Files
zitadel/proto/zitadel/settings/v2/security_settings.proto
Livio Spring dbf877e028 fix(api): deprecate settings v2beta endpoints (#10909)
# Which Problems Are Solved

As part of our efforts to simplify the structure and versions of our
APIs, were moving all existing v2beta endpoints to v2 and deprecate
them. They will be removed in Zitadel V5.

# How the Problems Are Solved

- This PR deprecates all settings v2beta service and endpoints.
- The comments and have been improved and, where not already done, moved
from swagger annotations to proto.
- `LoginSettings`:
- `AllowUsernamePassword` has been deprecated and a corresponding
`AllowLocalAuthentication` has been introduced
- `SECOND_FACTOR_TYPE_OTP` has been deprecated and a
`SECOND_FACTOR_TYPE_TOTP` has been introduced as enum alias

# Additional Changes

- cleanups of some unused structs

# Additional Context

- part of https://github.com/zitadel/zitadel/issues/10772
- requires backport to v4.x
2025-10-17 09:02:26 +00:00

26 lines
817 B
Protocol Buffer

syntax = "proto3";
package zitadel.settings.v2;
option go_package = "github.com/zitadel/zitadel/pkg/grpc/settings/v2;settings";
import "protoc-gen-openapiv2/options/annotations.proto";
message SecuritySettings {
// EmbeddedIframeSettings defines if the login UI can be embedded in an iframe
// and which origins are allowed to do so.
EmbeddedIframeSettings embedded_iframe = 1;
// If enabled, users are allowed to impersonate other users.
// The impersonator needs the appropriate `*_IMPERSONATOR` roles assigned as well".
bool enable_impersonation = 2;
}
message EmbeddedIframeSettings{
// Enabled states if iframe embedding is enabled or disabled.
bool enabled = 1;
// AllowedOrigins defines which origins are allowed to embed ZITADEL in an iframe.
repeated string allowed_origins = 2;
}