zitadel/cmd
Livio Spring e126ccc9aa
feat(IDP): use single callback endpoint (#8295)
# Which Problems Are Solved

Both the login UI and the IdP intent flow have their own IdP callback
endpoints.

This makes configuration hard to impossible (e.g. Github only allows one
endpoint) for customers.

# How the Problems Are Solved

- The login UI prefixes the `state` parameter when creating an auth /
SAML request.
- All requests now use the `/idp/callback` or the corresponding
variation (e.g. SAML)
- On callback, the state, resp. its prefix is checked. In case of the
login UI prefix, the request will be forwarded to the existing login UI
handler without the prefix state.
Existing setups will therefore not be affected and also requests started
before this release can be handled without any impact.
- Console only lists the "new" endpoint(s). Any
`/login/externalidp/callback` is removed.

# Additional Changes

- Cleaned up some images  from the IdP documentation.
- fix the error handling in `handleExternalNotFoundOptionCheck`

# Additional Context

- closes #8236
2024-07-16 13:58:22 +00:00
..
admin
build
encryption fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
hooks feat: support whole config as env (#6336) 2024-02-16 16:04:42 +00:00
initialise feat(cmd): mirror (#7004) 2024-05-30 09:35:30 +00:00
key fix(db): always use begin tx (#7142) 2024-01-04 16:12:20 +00:00
mirror fix: read correct defaults (#8090) 2024-06-10 11:46:28 +02:00
ready feat(api): feature flags (#7356) 2024-02-28 10:55:54 +02:00
setup fix(fields): add index to improve search by aggregate (#8267) 2024-07-08 15:54:19 +00:00
start feat(IDP): use single callback endpoint (#8295) 2024-07-16 13:58:22 +00:00
tls
defaults.yaml docs(cmd): document that human and service user can be used in the default instance (#8229) 2024-07-04 11:39:28 +00:00
zitadel.go feat(cmd): mirror (#7004) 2024-05-30 09:35:30 +00:00