Skip to content

Support offline validation of JWTs and RBAC #602

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 5 commits into
base: main
Choose a base branch
from
Draft

Support offline validation of JWTs and RBAC #602

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
229ed43
feat: simplify token introspection with flattened claims and RBAC met…
domenkozar Jun 24, 2025
6a26e24
add generated module
domenkozar Jun 27, 2025
86eef03
bump axum to 0.8.4
domenkozar Jun 28, 2025
5a4689d
feat: add JWT creation with custom expiry for offline validation
domenkozar Jul 1, 2025
be2e128
feat: add ZITADEL Actions v3 webhook support
domenkozar Jul 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,4 @@
/target
Cargo.lock
temp*
src/api/generated
crates/zitadel-gen/src/api/
.idea
367 changes: 367 additions & 0 deletions crates/zitadel-gen/src/api/mod.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,367 @@
// @generated
pub mod zitadel {
pub mod action {
#[cfg(feature = "zitadel-action-v1")]
// @@protoc_insertion_point(attribute:zitadel.action.v1)
pub mod v1 {
include!("zitadel.action.v1.rs");
// @@protoc_insertion_point(zitadel.action.v1)
}
}
pub mod admin {
#[cfg(feature = "zitadel-admin-v1")]
// @@protoc_insertion_point(attribute:zitadel.admin.v1)
pub mod v1 {
include!("zitadel.admin.v1.rs");
// @@protoc_insertion_point(zitadel.admin.v1)
}
}
pub mod app {
#[cfg(feature = "zitadel-app-v1")]
// @@protoc_insertion_point(attribute:zitadel.app.v1)
pub mod v1 {
include!("zitadel.app.v1.rs");
// @@protoc_insertion_point(zitadel.app.v1)
}
}
pub mod auth {
#[cfg(feature = "zitadel-auth-v1")]
// @@protoc_insertion_point(attribute:zitadel.auth.v1)
pub mod v1 {
include!("zitadel.auth.v1.rs");
// @@protoc_insertion_point(zitadel.auth.v1)
}
}
pub mod authn {
#[cfg(feature = "zitadel-authn-v1")]
// @@protoc_insertion_point(attribute:zitadel.authn.v1)
pub mod v1 {
include!("zitadel.authn.v1.rs");
// @@protoc_insertion_point(zitadel.authn.v1)
}
}
pub mod change {
#[cfg(feature = "zitadel-change-v1")]
// @@protoc_insertion_point(attribute:zitadel.change.v1)
pub mod v1 {
include!("zitadel.change.v1.rs");
// @@protoc_insertion_point(zitadel.change.v1)
}
}
pub mod event {
#[cfg(feature = "zitadel-event-v1")]
// @@protoc_insertion_point(attribute:zitadel.event.v1)
pub mod v1 {
include!("zitadel.event.v1.rs");
// @@protoc_insertion_point(zitadel.event.v1)
}
}
pub mod feature {
#[cfg(feature = "zitadel-feature-v1")]
// @@protoc_insertion_point(attribute:zitadel.feature.v1)
pub mod v1 {
include!("zitadel.feature.v1.rs");
// @@protoc_insertion_point(zitadel.feature.v1)
}
#[cfg(feature = "zitadel-feature-v2")]
// @@protoc_insertion_point(attribute:zitadel.feature.v2)
pub mod v2 {
include!("zitadel.feature.v2.rs");
// @@protoc_insertion_point(zitadel.feature.v2)
}
#[cfg(feature = "zitadel-feature-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.feature.v2beta)
pub mod v2beta {
include!("zitadel.feature.v2beta.rs");
// @@protoc_insertion_point(zitadel.feature.v2beta)
}
}
pub mod idp {
#[cfg(feature = "zitadel-idp-v1")]
// @@protoc_insertion_point(attribute:zitadel.idp.v1)
pub mod v1 {
include!("zitadel.idp.v1.rs");
// @@protoc_insertion_point(zitadel.idp.v1)
}
#[cfg(feature = "zitadel-idp-v2")]
// @@protoc_insertion_point(attribute:zitadel.idp.v2)
pub mod v2 {
include!("zitadel.idp.v2.rs");
// @@protoc_insertion_point(zitadel.idp.v2)
}
}
pub mod instance {
#[cfg(feature = "zitadel-instance-v1")]
// @@protoc_insertion_point(attribute:zitadel.instance.v1)
pub mod v1 {
include!("zitadel.instance.v1.rs");
// @@protoc_insertion_point(zitadel.instance.v1)
}
}
pub mod management {
#[cfg(feature = "zitadel-management-v1")]
// @@protoc_insertion_point(attribute:zitadel.management.v1)
pub mod v1 {
include!("zitadel.management.v1.rs");
// @@protoc_insertion_point(zitadel.management.v1)
