4 people 8a2ad333a8 fix: Correctly remove adjacent roles on user grants ...

# Which Problems Are Solved

Addresses a bug that leads roles on project grants to not be correctly removed. Final outcome: a role that the user thought to be removed, might still be in place.

# How the Problems Are Solved

 - fix iteration of roles to be removed
 - added migration to fix wrongly computed roles

# Additional Context

Affects management API only

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Livio Spring <9405495+livio-a@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

(cherry picked from commit 9d60e83d6f)

2026-07-09 13:34:19 +02:00

..

errors

feat(session/v2): user password lockout error response (#9233)

2025-01-29 10:29:00 +00:00

preparation

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

action_v2_execution_model_test.go

feat: add action v2 execution on requests and responses (#7637)

2024-05-04 11:55:57 +02:00

action_v2_execution_model.go

feat(v3alpha): write actions (#8225)

2024-07-31 14:42:12 +02:00

action_v2_execution_test.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-30 08:26:20 +01:00

action_v2_execution.go

feat(v3alpha): write actions (#8225)

2024-07-31 14:42:12 +02:00

action_v2_target_key_model.go

fix merge

2025-12-30 09:13:05 +01:00

action_v2_target_key_test.go

fix merge

2025-12-30 09:13:05 +01:00

action_v2_target_key.go

fix merge

2025-12-30 09:13:05 +01:00

action_v2_target_model_test.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-30 08:26:20 +01:00

action_v2_target_model.go

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-30 08:26:20 +01:00

action_v2_target_test.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

action_v2_target.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

auth_checks.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

auth_request_model.go

fix: enforce organization scopes

2026-03-17 13:04:01 +01:00

auth_request_test.go

fix: enforce organization scopes

2026-03-17 13:04:01 +01:00

auth_request.go

fix: enforce organization scopes

2026-03-17 13:04:01 +01:00

cache.go

feat(cache): redis cache (#8822)

2024-11-04 10:44:51 +00:00

command_test.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

command.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

converter.go

fix(permissions): chunked synchronization of role permission events (#9403)

2025-02-26 16:06:50 +00:00

crypto_test.go

chore: update passwap v0.12.1 and align hash validation defaults/errors (#12179)

2026-06-08 16:46:12 +02:00

crypto.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

custom_login_text_model.go

fix: automatically link user without prompt (#8487)

2024-08-28 05:33:20 +00:00

custom_login_text.go

fix: automatically link user without prompt (#8487)

2024-08-28 05:33:20 +00:00

custom_message_text_model.go

fix(logintexts): fix several custom text attributes for get and set (#4733)

2022-12-01 13:31:46 +01:00

debug_events_model.go

feat: add debug events API (#8533)

2024-09-11 08:24:00 +00:00

debug_events_test.go

feat: add debug events API (#8533)

2024-09-11 08:24:00 +00:00

debug_events.go

feat: add debug events API (#8533)

2024-09-11 08:24:00 +00:00

debug_notification_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

device_auth_model.go

fix: enforce organization scopes

2026-03-17 13:04:01 +01:00

device_auth_test.go

fix: remove unnecessary entry from default denylist (#12294)

2026-06-17 06:05:51 +02:00

device_auth.go

fix: client_id verification during code exchange and refresh token flows

2026-06-17 06:05:51 +02:00

email.go

feat: invite user link (#8578)

2024-09-11 10:53:55 +00:00

flow_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

hosted_login_translation_model.go

feat: Hosted login translation API (#10011)

2025-06-18 13:24:39 +02:00

hosted_login_translation_test.go

feat: Hosted login translation API (#10011)

2025-06-18 13:24:39 +02:00

hosted_login_translation.go

feat: Hosted login translation API (#10011)

2025-06-18 13:24:39 +02:00

identity_provider_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

idp_config_model.go

feat(login): additionally use email/phone for authentication (#4563)

2022-10-17 19:19:15 +00:00

idp_intent_model.go

fix: set refresh token in the RetrieveIdentityIntentResponse (#11613)

2026-02-27 10:17:19 +01:00

idp_intent_test.go

fix(idp): apply PKCE when building OAuth and OIDC providers (#12247)

