{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":247714750,"defaultBranch":"main","name":"zitadel","ownerLogin":"zitadel","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-03-16T13:51:31.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/70011121?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1716909780.0","currentOid":""},"activityList":{"items":[{"before":"8dff9e7957ff6c5882f8c27b2c399216872252e1","after":"c031ea465b54a0f046bc7de695e64fee26fc0476","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T16:42:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"better describe --replace flag","shortMessageHtmlLink":"better describe --replace flag"}},{"before":"2567ac50fcf41d235963cccb281ffc66cab75417","after":"8dff9e7957ff6c5882f8c27b2c399216872252e1","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T16:33:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"review commetn","shortMessageHtmlLink":"review commetn"}},{"before":"ffa5cd6d52a47042c23e3f2ef289a03ff391bc6e","after":"2567ac50fcf41d235963cccb281ffc66cab75417","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T16:30:37.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"Merge branch 'cmd/migrate' of github.com:zitadel/zitadel into cmd/migrate","shortMessageHtmlLink":"Merge branch 'cmd/migrate' of github.com:zitadel/zitadel into cmd/mig…"}},{"before":null,"after":"a3a4c661702b3cd3b7e5e015f16ea855c30e0e56","ref":"refs/heads/session-api-lockout","pushedAt":"2024-05-28T15:23:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"cleanup","shortMessageHtmlLink":"cleanup"}},{"before":"1ac7a37e6253a715871e2b3bc7483a17fe03b758","after":"8ce3af2f9d7cc763ac9c72a038a7f3218259f062","ref":"refs/heads/next","pushedAt":"2024-05-28T12:34:06.000Z","pushType":"push","commitsCount":36,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"Merge branch 'main' into next","shortMessageHtmlLink":"Merge branch 'main' into next"}},{"before":"bc71bc51bdf6e1ce5a2b5812d2738ed7e8bb0b86","after":"898f944b18cbd265682b6b4cbbc6cb95e5becee9","ref":"refs/heads/new-api-concept","pushedAt":"2024-05-28T11:22:21.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"eliobischof","name":"Elio Bischof","path":"/eliobischof","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/12727842?s=80&v=4"},"commit":{"message":"review benz","shortMessageHtmlLink":"review benz"}},{"before":"d0d623e7fe007c9ccc001c668ef00e21cf29a98a","after":"ffa5cd6d52a47042c23e3f2ef289a03ff391bc6e","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T10:42:16.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"Merge branch 'main' into cmd/migrate","shortMessageHtmlLink":"Merge branch 'main' into cmd/migrate"}},{"before":"5d07f8d1e47930b2c620515204978d019373b4fe","after":"d0d623e7fe007c9ccc001c668ef00e21cf29a98a","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T10:34:49.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"add count expectation","shortMessageHtmlLink":"add count expectation"}},{"before":"418f121cbc03a26599b1e3e646e796c947e94d2c","after":"5d07f8d1e47930b2c620515204978d019373b4fe","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-28T09:52:55.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"write done events to destination and query position from these events.\n\nThis simplifies usage of same destination database names","shortMessageHtmlLink":"write done events to destination and query position from these events."}},{"before":"f19c696d6852b9152fe96473b2680b6612484af0","after":null,"ref":"refs/heads/token-validation-issues","pushedAt":"2024-05-28T08:59:50.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"}},{"before":"4dc86c241531bbe23d30a4d7efb0aa05010bff1e","after":"ec222a13d7a42a9a5e523a8e7f8dbb923747e654","ref":"refs/heads/main","pushedAt":"2024-05-28T08:59:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"fix(oidc): IDP and passwordless user auth methods (#7998)\n\n# Which Problems Are Solved\r\n\r\nAs already mentioned and (partially) fixed in #7992 we discovered,\r\nissues with v2 tokens that where obtained through an IDP, with\r\npasswordless authentication or with password authentication (wihtout any\r\n2FA set up) using the v1 login for zitadel API calls\r\n- (Previous) authentication through an IdP is now correctly treated as\r\nauth method in case of a reauth even when the user is not redirected to\r\nthe IdP\r\n- There were some cases where passwordless authentication was\r\nsuccessfully checked but not correctly set as auth method, which denied\r\naccess to ZITADEL API\r\n- Users with password and passwordless, but no 2FA set up which\r\nauthenticate just wich password can access the ZITADEL API again\r\n\r\nAdditionally while testing we found out that because of #7969 the login\r\nUI could completely break / block with the following error:\r\n`sql: Scan error on column index 3, name \"state\": converting NULL to\r\nint32 is unsupported (Internal)`\r\n# How the Problems Are Solved\r\n\r\n- IdP checks are treated the same way as other factors and it's ensured\r\nthat a succeeded check within the configured timeframe will always\r\nprovide the idp auth method\r\n- `MFATypesAllowed` checks for possible passwordless authentication\r\n- As with the v1 login, the token check now only requires MFA if the\r\npolicy is set or the user has 2FA set up\r\n- UserAuthMethodsRequirements now always uses the correctly policy to\r\ncheck for MFA enforcement\r\n- `State` column is handled as nullable and additional events set the\r\nstate to active (as before #7969)\r\n\r\n# Additional Changes\r\n\r\n- Console now also checks for 403 (mfa required) errors (e.g. after\r\nsetting up the first 2FA in console) and redirects the user to the login\r\nUI (with the current id_token as id_token_hint)\r\n- Possible duplicates in auth methods / AMRs are removed now as well.