zitadel/internal
Tim Möhlmann 328c409271
fix(oidc): roles in service user ID token (#8561)
# Which Problems Are Solved

Return the user's project roles when the
`urn:zitadel:iam:org:projects:roles` scope is requested.
We alreayd returned it for access tokens, now also ID tokens.

# How the Problems Are Solved

Set `idTokenRoleAssertion` to `true` when calling
`accessTokenResponseFromSession` for service users. This parameter is
normally set to the client config. However, service user authentication
does not have a client.

# Additional Changes

- none

# Additional Context

- Introduced in https://github.com/zitadel/zitadel/pull/8046
- Closes https://github.com/zitadel/zitadel/issues/8107

Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-09-11 04:45:59 +00:00
..
actions
activity
admin/repository/eventsourcing
api fix(oidc): roles in service user ID token (#8561) 2024-09-11 04:45:59 +00:00
auth/repository fix: check if pw login allowed (#8584) 2024-09-10 12:55:32 +02:00
auth_request/repository
authz fix: internal check of JWT access tokens (#8486) 2024-08-26 09:26:13 +00:00
command feat: add http as sms provider (#8540) 2024-09-06 13:11:36 +00:00
config
crypto
database fix(eventstore): precise decimal (#8527) 2024-09-06 12:19:19 +03:00
domain feat(oidc): sid claim for id_tokens issued through login V1 (#8525) 2024-09-03 13:19:00 +00:00
eventstore fix(eventstore): precise decimal (#8527) 2024-09-06 12:19:19 +03:00
execution feat: add schema user create and remove (#8494) 2024-08-28 19:46:45 +00:00
feature feat(oidc): end session by id_token_hint and without cookie (#8542) 2024-09-04 10:14:50 +00:00
form
i18n
iam
id
idp
integration chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
logstore
migration
net
notification feat: add http as sms provider (#8540) 2024-09-06 13:11:36 +00:00
org
project
protoc
qrcode
query feat: add http as sms provider (#8540) 2024-09-06 13:11:36 +00:00
renderer
repository feat: add http as sms provider (#8540) 2024-09-06 13:11:36 +00:00
static feat: add indonesia translation (#8459) 2024-09-03 16:05:47 +00:00
statik
telemetry feat: enable application performance profiling (#8442) 2024-08-16 13:26:53 +00:00
test
user feat(oidc): end session by id_token_hint and without cookie (#8542) 2024-09-04 10:14:50 +00:00
v2 fix(eventstore): precise decimal (#8527) 2024-09-06 12:19:19 +03:00
view/repository
webauthn chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
zerrors