2026-06-15 15:42:31 +02:00

idp_intent.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

idp_model_test.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

idp_model.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

idp.go

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

instance_converter.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

instance_custom_login_text_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_custom_login_text_test.go

fix: automatically link user without prompt (#8487)

2024-08-28 05:33:20 +00:00

instance_custom_login_text.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_custom_message_text_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_custom_message_text_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_custom_message_text.go

fix: empty custom text changes push no events (#8054)

2024-06-17 12:47:38 +00:00

instance_debug_notification_file_model.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

instance_debug_notification_file_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_debug_notification_file.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_debug_notification_log_model.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

instance_debug_notification_log_test.go

feat(eventstore): accept transaction in push (#8945)

2024-11-22 17:25:28 +01:00

instance_debug_notification_log.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_domain_model.go

fix(eventstore): prevent allocation of filtered events (#6749)

2023-10-19 15:21:31 +00:00

instance_domain_test.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

instance_domain.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

instance_features_model.go

fix: revert renaming of (management) console feature flag (#11706)

2026-03-02 08:23:30 +01:00

instance_features_test.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

instance_features.go

fix: revert feature key for configs back to ConsoleUseV2UserApi (#11928)

2026-04-01 08:57:30 +02:00

instance_idp_config_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_idp_config_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_idp_config.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_idp_jwt_config_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_idp_jwt_config_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_idp_jwt_config.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_idp_model.go

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

instance_idp_oidc_config_model.go

feat(crypto): use passwap for machine and app secrets (#7657)

2024-04-05 09:35:49 +00:00

instance_idp_oidc_config_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_idp_oidc_config.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_idp_test.go

fix: prevent possible nil pointer panics (#11728)

2026-03-17 12:55:50 +01:00

instance_idp.go

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

instance_member_model.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

instance_member_test.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

instance_member.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_model.go

feat: SMTP Templates (#6932)

2024-04-11 09:16:10 +02:00

instance_oidc_settings_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

instance_oidc_settings_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_oidc_settings.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_policy_domain_model.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_domain_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_domain.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_label_model.go

feat: add attribute to only enable specific themes (#6798)

2023-10-26 05:54:09 +00:00

instance_policy_label_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_label.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_login_factors_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

instance_policy_login_identity_provider_model.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

instance_policy_login_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_policy_login_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_login.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_mail_template_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_policy_mail_template_test.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_policy_mail_template.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_notification_model.go

feat: add notification policy and password change message (#5065)

2023-01-25 09:49:41 +01:00

instance_policy_notification_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_notification.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_password_age_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_policy_password_age_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_password_age.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_password_complexity_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

instance_policy_password_complexity_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_password_complexity.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_password_lockout_model.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

instance_policy_password_lockout_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_password_lockout.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_privacy_model.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

instance_policy_privacy_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_policy_privacy.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

instance_policy_security_model.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

instance_policy_security.go

feat: impersonation roles (#7442)

2024-02-28 10:21:11 +00:00

instance_role_permissions_sync.sql

fix(permissions): chunked synchronization of role permission events (#9403)

2025-02-26 16:06:50 +00:00

instance_role_permissions_test.go

fix(permissions): chunked synchronization of role permission events (#9403)

2025-02-26 16:06:50 +00:00

instance_role_permissions.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

instance_secret_generator_model.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

instance_settings_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

instance_settings.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

instance_smtp_config_model.go

feat: added xoauth for smtp (#11239)

2026-02-09 14:24:58 +01:00

instance_test.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

instance_trusted_domain_test.go

feat: instance requests implementation for resource API (#9830)

2025-05-21 10:50:44 +02:00

instance_trusted_domain.go

feat: allow adding trusted domains in instance setup (#11169)

2026-02-27 10:21:46 +01:00

instance_trusted_domains_model.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

instance.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

jwt_config_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

key_pair_model.go

feat(v3alpha): web key resource (#8262)

2024-08-14 14:18:14 +00:00

key_pair.go

chore(oidc): graduate webkey to stable (#10122)

