96511e55c6
startup, welcome, and cli handling of bootstrap-admin user ( #30054 )
...
* fix: adding password and service account based bootstrap and recovery
closes : #29324 , #30002 , #30003
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Fix tests
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com >
2024-07-03 15:23:40 +02:00
f34bb21af6
Fix deprecations in common module
...
- Use charset in `Encode` class
- Replace reflective call to protected `Liquibase#resetServices()` with call to exposed public method on a custom subclass `KeycloakLiquibase`
- Remove usage of deprecated AccessController class in Reflections
- Deprecated SetAccessibleProvilegedAction and UnsetAccessibleProvilegedAction
Fixes #22209
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com >
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
2024-07-02 16:02:35 +00:00
c20dbc5c32
Add availability for features and make kerberos use it
...
Closes #30730
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-06-26 14:33:38 +02:00
5af3001122
Check if OSGI metadata can be removed entirely
...
Closes #29104
Signed-off-by: Douglas Palmer <dpalmer@redhat.com >
2024-06-25 14:12:33 +02:00
df18629ffe
Use a default Java version from root POM ( #29927 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-06-21 14:19:31 +02:00
d2ae27a1e2
External Infinispan as cache - Part 1
...
Part 1 includes
* New experimental feature to enable the new code
* New providers using RemoteCache only
* New test profile to run the tests with the experimental feature
New providers' implementation for:
* InfinispanConnectionProvider
* AuthenticationSessionProvider
* ClusterProvider
Closes #28140
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2024-06-19 14:47:57 +02:00
c7361ccf6e
Run the Vite dev server through the Keycloak server ( #27311 )
...
Closes #19750
Closes #28643
Closes #30115
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-06-12 11:55:14 +02:00
5059a02eb2
fix: minor refinements to collection utils ( #29536 )
...
closes : #29535
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-06-06 10:07:34 -04:00
2b97859bca
Move Organization feature from EXPERIMENTAL to PREVIEW
...
Closes#30137
Signed-off-by: vramik <vramik@redhat.com >
2024-06-04 09:57:03 -03:00
a3b2dd0735
Remove deprecated ServerCookie class ( #29916 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-05-28 14:14:05 +00:00
84acc953dd
Client type OIDC base read only defaults ( #29706 )
...
closes #29742
closes #29422
Signed-off-by: Patrick Jennings <pajennin@redhat.com >
2024-05-22 09:07:19 +02:00
64a145e960
Fix user-facing typos in error messages ( #29326 )
...
Update resource file and tests accordingly
Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com >
2024-05-16 09:55:41 +02:00
b4e7d9b1aa
Passkeys: Supporting WebAuthn Conditional UI ( #24305 )
...
closes #24264
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: mposolda <mposolda@gmail.com >
2024-05-16 07:58:43 +02:00
6fbe207d64
Create documentation for persistent user sessions
...
Closes #29218
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Signed-off-by: Michal Hajas <mhajas@redhat.com >
Co-authored-by: Michal Hajas <mhajas@redhat.com >
2024-05-13 11:02:45 +02:00
cd8e0fd333
Fix user-facing typos in Javadoc ( #28971 )
...
Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com >
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
2024-05-06 18:57:55 +00:00
fe5bed6191
Retry fetching event from remote cache
...
Closes #28303
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
2024-05-06 17:27:07 +02:00
128bba34d3
Remove PERSISTENT_USER_SESSIONS_No_CACHE feature
...
Closes #29264
Signed-off-by: Michal Hajas <mhajas@redhat.com >
2024-05-06 08:53:39 +02:00
4697cc956b
further refinement of context handling ( #28182 )
...
* fully removing providers and moving the keycloaksession creation / final
cleanup
also deprecated Resteasy utility methods
closes : #29223
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-05-02 11:21:01 -04:00
fc6b6f0d94
Perform exact string match if redirect URI contains userinfo, encoded slashes or parent access ( #131 ) ( #28872 )
...
Closes keycloak/keycloak-private#113
Closes keycloak/keycloak-private#134
Signed-off-by: rmartinc <rmartinc@redhat.com >
Co-authored-by: Stian Thorgersen <stianst@gmail.com >
2024-04-18 16:02:24 +02:00
ddacfbdefd
Remove deprecated LinkedIn social provider
...
Closes #23127
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-04-18 10:10:58 +02:00
e4987f10f5
Hostname SPI v2 ( #26345 )
...
* Hostname SPI v2
Closes : #26084
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Fix HostnameV2DistTest#testServerFailsToStartWithoutHostnameSpecified
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Address review comment
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Partially revert the previous fix
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Do not polish values
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Remove filtering of denied categories
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
---------
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
2024-04-09 11:25:19 +02:00
c580c88c93
Persist online sessions to the database ( #27977 )
...
Adding two feature toggles for new code paths to store online sessions in the existing offline sessions table. Separate the code which is due to be changed in the next iteration in new classes/providers which used instead of the old one.
Closes #27976
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Signed-off-by: Michal Hajas <mhajas@redhat.com >
Co-authored-by: Michal Hajas <mhajas@redhat.com >
2024-03-28 09:17:07 +01:00
3382e16954
Remove Account Console version 2 ( #27510 )
...
Closes #19664
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-03-27 10:53:28 +01:00
be32f8b1bf
fix: limit the use of Resteasy to the KeycloakSession ( #28150 )
...
* fix: limit the use of Resteasy to the KeycloakSession
contextualizes other state to the KeycloakSession
close : #28152
2024-03-26 13:43:41 -04:00
7eab019748
task: deprecate WILDCARD and STRICT options ( #26833 )
...
closes : #24893
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-03-21 16:22:41 +01:00
62d24216e3
Remove offline session preloading
...
