mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2025-12-30 03:19:54 -06:00
Code Issues Packages Projects Releases Wiki Activity
28,206 Commits 20 Branches 287 Tags
release/26.2
Commit Graph

2633 Commits

Author SHA1 Message Date
Pedro Ruivo
32e24dff6c Update protolock file list 
Closes #44300

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-18 18:32:07 +00:00
Stefan Guilhen
eb10072d53 Skip checksum validation for 2.5.0-unicode-oracle, that is preventing migrations when schema name changes 
Closes #43564

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit ef3de183df)
 2025-11-10 15:10:59 -03:00
Tobi
84c5701b89 Add new indices on offline_client_session 
Closes #43566
Closes #43516

Signed-off-by: twobiers <22715034+twobiers@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-11-03 16:07:22 -03:00
Alexander Schwartz
4cd381edbf Avoid holding on to the realm in cached configurations 
Closes #43744

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-10-29 08:01:02 -03:00
Alexander Schwartz
cce230818e Register new protocols to avoid exceptions on startup 
Closes #43337

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-10-10 07:43:13 -03:00
Pedro Igor
e3ad01f777 Invalidate user cache entries when email or username are different from storage 
Closes #40085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-10-07 23:58:40 +02:00
Pedro Ruivo
02fb1299d2 Restarting an user session broken for persistent sessions 
Fixes #43161

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-10-03 19:27:34 +02:00
Alexander Schwartz
27121d010c Avoid invalidating the realm when managing client initial access 
Closes #42922

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-09-25 06:14:13 +02:00
Alexander Schwartz
2743174f2c Handle already existing user session in the store 
Closes #40374

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-11 17:09:50 +02:00
Pedro Ruivo
60a93d7d80 [26.2] ClientSession timestamp not updated in the database 
Closes #42012

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-09-10 20:33:22 +02:00
Alexander Schwartz
077aa8b19c Avoid removing client sessions before the user session times out 
As the client session timeout can be overwritten on a per client level, the realm level timeout can not be used to remove client sessions early.

Closes #35825

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-08 16:38:05 -03:00
Alexander Schwartz
53625e5d81 Lock the database before doing migrations 
Closes #41801

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-04 12:29:17 -03:00
Alexander Schwartz
0a948fe22f Avoid deleting old client sessions 
Closes #41427

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-28 09:59:32 -03:00
Ryan Emerson
ab046ddedb Default jdbc-ping cluster setup for distributed caches fails in Oracle 
Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-18 14:21:21 +02:00
Pedro Ruivo
2c82e67c0e Skip computing lifespan for read-only sessions 
Fixes #40980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-07-11 08:59:14 +02:00
Pedro Ruivo
ac57ac40a2 Improve logging for client sessions load 
Closes #41034

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-07-10 18:21:30 +02:00
vramik
3121b9d334 Fix NPE when accessing group concurrently 
Closes #40368

# Conflicts:
#	tests/base/src/test/java/org/keycloak/tests/admin/group/GroupTest.java

Signed-off-by: vramik <vramik@redhat.com>
 2025-07-09 08:06:21 -03:00
Steven Hawkins
d34ef96e87 fix: reducing memory footprint for cached entries 
closes: #35932


(cherry picked from commit c9f38d36a9)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-30 20:05:26 +00:00
Alexander Schwartz
d060a66558 Adjusted the comparisons for PersistentClientSessionEntity 
Closes #40663

Signed-off-by: Anchels <mishtitov@gmail.com>
Co-authored-by: Anchels <42744001+Anchels@users.noreply.github.com>
 2025-06-28 20:53:31 +02:00
Martin Bartoš
3423ddb91b Use updated PostgresDatabase from Liquibase 4.32.0 (#40686) 
Closes #39917

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-06-25 10:06:43 +02:00
Ryan Emerson
dd52843796 Disabling persistent sessions affects also offline session cache 
Closes #40483

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
 2025-06-20 21:20:48 +02:00
Martin Bartoš
eee812c866 Make UPDATE_TIME unique for MIGRATION_MODEL table 
Closes #40088

(cherry picked from commit e4f0bfc8e7)

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 13:56:07 +00:00
Martin Bartoš
65b395a825 MigrationModel duplicate entry 
Closes #39866

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-11 16:46:20 +00:00
Alexander Schwartz
202e9e8479 Cache the client session if it is missing from the cache (#40156) 
Closes #39785

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-03 10:35:35 +02:00
rmartinc
a1b8353d9f Use previous password in SMTP when the the authType defaults to basic 
Closes #39781

