v4.15.3

deepseek-ai/DeepSeek-Coder-V2v4.15.3Jun 22, 2026by github-actions[bot]

AI Summary

A bug fix release focusing on token exchange validation, user auto-linking logic, and UI improvements for login buttons.

Key Highlights

Adds client and scope validation for token exchange
Ensures external user email is verified before auto-linking
Center text for generic IDP buttons without icons
Guard defaultRedirectUri in OIDC/SAML paths

New Features

Client and scope validation added to token exchange
External user email verification before auto-linking
Login UI centering for generic IDP buttons
Guard for defaultRedirectUri in failed precondition paths

Full Release Notes

## [4.15.3](https://github.com/zitadel/zitadel/compare/v4.15.2...v4.15.3) (2026-06-22)


### Bug Fixes

* added client and scope validation for token exchange ([e2886a6](https://github.com/zitadel/zitadel/commit/e2886a61670ca8fd41c9434f87036546e5620bcc))
* ensure external user's email is verified before auto-linking ([c97012f](https://github.com/zitadel/zitadel/commit/c97012f0c5dc2fe960ae6e940cbea23229f0557f))
* **login:** center text for generic IDP buttons without icons ([#12211](https://github.com/zitadel/zitadel/issues/12211)) ([aadc664](https://github.com/zitadel/zitadel/commit/aadc664a206ebdf6bfd85145e9c6fcdc165a6cee)), closes [#12182](https://github.com/zitadel/zitadel/issues/12182)
* **login:** guard defaultRedirectUri in OIDC/SAML FailedPrecondition paths ([0382659](https://github.com/zitadel/zitadel/commit/038265925a3b05ac1df8aad461ab071983e9eb85))