oidc

Asking about this since the NSA recently published guidance advising the public and private sectors to transition to cryptographic algorithms that are no less than sha384 & ec384 (elliptic curves).

While Edwards' Curves are different, its worth noting that prior to this update sha256 & secp256k1 were both on the list of acceptable cryptographic algorithms. My deduction was that 128-bit securit

Description 🐜

If you only have a Credentials provider, you now are unable to get a CSRF token:

[next-auth][error][CALLBACK_CREDENTIALS_JWT_ERROR] 
https://next-auth.js.org/errors#callback_credentials_jwt_error Signin in with credentials only supported if JWT strategy is enabled UnsupportedStrategy [UnsupportedStrategyError]: Signin in with credentials only supported if JWT strategy is 

Describe the issue:
The links not show hover states on hover on the getting started page.

How to reproduce:

1. Navigate to getting started page
2. hover over any link

Expected behavior:
Should indicate hover state for links

Describe the bug
When I use suggested password from chrome,
then the password does not comply with the requirements (missing symbol)
and the 'save' button stays inactive

To Reproduce
Steps to reproduce the behavior:

1. Go to https://accounts.zitadel.dev/register/org
2. Fill in the form
3. Let click on use suggested password
4. Password does not pass the check
5. Add symbol man