Closes #27602
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-03-15 15:19:27 +01:00
a81d6bb618
Organizations SPI
...
Closes #27829
Signed-off-by: vramik <vramik@redhat.com >
2024-03-13 10:57:02 -03:00
e4aa1b5f95
Conditionally enable and disable CLI options ( #25333 )
...
* Conditionally enable and disable CLI options
Closes #13113
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* Support for duplicates in config
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* Fix rendering config options in docs
Fixes #26515
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* Reorder OptionsDistTest
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-03-07 20:36:43 +00:00
d00ef12333
Simplify handling of profile handling in test cases ( #27546 )
...
Closes #27545
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-03-06 12:11:21 +01:00
25f2b52afd
Remove the preview note from Keycloak's HA guide
...
Closes #27084
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-21 19:59:15 +01:00
89af9e3ffd
Write announcement and documentation for Account Console v3 ( #26318 )
...
Closes #26122
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-02-21 13:42:33 -05:00
aa6b102e3d
Support EC Key-Imports for the JavaKeystoreKeyProvider #26936 ( #27030 )
...
closes #26936
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
2024-02-19 17:41:40 +01:00
3a04acab51
fix: adds pfx as a recognized extension ( #26876 )
...
closes #24661
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-02-13 15:38:12 +01:00
b0403e2268
CORS SPI
...
Closes #25446
Signed-off-by: Dmitry Telegin <demetrio@carretti.pro >
2024-02-06 15:27:53 -03:00
c4b1fd092a
Use code from RestEasy to create and set cookies ( #26558 )
...
Closes #26557
Signed-off-by: stianst <stianst@gmail.com >
2024-02-06 15:14:04 +01:00
bc3c27909e
Cookie Provider ( #26499 )
...
Closes #26500
Signed-off-by: stianst <stianst@gmail.com >
2024-01-26 10:45:00 +01:00
28c9f98930
moved login screen to patternfly 5 ( #25340 )
...
* moved login screen to patternfly 5
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added Feature flag to enable login v2
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* removed the old css and only include logo and background styles
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* changed to experimental
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added login2
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added windows help texts
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
2024-01-25 13:45:53 +01:00
efa6ddc41e
Create SPI and Provider for Verifiable Credentials Signing #25937 ( #26263 )
...
* implement oid4vci service interfaces
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* add oid4vc to the disabled features test
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* fix test and add doc
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* add the new preview feature
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* add class-level doc
remove wildcard imports
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* add license headers
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* fix year
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* fix teste
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* two additional test fixes
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* make the feature experimental
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* remove clock
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* remove usage of var
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
* fix tests
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
---------
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
2024-01-25 07:36:28 +01:00
86098242a5
Added Client Type feature flag to begin client type work ( #26389 )
...
* Added Client Type feature flag to begin client type work
Closes #26346
Signed-off-by: vibrown <vibrown@redhat.com >
* Fixed formatting issue
Signed-off-by: vibrown <vibrown@redhat.com >
* Updated HelpCommandDistTest messages
Signed-off-by: vibrown <vibrown@redhat.com >
* Fixed formatting on HelpCommandDistTest messages
Signed-off-by: vibrown <vibrown@redhat.com >
---------
Signed-off-by: vibrown <vibrown@redhat.com >
2024-01-24 12:07:07 +00:00
37790c7956
Add a way to extend the UI with an Java API ( #23772 )
...
* POC to see how we could extend the UI
This is very crude and there are still open issues that need to be worked out
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added saving option
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added list and recreate client form
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* add tab ui
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* integrate tabs
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* remove examples
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* fixed error messages
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added Feature for ui customization
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
2024-01-22 08:19:58 +00:00
74b56201c3
fix: adds hostname:v1 ( #26003 )
...
closes : #25336
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-01-17 21:35:23 +01:00
b9498b91cb
Deprecating the offline session preloading ( #26160 )
...
Closes #25300
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-01-16 09:29:01 +01:00
94b0e22fb9
Add @Deprecated annotation to deprecated profiles ( #26174 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-01-12 21:00:27 +00:00
5eb7363ddd
Promote Account Console v3 to default and deprecate v2 ( #25852 )
...
Closes #19663
Signed-off-by: Jon Koops <jonkoops@gmail.com >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-01-11 19:42:10 +01:00
692aeee17d
Enable user profile by default
...
closes #25151
Signed-off-by: mposolda <mposolda@gmail.com >
2024-01-11 12:48:44 -03:00
3cdc69ddbb
Have a more descriptive error message when infinite recusion happens ( #26043 )
...
Closes #21151
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-01-11 13:55:20 +01:00
097d68c86b
Escape action in the form_post.jwt and only decode path in RedirectUtils ( #93 ) ( #25995 )
...
Closes #90
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-01-09 08:20:14 +01:00
667ce4be9e
enhance: supporting versioned features ( #24811 )
...
also adding a common PropertyMapper validation method
closes #24668
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-01-03 17:56:31 +01:00
4b11afa87b
NullPointerException when key is not available in the database ( #25395 )
...
* NullPointerException when key is not available in the database
Closes #24485
Signed-off-by: Douglas Palmer <dpalmer@redhat.com >
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net >
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com >
2023-12-14 09:57:53 +01:00
587cef7de4
Delete Profile.Feature.MAP_STORAGE
...
Signed-off-by: vramik <vramik@redhat.com >
Closes #24102
2023-11-30 13:04:39 +01:00
Steven Hawkins