aec6020750
URL change as liquibase.org now redirects
...
Closes #27540
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-03-05 13:24:12 +01:00
d48ef8b507
Added release notes for 24.0.1 ( #27524 )
...
Signed-off-by: stianst <stianst@gmail.com >
2024-03-05 08:46:10 +01:00
d875a8f2b7
Delete broken images from release notes ( #27492 )
...
Signed-off-by: stianst <stianst@gmail.com >
2024-03-04 12:47:03 +01:00
84d48a9877
Update documentation for reCAPTCHA support
...
Signed-off-by: Lucy Linder <lucy.derlin@gmail.com >
2024-03-04 20:28:06 +09:00
f1e7c572da
Release notes 24: default password hashing updates ( #27475 )
...
Signed-off-by: mposolda <mposolda@gmail.com >
2024-03-04 09:55:03 +01:00
14a12d106a
Edit Keycloak 23.x release notes
...
Closes #27440
Signed-off-by: AndyMunro <amunro@redhat.com >
2024-03-02 21:20:58 +01:00
405feb0bc2
Edit Keycloak 24 changes chapter
...
Closes 27452
Signed-off-by: AndyMunro <amunro@redhat.com >
2024-03-02 21:11:35 +01:00
c2596849f9
doc: adding a note about not conflicting with built-in stuff ( #27214 )
...
closes : #24459
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-03-01 14:34:16 +01:00
3e3cb2222d
Deprecate GELF ( #27367 )
...
Closes #27364
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
2024-02-29 12:07:28 +01:00
3db04d8d8d
Replace Security Key with Passkey in WebAuthn UIs and their documents
...
closes #27147
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
2024-02-29 10:31:05 +01:00
8dd0eb451d
Additional release notes for Keycloak 24 ( #27339 )
...
closes #27142
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-29 08:43:22 +01:00
3950b4ed46
Cleaning old product documentation from the upstream documentation
...
Closes #27324
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-28 13:30:39 +01:00
941e7cc3a5
notes about access and refresh tokens
...
Closes #26919
Signed-off-by: AndyMunro <amunro@redhat.com >
2024-02-28 12:12:48 +01:00
ca0526f54d
Edit Keycloak 24 release notes
...
Closes #27326
Signed-off-by: AndyMunro <amunro@redhat.com >
2024-02-28 10:43:17 +01:00
6de61f61f0
Adding missing explicit IDs for cross-references
...
Closes #27316
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-28 08:37:52 +01:00
83af01c4c0
Add failedLoginNotBefore to AttackDetectionResource
...
Closes #17574
Signed-off-by: Gilvan Filho <gfilho@redhat.com >
2024-02-26 09:35:51 +01:00
b98e115183
Updating docs and account message
...
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-02-22 22:58:22 +09:00
604274fb76
Allow setting an attribute as multivalued
...
Closes #23539
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
Co-authored-by: Jon Koops <jonkoops@gmail.com >
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com >
2024-02-22 12:56:44 +01:00
1e12b15890
Supporting OAuth 2.1 for public clients
...
closes #25316
Co-authored-by: shigeyuki kabano <shigeyuki.kabano.sj@hitachi.com >
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
2024-02-22 10:57:29 +01:00
b0ef746f39
Permanently lock users out after X temporary lockouts during a brute force attack
...
Closes #26172
Signed-off-by: Douglas Palmer <dpalmer@redhat.com >
2024-02-22 09:34:51 +01:00
9ea679ff35
Supporting OAuth 2.1 for confidential clients
...
closes #25314
Co-authored-by: shigeyuki kabano <shigeyuki.kabano.sj@hitachi.com >
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
2024-02-22 08:34:21 +01:00
89af9e3ffd
Write announcement and documentation for Account Console v3 ( #26318 )
...
Closes #26122
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-02-21 13:42:33 -05:00
3b6886d970
Add warning about too long attribute values as it can exhaust caches ( #27126 )
...
Closes #27125
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-21 13:47:58 +01:00
33425dacd9
Add proxy-headers option to the Keycloak CR ( #27092 )
...
Closes #25179
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
2024-02-21 12:19:37 +01:00
de60c9b469
Tweak the default memory request and limit in the Operator ( #27170 )
...
Closes #27169
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
2024-02-21 10:03:17 +01:00
1bdbaa2ca5
Client policies: executor for validate and match a redirect URI
...
closes #25637
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
2024-02-20 08:37:33 +01:00
018914d7fd
Change Open ID Connect to OpenID Connect in UI and docs
...
Closes #27093
Signed-off-by: Joshua Sorah <jsorah@redhat.com >
2024-02-19 17:01:57 +01:00
849a920955
Rename Resident key to Discoverable Credential
...
closes #9508
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com >
2024-02-19 14:12:15 +01:00
d8ab12eab7
Release notes for Keycloak 24 with OIDC contributions ( #27047 )
...
closes #25729
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-16 08:34:20 +01:00
76453550a5
User attribute value length extension
...
