3 people c7f92a6887 feat: session challenge passkey for the RT model (#11944) ...

# Which Problems Are Solved

Add Passkey challenge needed for Create/Set session in the RT model.

# How the Problems Are Solved

Introduce `PasskeyChallengeCommand` (validate/execute/events) for
session creation checks
Add a generic `BeginWebAuthNLogin` helper that returns session data +
assertion JSON bytes.
Add unit tests

# Additional Changes
N/A

# Additional Context
- Related to https://github.com/zitadel/zitadel/issues/11035

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Marco A. <marco@zitadel.com>

2026-04-01 12:13:40 +02:00

..

actions

Merge commit from fork

2026-02-25 06:33:28 +01:00

activity

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

admin/repository/eventsourcing

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-22 06:19:34 +00:00

api

fix: invalid jwt assertion error handling (#11933)

2026-04-01 10:44:02 +02:00

auth/repository

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

auth_request/repository

fix: cleanup information in logs (#10634)

2025-09-03 09:18:54 +00:00

authz

Merge commit from fork

2026-02-16 10:25:19 +01:00

cache

chore: update go dependencies (#11883)

2026-03-24 12:27:43 +01:00

command

fix: use preparation filter for org existence check during setup (#11932)

2026-03-31 09:58:42 +02:00

config

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

crypto

feat(session): IDP Intent Check API with relation tables (#11820)

2026-03-17 10:50:47 +00:00

database

feat: add DSN/URL connection string support for PostgreSQL and Redis (#11729)

2026-03-20 15:21:15 +00:00

denylist

Merge commit from fork

2026-02-25 06:33:28 +01:00

domain

feat(session): Passkey Check API with relation tables (#11858)

2026-03-27 12:38:40 +01:00

eventstore

refactor: merge relational table projections into one handler (#11740)

2026-03-10 17:01:46 +00:00

execution

Merge commit from fork

2026-02-25 06:33:28 +01:00

feature

fix: revert renaming of (management) console feature flag (#11706)

2026-02-27 09:43:11 +01:00

form

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

i18n

fix: use a single translator for middleware (#10633)

2025-09-09 06:34:59 +00:00

iam

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

id

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

idp

chore: update go dependencies (#11883)

2026-03-24 12:27:43 +01:00

integration

feat: supporting metadata updates in actions v2 via RetrieveIdentityProviderIntent API (#11810)

2026-03-12 16:01:58 +00:00

logstore

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

migration

chore: rename IAM to instance (#11351)

2026-02-10 20:25:39 +01:00

net

Merge commit from fork

2026-02-25 06:33:28 +01:00

notification

feat(session): IDP Intent Check API with relation tables (#11820)

2026-03-17 10:50:47 +00:00

org

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

project

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

protoc

feat: exchange gRPC server implementation to connectRPC (#10145)

2025-07-04 14:06:20 +00:00

qrcode

docs(legal): Updated agreements and policies v2 (#3823)

2022-06-15 08:30:58 +02:00

query

fix: reducer for PasskeyVerified sets VerifiedAt (#11929)

2026-03-31 17:38:47 +02:00

queue

feat(logging): add streams (#11435)

2026-02-04 11:51:43 +01:00

renderer

fix: use a single translator for middleware (#10633)

2025-09-09 06:34:59 +00:00

repository

Merge commit from fork

2026-03-17 12:54:27 +01:00

serviceping

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

static

feat: rt recovery code check (#11848)

2026-03-23 10:56:40 +01:00

statik

chore: initial version of a devcontainer (#6352)

2023-08-15 10:49:05 +02:00

telemetry/tracing

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

test

feat: list users scim v2 endpoint (#9187)

2025-01-21 13:31:54 +01:00

user

fix(login v1): only check password expiry for local users with password (#11344)

2026-01-15 12:41:14 +00:00

v2

docs: fixed some typos, formatting, grammar (#11540)

2026-02-13 07:45:17 +01:00

view/repository

perf(query): remove transactions for queries (#8614)

2024-11-04 10:06:14 +01:00

webauthn

feat: session challenge passkey for the RT model (#11944)

2026-04-01 12:13:40 +02:00

zerrors

fix: recover from request panics (#11713)

2026-03-03 11:55:17 +00:00

AGENTS.md

chore(agents): add agents files (#11497)

2026-02-16 20:45:53 -08:00