Livio Spring f20539ef8f fix(login): make sure first email verification is done before MFA check (#9039) ... # Which Problems Are Solved During authentication in the login UI, there is a check if the user's MFA is already checked or needs to be setup. In cases where the user was just set up or especially, if the user was just federated without a verified email address, this can lead to the problem, where OTP Email cannot be setup as there's no verified email address. # How the Problems Are Solved - Added a check if there's no verified email address on the user and require a mail verification check before checking for MFA. Note: that if the user had a verified email address, but changed it and has not verified it, they will still be prompted with an MFA check before the email verification. This is make sure, we don't break the existing behavior and the user's authentication is properly checked. # Additional Changes None # Additional Context - closes https://github.com/zitadel/zitadel/issues/9035		2024-12-13 11:37:20 +00:00
..
actions	fix: correctly check denied domains and ips for actions (#8810)	2024-10-22 16:16:44 +02:00
activity	feat: trusted (instance) domains (#8369)	2024-07-31 18:00:38 +03:00
admin/repository/eventsourcing	refactor(handler): cache active instances (#9008)	2024-12-06 11:32:53 +00:00
api	fix(notifications): bring back legacy notification handling (#9015)	2024-12-06 10:56:19 +01:00
auth/repository	fix(login): make sure first email verification is done before MFA check (#9039)	2024-12-13 11:37:20 +00:00
auth_request/repository	fix(login): correctly reload policies on auth request (#7839)	2024-04-24 08:44:55 +00:00
authz	docs: standardize multi-factor spelling and related string updates (#8752)	2024-10-22 14:59:16 +00:00
cache	fix(cache): ignore NOSCRIPT errors in redis circuit breaker (#9022)	2024-12-09 08:20:21 +00:00
command	fix: project existing check removed from project grant remove (#9004)	2024-12-03 14:38:25 +00:00
config	feat(v3alpha): read actions (#8357)	2024-08-12 22:32:01 +02:00
crypto	perf(query): remove transactions for queries (#8614)	2024-11-04 10:06:14 +01:00
database	refactor(eventstore): move push logic to sql (#8816)	2024-12-04 13:51:40 +00:00
domain	feat: action v2 signing (#8779)	2024-11-28 10:06:52 +00:00
eventstore	refactor(handler): cache active instances (#9008)	2024-12-06 11:32:53 +00:00
execution	feat: action v2 signing (#8779)	2024-11-28 10:06:52 +00:00
feature	feat(OIDC): add back channel logout (#8837)	2024-10-31 15:57:17 +01:00
form	refactor: rename package errors to zerrors (#7039)	2023-12-08 15:30:55 +01:00
i18n	fix(middleware): init translation messages (#7778)	2024-04-16 12:08:18 +00:00
iam	refactor: cleanup unused code (#7130)	2024-01-02 14:26:31 +00:00
id	feat(cmd): Added machine ID mode to zitadel start up logs (#8251)	2024-07-16 09:53:57 +00:00
idp	fix(saml): improve error handling (#8928)	2024-12-03 10:38:28 +00:00
integration	feat(cache): organization (#8903)	2024-11-21 08:05:03 +02:00
logstore	perf: project quotas and usages (#6441)	2023-09-15 16:58:45 +02:00
migration	fix(setup): improve search query to use index (#8898)	2024-11-13 07:50:23 +00:00
net	perf: project quotas and usages (#6441)	2023-09-15 16:58:45 +02:00
notification	refactor(handler): cache active instances (#9008)	2024-12-06 11:32:53 +00:00
org	refactor: cleanup unused code (#7130)	2024-01-02 14:26:31 +00:00
project	refactor: cleanup unused code (#7130)	2024-01-02 14:26:31 +00:00
protoc	merge main into next	2023-10-19 12:34:00 +02:00
qrcode	docs(legal): Updated agreements and policies v2 (#3823)	2022-06-15 08:30:58 +02:00
query	refactor(handler): cache active instances (#9008)	2024-12-06 11:32:53 +00:00
renderer	fix(login): (re)allow HTML in custom login texts (#7575)	2024-03-15 16:29:10 +01:00
repository	feat(fields): add instance domain (#9000)	2024-12-04 18:10:10 +00:00
static	feat(i18n): add korean language support (#8879)	2024-12-02 13:11:31 +00:00
statik	chore: initial version of a devcontainer (#6352)	2023-08-15 10:49:05 +02:00
telemetry	feat: enable application performance profiling (#8442)	2024-08-16 13:26:53 +00:00
test	refactor(fmt): run gci on complete project (#7557)	2024-04-03 10:43:43 +00:00
user	fix(login): make sure first email verification is done before MFA check (#9039)	2024-12-13 11:37:20 +00:00
v2	fix(eventstore): revert precise decimal (#8527) (#8679)	2024-09-24 18:43:29 +02:00
view/repository	perf(query): remove transactions for queries (#8614)	2024-11-04 10:06:14 +01:00
webauthn	fix: add domain as attribute to list user auth methods (#8718)	2024-10-10 16:50:53 +00:00
zerrors	fix(crypto): reject decrypted strings with non-UTF8 characters. (#8374)	2024-08-02 08:38:37 +00:00