zitadel/internal
Livio Spring df2033253d
fix: only allow domain discovery if no organization was preselected (#8748)
# Which Problems Are Solved

If an organization was preselected using an orgID or primaryDomain
scope, users could still switch to another organization, if the latter
allowed domain discovery and the entered username / or login_hint
included the corresponding domain suffix.

# How the Problems Are Solved

Domain discovery will only be done in case no org was preselected.

# Additional Changes

None

# Additional Context

- closes https://github.com/zitadel/zitadel/issues/8464
- closes https://github.com/zitadel/zitadel/issues/8588
2024-10-10 15:29:53 +00:00
..
actions
activity
admin/repository/eventsourcing
api fix: add default organization as query for org v2 list (#8719) 2024-10-07 09:28:39 +00:00
auth/repository fix: only allow domain discovery if no organization was preselected (#8748) 2024-10-10 15:29:53 +00:00
auth_request/repository
authz fix: internal check of JWT access tokens (#8486) 2024-08-26 09:26:13 +00:00
cache perf(cache): pgx pool connector (#8703) 2024-10-04 13:15:41 +00:00
command fix: pass sessionID to OTP email link (#8745) 2024-10-10 13:53:32 +00:00
config
crypto
database perf(cache): pgx pool connector (#8703) 2024-10-04 13:15:41 +00:00
domain fix: pass sessionID to OTP email link (#8745) 2024-10-10 13:53:32 +00:00
eventstore perf(oidc): nest position clause for session terminated query (#8738) 2024-10-07 12:49:55 +00:00
execution feat: add schema user create and remove (#8494) 2024-08-28 19:46:45 +00:00
feature perf(oidc): disable push of user token meta-event (#8691) 2024-09-26 13:55:41 +00:00
form
i18n
iam
id
idp fix(SAML): check on empty nameID (#8714) 2024-10-03 08:17:33 +00:00
integration perf(cache): pgx pool connector (#8703) 2024-10-04 13:15:41 +00:00
logstore
migration
net
notification fix: pass sessionID to OTP email link (#8745) 2024-10-10 13:53:32 +00:00
org
project
protoc
qrcode
query perf(milestones): remove legacy token event reducer (#8747) 2024-10-09 08:00:07 +00:00
renderer
repository fix: twilio code generation and verification (#8728) 2024-10-07 07:12:44 +02:00
static feat: Add Twilio Verification Service (#8678) 2024-09-26 09:14:33 +02:00
statik
telemetry
test
user feat(oidc): end session by id_token_hint and without cookie (#8542) 2024-09-04 10:14:50 +00:00
v2 fix(eventstore): revert precise decimal (#8527) (#8679) 2024-09-24 18:43:29 +02:00
view/repository
webauthn chore(tests): use a coverage server binary (#8407) 2024-09-06 14:47:57 +02:00
zerrors