Closes #9758
Signed-off-by: vramik <vramik@redhat.com >
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Signed-off-by: Michal Hajas <mhajas@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Michal Hajas <mhajas@redhat.com >
2024-02-16 08:09:34 +01:00
59007844d9
Supported option to specify resource management for pods in Keycloak CR ( #26661 )
...
Closes #26456
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-02-15 13:38:41 +01:00
4ff4c3f897
Increase internal algorithm security using HS512 and 128 byte hmac keys
...
Closes #13080
Signed-off-by: rmartinc <rmartinc@redhat.com >
2024-02-15 08:16:45 +01:00
16fca0118e
User profile - release notes and more migration instructions ( #27003 )
...
closes #26917
closes #26932
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-15 08:14:16 +01:00
e2fb8406a3
Fixing the docs about default hashing iterations ( #27020 )
...
closes #26816
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-15 08:11:44 +01:00
b81233a4af
[docs] Align OAuth 2.0 Security Best Current Practice links ( #24706 )
...
Closes keycloak/keycloak#24705
Signed-off-by: Joshua Sorah <jsorah@gmail.com >
2024-02-13 13:53:56 +01:00
750bc2c09c
Reviewing references to user attribute management and UIs
...
Closes #26155
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-02-12 16:01:34 +01:00
7af753e166
Documentation for AIA
...
closes #25569
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-12 09:42:34 +01:00
93fc6a6c54
Shorter lifespan for offline session cache entries in memory
...
Closes #26810
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com >
Co-authored-by: Martin Kanis <mkanis@redhat.com >
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com >
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2024-02-09 19:44:04 +01:00
d2f74dd83d
Fix anchors in securing apps guide in prod profile
...
Closes #26853
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-09 12:31:30 +01:00
b91ad23b20
Update theme documentation about the considerations when deploying custom themes ( #26885 )
...
Related #23907
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2024-02-09 04:21:54 +01:00
77581d2527
fix: change from operator. to kc.operator. keys ( #26414 )
...
closes #12352
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-02-08 15:03:20 +01:00
de598577b1
Fix confusing SAML NameId mapper format tooltip
...
Closes #26051
Signed-off-by: Michal Hajas <mhajas@redhat.com >
Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com >
2024-02-08 11:21:11 +01:00
cd1e483134
Remove section on adding custom attributes with account v1 and custom themes ( #26858 )
...
Closes #26856
Signed-off-by: stianst <stianst@gmail.com >
2024-02-08 07:28:32 +01:00
fdfe41bdda
fix documentation for resetting OTP in "reset credentials" flow ( #26834 )
...
The former version stated that the "Reset OTP" step had to be disabled in the "reset credentials" authentication flow in order to keep the OTP unchanged. This leads to an error. More precisely, the "Reset - Conditional OTP" sub-flow has to be disabled.
Fixex #26834
Signed-off-by: Michael Schnitzler <schnitzler.michael+github@gmail.com >
2024-02-07 11:57:58 -03:00
ac1780a54f
Added event for temporary lockout for brute force protector ( #26630 )
...
This change adds event for brute force protector when user account is
temporarily disabled.
It also lowers the priority of free-text log for failed login attempts.
Signed-off-by: Tero Saarni <tero.saarni@est.tech >
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
2024-02-07 14:13:33 +00:00
bcd423b270
rephrase sentence in changes-22_0_0.adoc for more clarity
...
Signed-off-by: zak905 <zakaria.amine88@gmail.com >
2024-02-07 09:32:43 -03:00
c7db7bd528
Update custom rest endpoint documentation and example
...
Add a mention about beans.xml and @Provider in the extending server documentation
Add beans.xml in the rest provider example
Add a mention about @Provider in the upgrading guides
Closes #25882
Signed-off-by: zak905 <zakaria.amine88@gmail.com >
Address suggested change for docs/documentation/server_development/topics/extensions.adoc
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
Address suggested change for docs/documentation/server_development/topics/extensions.adoc
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: zak905 <zakaria.amine88@gmail.com >
Address suggested change for docs/documentation/upgrading/topics/keycloak/changes-22_0_0.adoc
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com >
Signed-off-by: zak905 <zakaria.amine88@gmail.com >
2024-02-07 09:32:43 -03:00
ab7426b857
User profile migration documentation for default validations and strange attributes
...
closes #26634
closes #25979
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-02-06 16:48:03 -03:00
c4b1fd092a
Use code from RestEasy to create and set cookies ( #26558 )
...
Closes #26557
Signed-off-by: stianst <stianst@gmail.com >
2024-02-06 15:14:04 +01:00
c866e8e6f9
Introduce index.ftl into base account theme
...
Fixes : #26487
Signed-off-by: Hynek Mlnarik <hmlnarik@redhat.com >
2024-02-06 14:29:07 +01:00
Alexander Schwartz