mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2025-12-16 20:15:46 -06:00
Code Issues Packages Projects Releases Wiki Activity
29,740 Commits 20 Branches 287 Tags
2e66f5c56cb77341b0182f4627c007421139a20d
Commit Graph

29740 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stan Silvert
fc67e54fde Fix NPE 
Fixes #44278

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2025-11-24 16:36:05 +01:00
vramik
0825f22331 Add toPredicate implementation for conditions 
Closes #42696

Signed-off-by: vramik <vramik@redhat.com>
 2025-11-24 08:56:36 -03:00
mposolda
49b694bf0a Compilation failure in OID4VCTimeNormalizationSdJwtTest 
closes #44419

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-11-24 08:39:09 -03:00
Awambeng
8406cf34fb [OID4VCI]: Realm-Configurable Time-Claim Normalization (Randomize/Round) to Mitigate Correlation (#43834) 
Closes #43399


Signed-off-by: Awambeng <awambengrodrick@gmail.com>
 2025-11-24 11:07:07 +01:00
Pascal Knüppel
64d5e1a3d5 [OID4VCI] Redesign SDJwt API and handle keybinding JWT (#44227) 
closes #42091


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
 2025-11-24 11:01:19 +01:00
Sebastian Łaskawiec
081d8e5a01 Move Kubernetes IdP to preview 
Closes #42947

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-11-22 12:56:09 +01:00
Stian Thorgersen
2a78bc67d7 Refactoring around federated client authenticator to better handling lookup of IdPs and clients. Also, introducing updates to documentation. (#44325) 
Closes #44253
Closes #42987
Closes #44063

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-11-22 12:53:22 +01:00
vramik
091b57c1e4 Flaky test: org.keycloak.testsuite.account.AccountRestServiceTest#listApplicationsWithoutPermission 
Closes #43755

Signed-off-by: vramik <vramik@redhat.com>
 2025-11-21 15:05:41 -03:00
Steven Hawkins
3b491bc9bf fix: removing the keycloak hidden option for disabling http server (#44388) 
closes: #43199

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-11-21 17:37:52 +00:00
Peter Zaoral
4e5f9acac7 Add CI tests for Azure SQL Database 
Closes: #42986

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-11-21 14:42:28 +00:00
Stian Thorgersen
2c21d1b5c9 Schedule nightly runs to after nightly release (#44381) 
Signed-off-by: stianst <stianst@gmail.com>
 2025-11-21 13:26:16 +01:00
Alexander Schwartz
bb971dc6fc Efficient row-count on PostgreSQL 
Closes #44057

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-11-21 12:28:09 +01:00
Alexander Rasmussen
99aad0741a Fix logical error in Danish email verification message 
Added missing 'ikke' (not) to correctly instruct users to ignore
  the email if they did NOT create the account.

Fixes #44342

Signed-off-by: Alexander Rasmussen <a-m-h-r@hotmail.com>
 2025-11-21 10:47:31 +00:00
Weblate (bot)
3d2ae27ae3 Translations update from Hosted Weblate (#44306) 
* Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for German

Language: de

Updated translation for German

Language: de

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Till Reymann <till.reymann@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Till Reymann <till.reymann@gmail.com>

* Updated translation for Japanese

Language: ja

Updated translation for Japanese

Language: ja

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

* Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Translated using Weblate (Chinese (Simplified Han script))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hans/

Translated using Weblate (Chinese (Simplified Han script))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hans/

Translated using Weblate (Chinese (Simplified Han script))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hans/

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Translated using Weblate (Chinese (Simplified Han script))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hans/

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Charlie <charlie@mapletree.biz>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Nagi <nagi@mptree.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Charlie <charlie@mapletree.biz>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Nagi <nagi@mptree.com>

