84c9dd59ac
Support for service accounts when fetch roles is enabled
...
Closes : #30444
Signed-off-by: Romain LABAT <contact@romainlabat.fr >
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-06-28 09:30:02 +02:00
3b3ca601bb
Remove AUTO_SERVER H2 default JDBC property ( #30560 )
...
This avoids problems if the hostname can't be resolved by InetAddress.getLocalHost()
Closes #26042
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-06-20 17:01:41 +02:00
2abd570531
Internal read-only attributes have precedence over unmanaged attribute policy
...
Closes #30240
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-06-19 14:18:21 +02:00
1f56a9e48b
Improvements for ldap test authentication
...
Closes #30434
Signed-off-by: rmartinc <rmartinc@redhat.com >
(cherry picked from commit c51640546d
2024-06-18 15:32:39 +02:00
ee60406a58
Logout from all clients after IdP logout is performed
...
Closes #25234
Signed-off-by: rmartinc <rmartinc@redhat.com >
(cherry picked from commit 7d05a7a013
2024-06-11 10:37:36 +02:00
6067f93984
Improvements to refresh token rotation with multiple tabs ( #29966 )
...
Closes #14122
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com >
2024-06-07 12:02:36 +02:00
c7e9ee2bff
fix: adds handling for all kcadm prompts as env variables ( #29430 )
...
closes : #21961
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-06-06 13:08:23 +00:00
f34baf3c24
Update license headers ( #29942 )
...
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com >
2024-06-06 14:06:09 +02:00
97ab0def2c
Adding ForkJoinPool for Quarkus to the surefire initialization for embedded Quarkus
...
Closes #30206
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-06-06 12:52:11 +02:00
94c194f1f4
Prevent users to unlink from their home identity provider when they are a managed member
...
Closes #30092
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Co-authored-by: Vlasta Ramik <vramik@users.noreply.github.com >
2024-06-05 13:57:01 +02:00
0bf613782f
Updating client policies in JSON editor is buggy. Attempt to update global client policies should throw the error
...
closes #30102
Signed-off-by: mposolda <mposolda@gmail.com >
2024-06-05 13:55:02 +02:00
eedfd0ef51
Missing auth checks in some admin endpoints ( #166 )
...
Closes keycloak/keycloak-private#156
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-06-05 12:04:47 +02:00
d5e82356f9
Encrypted KC_RESTART cookie and removed sensitive notes
...
Closes #keycloak/keycloak-private#162
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com >
2024-06-05 10:33:44 +02:00
f8d55ca7cd
Export import realm with organizations
...
Closes #30006
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-06-05 09:50:03 +02:00
33331788a4
Introduce count method to avoid fetching all organization upon checking for existence
...
Closes #29697
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2024-06-04 10:45:28 -03:00
173f09fa6b
Malformed dependency version causing the build failure
...
Closes #30134
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2024-06-04 13:44:14 +02:00
35a4a17aa5
Add support for application/jwt media-type in token introspection ( #29842 )
...
Fixes #29841
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com >
2024-06-03 19:06:21 +02:00
536534dd25
Remove the transformed output directory before executing JakartaTransformer
...
Closes #30086
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-06-03 19:03:46 +02:00
792a3457ff
Use Maven wrapper instead of platform dependent Maven version ( #29988 )
...
Closes #29987
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-06-03 15:45:39 +02:00
262fc09edc
OpenJDK 21 support ( #28518 )
...
* OpenJDK 21 support
Closes #28517
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* x509 SAN UPN other name is not handled in JDK 21 (#904 )
closes #29968
Signed-off-by: mposolda <mposolda@gmail.com >
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Co-authored-by: Marek Posolda <mposolda@gmail.com >
2024-06-03 14:17:28 +02:00
9074696382
Editing built-in client policy profiles are silently reverted
...
closes #27184
Signed-off-by: mposolda <mposolda@gmail.com >
2024-06-03 14:00:37 +02:00
4c39fcc79d
Allow to configure if users are automatically redirected when the email domain matches an organization
...
Closes #30050
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-06-03 13:34:21 +02:00
6d6131cade
Backchannel logout url with curly brackets
...
closes #30023
Signed-off-by: raff897 <85362193+raff897@users.noreply.github.com >
2024-06-03 09:51:39 +02:00
0cd0d03c08
Remove all adapter-core code moved to util ( #30012 )
...
* Remove all tests that are only executed for undertow app server
* Remove installation steps for OIDC adapter in wildfly/eap app server
* Remove the util adapters package except HttpClientBuilder
* Remove HttpClientBuilder and use plain apache http client
Closes #29912
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-06-03 09:28:02 +02:00
f6f3b385c5
Improve the cleanup after a failed test to ensure retries work
...
Closes #30018
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-06-03 08:59:03 +02:00
ad32f8bdbc
auth-server-feature does not work for auth-server-quarkus-embedded ( #30045 )
...
Fixes #29259
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2024-06-03 08:47:52 +02:00
cd2451d58b
Remove Oracle JDBC driver out of the box ( #29895 )
...
Closes : #29491
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: Peter Zaoral <pzaoral@redhat.com >
2024-05-31 17:21:19 +00:00
068ce5a61f
Modify xpath for account console logout in the webauthn tests
...
