Commit Graph

377 Commits

Author SHA1 Message Date
Pedro Ruivo 47f245f81e New key affinity for session ids
Closes #46090

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-02-09 10:46:45 +01:00
rmartinc e30bb37443 Mark Token Exchange v1 as deprecated but in preview
Closes #45791

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-02-05 09:16:44 +01:00
Thomas Diesler c08ed20f78 [OID4VCI] Add support for user did as subject id (#45008)
closes #45006


Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
2026-01-30 17:29:47 +01:00
Steve Hawkins eff97618ef fix: moving nonserver defaults out of application.properties
closes: #42332

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-01-19 12:11:12 +01:00
Ricardo Martin 1aa1621eaa Use MIME decoder instead of the default one to replace deprecated Base64 class
Closes #45226

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-01-09 16:38:09 +01:00
Martin Bartoš 548a89c823 [OTel] Micrometer to OpenTelemetry bridge support for metrics (#41716)
* [OTel] Micrometer to OpenTelemetry bridge support for metrics

Closes #41006

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Review: Docs rewording

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Review: Make TELEMETRY Option descriptions consistently use OpenTelemetry to reflect pattern established by telemetry-enabled, telemetry-endpoint etc

Signed-off-by: Ryan Emerson <remerson@ibm.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-12-17 17:03:56 +01:00
Martin Bartoš 29fdcedbc8 [OTel] Introduce preview support for OpenTelemetry Logs (#41265)
Closes #41264

Co-authored-by: Ryan Emerson <remerson@redhat.com

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-15 10:50:30 +01:00
Stefan Guilhen 0fc9650acc Set Workflows as tech preview
Closes #44881

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-12 13:05:59 -03:00
Giuseppe Graziano c0c4067bdd JWT Authorization Grant feature to preview
Closes #44492

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-12-11 10:37:30 +01:00
Martin Bartoš 8def691053 [OTel] Provide general options for telemetry settings (#41705)
* [OTel] Provide general options for telemetry settings

Closes #41263

Co-authored-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/observability/telemetry.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide release notes and deprecation note

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Ignore link to the telemetry guide for now

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-12-10 12:03:46 +00:00
vramik 5dbc91e028 Deprecate Fine-Grained Admin Permissions v1
Closes #44121

Signed-off-by: vramik <vramik@redhat.com>
2025-12-08 10:26:27 -03:00
Stefan Guilhen fe3507b251 Promote workflows to supported state
Closes #43492

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-08 10:06:40 -03:00
mposolda cbb823bc0e Make sd-jwt key binding verification work with EdDSA keys
closes #44369

Signed-off-by: mposolda <mposolda@gmail.com>
2025-11-26 14:44:29 +01:00
ruchikajha95 570ac40025 Promote MDC Logging Feature to Supported State
Closes #41205

Signed-off-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-25 18:53:34 +00:00
Sebastian Łaskawiec 081d8e5a01 Move Kubernetes IdP to preview
Closes #42947

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-22 12:56:09 +01:00
Stian Thorgersen a2c1055f8d Proposed import order (#43432)
* Add importOrder to Spotless

Closes #43235

Signed-off-by: stianst <stianst@gmail.com>

* Re-order imports with Spotless

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
2025-11-14 09:34:49 +01:00
Stefan Guilhen da7993896d Allow ISO-8601 compatible format for the after field in workflow steps
- aligns the format with what is used in the JPA connection provider pool max lifetime for time-based configurations

Closes #42913

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-11-12 18:51:49 -03:00
Pedro Igor ded372a57f Adding utility class for working with throwables and updating the cause check to limit the number of iterations on the stacktrace
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-11-11 08:48:26 -03:00
Martin Bartoš 1f9694358f Ability to enable/disable feature via single property (#43542)
* Ability to enable/disable feature via single property

Closes #43541

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide support for specifying profile preview

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove duplication check, use the new WildcardOptionUtil

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Create quarkus specific single profile config resolver

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the feature profile capability for single feature option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-07 13:35:39 +01:00
Václav Muzikář 9c86eae7ed Initial Client API v2 impl (#43395)
Closes #43224

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-11-03 14:31:54 +01:00
Pedro Ruivo e40c5de050 Session cache affinity
Closes #42776

