mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-05-21 00:19:16 -05:00
Code Issues Packages Projects Releases Wiki Activity
28,136 Commits 34 Branches 307 Tags
35f34bd9f15ef21b63ea50ee0b03399ff58aaa52
Commit Graph

28136 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jon Koops 35f34bd9f1 Align TypeScript code with Node.js requirements (#41731) (#41747) 
(cherry picked from commit 1f1ac2fc39)

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2025-08-08 08:33:54 -04:00
Pedro Ruivo 776cc45a7c Ensure cache configuration has correct number of owners 
Closes #41558

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-06 18:48:33 +01:00
Steven Hawkins 08c0426dfe fix: ensuring update job handles secrets when none exist in the cr (#41700) 
closes #39939




(cherry picked from commit 72d3063a54)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2025-08-06 14:36:50 +00:00
Martin Bartoš 95606e49e2 Update MariaDB connector to 3.5.3 
Closes #39634

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-08-06 10:42:28 -03:00
Martin Bartoš a7dadbf5bc Upgrade to Quarkus 3.20.2 
Closes #40591

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-08-06 15:17:27 +02:00
Martin Kanis 3baa528130 LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and KERBEROS_PRINCIPAL was null on creation 
Closes #41520

(cherry picked from commit 79fc97056e)

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2025-08-01 11:08:27 +00:00
mposolda b4cc4b005a Getting error 405 'Method Not Allowed' when calling the 'certs' endpoint with HEAD method 
closes #41537

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 2dab73063d)
 2025-08-01 10:45:00 +02:00
Alexander Schwartz 8c3a96a30b Making IDs for configuration options unique 
Closes #41423

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-30 10:11:34 -03:00
Martin Bartoš 88df2cda9f ExternalLinks are broken in documentation 
Closes #41491

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-30 13:39:12 +02:00
Martin Bartoš 298cbfe3b7 Synchronize Maven surefire plugin with Quarkus 
Closes #41488

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-30 13:39:12 +02:00
Alexander Schwartz 8439b3b53f Fix broken anchor for caching docs 
Also shorten the docs as KC is now encrypting by default.

Closes #41421

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-28 14:57:29 -03:00
Alexander Schwartz 8c1e8c818b Setting 'write_data_on_find' to true to ensure merging of views (#41402) 
Closes #41390

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-25 12:52:34 +02:00
Ryan Emerson ab046ddedb Default jdbc-ping cluster setup for distributed caches fails in Oracle 
Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-18 14:21:21 +02:00
Vlasta Ramik bf652cd5a2 Password modification time attribute as an operational and read-only attribute 
Closes #40270

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-07-16 14:42:56 +02:00
Vlasta Ramik 71cd4b02e7 Skip updating account controls if no control is set when enabling/disabling users 
Closes #37720

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-07-16 09:22:58 +02:00
vramik f013fdf6b8 Add a note to release notes about admin roles mapping 
Fixes #39956

# Conflicts:
#	docs/documentation/release_notes/topics/26_3_0.adoc

Signed-off-by: vramik <vramik@redhat.com>
 2025-07-14 21:32:43 +02:00
vramik e5a2d3789d Allow mapping Admin roles by server administrator only 
Closes #39956


# Conflicts:
#	services/src/main/java/org/keycloak/services/resources/admin/fgap/RolePermissionsV2.java
#	tests/base/src/test/java/org/keycloak/tests/admin/authz/fgap/RoleResourceTypeEvaluationTest.java

Signed-off-by: vramik <vramik@redhat.com>
 2025-07-14 21:32:43 +02:00
mposolda e36fff1287 Add option 'Requires short state parameter' to OIDC IDP 
closes #40237

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 274afa88fa)
 2025-07-14 08:43:29 +02:00
Pedro Ruivo 2c82e67c0e Skip computing lifespan for read-only sessions 
Fixes #40980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-07-11 08:59:14 +02:00
Pedro Ruivo ac57ac40a2 Improve logging for client sessions load 
Closes #41034

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-07-10 18:21:30 +02:00
Ricardo Martin ee63430c99 Remove /etc/system-fips file before executing fips-mode-setup 
Closes #41038


(cherry picked from commit e631ef4f92)

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-07-10 13:38:23 +02:00
vramik 3121b9d334 Fix NPE when accessing group concurrently 
Closes #40368

# Conflicts:
#	tests/base/src/test/java/org/keycloak/tests/admin/group/GroupTest.java

Signed-off-by: vramik <vramik@redhat.com>
 2025-07-09 08:06:21 -03:00
Ryan Emerson f3105e717e Remove kubernetes stack port_range workarounds 
Closes #39546

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-08 11:25:44 +02:00
vramik 977277dd4d LDAP group mapper skips configured filter and imports all groups with memberOf strategy when fetching the user's groups 
Closes #37537

