v4.16.0
ZITADEL v4.16.0 includes multiple bug fixes for token exchange scope validation, user grants management, login UI improvements, and IDP handling, plus new features for invite code management in secret generators and FIPS 140-3 compliant crypto builds.
Bug Fixes
- correct scope validation in token exchange (#12312) (02d07e9), closes #12319 #12322 #12319 #12322
- Correctly remove adjacent roles on user grants (dc89900)
- increase performance of ListUser by login name ignore case (#12350) (8fed358)
- login: allow custom protocols for native apps again (#12332) (5b3c10e)
- login: improve contrast of IDP processing message (#12309) (30ad9ab)
- login: improve error handling for user registration (#12338) (fa916e7)
- login: migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color (#12360) (70850db)
- login: preserve org domain suffix through account chooser navigation (#12304) (3311fb9), closes #12024
- login: Prevent IDP auto-creation failure when name fields are missing (#11070) (ab2e099)
- login: redirect to loginname instead of empty accounts page when org scope filters all sessions (#12346) (f21f95c), closes #11914
- login: use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow (#12376) (57eb145), closes #11946 #11946
- prevent double triggering of verification emails (#11995) (9ae9bf3)
Features
Source: original entry ↗
More from ZITADEL
Follow ZITADEL to get its new changes in your feed and email digest.
Query limits enforced and restored on list endpoints
ZITADEL 4.19.5 restores and enforces query limits on v1 and v2 API list endpoints, prevents loading all projects on console startup, improves sign verification with server secrets, and requires consent for device authorizations.
v4.19.4 Bug Fixes
This release includes bug fixes for the async execution worker context not having the instance ID set, corrects the ID order in the invite code notification handler, and improves handling of finalized unique-constraint backfill and exclusive owner deletes.
Performance improvements for user queries
Improved performance of user listing queries by indexing users by instance and organization, and stopped expanding login names for every ListUsers row to reduce database load.