---------

Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Till Reymann <till.reymann@gmail.com>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Charlie <charlie@mapletree.biz>
Signed-off-by: Nagi <nagi@mptree.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Till Reymann <till.reymann@gmail.com>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Charlie <charlie@mapletree.biz>
Co-authored-by: Nagi <nagi@mptree.com>
 2025-11-21 09:45:49 +01:00
Pedro Ruivo
2dccc0bf37 Operator Update Logic: add hash based comparison (#44332) 
* Operator Update Logic: add hash based comparation

Fixes #44280

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>

* refinements to the update logic

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2025-11-20 12:35:38 -05:00
Rahul Jain
61b1e53eee Bump Quarkus to 3.27.1 LTS (#44348) 
Closes #43642
Signed-off-by: Rahul Jain <jainrahul0311@gmail.com>
 2025-11-20 15:36:23 +01:00
Martin Bartoš
a71ceee8f1 [Docs] Warn users about printing headers in HTTP access logs (#44353) 
Closes #43156

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-11-20 14:48:01 +01:00
Peter Zaoral
0e959ad89e Delete operation for Client v2 (#44335) 
Closes: #43291

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-11-20 12:12:33 +01:00
ruchikajha95
dc62067cfe Detailed how to skip test while building keycloak 
Closes #44338

Signed-off-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-11-20 11:29:56 +01:00
Steven Hawkins
8ae3750348 fix: switching to Boolean instead of boolean (#44340) 
closes: #38843

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-11-20 08:53:28 +01:00
schnillerman
4e87b1f5a0 Fix grammar in LDAP federation group mapper 
Closes #44341

Signed-off-by: schnillerman <till.reymann@gmail.com>
 2025-11-19 23:11:24 +00:00
Pedro Ruivo
13ef89664c More accurate user session expiration logic 
Closes #44204

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-19 21:06:17 +01:00
Stian Thorgersen
271fdfcf0f Restore KeycloakServerConfigBuilder to use single --features and --features-disabled arguments (#44322) 
Signed-off-by: stianst <stianst@gmail.com>
 2025-11-19 20:45:06 +01:00
Stian Thorgersen
c089a3a6fe Add support to use kcw with remote test server 
Closes #44312

Signed-off-by: stianst <stianst@gmail.com>
 2025-11-19 20:43:42 +01:00
Carlos Rodríguez Hernández
2a876c143f Add support for PostgreSQL 18 (#44288) 
Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com>
 2025-11-19 11:39:36 +01:00
Giuseppe Graziano
3e8b2f8ab7 New JWT Authorization Grant Identity provider (#44176) 
Closes #43570

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2025-11-19 09:18:23 +01:00
Steven Hawkins
731414e44a fix: reverting dev property key changes (#44293) 
closes: #44287

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-11-19 07:35:50 +01:00
Pedro Ruivo
febb632e17 Update protolock file list 
Closes #44300

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-18 18:01:12 +00:00
Weblate (bot)
55091f977f Translations update from Hosted Weblate (#44226) 
* Updated translation for Turkish

Language: tr

Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Martin Kluska <martin@kluska.cz>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kluska <martin@kluska.cz>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

---------

Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kluska <martin@kluska.cz>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Martin Kluska <martin@kluska.cz>
Co-authored-by: 秉虎 <s96016641@gmail.com>
 2025-11-18 18:35:21 +01:00
Jon Koops
f7e4b78f1d Prevent slash duplication in request URLs 
Closes #44269

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2025-11-18 15:44:40 +01:00
mposolda
68cfb8d720 Fix flaky test ClientAuthSignedJWTTest.testClientWithGeneratedKeysJKS 
closes #43713

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-11-18 11:52:01 +01:00
Awambeng Rodrick
97ae31dfe3 fix(admin-ui): allow assignment of OID4VCI client scopes to clients 
Closes #43899

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>

Address @forkimenjeckayang review comments

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>

Address @IngridPuppet review comments

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>

Address @IngridPuppet review comments

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>

fix lint error

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2025-11-18 11:25:23 +01:00
rmartinc
f0f776e5c8 Fix for WebAuthnSigningInTest WebAuthn test 
Closes #43477

