ZITADEL

Z

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

Session state is not properly reduced

I've noticed that some terminated sessions still appear in the /v2/sessions response because sessions8 still lists them as active, even though there is a session.terminated event in the event log. There are no related errors/warnings in the log so I'm not sure what's happening. I'm running self-hosted 2.70.14 with PostgreSQL...
No description

Actions V2 - An internal error occurred

We have a fresh setup with version 3.3.2, with minimal config parameters. When we call actions V2 in the console UI, this error message always appears, and created actions are accepted but not displayed in the UI. Has anyone encountered this message before and has any idea what we could do?
No description

Device Authorization has no PKCE Support

The methods rp.DeviceAuthorization and rp.DeviceAccessToken don't support PKCE for OPs that require PKCE for device authorization. rp.DeviceAuthorization does support a custom authFn, so you can pass a custom http.FormAuthorization function that adds the code_challenge and code_challenge_method. However, rp.DeviceAccessToken doesn't support an auth function. We worked around this limitation by creating a custom http RoundTripper that adds code_verifier to the form data and then...

SMTP on Digital Ocean Blocked

Hello hello Zitadel community! I’ve got an interesting one here, I recently migrated my self hosted Zitadel instance from on-prem to a digital ocean droplet. Everything works fantastic and migration was smooth as ever. However, self service emails have been rendered useless because digital ocean and other VPS providers default to blocking SMTP connections as a spam prevention policy which is fair. But now, if I have a locally administered user, how can they reset their passwords or even verify e...

Using the self built zitadel service, the front-end project opens a log message with HTTP 404

I built the backend service of zitadel locally using Docker, and the frontend uses the project source of zitadel typescript,The error is as follows: ⨯ Error [ConnectError]: [unimplemented] HTTP 404 at <unknown> (.next/server/chunks/2151.js:10:121781) at v (.next/server/chunks/2151.js:10:122258) at next (.next/server/chunks/2151.js:10:157654)...

zitadel-rust needs updates

I created an issue overhere: https://github.com/smartive/zitadel-rust/issues/606 Zitadel-rust seems sort of abandoned... Any suggestions how to go about this? My usecase is Axum....

Docker Compose from Documentation is Broken

Hey, the docker compose file obtained via wget as per the documentation is broken. I've made an issue here: https://github.com/zitadel/zitadel/issues/10432 Any help is appreciated!...

Could not get the context of the user and Could not verify password

Hello, again! I was trying to set up zitadel on my local network. A few days ago I have a problem regarding migration error. It's solved now, I have to modify the user on the docker compose file. It is now up and running. But, I have another problem. While trying to login, I have this warning that says:
Could not get the context of the user. Make sure to enter the username first or provide a loginName as searchParam.
Could not get the context of the user. Make sure to enter the username first or provide a loginName as searchParam.
after I entered the username (which is ```zitadel-admin@zitadel.192.168.2...
No description

Change password API call

Hi Zitadel team! I need to add change password on my app, I noticed that the v2 https://$CUSTOM-DOMAIN/v2/users/:userId/password is deprecated, it suggesting to use a PATCH on the user instead, but I just want to change the password, is that correct? Thanks!...

domain per organization

I can set a organization to login using login scope but when I make a nginx redirect to my main instance here is overview - I self host zitadel with docker compose with ENV set ZITADEL_EXTERNALDOMAIN=accounts.company.com - I'm using nginx proxy manager...
No description

Password Grant Type capability?

While I know that the Password grant type is being eventually deprecated by the oauth standards, is there a way to enable/allow it in zitadel? I am attempting to test/use the Turing Institute's LDAP frontend for OIDC to interface my zitadel auth with an application that only supports LDAP.

User not found?

Hey, I hosted zitadel with docker compose, everything worked well. I used this config, https://docs-git-simplify-compose-example-zitadel.vercel.app/docs/self-hosting/deploy/compose/ I added ExternalDomain so i could use my LAN address instead of localhost, it worked. In loginname, i entered zitadel-admin@lan addr as per the docs, but it say "User not found" What do I do?...

What is this use of subcommands

Can you guide me how can i use subcommand, since document doesn't provide how to exactly use those sub command zitadel mirror auth zitadel mirror eventstore zitadel mirror projections ...

Migration failed. Permission denied

Hello! I'm trying to run zitadel from the example but I got this migration permission error. I'm using the exact compose file as provided on a newly created LXC with fresh docker installation. How do I solve this? Thanks!
No description

Zitadel - 503 issue

Can any one guide on how Zitadel session is working and when the /api/auth/_log call is happening, because whenever this api is calling we are facing 503 issue in our application, can any one has any idea

Help on OIDC logout to terminate session on OpenID Provider

Use-case: 1 tenant = 1 ZITADEL Org, each Org has its own OIDC IdP (ZITADEL as RP, external OpenID Provider) Environment: Self Hosting Version: 3.3.0 Stack: K8S on EKS, RDS postgres, microservices, ZITADEL TypeScript login V2 ...

Issue with Bitbucket OAuth Integration in ZITADEL

Hi ZITADEL Team, I'm facing an issue while trying to integrate Bitbucket as an OAuth provider within ZITADEL. 🔧 Setup Details:-...
No description

Zitadel v4 High memory usage

Hey there folks 👋 Use-case: I'm currently testing a migration to Zitadel v4. ...
No description

Actions v2 - Function PreUserinfo

I'm trying to use the v2 action and move the PreUserinfo function from the v1 action, but my claims are't being set in the user. I have a webhook response in this JSON format { "set_user_metadata":[], "append_claims":[...

can zitadel selfhost do multiple domain?

I have main instance at accounts.domain1.site and I want to add accounts.domain2.com which is same zitadel instance but other organization not same as accounts.domain1.site how do I do it? I using nginx and npm (nginx proxy manager) with docker compose of zitadel...