2025-06-26 19:17:45 +03:00

limits_bulk_model.go

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

limits_model.go

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

limits_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

limits.go

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

logout_session_model.go

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

logout_session.go

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00

main_test.go

chore: update passwap v0.12.1 and align hash validation defaults/errors (#12179)

2026-06-08 16:46:12 +02:00

member_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

metadata_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

milestone_model.go

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

milestone_test.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

milestone.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

mock_login_paths.go

chore: fix generators in crypto package (#12008)

2026-04-24 06:55:24 +02:00

oidc_config_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

oidc_session_model.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

oidc_session_test.go

fix: client_id verification during code exchange and refresh token flows

2026-06-17 06:05:51 +02:00

oidc_session.go

fix: client_id verification during code exchange and refresh token flows

2026-06-17 06:05:51 +02:00

org_action_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

org_action_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_action.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_converter.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

org_custom_login_text_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

org_custom_login_text_test.go

fix: automatically link user without prompt (#8487)

2024-08-28 05:33:20 +00:00

org_custom_login_text.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_custom_message_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

org_custom_message_text_test.go

chore: naming consistency - Organization ID (#11733)

2026-03-23 07:01:32 +01:00

org_custom_message_text.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_domain_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

org_domain_test.go

fix: use preparation filter for org existence check during setup (#11932)

2026-04-01 09:03:12 +02:00

org_domain.go

fix: use preparation filter for org existence check during setup (#11932)

2026-04-01 09:03:12 +02:00

org_flow_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

org_flow_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_flow.go

fix(actions): preserve order of execution (#8895)

2024-11-14 14:04:39 +00:00

org_idp_config_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_idp_config_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_idp_config.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_idp_jwt_config_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_idp_jwt_config_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_idp_jwt_config.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_idp_model.go

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

org_idp_oidc_config_model.go

feat(crypto): use passwap for machine and app secrets (#7657)

2024-04-05 09:35:49 +00:00

org_idp_oidc_config_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_idp_oidc_config.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_idp_test.go

fix: prevent possible nil pointer panics (#11728)

2026-03-17 12:55:50 +01:00

org_idp.go

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

org_member_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

org_member_test.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

org_member.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

org_metadata_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

org_metadata_test.go

feat: delete metadata on SetOrganizationMetadata api (#11790)

2026-03-23 07:01:34 +01:00

org_metadata.go

feat: delete metadata on SetOrganizationMetadata api (#11790)

2026-03-23 07:01:34 +01:00

org_model.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

org_policy_domain_model.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_policy_domain_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_domain.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_policy_label_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_policy_label_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_label.go

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

org_policy_lockout_model.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

org_policy_lockout_test.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

org_policy_lockout.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_policy_login_factors_model.go

feat: remove org (#4148)

2022-11-30 17:01:17 +01:00

org_policy_login_identity_provider_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

org_policy_login_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_policy_login_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_login.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_policy_mail_template_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_policy_mail_template_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_policy_mail_template.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_policy_notification_model.go

feat: add notification policy and password change message (#5065)

2023-01-25 09:49:41 +01:00

org_policy_notification_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_notification.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_policy_password_age_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_policy_password_age_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_password_age.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

org_policy_password_complexity_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

org_policy_password_complexity_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_password_complexity.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_policy_privacy_model.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

org_policy_privacy_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

org_policy_privacy.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

org_test.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

org.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

permission_checks_test.go

fix: correct user self management on metadata and delete (#10666)

2025-09-30 07:09:03 +02:00

permission_checks.go

fix(api): correct permission check in organization v2beta service

2025-11-05 09:36:48 +01:00

phone_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

phone.go

feat: patch user scim v2 endpoint (#9219)

2025-01-27 13:36:07 +01:00

policy_label_model.go

feat: add attribute to only enable specific themes (#6798)

2023-10-26 05:54:09 +00:00

policy_login_factors_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

policy_login_model.go

feat: allow to force MFA local only (#6234)

2023-07-20 04:06:16 +00:00

policy_mail_template_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

policy_notification_model.go

feat: add notification policy and password change message (#5065)