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-11-18 11:02:13 +01:00
Peter Zaoral
b9d94d325b Remove JSON Patch support from the Client API v2 MVP (#44120) 
Closes: #43572

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-11-18 09:42:10 +00:00
Marek Posolda
a4c583246d Use the unified constants class for sd-jwt/oid4vc standard data and claims (#44153) 
closes #44152

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-11-18 10:41:04 +01:00
Steven Hawkins
8ee23aaa15 fix: simplifying addResources (#44046) 
closes: #44045

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-11-18 09:29:50 +01:00
Alexander Schwartz
15a9a36569 Align formatting of referenced RFCs 
Closes #44246

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2025-11-17 21:30:13 +01:00
Stan Silvert
0b2d673cb7 Add quotes to payload when adding user to organization. 
Fixes #43812

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2025-11-17 10:05:58 -03:00
Stefan Guilhen
464d1a6741 Improve updating existing workflows 
- allow updating entire workflow when no scheduled tasks exist
- allow updating conditions, concurrency, and steps config when scheduled tasks exists

Closes #42618

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-11-17 09:10:29 -03:00
Alexander Schwartz
167249dd6c Updating the specifics around kubernetes service accounts 
Closes #44064

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-11-17 11:23:39 +01:00
Stian Thorgersen
c284f9ae66 Rename ApiUtil to AdminApiUtil (#44224) 
Closes #44196

Signed-off-by: stianst <stianst@gmail.com>
 2025-11-17 07:52:04 +01:00
Stian Thorgersen
b7815190a2 Merge GenerateKeystoreForTestUtil with CryptoKeyStore (#44223) 
Closes #44195

Signed-off-by: stianst <stianst@gmail.com>
 2025-11-17 07:51:45 +01:00
Stian Thorgersen
f6702decc0 JWK Algorithm Key Pair support (#44203) 
Closes #44141

Signed-off-by: stianst <stianst@gmail.com>
 2025-11-17 07:51:08 +01:00
dependabot[bot]
10f3feeee6 Bump the actions-dependencies group with 3 updates (#44245) 
Bumps the actions-dependencies group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [github/codeql-action](https://github.com/github/codeql-action) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](ea165f8d65...330a01c490)

Updates `github/codeql-action` from 4.30.8 to 4.31.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f443b600d9...014f16e7ab)

Updates `actions/download-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](634f93cb29...018cc2cf5b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.31.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-17 07:47:42 +01:00
Pedro Ruivo
6260622f2e Find highest sequence number in jgroups_ping 
* Find the highest sequence number in jgroups_ping table to avoid duplicates

Fixes #44189

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-14 20:54:52 +01:00
Pedro Ruivo
8d0b64bd59 Deprecate TopologyInfo 
Closes #44047

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-14 20:50:31 +01:00
Pedro Ruivo
7dc7c81b25 Fix UserSessionProviderOfflineModelTest#testLoadUserSessionsWithNotDeletedOfflineClientSessions 
Fixes #43886

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-11-14 20:46:02 +01:00
Pedro Igor
d4f9a09236 Fixing encoding of forwarded parameters 
Closes #44125

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-11-14 15:46:09 -03:00
jhgojbis
fd99aa6244 Bug fix double-encoding for query parameter acr_values 
Related bug fix in Keycloak version 26.4

space with mutiple values results in → "+" → "%2B"

Reported bug: 
https://github.com/keycloak/keycloak/issues/44125

Signed-off-by: jhgojbis <gh_wipe@hotmail.com>
 2025-11-14 15:46:09 -03:00
AvivGuiser
3c8af6dec5 set auto-mount service account token to false in keycloak pods (#40605) 
closes #38843

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
 2025-11-14 15:41:39 +00:00