Back to all versions

4.12.3

2025-05-22
patch

Bug Fixes 2

  • Enforce organization scopes in device authorization flow (#11160) Medium
    Users could previously authenticate into organizations they did not belong to when using the device authorization flow with specific organization scopes (urn:zitadel:iam:org:id:{id} or urn:zitadel:iam:org:domain:primary:{domainname}).
    oidc/device-authorization service-layer
  • Prevent nil pointer panics and fix i18n error nesting (#11728)
    Prevent potential nil pointer panics during de/encryption, application retrieval with missing configuration types, and Apple IdPs with malformed private keys. Also corrects the indentation of IdP error messages in i18n YAML files.
    encryption idp-management i18n

Contributors 1