Commit Graph

257 Commits

Author SHA1 Message Date
Alexander Schwartz
665f4140da Adding missing docs for 26.4 release notes
Closes #42252

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Vinod Anandan <vinod@owasp.org>
2025-09-02 17:47:12 -03:00
Steven Hawkins
565e195f48 enhance: allow for control over what port health checks are exposed on (#41759)
closes: #39506

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 10:18:22 +02:00
Pedro Igor
3bf46e5421 "linked-accounts" endpoint displays all Identity providers
Closes #19732

Signed-off-by: Réda Housni Alaoui <reda-alaoui@hey.com>
Co-authored-by: Réda Housni Alaoui <reda-alaoui@hey.com>
2025-08-14 15:21:03 +02:00
Ricardo Martin
ef312b570c Final changes for passkeys documentation (#41646)
Closes #41557

Signed-off-by: rmartinc <rmartinc@redhat.com>

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-08-13 09:01:15 +02:00
Peter Skopek
651d651c30 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-08-12 16:50:17 +02:00
Steven Hawkins
f5f93ef6e1 fix: adding the ability to set the ingress tlsSecret (#41426)
* fix: adding the ability to set the ingress tlsSecret

closes: #34777

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-08-04 09:28:46 -03:00
Martin Bartoš
57cb321ce0 ExternalLinks are broken in documentation
Closes #41491

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-30 11:21:11 +02:00
Martin Bartoš
3d5a1038a1 Provide simple HTTP access logs (#41389)
Closes #41352

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-29 10:55:18 +02:00
Martin Kanis
85b494ec51 Review and update the documentation regarding the UPDATE EMAIL feature
Closes #40226

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-07-17 15:27:09 +00:00
Björn Eickvonder
d62d5030fe Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Steven Hawkins
b6b1731181 fix: adding a release note for http-management-scheme and operator (#41144)
handling

closes: #40945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-15 19:21:40 +02:00
Steven Hawkins
2b44c5676f fix: adding logic to isolate realm migration processing (#39377)
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-06-30 08:31:57 -04:00
Ricardo Martin
8624101701 Documentation changes for Passkeys (#40728)
Closes #40705

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Ricardo Martin <rmartinc@redhat.com>
2025-06-27 14:59:46 +02:00
Michal Hajas
d944823277 Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Ricardo Martin
dd4c21700f Deprecate the original Passkeys Conditional UI Authenticator (#40674)
Closes #40033

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Ricardo Martin <rmartinc@redhat.com>
2025-06-24 20:32:39 +02:00
Alexander Schwartz
872a56f237 Reworking the release notes for the upcoming release
Closes #40547
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-06-18 10:45:31 +02:00
Martin Bartoš
21bd46cb18 Add templates for release notes and migration guide
Closes #40441

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-06-12 11:38:06 +02:00
Alexander Schwartz
0b3950529e Re-sort the release notes and upgrading guide (#40424)
Closes #40422

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2025-06-12 10:25:42 +02:00
vramik
aafb140529 Add a note to release notes about admin roles mapping
Fixes #39956

Signed-off-by: vramik <vramik@redhat.com>
2025-06-09 09:34:45 -03:00
Pedro Igor
7cc055f8a6 Verify brokered user email based on the email_verified claim from the ID Token returned by the OP
Closes #39885

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-05-29 10:45:18 -03:00
Pedro Igor
e6e6fa60fa Adding OAuth2-based identity broker
Closes #35266

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-05-27 12:07:01 -03:00
Michal Hajas
88f660b235 Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751)
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-05-27 11:17:42 -03:00
rmartinc
3c511635ba Skip AIA for webauthn register if a crendential of teh correct type already exists
Closes #39191

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-20 18:09:12 +02:00
rmartinc
4730dbdd8d Make recovery codes supported
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-04-29 10:25:46 +02:00
Alexander Schwartz
050d3ccba4 Fix broken link for XOAUTH2 configuration
Closes #39096

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-23 08:47:40 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952)
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2025-04-17 13:20:05 +02:00
Alexander Schwartz
a312632468 Add new user event metrics to the release notes
Closes #39027

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-17 10:58:34 +02:00
Alexander Schwartz
2be2958b8e Update release notes docs for removed remote store
Closes #39028

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-17 10:56:29 +02:00
Pedro Igor
1ba8fe16ac Deprecate for removal Instagram Identity Broker (#38998)
Closes #37967
Closes #36562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-04-17 09:07:06 +02:00
Martin Bartoš
60fb7a5fa7 Support asynchronous logging (#38094)
Closes #38578

Closes #28851

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-04-16 15:08:15 +00:00
Michal Hajas
4dc4de7c12 Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
Thomas Darimont
478e0b3264 Make sure that there is single audience allowed by default in JWT tokens sent to client authentication
closes #38819

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
2025-04-10 18:08:10 +02:00
vramik
f076b99407 FGAP documentation
Closes #37245

Signed-off-by: vramik <vramik@redhat.com>
2025-04-03 09:44:32 -03:00
mposolda
cd4e5bc784 Release notes for oid4vci docs
closes #38485

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-29 19:25:24 +01:00
mposolda
11cb332964 Release notes updates for the community contributions related to core-clients areas
closes #38374

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-24 12:49:52 +01:00
Laurids Møller Jepsen
8f7c1871a7 Add client OIDC configuration for setting the header type in access tokens.
If this setting is On, the access token header type will be "at+jwt" in compliance with RFC 9068, see https://datatracker.ietf.org/doc/html/rfc9068#section-2.1. If the setting is Off, the access token header type will be "JWT". The setting is Off per default.

Closes #36696

Signed-off-by: Laurids Møller Jepsen <laurids.jepsen@cryptomathic.com>
2025-03-24 10:35:41 +01:00
Sebastian Rose
4fb1c41155 Sending Mails via SMTP and XOAUTH2 authentication mechanism
Closes #17432

Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>
2025-03-21 10:12:18 +01:00
Stian Thorgersen
a18948f731 Reorder items in release notes for 26.2 (#38290)
Signed-off-by: stianst <stianst@gmail.com>
2025-03-20 11:52:53 +01:00
Alexander Schwartz
c9b88c6bf6 Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
Alexander Schwartz
b5d8c46202 Fix links that have been moved
Closes #38190

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-18 13:36:41 +01:00
Marek Posolda
290905c9cf Documentation for supported token-exchange (#38008)
closes #37126

Signed-off-by: Marek Posolda <mposolda@gmail.com>


Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-03-14 09:55:44 +01:00
Alexander Schwartz
151e019935 Make NetworkPolicy supported and enabled by default
Closes #36036

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-03-10 11:12:38 +01:00
Alexander Schwartz
bc7ec1208e Enable the TLS based JGroups encryption by default and update the docs
Closes #37696

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 10:50:51 -03:00
Akbar Husain
9d3cfe0672 Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Michal Hajas
f54bb16a61 Add Grafana dashboards to release notes
Closes #37402

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-18 14:04:23 +01:00
rmartinc
6850f41060 Force login in reset-credentials to federated users
Closes #37207

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-12 13:47:39 -03:00
Alexander Schwartz
822eb4471d Ensure a sufficient virtual threads pool (#37197)
Closes #37162

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-10 16:28:24 +01:00
Martin Bartoš
98f74026c6 Certificate reloading does not work for the management interface (#37052)
Fixes #37039

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-02-05 14:39:21 +01:00
Pedro Igor
602df06191 Allows querying credential from user storage providers
Closes #35020

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-05 07:56:05 -03:00
Martin Bartoš
20203746fb Support ECS for logs
Closes #36854

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-04 17:59:30 +01:00