2023-01-25 09:49:41 +01:00

policy_org_model.go

fix: remove domain and user correctly in DomainPolicyUsernamesWriteModel (#4850)

2022-12-08 08:11:49 +01:00

policy_password_age_model.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

policy_password_complexity_model.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

policy_password_lockout_model.go

feat: provide option to limit (T)OTP checks (#7693)

2024-04-10 09:14:55 +00:00

policy_privacy_model.go

feat(cnsl): docs link can be customized and custom button is available (#7840)

2024-05-13 16:01:50 +02:00

preparation_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

project_application_api_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_api_test.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_application_api.go

feat(api): move application service v2beta to GA (and deprecate v2beta) (#10846)

2025-10-27 08:56:27 +01:00

project_application_key_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_key_test.go

feat: App Keys API v2 (#10140)

2025-07-02 07:34:19 +00:00

project_application_key.go

feat: App Keys API v2 (#10140)

2025-07-02 07:34:19 +00:00

project_application_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_oidc_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_oidc_test.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

project_application_oidc.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

project_application_saml_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_saml_test.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_application_saml.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_application_secret_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_application_secret_test.go

feat(api): move application service v2beta to GA (and deprecate v2beta) (#10846)

2025-10-27 08:56:27 +01:00

project_application_secret.go

feat(api): move application service v2beta to GA (and deprecate v2beta) (#10846)

2025-10-27 08:56:27 +01:00

project_application_test.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_application.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_converter.go

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

project_grant_member_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_grant_member_test.go

fix: generated project grant id (#10747)

2025-09-30 07:11:19 +02:00

project_grant_member.go

chore: naming consistency - Organization ID (#11733)

2026-03-23 07:01:32 +01:00

project_grant_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_grant_test.go

fix: generated project grant id (#10747)

2025-09-30 07:11:19 +02:00

project_grant.go

fix: generated project grant id (#10747)

2025-09-30 07:11:19 +02:00

project_member_model.go

fix(permissions_v2): add membership fields migration (#9199)

2025-01-17 16:16:26 +01:00

project_member_test.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

project_member.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

project_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_old.go

fix: correct permissions for projects on v2 api (#9973)

2025-06-04 11:46:10 +00:00

project_role_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

project_role_test.go

feat: project v2beta resource API (#9742)

2025-05-21 14:40:47 +02:00

project_role.go

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

project_test.go

fix(project): include an option to add project members during project creation (#10654)

2025-09-12 09:16:49 +00:00

project.go

fix(project): include an option to add project members during project creation (#10654)

2025-09-12 09:16:49 +00:00

quota_model_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

quota_model.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

quota_report_test.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

quota_report.go

perf: project quotas and usages (#6441)

2023-09-15 16:58:45 +02:00

quota_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

quota.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

resource_owner_model.go

feat: user api requests to resource API (#9794)

2025-06-04 07:17:23 +00:00

restrictions_model.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

restrictions_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

restrictions.go

chore: fix function names in comment (#7723)

2024-04-08 08:15:44 +00:00

saml_request_model.go

fix: SAML and OIDC issuer (in proxied use cases) (#9638)

2025-03-26 17:08:13 +00:00

saml_request_test.go

Merge commit from fork

2025-07-15 13:38:00 +02:00

saml_request.go

Merge commit from fork

2025-07-15 13:38:00 +02:00

saml_session_model.go

feat: add saml request to link to sessions (#9001)

2024-12-19 11:11:40 +00:00

saml_session_test.go

fix(saml): Push AuthenticationSucceededOnApplication milestone for SAML sessions (#10263)

2025-07-15 16:03:47 +00:00

saml_session.go

fix(saml): Push AuthenticationSucceededOnApplication milestone for SAML sessions (#10263)

2025-07-15 16:03:47 +00:00

session_model_test.go

feat: Add recovery code MFA support (#9954)

2026-01-06 10:54:41 +01:00

session_model.go

feat: Add recovery code MFA support (#9954)

2026-01-06 10:54:41 +01:00

session_otp_test.go

fix: respect lockout policy on password change (with old password) and add tar pit for checks