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 669cc2533c)
 2025-05-30 16:43:21 +02:00
Ricardo Martin
5c0bbc330b Remove parent and children composite dependencies when removing roles 
Closes #39724


(cherry picked from commit ef4ad0d59c)

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-26 09:54:14 +02:00
Abhishek Kumar Gupta
1b9d993dff Persist refresh token for IDP token exchange 
Closes #39502

Signed-off-by: abhishek818 <abhishekguptaatweb17@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-16 08:53:30 +02:00
Alexander Schwartz
58124655a4 Lazily process sessions from ISPN to avoid fetching client sessions (#39683) 
Closes #39638

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 16:55:26 +02:00
Alexander Schwartz
3e51c71ce8 More eagerly clear references to client sessions from the user session 
Closes #39651

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 16:54:17 +02:00
Alexander Schwartz
34db5cdca9 Avoid inefficient SQL when deleting a role (#39285) 
Closes #39237

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-30 10:26:52 +02:00
Paul Schwabauer
8bdbb04121 Fix duplicate users on searching attributes with multiple entries 
Closes #39246

Signed-off-by: koplas <pschwabauer@intevation.de>
 2025-04-30 10:14:16 +02:00
Pedro Igor
418145e496 Querying group by name should use an equal predicate 
Closes #38982

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-17 09:07:31 +02:00
vramik
7437677863 Fix JpaUserProvider.getUsersCount(RealmModel, boolean) 
Closes #38692

(cherry picked from commit bd58b70447)

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-16 16:26:09 -03:00
Stefan Guilhen
91f3f51299 Add valid checksum v8 to the 2.5.0-unicode-oracle changeset 
- allows migration from earlier Keycloak versions where liquibase was using version 8 of the checksum algorithm

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #38937

(cherry picked from commit 8b35fa58de)
 2025-04-15 12:19:38 -03:00
Alexander Schwartz
6a37638a95 Do not terminate persistent sessions worker on exceptions 
Closes #38925

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-15 13:11:05 +02:00
Stian Thorgersen
d105aa24ed Update link to 26.1 proto.lock file (#38866) 
Signed-off-by: stianst <stianst@gmail.com>
 2025-04-11 12:47:43 +02:00
github-actions[bot]
9979376934 Committing **/proto.lock changes 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-04-11 10:27:09 +00:00
Pedro Igor
e68e43cbc8 Cache resource names associated to policies to improve partial evaluation 
Closes #38837

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-10 19:50:26 +02:00
Pedro Igor
ae88d7921f Improvements to partial evaluation 
Closes #38732

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-09 18:15:28 +02:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported 
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-08 13:00:47 -03:00
Pedro Igor
be880ae204 Do not cache partial results when FGAP is enabled 
Closes #38705

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 08:22:22 +02:00
Pedro Ruivo
e730d8bec5 Fix repeated info logs running an import 
Fixes #37941

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-07 15:42:57 +02:00
Pedro Igor
e5ff19b327 Adding missing fgap filtering to user count methods 
Closes #38510

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-04 14:21:57 +02:00
Alexander Schwartz
5583155802 Don't update the client session's timestamp when loading it from the database (#38608) 
Closes #38591

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-04 09:44:03 +02:00
Stefan Guilhen
33283de8ed Add schema name for update query on Oracle 
- Fixes issue with changeset 2.5.0-unicode-oracle

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #35833
 2025-04-03 19:44:53 -03:00
Pedro Igor
dbb0179a93 Aligning partial evaluation with the outcome from regular evaluations 
Closes #38626

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 12:07:30 -03:00
skydrinker-tox
94673a6eb0 KeyUtils was warning about invalid key for valid 22 chars short ids 
Closes #37992

Signed-off-by: skydrinker_tox <skydrinker_tox@hotmail.com>
 2025-04-03 17:05:29 +02:00
Steven Hawkins
9ce4539d22 fix: switching default client scopes to lazy loading (#38553) 
closes: #38552

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-03 14:11:59 +02:00
Alexander Schwartz
f75a62c948 Clear persistent sessions cache on cluster merge (#38569) 
Closes #38568

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-04-01 13:17:00 +02:00
saravanaarh
6b3e348a23 Added condition to check offlineSessionMaxLifespanEnabled on clearing 
Closes #38063

Signed-off-by: Saravana <saravanakumar.a@kobil.com>
Co-authored-by: Saravana <saravanakumar.a@kobil.com>
 2025-03-27 20:11:13 +00:00