Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(oidc): upgrade zitadel/oidc to allow scope without openid #8109

Merged
merged 4 commits into from
Jun 13, 2024

Conversation

muhlemmer
Copy link
Contributor

Which Problems Are Solved

Drop the requirement of the openid scope in all auth and token request types.

How the Problems Are Solved

This change upgrades the oidc package to include zitadel/oidc#613.

Additional Changes

  • Fix a typo in a go doc string
  • upgrade otel modules to match the version from oidc.

Additional Context

This change upgrades the oidc package to include zitadel/oidc#613.
This will drop the requirement of the `openid` scope in all auth and token request types.
Copy link

vercel bot commented Jun 12, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 13, 2024 6:50am

Copy link

github-actions bot commented Jun 12, 2024

Thanks for your contribution @muhlemmer! 🎉

Please make sure you tick the following checkboxes before marking this Pull Request (PR) as ready for review:

  • I am happy with the code
  • Documentations and examples are up-to-date
  • Logical behavior changes are tested automatically
  • No debug or dead code
  • My code has no repetitions
  • The PR title adheres to the conventional commit format
  • The example texts in the PR description are replaced.
  • If there are any open TODOs or follow-ups, they are described in issues and link to this PR
  • If there are deviations from a user stories acceptance criteria or design, they are agreed upon with the PO and documented.

Copy link

codecov bot commented Jun 12, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (main@f6a50db). Learn more about missing BASE report.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #8109   +/-   ##
=======================================
  Coverage        ?   62.08%           
=======================================
  Files           ?     1400           
  Lines           ?   112844           
  Branches        ?        0           
=======================================
  Hits            ?    70054           
  Misses          ?    38858           
  Partials        ?     3932           
Flag Coverage Δ
core-integration-tests-postgres 62.08% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@muhlemmer muhlemmer requested a review from livio-a June 13, 2024 06:37
@muhlemmer muhlemmer marked this pull request as ready for review June 13, 2024 06:37
@livio-a
Copy link
Member

livio-a commented Jun 13, 2024

@muhlemmer should we change the title to fix since it actually fixes the issue introduced with 2.53?

@muhlemmer muhlemmer changed the title chore(oidc): upgrade zitadel/oidc fix(oidc): upgrade zitadel/oidc to allow scope without openid Jun 13, 2024
@muhlemmer muhlemmer enabled auto-merge (squash) June 13, 2024 09:04
@muhlemmer muhlemmer merged commit 81cc7c6 into main Jun 13, 2024
25 checks passed
@muhlemmer muhlemmer deleted the feat-openid-scope branch June 13, 2024 09:32
livio-a pushed a commit that referenced this pull request Jun 13, 2024
# Which Problems Are Solved

Drop the requirement of the `openid` scope in all auth and token request
types.

# How the Problems Are Solved

This change upgrades the oidc package to include
zitadel/oidc#613.

# Additional Changes

- Fix a typo in a go doc string
- upgrade otel modules to match the version from oidc.

# Additional Context

- #7822 started doing scope
validation for machine user authentication on the token endpoint.
- #8068 reports breakage
of machine authentication without `openid` scope.
- Merge after zitadel/oidc#613 is released.

(cherry picked from commit 81cc7c6)
livio-a pushed a commit that referenced this pull request Jun 13, 2024
# Which Problems Are Solved

Drop the requirement of the `openid` scope in all auth and token request
types.

# How the Problems Are Solved

This change upgrades the oidc package to include
zitadel/oidc#613.

# Additional Changes

- Fix a typo in a go doc string
- upgrade otel modules to match the version from oidc.

# Additional Context

- #7822 started doing scope
validation for machine user authentication on the token endpoint.
- #8068 reports breakage
of machine authentication without `openid` scope.
- Merge after zitadel/oidc#613 is released.

(cherry picked from commit 81cc7c6)
livio-a pushed a commit that referenced this pull request Jun 21, 2024
# Which Problems Are Solved

Drop the requirement of the `openid` scope in all auth and token request
types.

# How the Problems Are Solved

This change upgrades the oidc package to include
zitadel/oidc#613.

# Additional Changes

- Fix a typo in a go doc string
- upgrade otel modules to match the version from oidc.

# Additional Context

- #7822 started doing scope
validation for machine user authentication on the token endpoint.
- #8068 reports breakage
of machine authentication without `openid` scope.
- Merge after zitadel/oidc#613 is released.
Copy link

🎉 This PR is included in version 2.55.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

brandonkal pushed a commit to brandonkal/zitadel that referenced this pull request Jun 26, 2024
…l#8109)

# Which Problems Are Solved

Drop the requirement of the `openid` scope in all auth and token request
types.

# How the Problems Are Solved

This change upgrades the oidc package to include
zitadel/oidc#613.

# Additional Changes

- Fix a typo in a go doc string
- upgrade otel modules to match the version from oidc.

# Additional Context

- zitadel#7822 started doing scope
validation for machine user authentication on the token endpoint.
- zitadel#8068 reports breakage
of machine authentication without `openid` scope.
- Merge after zitadel/oidc#613 is released.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants