mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-10 09:00:49 -06:00
Code Issues Packages Projects Releases Wiki Activity
26,389 Commits 26 Branches 288 Tags
17863d1d4fece02411bcdb60cc53ef264ffb70ab
Commit Graph

941 Commits

Author SHA1 Message Date
AndyMunro
17863d1d4f Address QE comments on Server Admin Guide 
Closes #34916

Signed-off-by: AndyMunro <amunro@redhat.com>
(cherry picked from commit 205898baf3)
 2024-11-22 11:46:26 +01:00
Peter Zaoral
7bdc16f029 fix: prevent inclusion of characters that could lead to FileVault path traversal (#212) 
Closes: #211

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-11-18 09:27:50 +01:00
Václav Muzikář
ba9d0c364c Update docs with security warning around client certificate lookup (#213) 
Closes #203

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-11-13 16:18:20 +01:00
andymunro
90bd3661b6 Update installation locations (#34871) 
Closes #34855

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
(cherry picked from commit 3ca3a4ad34)
 2024-11-13 12:34:54 +01:00
andymunro
495ddb8673 Update Leveraging Jakarta EE (#34901) 
Closes #34873

Signed-off-by: AndyMunro <amunro@redhat.com>
(cherry picked from commit e63cdd0539)
 2024-11-13 12:34:32 +01:00
andymunro
c27a55d797 Address QE comments on HA guide (#34902) 
Closes #34887

Signed-off-by: AndyMunro <amunro@redhat.com>
(cherry picked from commit 2201241949)
 2024-11-13 12:33:39 +01:00
Pedro Igor
5c9f1837d7 Added a representation that includes an organization and user model 
Closes #34013

Signed-off-by: Robert Rieser <Robert.Rieser@degoya.studio>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Robert Rieser <Robert.Rieser@degoya.studio>
 2024-11-12 10:12:51 +01:00
Kamesh Akella
22cc1194e7 update the sizing guide with the correct instance type 
Closes #34315

update the sizing guide with the correct instance type used in the Keycloak benchmark tests.

Signed-off-by: Kamesh Akella <kamesh.asp@gmail.com>
 2024-11-07 09:22:39 +01:00
Alexander Schwartz
c9d916cc17 Fixing explicit Anchor for downstream 
Closes #34634

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-04 18:27:27 +01:00
Alexander Schwartz
47e1e7a890 Fixing cross-references between guides 
Closes #34624

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-04 16:11:21 +01:00
mposolda
4938a8e563 Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC 
closes #34570

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit d80cb010ff)
 2024-11-04 13:12:19 +01:00
Pedro Igor
81ce113f8a Do not rely on the pwdLastSet attribute when updating AD entries 
Closes #34467

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-10-31 16:07:09 +01:00
Alexander Schwartz
18dbf8924f Remove inaccurate statement about master realm imports (#34544) 
This is supported since 26.0.0

Closes #34301

Signed-off-by: maxhov <14804474+maxhov@users.noreply.github.com>
Co-authored-by: Max Hovens <14804474+maxhov@users.noreply.github.com>
 2024-10-31 13:31:40 +01:00
Jon Koops
ec578c0f9e Automatically retrieve configuration for authorization (#34044) (#34097) 
Closes #14562

Signed-off-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit 7657e71be1)
 2024-10-29 10:41:31 +01:00
Gilvan Filho
c5d9edf7b7 add linear strategy to brute force 
closes #25917

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
 2024-10-28 10:47:02 -03:00
andymunro
993381cb31 Make organizations chapter available in downstream (#34384) 
Closes #34382

Signed-off-by: AndyMunro <amunro@redhat.com>
(cherry picked from commit 81805fcf70)
 2024-10-28 11:40:15 +01:00
Steven Hawkins
5b9ba14385 fix: adding a server guide on installation location / layout (#33604) (#34158) 
* fix: adding a server guide on installation location / layout (#33604)

closes: #32110

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit fd89297c15)

* adding getting started links

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-10-21 18:05:51 +00:00
Alexander Schwartz
5d73a96c21 Fixing link to external docs 
Closes #33991

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-17 18:23:18 -03:00
Jake
2ac528916e Small grammatical error in documentation 
Closes #34009

Signed-off-by: Jake <156826184+jlanning-gl@users.noreply.github.com>
 2024-10-17 18:21:47 -03:00
Martin Bartoš
f7e3d6caa8 [PERF] OpenTelemetry is initialized even when disabled (#34032) 
Change host reference in logging guide

Fixes #33948

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-10-17 15:54:19 +02:00
Marek Posolda
fe1a2650ff Re-add links to policy-enforcer to the authorization services documen… 
closes #32644

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
(cherry picked from commit 94b5f05c64)
 2024-10-15 06:59:24 +00:00
Alexander Schwartz
6e60287290 Fix runaway formatting 
Closes #33585

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-04 14:07:02 +02:00
Alexander Schwartz
f422b77939 Fixing broken links after KC26 docs changes (#33580) 
Closes #33576

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-04 14:00:39 +02:00
Steven Hawkins
94ece15292 fix: correcting the container examples wrt hostname (#33542) (#33584) 
closes: #33539

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit c092867c48)
 2024-10-04 14:00:11 +02:00
Steven Hawkins
9c292f035c fix: document having multiple operators installed (#33448) (#33582) 
* fix: document having multiple operators installed

closes: #32152

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
(cherry picked from commit 9fb187c222)
 2024-10-04 11:28:12 +00:00
Stian Thorgersen
00bca27da1 Update 26_0_0.adoc 
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
 2024-10-04 10:54:52 +02:00
Stian Thorgersen
81f1974f7a Re-order items in release notes for 26 (#33551) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-10-04 06:47:08 +02:00
Jon Koops
b475f936d5 Use crypto.randomUUID() to generate UUIDs for Keycloak JS (#33518) 
Closes #33515

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2024-10-03 12:07:57 -03:00
Stian Thorgersen
2be2b2ffe5 Upgrade guide updates for renaming account, admin, and login features (#33521) 
* Upgrade guide updates for renaming account, admin, and login features

Signed-off-by: stianst <stianst@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_0_0.adoc

Signed-off-by: Stian Thorgersen <stian@redhat.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
 2024-10-03 15:05:48 +02:00
vramik
b7eaa9b0cb Wildcard search not working for custom user attributes 
Closes #32451

Signed-off-by: vramik <vramik@redhat.com>
 2024-10-03 08:48:36 -03:00
Maksim Zvankovich
35eba8be8c Add option to include the organization id in the organization claims 
Closes #32746

Signed-off-by: Maksim Zvankovich <m.zvankovich@nexovagroup.eu>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-10-03 08:11:36 -03:00
Jon Koops
aacdf80664 Add shim for Web Crypto API to admin and account console (#33480) 
Closes #33330

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2024-10-03 10:51:23 +00:00
mposolda
41c72d46d2 Document users hashed passwords with argon2 does not work in FIPS environment 
closes #33296

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2024-10-03 08:47:45 +02:00
Pedro Aguiar
f60be4bf8e update: fix typo "a email" (#33482) 
- "a email" becomes "an email".

Signed-off-by: Pedro Aguiar <contact@codespearhead.com>
 2024-10-02 19:34:33 +02:00
Pedro Aguiar
002560ef3e update/fix-typo-confFileValue-should-be-keystoreValue 
- "confFileValue" appears twice consecutively in the same paragraph; the second occurrence should be "keystoreValue".

Thanks to Justin P for pointing that out in [1].

[1] https://github.com/keycloak/keycloak/discussions/33292

Signed-off-by: Pedro Aguiar <contact@codespearhead.com>
 2024-10-02 19:33:48 +02:00
Alexander Schwartz
8e4c67bd3f Document supported configurations and limitations for multi-site 
Closes #33384

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-02 14:57:07 +02:00
Alexander Schwartz
cb12f03003 Rework AWS Lambda doc to show it is required (#33462) 
Closes #33461
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-02 12:42:11 +02:00
vramik
c1653448f3 [Organizations] Allow orgs to define the redirect URL after user registers or accepts invitation link 
Closes #33201

Signed-off-by: vramik <vramik@redhat.com>
 2024-10-02 07:37:48 -03:00
Kamesh Akella
d07d5ebf1a Add Health Checks for Multi-Site deployment to HA Docs 
Closes #33143

Signed-off-by: Kamesh Akella <kamesh.asp@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Kamesh Akella <kakella@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
 2024-10-02 08:43:25 +00:00
mposolda
5218af1e79 Minor tweaks in SAML documentation 
closes #33426

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-10-01 12:48:45 +02:00
Jon Koops
21704a70c1 Update documentation and release notes for Keycloak JS (#33409) 
Closes #32843

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2024-10-01 10:29:23 +02:00
vramik
412f1f85a9 Update Organization documentation 
Closes #33410

Signed-off-by: vramik <vramik@redhat.com>
 2024-10-01 09:29:49 +02:00
Peter Zaoral
d5d6390b1c Make Keycloak fail with an error when the persisted build options differs from those provided (#33241) 
* PropertyException is now thrown instead of a warning
* Operator guides clarification around health and metrics options

Closes: #32717

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2024-09-30 19:28:23 +02:00
Steven Hawkins
8d314a69a0 fix: adding doc note about admin ingress (#33392) 
* fix: adding doc note about admin ingress

closes: #33203

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/basic-deployment.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-30 14:11:58 +00:00
Stan Silvert
b4a200d333 Fixes release notes section on new login theme, keycloak.v2 (#33359) 
* Fixes #33351

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fixes #33351

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Ignore saml.xml.org because of expired cert.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2024-09-30 15:38:29 +02:00
Steven Hawkins
5d99d91818 fix: allows for the detection of a master realm with --import-realms (#32914) 
also moving initial bootstrapping after import

closes: #32689

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-30 14:40:16 +02:00
Steven Hawkins
53102521d2 fix: correcting the recovery upgrade note (#33356) 
closes: #33307

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-09-30 08:22:29 -04:00
Steven Hawkins
f1a7a4804e fix: adds additional info / warnings to hostname v2 (#33261) 
* fix: adds additional info / warnings to hostname v2

closes: #24815

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the proxy-headers language from #33209

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding hostname-strict-https

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving removed property check to the quarkus side

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/mappers/HostnameV2PropertyMappers.java

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/server/hostname.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-28 08:48:09 +00:00
Steven Hawkins
cf2ecf87f6 fix: add the proxy-protocol option (#33276) 
* fix: add the proxy-protocol-enabled option

closes: #10492

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/reverseproxy.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-27 23:44:59 +02:00
Václav Muzikář
fc76bad1fd Undeprecate https-trust-store-* options and enhance mTLS docs 
Closes #33172

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-09-27 18:07:57 +02:00