\r\n\r\n# Additional Context\r\n\r\n- Bugs were introduced in #7822 and # and 7969 and only part of a\r\npre-release.\r\n- partially already fixed with #7992\r\n- Reported internally.","shortMessageHtmlLink":"fix(oidc): IDP and passwordless user auth methods (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2313113907\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/7998\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/7998/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/7998\">#7998</a>)"}},{"before":"d7c39a5843c0009e54535354a3a8e72cba4ac77c","after":"f19c696d6852b9152fe96473b2680b6612484af0","ref":"refs/heads/token-validation-issues","pushedAt":"2024-05-28T08:32:36.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"stebenz","name":"Stefan Benz","path":"/stebenz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/46600784?s=80&v=4"},"commit":{"message":"Merge branch 'main' into token-validation-issues","shortMessageHtmlLink":"Merge branch 'main' into token-validation-issues"}},{"before":"c7eb537843da997518dfe98a11ff2878691210e7","after":"bc71bc51bdf6e1ce5a2b5812d2738ed7e8bb0b86","ref":"refs/heads/new-api-concept","pushedAt":"2024-05-28T06:59:45.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"eliobischof","name":"Elio Bischof","path":"/eliobischof","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/12727842?s=80&v=4"},"commit":{"message":"user schema settings","shortMessageHtmlLink":"user schema settings"}},{"before":"3e84020065f333b9c945ecd4959e6de0f98414cb","after":"1ac7a37e6253a715871e2b3bc7483a17fe03b758","ref":"refs/heads/next","pushedAt":"2024-05-28T06:51:20.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"fix(login): ensure auth request (#8004)\n\n# Which Problems Are Solved\r\n\r\nPotential nil pointers leading to a panic in the login UI.\r\n\r\n# How the Problems Are Solved\r\n\r\nAs of now the login UI did not always check if the authRequest was\r\nactually retrieved form the database, which is ok for some endpoints\r\nwhich can also be called outside of an auth request.\r\nThere are now methods added to ensure the request is loaded.\r\n\r\n# Additional Changes\r\n\r\nNone\r\n\r\n# Additional Context\r\n\r\nCloses https://github.com/zitadel/DevOps/issues/55","shortMessageHtmlLink":"fix(login): ensure auth request (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2315185508\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/8004\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/8004/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/8004\">#8004</a>)"}},{"before":"b56093de0117f9618a9f7726cb4c71d4306fffdb","after":null,"ref":"refs/heads/order-by-sequence","pushedAt":"2024-05-28T06:49:31.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"}},{"before":"5fa32cbfb9fad1b228967c95596c3c8df75ef3e4","after":"4dc86c241531bbe23d30a4d7efb0aa05010bff1e","ref":"refs/heads/main","pushedAt":"2024-05-28T06:49:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"fix(eventstore): order by sequence if filter by aggregate id (#8019)\n\n# Which Problems Are Solved\r\n\r\nQueriying events by an aggregate id can produce high loads on the\r\ndatabase if the aggregate id contains many events (count > 1000000).\r\n\r\n# How the Problems Are Solved\r\n\r\nInstead of using the postion and in_tx_order columns we use the sequence\r\ncolumn which guarantees correct ordering in a single aggregate and uses\r\nmore optimised indexes.\r\n\r\n# Additional Context\r\n\r\nCloses https://github.com/zitadel/DevOps/issues/50\r\n\r\nCo-authored-by: Livio Spring <livio.a@gmail.com>","shortMessageHtmlLink":"fix(eventstore): order by sequence if filter by aggregate id (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2319387114\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/8019\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/8019/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/8019\">#8019</a>)"}},{"before":"730fcc830b9460613c856095d0553a8ed507a2a7","after":"c7eb537843da997518dfe98a11ff2878691210e7","ref":"refs/heads/new-api-concept","pushedAt":"2024-05-28T06:28:02.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"eliobischof","name":"Elio Bischof","path":"/eliobischof","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/12727842?s=80&v=4"},"commit":{"message":"describe services","shortMessageHtmlLink":"describe services"}},{"before":"82ab96195f96fb79d0d828865490161f78ba16d6","after":"b56093de0117f9618a9f7726cb4c71d4306fffdb","ref":"refs/heads/order-by-sequence","pushedAt":"2024-05-28T06:21:31.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"Merge branch 'main' into order-by-sequence","shortMessageHtmlLink":"Merge branch 'main' into order-by-sequence"}},{"before":"eb62c0a0afec1d6efa8e3eef50813e200cb22713","after":"d7c39a5843c0009e54535354a3a8e72cba4ac77c","ref":"refs/heads/token-validation-issues","pushedAt":"2024-05-28T05:33:50.000Z","pushType":"push","commitsCount":10,"pusher":{"login":"livio-a","name":"Livio Spring","path":"/livio-a","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/9405495?s=80&v=4"},"commit":{"message":"Merge branch 'main' into token-validation-issues","shortMessageHtmlLink":"Merge branch 'main' into token-validation-issues"}},{"before":"ba9e683dc4356f4820538450a1fffd154e3fda84","after":null,"ref":"refs/heads/adlerhurst-patch-1","pushedAt":"2024-05-28T05:03:51.