2025-10-29 10:10:36 +01:00

session_otp.go

fix: respect lockout policy on password change (with old password) and add tar pit for checks

2025-10-29 10:10:36 +01:00

session_recovery_codes.go

feat: Add recovery code MFA support (#9954)

2026-01-06 10:54:41 +01:00

session_test.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

session_webauhtn.go

feat(session api): respect lockout policy (#8027)

2024-05-30 22:08:48 +00:00

session_webauthn_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

session.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

sms_config_model.go

feat: http provider signing key addition (#10641)

2025-09-15 08:26:41 +02:00

sms_config_test.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

sms_config.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

smtp_test.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

smtp.go

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

statics.go

chore(deps): upgrade go mods from zitadel organization (#9601)

2025-03-24 06:03:24 +00:00

system_features_model.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-09 14:25:14 +01:00

system_features_test.go

feat(oauth/oidc): move token exchange from beta to GA (#11475)

2026-02-09 14:24:54 +01:00

system_features.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-09 14:25:14 +01:00

system_model.go

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

unique_constraints_model.go

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

user_converter.go

fix(webauthn): expire invite code by creation date

2026-03-11 08:29:40 +01:00

user_domain_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_domain_policy.go

fix(import): add tracing spans to all import related functions (#8160)

2024-06-19 12:56:33 +02:00

user_grant_converter.go

chore(v2): move to new org (#3499)

2022-04-26 23:01:45 +00:00

user_grant_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_grant_test.go

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

user_grant.go

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

user_human_access_token_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_address_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_address.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_human_adress_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_human_avatar_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

user_human_avatar.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_human_email_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_email_test.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

user_human_email.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

user_human_init_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_init_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

user_human_init.go

fix: check password complexity policy and respect changeRequired on password change (#7884)

2024-05-02 11:50:13 +02:00

user_human_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_otp_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_otp_test.go

fix: respect lockout policy on password change (with old password) and add tar pit for checks

2025-10-29 10:10:36 +01:00

user_human_otp.go

fix: respect lockout policy on password change (with old password) and add tar pit for checks

2025-10-29 10:10:36 +01:00

user_human_password_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_password_test.go

fix: respect lockout policy on password change (with old password) and add tar pit for checks

2025-10-29 10:10:36 +01:00

user_human_password.go

chore: update passwap v0.12.1 and align hash validation defaults/errors (#12179)

2026-06-08 16:46:12 +02:00

user_human_phone_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_phone_test.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_human_phone.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_human_profile_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_profile_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_human_profile.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_human_recovery_code_model_test.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_recovery_code_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_recovery_codes_test.go

feat: Add recovery code MFA support (#9954)

2026-01-06 10:54:41 +01:00

user_human_recovery_codes.go

feat: Add recovery code MFA support (#9954)

2026-01-06 10:54:41 +01:00

user_human_refresh_token_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_refresh_token_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

user_human_refresh_token.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

user_human_test.go

chore: update passwap v0.12.1 and align hash validation defaults/errors (#12179)

2026-06-08 16:46:12 +02:00

user_human_webauthn_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_human_webauthn_test.go

fix(webauthn): expire invite code by creation date

2026-03-11 08:29:40 +01:00

user_human_webauthn.go

fix(webauthn): expire invite code by creation date

2026-03-11 08:29:40 +01:00

user_human.go

chore: update passwap v0.12.1 and align hash validation defaults/errors (#12179)

2026-06-08 16:46:12 +02:00

user_idp_link_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_idp_link_test.go

feat(idp): provide auto only options (#8420)

2024-08-14 13:04:26 +00:00

user_idp_link.go

feat: user profile requests in resource APIs (#10151)

2025-07-04 18:12:59 +02:00

user_machine_key_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_machine_key_test.go

feat(v3alpha): read actions (#8357)

2024-08-12 22:32:01 +02:00

user_machine_key.go

feat: user api requests to resource API (#9794)

2025-06-04 07:17:23 +00:00

user_machine_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_machine_secret_test.go

fix: remove legacy events (#10464)