Signed-off-by: vramik <vramik@redhat.com>
(cherry picked from commit 6bf5727b7b)
 2025-07-07 17:39:35 -03:00
Ryan Emerson abf99312ef Upgrade to Infinispan 15.0.16.Final 
Closes #40851

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-03 16:52:33 +02:00
Martin Bartoš 4830182fea [26.2.x] Unable to configure TLS reloading in Keycloak version 26.2.0 or later (#40819) 
* Unable to configure TLS reloading in Keycloak version 26.2.0 or later

Closes #40713

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/mappers/PropertyMapper.java

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2025-07-01 16:35:36 +02:00
rmartinc 31ef40dd80 Use POST binding for logout when REDIRECT url is not set and forced POST 
Closes #40637

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 2db98b6a98)
 2025-07-01 14:54:57 +02:00
Steven Hawkins d34ef96e87 fix: reducing memory footprint for cached entries 
closes: #35932


(cherry picked from commit c9f38d36a9)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-30 20:05:26 +00:00
Pedro Igor c7a0d8fd70 Updating upgrading guide about changes in user-profile-commons.ftl template (#40794) 
Closes #39562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-06-30 19:56:22 +02:00
Martin Bartoš a3d575c94a update docs regarding to use statefulset and not a deployment 
Closes #40090


(cherry picked from commit 3a87dcd2eb)

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Co-authored-by: AvivGuiser <avivguiser@gmail.com>
 2025-06-30 14:38:36 +02:00
Alexander Schwartz d060a66558 Adjusted the comparisons for PersistentClientSessionEntity 
Closes #40663

Signed-off-by: Anchels <mishtitov@gmail.com>
Co-authored-by: Anchels <42744001+Anchels@users.noreply.github.com>
 2025-06-28 20:53:31 +02:00
rmartinc 5bb39db986 Disable email verification when email manually changed by idp review 
Closes #40446

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 86f0a7864f)
 2025-06-26 16:15:15 +02:00
Martin Bartoš 3423ddb91b Use updated PostgresDatabase from Liquibase 4.32.0 (#40686) 
Closes #39917

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-06-25 10:06:43 +02:00
Pedro Ruivo d2291cf4fe Update documentation about volatile sessions 
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-20 21:20:48 +02:00
Ryan Emerson dd52843796 Disabling persistent sessions affects also offline session cache 
Closes #40483

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
 2025-06-20 21:20:48 +02:00
Ryan Emerson 87f25661df Default to num_owners=2 when the persistent-user-sessions feature is disabled 
Closes #40472

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-20 21:20:48 +02:00
Ricardo Martin 9f02d2c18c Use offline time calculations when transient created from offline 
Closes #40611


(cherry picked from commit 1350da4332)

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-20 08:12:03 +00:00
Alexander Schwartz d7d83927ac Allowing all maintainers to approve UI changes 
Closs #40576

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-19 14:38:08 +02:00
Martin Bartoš 05d6f30ead Additional Quarkus devtools dependencies in distribution 
Closes #39227

(cherry picked from commit c9c4b00455)

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-06-19 09:51:45 +00:00
Martin Bartoš eee812c866 Make UPDATE_TIME unique for MIGRATION_MODEL table 
Closes #40088

(cherry picked from commit e4f0bfc8e7)

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 13:56:07 +00:00
Alexander Schwartz 8110c13d87 Parse long issue reference variant from body 
Closes #40365

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 09:30:46 -03:00
Alexander Schwartz 4d533fb762 Removing the Windows optimization as it is currently unstable 
Closs #40583

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 11:52:25 +00:00
Steven Hawkins 950ce6ddff fix: prevent multiple init when dependsOn is used 
closes: #40408

(cherry picked from commit d4392779f6)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-18 07:00:27 +00:00
andymunro 89cf1eebed Clarify FIPS instructions 
Closes #40533

(cherry picked from commit 75cc28a9d1)

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-06-18 08:32:34 +02:00
Peter Zaoral ddd7542067 Update command for linking Maven repository on Windows 
* removes the repository directory if it exists, prevents failure if it does not

Closes: #40543

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-06-17 14:42:16 +00:00
Alexander Schwartz ee306243c6 Fix markdown output by adding closing brackets 
Closes #40297

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-17 13:18:38 +02:00
Thomas Darimont fa3a612919 Fix link to client-registration in docs 
Fixes #40444


(cherry picked from commit 0ae49b96c3)

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
 2025-06-13 20:00:03 +00:00
Alexander Schwartz 7284caf1de Remove obsolete information from the Keycloak deployment 
Closes #40375

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-12 10:29:03 +02:00
Martin Bartoš 65b395a825 MigrationModel duplicate entry 
Closes #39866

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-11 16:46:20 +00:00
Ricardo Martin 1012479480 Set window size instead of maximize because it fails in chrome 137 
Closes #40402


(cherry picked from commit d8b53df634)

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-11 15:25:58 +00:00