Pull Request Explorer

Summary

Translate authentication and OTP strings

Adds comprehensive locale support for login authentication and OTP flows, eliminating hardcoded text and improving international user experience.

Health Assessment

• • The PR was reviewed quickly and required minimal rework, with a single review round and strong test coverage, indicating a smooth integration despite the large number of lines added.

Summary

Update gRPC-Go dependencies

Bumps google.golang.org/grpc to 1.83.2, updating related dependencies to maintain compatibility.

Health Assessment

• • Quick, single-commit PR with minimal review; low risk.

Summary

Publish v4.17.1 benchmark results and fix harness

Adds benchmark documentation pages for v4.17.1, publishes results, and implements fixes to the benchmark harness to improve reliability and accuracy.

Health Assessment

• • PR took over 5 days to merge, but had a quick review; the large number of added lines indicates significant documentation and harness changes, raising risk due to complexity and potential downstream impact.

Summary

Remove stale back‑channel logout notice

Updates the OIDC logout guide to reflect that back‑channel logout is implemented, improving documentation accuracy.

Health Assessment

• • Quick documentation update with minimal changes and no rework, merged within 14 hours.

Summary

Fix CI flakiness by removing manual stop

Eliminates flaky CI runs caused by Nx misinterpreting stopped services, ensuring reliable test execution.

Health Assessment

• • Quick fix resolved CI flakiness with minimal changes and no back‑and‑forth.

Summary

Fix registration org resolution consistency

Ensures users are registered in the same organization used for login policy, preventing mismatched org assignments and improving security consistency.

Health Assessment

• • PR took over 8 days to merge, with a single review and minimal rework, indicating a straightforward bugfix but delayed by unrelated merges.

Summary

Add documentation guide for custom Login UI

Provides a comprehensive guide for teams to fork, build, and deploy a customized ZITADEL Login UI, reducing maintenance overhead and ensuring secure integration.

Health Assessment

• • PR was reviewed quickly but required multiple small commits to address feedback, indicating tight iteration but low overall review burden.

Summary

Restore account picker after RP-initiated logout

Ensures users see the account selection screen after an RP-initiated logout, maintaining a smooth login experience and reducing confusion.

Health Assessment

• • Fast review and minimal rework indicate a clear, well-scoped fix with low implementation risk.

Summary

Prevent TOTP code reuse to enhance security

Adds replay protection for TOTP codes, preventing reuse within validity window, improving account security.

Health Assessment

• • Long cycle time (8+ days) with multiple review rounds indicates significant rework, but the quick initial review shows early detection. The security fix required careful handling of TOTP logic and i18n updates.

Summary

Disable HTTP caching for well-known app link files

Ensures instance‑specific app link files are not cached across hosts, preventing incorrect responses for native app verification.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward, low‑risk bug fix. AI assistance helped streamline the implementation.

Summary

Remove outdated Actions v2 feature flag references

Clean up documentation to reflect that Actions v2 is enabled by default, removing obsolete feature flag references.

Health Assessment

• • PR merged within 30 minutes with a single commit and no rework, indicating a straightforward documentation cleanup.

Summary

Fix redirect to WIP page

Updates docs redirect rule to send API reference requests to an under development placeholder, improving user experience during API build.

Health Assessment

• • Quick fix with minimal changes, reviewed immediately, merged within hours.

Summary

Fix integration test for org v2

Corrects a faulty integration test by updating the test setup to use a machine user for PAT creation, ensuring API behavior alignment.

Health Assessment

• • Fast turnaround with no rework; minimal impact on codebase.

Summary

Add temporary redirect for API group docs

Provides a placeholder page for /api/group/* routes while the Group API is under development, improving user experience.

Health Assessment

• • Fast review and merge with AI assistance; minimal code changes.

Summary

Update docs for Knowledge Gap ID 43

Fixes documentation for SDK React examples, improving clarity and removing repeated content.

Health Assessment

• • Rapid review and merge within 12 minutes, minimal changes, low risk.

Summary

Fix unknown user redirect after domain discovery

Ensures unknown users are redirected correctly to the external IdP, preventing enumeration attacks and improving login security and user experience.

Health Assessment

• • Quick, single-commit fix with minimal code changes and no complex dependencies, resulting in a low-risk, fast-resolution PR.

Summary

Add actor info to OIDC userinfo actions

Enables impersonation context to be exposed in OIDC userinfo and preAccessToken actions, allowing downstream services to know the actor behind a token, improving auditability and delegation handling.

Health Assessment

• • The PR introduced significant new functionality around OIDC actor context, required extensive refactoring and integration tests, leading to multiple review rounds and a large code change set, but was ultimately merged within two days.

Summary

Synchronize instance roles for Zitadel IdP

Adds role synchronization for instance administrators during login via Zitadel, ensuring proper permissions and reducing missing access issues.

Health Assessment

• • Fast review (0.1h) with a single changes‑requested round; moderate code churn (278 lines) indicates a focused feature addition with manageable risk.

Summary

Add native app link support for passkeys

Adds native app link support for iOS and Android passkeys, enabling secure native authentication flows and improving user experience. This enhances security and reduces friction for mobile users.

Health Assessment

• • Rapid review and merge with minimal iterations indicate confidence, but the large code addition suggests significant integration risk.

Summary

Document native app links for passkeys

Provides operators with guidance on configuring native app links for passkeys, improving integration and user experience.

Health Assessment

• • Long review cycle indicates low priority or backlog; documentation only, minimal risk.

Summary

Add Native App Link Settings to OIDC Console

Admins can now configure iOS/Android native app link metadata directly in the console, enabling passkey trust file support and improving security and user experience. This enhances admin control over authentication flows.

Health Assessment

• • The PR involved extensive UI changes and internationalization, requiring multiple AI‑assisted commits and a single review, resulting in a long cycle time but minimal review friction.

Summary

Serve AASA and Assetlinks for Native Passkeys

Adds instance‑scoped well‑known endpoints to publish iOS and Android association documents for native app passkeys, enabling secure passkey authentication flows.

Health Assessment

• • The PR required a week to merge with a single review after a 25‑hour review delay, indicating slow feedback but minimal rework.

Summary

Wire native app link fields through OIDC storage

Adds iOS/Android native app link configuration to OIDC apps, enabling passkey trust metadata and improving mobile security and user experience.

Health Assessment

• • Long cycle time and slow review indicate high complexity; extensive changes across many files suggest significant refactoring and new feature implementation.

Summary

Add native app link config for passkeys

Adds configuration for native iOS/Android app link metadata, enabling passkey support and improving authentication reliability for mobile users.

Health Assessment

• • The PR required multiple AI-assisted commits and a lengthy review process, resulting in a slow cycle time but a straightforward feature addition.