mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-05-01 12:40:38 -05:00
Code Issues Packages Projects Releases Wiki Activity
29,554 Commits 33 Branches 304 Tags
fb13aa50390ddfb03cce2bd2f798e5547d2c433c
Commit Graph

139 Commits

Author SHA1 Message Date
Šimon Vacek 6926ef83f9 Test framework support for remote databases (#43609) 
Part of #41940

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-11-11 07:59:33 +01:00
Martin Bartoš 1f9694358f Ability to enable/disable feature via single property (#43542) 
* Ability to enable/disable feature via single property

Closes #43541

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide support for specifying profile preview

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove duplication check, use the new WildcardOptionUtil

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Create quarkus specific single profile config resolver

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the feature profile capability for single feature option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-11-07 13:35:39 +01:00
Lukas Hanusovsky 768cea1b82 Add FIPS suite to the new tests (#43431) 
* Add FIPS test suite to the new tests

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Tweaks to FIPS suite in new test

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: stianst <stianst@gmail.com>
 2025-11-06 14:08:19 +01:00
Martin Bartoš 75fcf11a1b Separate HOW_TO_RUN.md file for the new testsuite (#43860) 
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-11-03 15:41:01 +01:00
Václav Muzikář 9c86eae7ed Initial Client API v2 impl (#43395) 
Closes #43224

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Robin Meese <39960884+robson90@users.noreply.github.com>
 2025-11-03 14:31:54 +01:00
Stian Thorgersen d0a7225b3d Allow CORS Access-Control-Allow-Headers customization (#43767) 
Closes #12682

Signed-off-by: stianst <stianst@gmail.com>
 2025-11-03 06:39:44 +00:00
rmartinc f92adda310 Improve JWT Assertion Validation using client validators 
Closes #43642

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-10-31 11:58:08 +01:00
Pedro Ruivo e40c5de050 Session cache affinity 
Closes #42776

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-10-30 21:01:09 +00:00
Stian Thorgersen be6a3814fb Add CORS support to OIDC dynamic client registration endpoints (#43625) 
Closes #8863

Signed-off-by: stianst <stianst@gmail.com>
 2025-10-30 12:12:08 +01:00
Tomáš Kyjovský 4c64b7189c Deprecate org.keycloak.common.util.Base64 
Closes #43370

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: 1867605+tkyjovsk@users.noreply.github.com
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-10-30 09:12:14 +01:00
Giuseppe Graziano 759e062131 JWT Authorization grant client configuration (#43685) 
closes #43567

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2025-10-29 08:45:51 +01:00
Stian Thorgersen f6ac64907d SPIFFE should support OIDC JWK endpoint (#43651) 
Closes #43650

Signed-off-by: stianst <stianst@gmail.com>
 2025-10-22 15:19:56 +02:00
stianst aedd7fe5db Remove unused imports as part of #43233 
Signed-off-by: stianst <stianst@gmail.com>
 2025-10-13 13:32:01 +02:00
vramik e4dc88de13 [FGAP] Make additional rest endpoints respect permissions 
Closes #40058

Signed-off-by: vramik <vramik@redhat.com>
 2025-10-08 08:47:22 -03:00
Stian Thorgersen ab7939f33a Add support for spiffe_refresh_hint to Spiffe Identity Provider (#43242) 
Closes #42806

Signed-off-by: stianst <stianst@gmail.com>
 2025-10-07 14:00:46 +02:00
Šimon Vacek ae7c2d29e8 [Test Framework] Ability to run Keycloak test server with HTTPS (#42616) 
* Ability to run Keycloak test server with HTTPS

Closes: #34486

Signed-off-by: Simon Vacek <simonvacky@email.cz>

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/CoreTestFrameworkExtension.java
#	test-framework/core/src/main/java/org/keycloak/testframework/server/KeycloakServerConfigBuilder.java

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/CoreTestFrameworkExtension.java

* PR review fixes

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Split keystore into truststore and keystore

Signed-off-by: Simon Vacek <simonvacky@email.cz>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-10-06 12:56:51 +02:00
Lukas Hanusovsky 64ffb3a83f [Test Migration] New testsuites: Clusterless, Multisite, VolatileSessions, migrated test: SessionTest 
Closes #35391
Closes #35393
Closes #42619

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-10-03 19:23:15 +02:00
Stian Thorgersen dbd516f8e6 Refactor SimpleHttp to make it injectable and usable outside server (#42936) 
Closes #42902

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-29 08:37:05 +02:00
Václav Muzikář b65a60e40d Support for EDB 17 (#42341) 
Closes #42742
Closes #42293

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-09-26 16:04:47 +02:00
Pedro Ruivo 47f85631f3 Automatically create external caches for MULTI_SITE deployments 
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-09-19 18:56:38 +02:00
Stian Thorgersen 37a99154a5 Refactor and improve tests for federated client authentication (#42720) 
Closes #42718

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-18 09:30:01 +00:00
Lukas Hanusovsky d9b4bd047f [Keycloak Test Framework] Infinispan cache + ClusterlessTestSuite configuration (#42172) 
* [Keycloak Test Framework] Infinispan server + ClusterlessTestSuite and MultisiteTestSuite configuration

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Utilise ClientIntelligence.BASIC to ensure that internal docker IPs
never used by Infinispan client

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Code refactoring + properties utility

