custom button is available (#7840) 2024-05-13 16:01:50 +02:00
policy_privacy.go feat: remove org (#4148) 2022-11-30 17:01:17 +01:00
project_application_converter.go feat: allow skip of success page for native apps (#5627) 2023-04-11 15:07:32 +00:00
project_application.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
project_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
project_grant_converter.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
project_grant.go perf: user grant owner removed (#6962) 2024-01-08 15:26:30 +00:00
project.go perf: user grant owner removed (#6962) 2024-01-08 15:26:30 +00:00
replacer.md feat: protos refactoring 2021-03-09 10:30:11 +01:00
server_integration_test.go feat: impersonation roles (#7442) 2024-02-28 10:21:11 +00:00
server.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
user_converter.go feat: allow machine user id to be set during creation (#8265) 2024-07-16 09:27:37 +02:00
user_grant_converter.go chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
user_grant.go perf: user grant owner removed (#6962) 2024-01-08 15:26:30 +00:00
user_integration_test.go feat: allow machine user id to be set during creation (#8265) 2024-07-16 09:27:37 +02:00
user.go fix: allow login with user created through v2 api without password (#8291) 2024-07-17 06:43:07 +02:00