admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): begär resourceowner-scope så tenant-claim finns #435

Merged
admin merged 1 commits from fix/oidc-tenant-scope into main 2026-11-02 15:08:46 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
admin commented 2026-11-02 15:07:25 +00:00
Owner
Copy Link
Copy Source

Zitadel tar inte med urn:zitadel:iam:org:id i id_token för standard-scope. Lägger till urn:zitadel:iam:user:resourceowner så att användarens org-id kommer med (samma claim som deriveTenantId redan läser). Loggar endast claim-nycklar — aldrig värden — om tenant fortfarande saknas.

Zitadel tar inte med `urn:zitadel:iam:org:id` i id_token för standard-scope. Lägger till `urn:zitadel:iam:user:resourceowner` så att användarens org-id kommer med (samma claim som `deriveTenantId` redan läser). Loggar endast claim-nycklar — aldrig värden — om tenant fortfarande saknas.
admin added 1 commit 2026-11-02 15:07:26 +00:00
fix(auth): request the resourceowner scope so the tenant claim is present
CI (SIAX Cloud) / integration (push) Skipped
Details
CI (SIAX Cloud) / sonar (push) Skipped
Details
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
masterplan-lock / check (pull_request) Successful in 5s
Details
masterplan-lock / check (push) Successful in 5s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
Details
CI (SIAX Cloud) / security (push) Successful in 18s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 20s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 30s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 31s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 42s
Details
CI (SIAX Cloud) / quality (push) Successful in 54s
Details
7d8ed9bfba 
Zitadel omits urn:zitadel:iam:org:id from the id_token for the default scopes.
Requesting urn:zitadel:iam:user:resourceowner yields the user's org id, which
deriveTenantId already understands. Also log claim keys (never values) when the
tenant is still absent.
CODEOWNERS rules requested review from sax3l 2026-11-02 15:07:26 +00:00
admin scheduled this pull request to auto merge when all checks succeed 2026-11-02 15:08:43 +00:00
admin merged commit 9ed9cf0f73 into main 2026-11-02 15:08:46 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#435