zitadel · Issues· 1198 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #10378
[Bug]: Cannot connect SMTP Provider
To-be-closedUpdated Sep 18, 2026 - #9176
MFA self management does not respect login policy
good first issuearea/apiversion/v3service-layerversion/v4area/loginV2To-be-closedUpdated Sep 18, 2026 - #7211
OAuth Token Exchange (External/3rd Party Tokens)
area/apiarea/authservice-layerUpdated Sep 17, 2026 - #9200
Zitadel should only send one client id in the audience
area/authUpdated Sep 17, 2026 - #12342
[Bug]: system.assets generated hash uses md5(), which fails with PostgreSQL 18.4/OpenSSL FIPS
Updated Sep 17, 2026 - #12620
Make consequences of empty JWT IdP audience more visible
area/docsarea/apiarea/consolearea/loginUpdated Sep 17, 2026 - #12645
[Bug]: `state` is double URL-encoded in the redirect when `response_mode=fragment`
Updated Sep 17, 2026 - #12692
jwt-bearer grant returns 500 server_error (Errors.Internal) for any malformed assertion instead of 400 invalid_grant
Updated Sep 17, 2026 - #6448
API Documentation
area/docsarea/apiservice-layerTo-be-closedUpdated Sep 17, 2026 - #5929
Include API methods/calls in the generated documentation
area/docsservice-layerTo-be-closedUpdated Sep 17, 2026 - #5375
Sort order of API calls in the reference docs is not obvious for readers
area/docsservice-layerTo-be-closedUpdated Sep 17, 2026 - #5352
correct examples in docs
area/docsservice-layerTo-be-closedUpdated Sep 17, 2026 - #12759
[Bug]: Login V2 re-enables Continue while automatic passkey WebAuthn request is still pending
Updated Sep 16, 2026 - #12270
`ORG_USER_MANAGER` should allow managing user credentials/MFA factors, or provide a least-privilege role for this
authorisationUpdated Sep 16, 2026 - #12758
Login V2: getNodeAutoInstrumentations() loads 45 OpenTelemetry packages on the cold start path
Updated Sep 16, 2026