Closes #30024
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-05-31 15:14:35 +02:00
0f6f9543ba
Add oid4vci to the account console ( #29174 )
...
closes #25945
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
Co-authored-by: Erik Jan de Wit <edewit@redhat.com >
Co-authored-by: Jon Koops <jonkoops@gmail.com >
2024-05-31 15:11:32 +02:00
5144f8d85f
Improve Client Type Integration Tests ( #29944 )
...
closes #30017
Signed-off-by: Patrick Jennings <pajennin@redhat.com >
2024-05-31 09:53:22 +02:00
1cf87407fe
Allow setting authentication flow execution priority value via Admin API
...
Closes #20747
Signed-off-by: Andrejs Mivreniks <andrejs@fastmail.com >
2024-05-30 19:17:45 +02:00
3f49036192
Unify approach for WebAuthn tests ( #29781 )
...
Closes #29780
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-05-30 14:21:27 +02:00
44ce2fb74d
Modify authz tests to not depende on adapter-core code
...
Closes #29882
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-05-30 08:02:29 +02:00
320f8eb1b4
Improve invitation messages and flow
...
Closes #29945
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-05-29 17:51:06 +02:00
f088b0009c
initial ui for organizations ( #29643 )
...
* initial screen
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* more screens
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added members tab
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added the backend
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added member add / invite models
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* initial version of the identity provider section
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* add link and unlink providers
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* small fix
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* PR comments
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Do not validate broker domain when the domain is an empty string
Closes #29759
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added filter and value
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added test
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* added first name last name
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* refresh menu when realm organization is changed
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* changed to record
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* changed to form data
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* fixed lint error
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Changing name of invitation parameters
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Chancing name of parameters on the client
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Enable organization at the realm before running tests
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Domain help message
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Handling model validation errors when creating organizations
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Message key for organizationDetails
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Do not change kc.org attribute on group
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* add realm into the context
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* tests
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Changing button in invitation model to use Send instead of Save
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Better message when validating the organization domain
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* Fixing compilation error after rebase
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* fixed test
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* removed wait as it no longer required and skip flacky test
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* skip tests that are flaky
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
* stabilize user create test
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-05-29 14:34:02 +02:00
76a6733f0a
Replace PhantomJS by HtmlUnit
...
Closes #9979
Co-authored-by: Jon Koops <jonkoops@gmail.com >
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-05-29 11:17:57 +02:00
b1a90972b6
Upgrade Selenium and Arquillian dependencies in testsuite
...
Closes #29778
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-05-29 11:17:57 +02:00
bbb83236f5
Do not lower-case the username from the IdP when creating the federated identity
...
Closes #28495
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-05-29 01:58:20 -03:00
46f0da43da
Instead of the test blocking for an unknown reason, specify a timeout
...
Closes #29528
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-05-28 21:06:49 +02:00
694ffaf289
Allow organizations in different realms to have the same domain
...
Closes #29886
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2024-05-28 08:02:30 -03:00
4317a474d1
JWT VC Issuer Metadata /.well-known/jwt-vc-issuer to comply with SD-JWT VC Specification ( #29635 )
...
closes #29634
Signed-off-by: Francis Pouatcha <francis.pouatcha@adorsys.com >
Co-authored-by: DYLANE BENGONO <85441363+bengo237@users.noreply.github.com >
2024-05-28 12:51:56 +02:00
68d9dcecb5
Supporting OID4VCI AuthZCode flow: ( #29685 )
...
closes #29724
Signed-off-by: Yutaka Obuchi <yutaka.obuchi.sd@hitachi.com >
Co-authored-by: Yutaka Obuchi <yutaka.obuchi.sd@hitachi.com >
Co-authored-by: Francis Pouatcha <francis.pouatcha@adorsys.com >
2024-05-28 12:29:31 +02:00
d396dfed6a
Upgrade old Keycloak version for DB migration tests ( #29884 )
...
Closes #29883
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-05-28 11:32:31 +02:00
66ef3bf2d7
Remove Opera from supported web drivers ( #29903 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-05-28 09:01:40 +00:00
b9c04bb8bc
Refactor PolicyEnforcer tests to remove dependency on keycloak-adapter-core and remove keycloak-adapter-core
...
Closes #29189
Closes #28791
Signed-off-by: Douglas Palmer <dpalmer@redhat.com >
2024-05-27 15:00:13 -03:00
5a68056f2a
Fix oid4vc mappers
...
Closes #29805
Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com >
2024-05-27 11:28:46 +02:00
ea1cdc10bd
MigrateTo25_0_0 does not complete within default transaction timeout
...
closes #29756
Signed-off-by: mposolda <mposolda@gmail.com >
2024-05-27 10:31:39 +02:00
2d4d32764c
Show a message when confirming an invitation link
...
Closes #29794
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-05-27 08:33:22 +02:00
b258b459d7
Generate RESTART_AUTHENTICATION event on success
...
Closes #29385
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-05-23 19:08:22 +02:00
0508d279f7
Filter empty domains from OrganizationsRepresentation before running validation
...
Closes #29809
Signed-off-by: vramik <vramik@redhat.com >
2024-05-23 09:53:51 -03:00
Romain LABAT