}
}
pub mod member {
#[cfg(feature = "zitadel-member-v1")]
// @@protoc_insertion_point(attribute:zitadel.member.v1)
pub mod v1 {
include!("zitadel.member.v1.rs");
// @@protoc_insertion_point(zitadel.member.v1)
}
}
pub mod metadata {
#[cfg(feature = "zitadel-metadata-v1")]
// @@protoc_insertion_point(attribute:zitadel.metadata.v1)
pub mod v1 {
include!("zitadel.metadata.v1.rs");
// @@protoc_insertion_point(zitadel.metadata.v1)
}
}
pub mod milestone {
#[cfg(feature = "zitadel-milestone-v1")]
// @@protoc_insertion_point(attribute:zitadel.milestone.v1)
pub mod v1 {
include!("zitadel.milestone.v1.rs");
// @@protoc_insertion_point(zitadel.milestone.v1)
}
}
pub mod object {
#[cfg(feature = "zitadel-object-v2")]
// @@protoc_insertion_point(attribute:zitadel.object.v2)
pub mod v2 {
include!("zitadel.object.v2.rs");
// @@protoc_insertion_point(zitadel.object.v2)
}
#[cfg(feature = "zitadel-object-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.object.v2beta)
pub mod v2beta {
include!("zitadel.object.v2beta.rs");
// @@protoc_insertion_point(zitadel.object.v2beta)
}
#[cfg(feature = "zitadel-object-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.object.v3alpha)
pub mod v3alpha {
include!("zitadel.object.v3alpha.rs");
// @@protoc_insertion_point(zitadel.object.v3alpha)
}
}
pub mod oidc {
#[cfg(feature = "zitadel-oidc-v2")]
// @@protoc_insertion_point(attribute:zitadel.oidc.v2)
pub mod v2 {
include!("zitadel.oidc.v2.rs");
// @@protoc_insertion_point(zitadel.oidc.v2)
}
#[cfg(feature = "zitadel-oidc-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.oidc.v2beta)
pub mod v2beta {
include!("zitadel.oidc.v2beta.rs");
// @@protoc_insertion_point(zitadel.oidc.v2beta)
}
}
pub mod org {
#[cfg(feature = "zitadel-org-v1")]
// @@protoc_insertion_point(attribute:zitadel.org.v1)
pub mod v1 {
include!("zitadel.org.v1.rs");
// @@protoc_insertion_point(zitadel.org.v1)
}
#[cfg(feature = "zitadel-org-v2")]
// @@protoc_insertion_point(attribute:zitadel.org.v2)
pub mod v2 {
include!("zitadel.org.v2.rs");
// @@protoc_insertion_point(zitadel.org.v2)
}
#[cfg(feature = "zitadel-org-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.org.v2beta)
pub mod v2beta {
include!("zitadel.org.v2beta.rs");
// @@protoc_insertion_point(zitadel.org.v2beta)
}
}
pub mod policy {
#[cfg(feature = "zitadel-policy-v1")]
// @@protoc_insertion_point(attribute:zitadel.policy.v1)
pub mod v1 {
include!("zitadel.policy.v1.rs");
// @@protoc_insertion_point(zitadel.policy.v1)
}
}
pub mod project {
#[cfg(feature = "zitadel-project-v1")]
// @@protoc_insertion_point(attribute:zitadel.project.v1)
pub mod v1 {
include!("zitadel.project.v1.rs");
// @@protoc_insertion_point(zitadel.project.v1)
}
}
pub mod protoc_gen_zitadel {
#[cfg(feature = "zitadel-protoc_gen_zitadel-v2")]
// @@protoc_insertion_point(attribute:zitadel.protoc_gen_zitadel.v2)
pub mod v2 {
include!("zitadel.protoc_gen_zitadel.v2.rs");
// @@protoc_insertion_point(zitadel.protoc_gen_zitadel.v2)
}
}
pub mod quota {
#[cfg(feature = "zitadel-quota-v1")]
// @@protoc_insertion_point(attribute:zitadel.quota.v1)
pub mod v1 {
include!("zitadel.quota.v1.rs");
// @@protoc_insertion_point(zitadel.quota.v1)
}
}
pub mod resources {
pub mod action {
#[cfg(feature = "zitadel-resources-action-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.action.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.action.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.action.v3alpha)
}
}
pub mod debug_events {
#[cfg(feature = "zitadel-resources-debug_events-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.debug_events.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.debug_events.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.debug_events.v3alpha)
}
}
pub mod object {