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"}},{"before":"e3cdf76439e67c6a6eec5113b8d64ea9d1d19580","after":"5fa32cbfb9fad1b228967c95596c3c8df75ef3e4","ref":"refs/heads/main","pushedAt":"2024-05-28T05:03:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"chore(stable): update to v2.48.5 (#8020)\n\nUpdates the stable tag to v.2.48.5","shortMessageHtmlLink":"chore(stable): update to v2.48.5 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2319508302\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/8020\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/8020/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/8020\">#8020</a>)"}},{"before":null,"after":"ba9e683dc4356f4820538450a1fffd154e3fda84","ref":"refs/heads/adlerhurst-patch-1","pushedAt":"2024-05-27T16:41:48.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"chore(stable): update to v2.48.5","shortMessageHtmlLink":"chore(stable): update to v2.48.5"}},{"before":null,"after":"82ab96195f96fb79d0d828865490161f78ba16d6","ref":"refs/heads/order-by-sequence","pushedAt":"2024-05-27T15:17:36.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"fix(eventstore): order by sequence if filter by aggregate id","shortMessageHtmlLink":"fix(eventstore): order by sequence if filter by aggregate id"}},{"before":"a56343baccc0c4d31828b331a0c930382ee1df80","after":"418f121cbc03a26599b1e3e646e796c947e94d2c","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-27T13:52:37.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"Merge branch 'main' into cmd/migrate","shortMessageHtmlLink":"Merge branch 'main' into cmd/migrate"}},{"before":"2eb6d07c0a71bd6e693abd66b476162eb9862b3b","after":"a56343baccc0c4d31828b331a0c930382ee1df80","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-27T13:50:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"docs: fix relative links","shortMessageHtmlLink":"docs: fix relative links"}},{"before":"4f33eae30155da247bcda3591cf7aa5c2217f170","after":"2eb6d07c0a71bd6e693abd66b476162eb9862b3b","ref":"refs/heads/cmd/migrate","pushedAt":"2024-05-27T13:32:42.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"adlerhurst","name":"Silvan","path":"/adlerhurst","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27845747?s=80&v=4"},"commit":{"message":"docs: use relative links instead of permanent links","shortMessageHtmlLink":"docs: use relative links instead of permanent links"}},{"before":"40a3b27213b9e0da8fc9ca544b22ded760d5ad83","after":null,"ref":"refs/heads/mpa_docsEvents_20240527","pushedAt":"2024-05-27T11:05:00.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hifabienne","name":"Fabi","path":"/hifabienne","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/38692350?s=80&v=4"}},{"before":"cff0f73e24f938c0f492726f1ac75c73246c9ee5","after":"e3cdf76439e67c6a6eec5113b8d64ea9d1d19580","ref":"refs/heads/main","pushedAt":"2024-05-27T11:04:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hifabienne","name":"Fabi","path":"/hifabienne","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/38692350?s=80&v=4"},"commit":{"message":"docs(features): clean up audit trail feature (#8018)\n\n# Which Problems Are Solved\r\n\r\nduplicated content\r\n\r\n# How the Problems Are Solved\r\n\r\nreference to primary conent","shortMessageHtmlLink":"docs(features): clean up audit trail feature (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2318758049\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/8018\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/8018/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/8018\">#8018</a>)"}},{"before":"cff0f73e24f938c0f492726f1ac75c73246c9ee5","after":"40a3b27213b9e0da8fc9ca544b22ded760d5ad83","ref":"refs/heads/mpa_docsEvents_20240527","pushedAt":"2024-05-27T09:55:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mffap","name":null,"path":"/mffap","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1366906?s=80&v=4"},"commit":{"message":"clean up audit trail feature","shortMessageHtmlLink":"clean up audit trail feature"}},{"before":null,"after":"cff0f73e24f938c0f492726f1ac75c73246c9ee5","ref":"refs/heads/mpa_docsEvents_20240527","pushedAt":"2024-05-27T09:54:24.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mffap","name":null,"path":"/mffap","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1366906?s=80&v=4"},"commit":{"message":"fix(init): add setting to enable durable locks on crdb (#7982)\n\nfeat(init): add setting to enable durable locks on crdb","shortMessageHtmlLink":"fix(init): add setting to enable durable locks on crdb (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2302918448\" data-permission-text=\"Title is private\" data-url=\"https://github.com/zitadel/zitadel/issues/7982\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/zitadel/zitadel/pull/7982/hovercard\" href=\"https://github.com/zitadel/zitadel/pull/7982\">#7982</a>)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEVhXGkwA","startCursor":null,"endCursor":null}},"title":"Activity · zitadel/zitadel"}