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 21:01:09 +00:00
Tomáš Kyjovský 4c64b7189c Deprecate org.keycloak.common.util.Base64
Closes #43370

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: 1867605+tkyjovsk@users.noreply.github.com
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 09:12:14 +01:00
Giuseppe Graziano a25a0268de Experimental feature for JWT Authorization Grant (#43624)
Closes #43444

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-10-22 15:34:33 +02:00
Martin Bartoš 37bea126c7 [PERF] Jackson reflection-free serialization/deserialization (#42946)
* [PERF] Jackson reflection-free serialization/deserialization

Closes #42945

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Docs improvements

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polish the features template macros

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-10-17 20:24:47 +02:00
stianst aedd7fe5db Remove unused imports as part of #43233
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Pedro Igor fe8fce859d Improve the Workflow JSON schema
Closes #42697

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 04:04:44 -03:00
Giuseppe Graziano e4114e6c74 Promote DPoP feature to supported by default
Closes #42032

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-09-24 08:26:09 +02:00
Peter Skopek 14e4e1aed2 Enable branding without code changes (#34246)
closes #34244

Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-09-24 07:25:40 +02:00
Stian Thorgersen f72482bfd2 Experimental Kube service accounts identity provider
Closes #37600

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-23 00:11:24 +02:00
Stian Thorgersen 3841fea16d Promote CLIENT_AUTH_FEDERATED and SPIFFE features to preview (#42753)
Closes #42722

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 09:46:37 +00:00
vramik d0e83cc05e Rename RLM to Workflows
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
2025-09-16 08:52:50 -03:00
Pedro Ruivo 971016f743 More efficient secure ID generator
Closes #42283

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-12 13:52:26 +02:00
Alexander Schwartz 6ea3c8aedf Session IDs and auth codes should have 128 bits of entropy
Closes #42274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 17:05:40 +02:00
Steven Hawkins 0897560513 fix: moves unsupported feature logging (#42380)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 19:21:20 +02:00
Stian Thorgersen 320ea5a9a7 Experimental SPIFFE identity provider (#42314)
Closes #42313

Signed-off-by: stianst <stianst@gmail.com>
2025-09-04 14:48:18 +02:00
stianst 57242d2497 Experimental federated client authentication
Closes #42228

Signed-off-by: stianst <stianst@gmail.com>
2025-09-02 10:02:51 -03:00
trataka 9afe5fb8a9 Add wasm support for themes (#38898)
Closes #38897

Signed-off-by: trataka <jonathan@trataka.net>
2025-09-02 14:22:09 +02:00
Alexander Schwartz ca1e61047a Adding TiDB dialect for Quarkus
Closes #41897

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Co-authored-by: Dennis Kniep <kniepdennis@gmail.com>
2025-08-26 17:44:45 -03:00
Steven Hawkins fdca122469 fix: ensuring streams are closed
closes: #40660

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-15 07:40:54 +02:00
Akbar Husain 06f80416fb Replace keySet with entrySet
Closes #40064

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-08-14 17:31:15 +02:00
rmartinc acf39b34c3 Make passkeys feature supported
Closes #41556

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-08-12 11:18:57 +02:00
vramik a8225655cf Initial commit for the RLM feature
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
2025-08-11 17:34:41 -03:00
Steven Hawkins a79e603272 fix: cutting down on the memory footprint for import (#41196)
closes: #40875

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-04 11:02:39 -04:00
mposolda 3cc8808465 Wrap deprecated passkeys authenticator behind the feature
closes #40696

Signed-off-by: mposolda <mposolda@gmail.com>
2025-08-01 16:48:57 +02:00
Björn Eickvonder c7cc162f6b Support for RSA Key Size of 3072
Closes #41551

Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
2025-07-31 13:30:33 +02:00
Björn Eickvonder d62d5030fe Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Ryan Emerson 0a745d6aeb Allow Features to declare that they support Rolling upgrades
Closes #41022

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 12:10:29 +02:00
Martin Kanis 5a42390341 Make UPDATE_EMAIL a supported feature
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-07-09 10:15:48 -03:00
rmartinc 70f0731b21 Make passkeys feature dependent on web_authn
Closes #40975

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-08 13:59:43 +02:00
Michal Hajas d944823277 Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00