zitadel/internal/auth/repository/eventsourcing/eventstore
Livio Spring df2033253d
fix: only allow domain discovery if no organization was preselected (#8748)
# Which Problems Are Solved

If an organization was preselected using an orgID or primaryDomain
scope, users could still switch to another organization, if the latter
allowed domain discovery and the entered username / or login_hint
included the corresponding domain suffix.

# How the Problems Are Solved

Domain discovery will only be done in case no org was preselected.

# Additional Changes

None

# Additional Context

- closes https://github.com/zitadel/zitadel/issues/8464
- closes https://github.com/zitadel/zitadel/issues/8588
2024-10-10 15:29:53 +00:00
..
auth_request_test.go fix: prevent password init on email verification for external users (#8602) 2024-09-13 15:51:06 +00:00
auth_request.go fix: only allow domain discovery if no organization was preselected (#8748) 2024-10-10 15:29:53 +00:00
org.go feat(eventstore): increase parallel write capabilities (#5940) 2023-10-19 12:19:10 +02:00
refresh_token.go fix: reduce eventual consistency (#7075) 2023-12-14 11:07:47 +01:00
token.go chore(oidc): add additional spans to userinfo code paths (#7749) 2024-04-10 17:05:13 +02:00
user_session.go feat(oidc): end session by id_token_hint and without cookie (#8542) 2024-09-04 10:14:50 +00:00
user.go feat: invite user link (#8578) 2024-09-11 10:53:55 +00:00