#[cfg(feature = "zitadel-resources-object-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.object.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.object.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.object.v3alpha)
}
}
pub mod user {
#[cfg(feature = "zitadel-resources-user-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.user.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.user.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.user.v3alpha)
}
}
pub mod userschema {
#[cfg(feature = "zitadel-resources-userschema-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.userschema.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.userschema.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.userschema.v3alpha)
}
}
pub mod webkey {
#[cfg(feature = "zitadel-resources-webkey-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.resources.webkey.v3alpha)
pub mod v3alpha {
include!("zitadel.resources.webkey.v3alpha.rs");
// @@protoc_insertion_point(zitadel.resources.webkey.v3alpha)
}
}
}
pub mod saml {
#[cfg(feature = "zitadel-saml-v2")]
// @@protoc_insertion_point(attribute:zitadel.saml.v2)
pub mod v2 {
include!("zitadel.saml.v2.rs");
// @@protoc_insertion_point(zitadel.saml.v2)
}
}
pub mod session {
#[cfg(feature = "zitadel-session-v2")]
// @@protoc_insertion_point(attribute:zitadel.session.v2)
pub mod v2 {
include!("zitadel.session.v2.rs");
// @@protoc_insertion_point(zitadel.session.v2)
}
#[cfg(feature = "zitadel-session-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.session.v2beta)
pub mod v2beta {
include!("zitadel.session.v2beta.rs");
// @@protoc_insertion_point(zitadel.session.v2beta)
}
}
pub mod settings {
pub mod object {
#[cfg(feature = "zitadel-settings-object-v3alpha")]
// @@protoc_insertion_point(attribute:zitadel.settings.object.v3alpha)
pub mod v3alpha {
include!("zitadel.settings.object.v3alpha.rs");
// @@protoc_insertion_point(zitadel.settings.object.v3alpha)
}
}
#[cfg(feature = "zitadel-settings-v1")]
// @@protoc_insertion_point(attribute:zitadel.settings.v1)
pub mod v1 {
include!("zitadel.settings.v1.rs");
// @@protoc_insertion_point(zitadel.settings.v1)
}
#[cfg(feature = "zitadel-settings-v2")]
// @@protoc_insertion_point(attribute:zitadel.settings.v2)
pub mod v2 {
include!("zitadel.settings.v2.rs");
// @@protoc_insertion_point(zitadel.settings.v2)
}
#[cfg(feature = "zitadel-settings-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.settings.v2beta)
pub mod v2beta {
include!("zitadel.settings.v2beta.rs");
// @@protoc_insertion_point(zitadel.settings.v2beta)
}
}
pub mod system {
#[cfg(feature = "zitadel-system-v1")]
// @@protoc_insertion_point(attribute:zitadel.system.v1)
pub mod v1 {
include!("zitadel.system.v1.rs");
// @@protoc_insertion_point(zitadel.system.v1)
}
}
pub mod text {
#[cfg(feature = "zitadel-text-v1")]
// @@protoc_insertion_point(attribute:zitadel.text.v1)
pub mod v1 {
include!("zitadel.text.v1.rs");
// @@protoc_insertion_point(zitadel.text.v1)
}
}
pub mod user {
#[cfg(feature = "zitadel-user-v1")]
// @@protoc_insertion_point(attribute:zitadel.user.v1)
pub mod v1 {
include!("zitadel.user.v1.rs");
// @@protoc_insertion_point(zitadel.user.v1)
}
#[cfg(feature = "zitadel-user-v2")]
// @@protoc_insertion_point(attribute:zitadel.user.v2)
pub mod v2 {
include!("zitadel.user.v2.rs");
// @@protoc_insertion_point(zitadel.user.v2)
}
#[cfg(feature = "zitadel-user-v2beta")]
// @@protoc_insertion_point(attribute:zitadel.user.v2beta)
pub mod v2beta {
include!("zitadel.user.v2beta.rs");
// @@protoc_insertion_point(zitadel.user.v2beta)
}
}
#[cfg(feature = "zitadel-v1")]
// @@protoc_insertion_point(attribute:zitadel.v1)
pub mod v1 {
include!("zitadel.v1.rs");
// @@protoc_insertion_point(zitadel.v1)
#[cfg(feature = "zitadel-v1-v1")]
// @@protoc_insertion_point(attribute:zitadel.v1.v1)
pub mod v1 {
include!("zitadel.v1.v1.rs");
// @@protoc_insertion_point(zitadel.v1.v1)
}
}
}
Loading