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
 2025-09-17 07:13:11 +00:00
Pedro Igor 58990a5544 Add a policy condition based on user attributes 
Closes #42118

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-09-09 12:07:59 -03:00
mposolda 5a05d2123e Unbounded login_hint parameter Can Corrupt KC_RESTART Cookie 
closes #40857

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-09-09 11:05:19 +02:00
Lukas Hanusovsky de50a15a2f Test framework - Fix for wrongly placed custom KeycloakServerConfig (#42422) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-09-08 11:23:46 +02:00
Steven Hawkins 05c7c625d3 fix: don't show the local access screen if a service account exists (#42218) 
closes: #42201

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-05 18:22:31 +02:00
Stian Thorgersen 320ea5a9a7 Experimental SPIFFE identity provider (#42314) 
Closes #42313

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-04 14:48:18 +02:00
stianst 57242d2497 Experimental federated client authentication 
Closes #42228

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-02 10:02:51 -03:00
Alexander Schwartz ca1e61047a Adding TiDB dialect for Quarkus 
Closes #41897

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Co-authored-by: Dennis Kniep <kniepdennis@gmail.com>
 2025-08-26 17:44:45 -03:00
Šimon Vacek 42520d8409 Refactor test database config in the new framework (#41320) 
* Refactor test database config in the new framework

Closes #41319

Signed-off-by: Simon Vacek <simonvacky@email.cz>

# Conflicts:
#	tests/base/src/test/java/org/keycloak/tests/db/CaseSensitiveSchemaTest.java
#	tests/base/src/test/java/org/keycloak/tests/db/PreserveSchemaCaseLiquibaseTest.java

* Moved test method to the abstract class

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Conform to conventions

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Add lifecycle class to custom DBs to prevent containers with re-use from running after tests

Signed-off-by: Stian Thorgersen <stian@redhat.com>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2025-08-15 09:29:08 +02:00
Dennis Kniep d74a10d87a Add TiDB as supported db 
Closes #41455

Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-14 07:27:21 +00:00
Lukas Hanusovsky 5b3b36e300 Move RealmRolesTest.java to the new testsuite (#41404) 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-08-13 12:56:23 +02:00
Peter Skopek 651d651c30 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822) 
Signed-off-by: Peter Skopek <pskopek@redhat.com>
 2025-08-12 16:50:17 +02:00
Šimon Vacek e664e56b62 Test framework config builders name unification (#41727) 
* Test framework config builders name unification

Closes #37275

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Update test-framework/core/src/main/java/org/keycloak/testframework/realm/RealmConfigBuilder.java

Signed-off-by: Stian Thorgersen <stian@redhat.com>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2025-08-11 12:56:33 +00:00
Stian Thorgersen b71b1f5fea Disable tests for specific databases and servers in test framework (#41358) 
Closes #41357

Signed-off-by: stianst <stianst@gmail.com>
 2025-07-24 09:34:15 +02:00
Stian Thorgersen bd676ea845 Test suites config for the new test framework (#41318) 
Closes #41316

Signed-off-by: stianst <stianst@gmail.com>
 2025-07-23 09:23:16 +02:00
Václav Muzikář 50a5d9afe6 Return global scope to @InjectHttpClient (#38586) 
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-07-23 08:54:18 +02:00
Lukas Hanusovsky d7273e6b1f Move ConsentsTest.java to the new testsuite (#40323) 
* Moving files to the new test suite

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Move ConsentsTest.java, UserRoleTest.java to the new testsuite

Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-22 12:31:59 +02:00
Ryan Emerson 52a83509dc Default jdbc-ping cluster setup for distributed caches fails in Oracle 
* Add DatabaseConfig to TestDatabase so the underlying DB can be
  configured per test
* Allow DB initScripts to be configured by tests

Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-17 15:57:25 +00:00
Lukas Hanusovsky 788e981917 Move UserTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-16 08:13:30 +02:00
Lukas Hanusovsky 17beaa1359 Migrate FineGrainAdminUnitTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-15 13:38:03 +02:00
Lukas Hanusovsky 660a4aa48a Move IdentityProviderTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-14 15:55:50 +02:00
Lukas Hanusovsky d2b45373d3 Move PartialImportTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-14 14:00:17 +02:00
Lukas Hanusovsky cabd7cd474 Move ConcurrencyTest.java, AbstractConcurrencyTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-07-14 11:10:54 +02:00
Stian Thorgersen 8a694a585b Add generic update methods for builders (#40312) 
Closes #40311

Signed-off-by: stianst <stianst@gmail.com>
 2025-07-11 09:03:28 +02:00
Pascal Knüppel f39a37d8d1 [OID4VCI] Move realm attributes to clientScope and protocol-mappers (#39768) 
fixes #39527


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
 2025-07-10 14:46:36 +02:00
Martin Kanis 5a42390341 Make UPDATE_EMAIL a supported feature 
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2025-07-09 10:15:48 -03:00
Ryan Emerson f0c623598e Run clustering compatibility tests on release/x.y branches 
Closes #39966

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-07 21:08:11 +02:00
Ryan Emerson f8f561a435 Check cluster is correctly formed in ClusteredKeycloakServer 
Closes #40858

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-07-04 09:12:51 +00:00
Ryan Emerson 9543008899 Create clustering test cases for OIDC flows (#40623) 
Closes #39965

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2025-06-25 15:06:10 +02:00