2025-08-21 09:24:03 +02:00

user_machine_secret.go

fix: remove legacy events (#10464)

2025-08-21 09:24:03 +02:00

user_machine_test.go

fix: check whether org exists before creating user (#11647)

2026-03-23 07:01:49 +01:00

user_machine.go

fix: check whether org exists before creating user (#11647)

2026-03-23 07:01:49 +01:00

user_membership.go

fix(notify): notify user in projection (#3889)

2022-07-06 14:09:49 +02:00

user_metadata_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_metadata_test.go

feat: set metadata field in UpdateUser endpoint (#11747)

2026-03-23 07:01:34 +01:00

user_metadata.go

feat: delete metadata on SetOrganizationMetadata api (#11790)

2026-03-23 07:01:34 +01:00

user_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_password_complexity_policy_test.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_password_complexity_policy.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

user_personal_access_token_model.go

refactor(fmt): run gci on complete project (#7557)

2024-04-03 10:43:43 +00:00

user_personal_access_token_test.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

user_personal_access_token.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

user_schema_model.go

chore: updating go to 1.24 (#9507)

2025-03-25 07:01:29 +00:00

user_schema_test.go

feat: add schema user create and remove (#8494)

2024-08-28 19:46:45 +00:00

user_schema.go

feat: user v3 api update (#8582)

2024-09-17 08:27:48 +00:00

user_test.go

feat: user api requests to resource API (#9794)

2025-06-04 07:17:23 +00:00

user_v2_email_test.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_email.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_human_test.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_human.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_invite_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_v2_invite_test.go

fix: allow creating new invite code before previous is invalid (#11649)

2026-02-27 10:19:25 +01:00

user_v2_invite.go

fix: allow creating new invite code before previous is invalid (#11649)

2026-02-27 10:19:25 +01:00

user_v2_machine_test.go

feat: set metadata field in UpdateUser endpoint (#11747)

2026-03-23 07:01:34 +01:00

user_v2_machine.go

feat: set metadata field in UpdateUser endpoint (#11747)

2026-03-23 07:01:34 +01:00

user_v2_model_test.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_v2_model.go

fix(eventstore): allow overwriting resource owner of events (#12261)

2026-06-15 16:03:39 +02:00

user_v2_passkey_test.go

fix(webauthn): expire invite code by creation date

2026-03-11 08:29:40 +01:00

user_v2_passkey.go

fix(webauthn): expire invite code by creation date

2026-03-11 08:29:40 +01:00

user_v2_password_test.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

user_v2_password.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

user_v2_phone_test.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_phone.go

fix(api): check permission based on provided data on user updates

2026-06-08 16:51:22 +02:00

user_v2_test.go

fix: correct user self management on metadata and delete (#10666)

2025-09-30 07:09:03 +02:00

user_v2_totp_test.go

fix: import totp in add human user with secret (#7936)

2024-05-14 09:20:31 +02:00

user_v2_totp.go

fix: allow other users to set up MFAs (#7914)

2024-05-07 05:38:26 +00:00

user_v2_u2f_test.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

user_v2_u2f.go

fix: allow other users to set up MFAs (#7914)

2024-05-07 05:38:26 +00:00

user_v2_username.go

perf(import): optimize search for domains claimed by other organizations (#8200)

2024-07-05 09:36:00 +02:00

user_v2.go

fix: correct user self management on metadata and delete (#10666)

2025-09-30 07:09:03 +02:00

user_v3_email_test.go

feat: user v3 contact email and phone (#8644)

2024-09-25 13:31:31 +00:00

user_v3_email.go

feat: user v3 contact email and phone (#8644)

2024-09-25 13:31:31 +00:00

user_v3_model.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_v3_phone_test.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_v3_phone.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_v3_test.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user_v3.go

feat: Add Twilio Verification Service (#8678)

2024-09-26 09:14:33 +02:00

user.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

web_key_model.go

feat(v3alpha): web key resource (#8262)

2024-08-14 14:18:14 +00:00

web_key_test.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00

web_key.go

chore!: Introduce ZITADEL v3 (#9645)

2025-04-02 16:53:06 +02:00