feat: list user passkeys - #640
Merged
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
🦋 Changeset detectedLatest commit: db707c0 The changes in this PR will be included in the next version bump. This PR includes changesets to release 19 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a new user passkeys listing API surface (GET /users/{user_id}/passkeys) to the Go server and generated API client, intended to return a user’s registered passkeys (id, name, created_at) under user.read authorization.
Changes:
- Introduces
UserService.ListPasskeysbacked bydomain.UserPasskeyRepository. - Adds the API handler + OpenAPI spec for
GET /users/{user_id}/passkeysand regeneratesapi/generated/*. - Extends integration-test harness to register passkeys via a full virtual WebAuthn ceremony and adds an integration test for listing passkeys.
Reviewed changes
Copilot reviewed 11 out of 25 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| internal/service/user.go | Adds passkey repo dependency and implements ListPasskeys service method. |
| internal/service/flow_create_user_for_passkey_handler_test.go | Updates NewUserService call-site for the new constructor signature. |
| internal/api/user.go | Adds ListUserPassKeys HTTP handler and maps domain passkeys to API response. |
| internal/api/integration_test/user_test.go | Adds integration test coverage for the new list-passkeys endpoint. |
| internal/api/integration_test/helpers/user.go | Wires UserPasskeyRepo into the integration-test UserService setup. |
| internal/api/integration_test/helpers/passkey_registration.go | Adds helper to perform passkey registration via virtualwebauthn. |
| cmd/server/server.go | Wires userPasskeyRepo into UserService construction in server startup. |
| api/openapi/openapi-spec.yaml | Registers the new /users/{user_id}/passkeys path in the root OpenAPI doc. |
| api/openapi/endpoints/users/by_id/passkeys/methods.yaml | Defines the new listUserPassKeys operation and response/error shapes. |
| api/openapi/endpoints/users/by_id/passkeys/list-user-passkeys-response.yaml | Defines the 200-response schema for listing passkeys. |
| api/generated/oas_validators_gen.go | Generated validation for the new response type. |
| api/generated/oas_unimplemented_gen.go | Generated unimplemented handler stub for the new operation. |
| api/generated/oas_server_gen.go | Generated server handler interface includes ListUserPassKeys. |
| api/generated/oas_security_gen.go | Generated OAuth2 scope mapping for the new operation. |
| api/generated/oas_schemas_gen.go | Generated schema/response types for list-passkeys operation. |
| api/generated/oas_router_gen.go | Generated router wiring for /users/{user_id}/passkeys. |
| api/generated/oas_response_encoders_gen.go | Generated response encoder for list-passkeys operation. |
| api/generated/oas_response_decoders_gen.go | Generated response decoder for list-passkeys operation (client). |
| api/generated/oas_parameters_gen.go | Generated params struct/decoder for project_id + user_id. |
| api/generated/oas_operations_gen.go | Generated operation name constant for list-passkeys. |
| api/generated/oas_json_gen.go | Generated JSON encoders/decoders for new types. |
| api/generated/oas_interfaces_gen.go | Generated response interface for list-passkeys operation. |
| api/generated/oas_handlers_gen.go | Generated HTTP handler glue for list-passkeys operation. |
| api/generated/oas_client_gen.go | Generated client method ListUserPassKeys. |
| .changeset/list-user-passkeys.md | Declares minor bumps for @zitadel/server and @zitadel/api due to new endpoint. |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
# Conflicts: # internal/storage/v2/dialect/postgres/user_test.go # internal/storage/v2/dialect/spanner/user_test.go
grvijayan
approved these changes
Jul 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Validation
go run ./... -tags postgres_integrationRelease notes / changeset
Notes