Changelog

ZITADEL
Back to all versions

4.17.1

2024-05-23
patch

Security 1

  • Permission check for passkey enrollment codes high
    Enforce strict permission checks when issuing passkey enrollment codes to prevent unauthorized access.

Bug Fixes 3

  • Block Login V2 for deactivated organizations
    Block Login V2 authentication for users belonging to deactivated organizations.
  • Prevent OTP code requests via returnCode
    Prevent the browser from automatically requesting OTP codes via returnCode.
  • MFA prompt requirement for 2FA enrollment
    Ensure an MFA prompt step is required before proceeding with 2FA enrollment.