Commit Graph

  • 4c64b7189c Deprecate org.keycloak.common.util.Base64 Tomáš Kyjovský 2025-10-30 09:12:14 +01:00
  • f65adbf628 win-fix: correct hostname normalization condition for loopback addresses (#43634) Peter Zaoral 2025-10-30 08:49:45 +01:00
  • 6a4e4abf30 Don't keep an old session to avoid a stable objects and a memory leak Alexander Schwartz 2025-10-29 21:36:41 +01:00
  • c64b722400 Don't keep an old session to avoid a stable objects and a memory leak Alexander Schwartz 2025-10-29 21:36:28 +01:00
  • 15fe032e8d Resolve session leak in DeclarativeUserProfileProvider Alexander Schwartz 2025-10-29 21:36:09 +01:00
  • 0a5c97d3a9 Resolve session leak in DeclarativeUserProfileProvider Alexander Schwartz 2025-10-29 21:35:59 +01:00
  • 8525792d92 Translations update from Hosted Weblate (#43739) Weblate (bot) 2025-10-29 19:51:04 +01:00
  • ccc7568879 fix: updating build docs (#43607) Steven Hawkins 2025-10-29 12:05:49 -04:00
  • 2fc5419676 Avoid using UserCredentialManager from user storage extensions (#43695) Marek Posolda 2025-10-29 16:26:59 +01:00
  • 7b60e54e62 Document debug log settings required to show applied Infinispan configuration Ryan Emerson 2025-10-29 15:01:53 +00:00
  • 322cbcdd84 Only check required field when i18n dialog is open. Stan Silvert 2025-10-28 14:47:26 -04:00
  • 0b1a17b82d Migration step to add the reset-password scope to user resource type resources Pedro Igor 2025-10-29 10:30:55 -03:00
  • 50102e50de Check offline scope is still assigned when performing a refresh Ricardo Martin 2025-10-29 13:53:14 +01:00
  • 6bce46c842 Reduce Dependabot PR noise by grouping them and switching to weekly batch updates (#43704) Bruno Oliveira da Silva 2025-10-29 09:30:24 -03:00
  • ce5dd51921 Migration step to add the reset-password scope to user resource type resources Pedro Igor 2025-10-28 15:56:29 -03:00
  • 3ba8a68f2c Document debug log settings required to show applied Infinispan configuration Ryan Emerson 2025-10-29 11:36:53 +00:00
  • 4f10c10ffd Don't keep an old session to avoid a stable objects and a memory leak Alexander Schwartz 2025-10-29 12:01:55 +01:00
  • b378499bee Avoid holding on to the realm in cached configurations Alexander Schwartz 2025-10-29 12:01:18 +01:00
  • 4cd381edbf Avoid holding on to the realm in cached configurations Alexander Schwartz 2025-10-29 12:01:02 +01:00
  • 5693899246 Picture of the token-exchange flow in the documentation Marek Posolda 2025-10-29 11:38:37 +01:00
  • 3cf0989498 Resolve session leak in DeclarativeUserProfileProvider Alexander Schwartz 2025-10-29 11:31:18 +01:00
  • 89dd6127c3 Check offline scope is still assigned when performing a refresh Ricardo Martin 2025-10-29 09:33:23 +01:00
  • 759e062131 JWT Authorization grant client configuration (#43685) Giuseppe Graziano 2025-10-29 08:45:51 +01:00
  • a2c2b7e08f fix: forcing the namespace for the servicemonitor check Steven Hawkins 2025-10-28 13:54:12 -04:00
  • 781d458b50 Role mapper should check if an update is needed for the role Alexander Schwartz 2025-10-28 18:53:16 +01:00
  • 8f8dabab55 Role mapper should check if an update is needed for the role Alexander Schwartz 2025-10-28 18:53:06 +01:00
  • 47288a9643 Role mapper should check if an update is needed for the role Alexander Schwartz 2025-10-28 18:52:51 +01:00
  • 3cb9e0bcd8 task: testing servicemonitor patching Steven Hawkins 2025-10-28 13:06:06 -04:00
  • d9e3f55b69 fix: forcing the namespace for the servicemonitor check Steven Hawkins 2025-10-28 12:25:53 -04:00
  • 8b253f9e12 Cleaning up threadlocals to prevent (small) memory leak Alexander Schwartz 2025-10-28 17:10:37 +01:00
  • 2b51d6f4ac Avoid holding on to the realm in cached configurations Alexander Schwartz 2025-10-28 17:10:24 +01:00
  • 5ad8f1a026 Only add the none verifier when attestation conveyance preference is none Ricardo Martin 2025-10-28 16:51:56 +01:00
  • e0c1f2ee0f Check offline scope is still assigned when performing a refresh Ricardo Martin 2025-10-28 16:42:34 +01:00
  • 29eacdd9d3 Only add the none verifier when attestation conveyance preference is none Ricardo Martin 2025-10-28 15:09:09 +01:00
  • 42edee22d9 Email should be set when email as username is enabled and email is read-only Pedro Igor 2025-10-28 10:44:57 -03:00
  • ba0fe9bd70 Cleaning up threadlocals to prevent (small) memory leak Alexander Schwartz 2025-10-28 14:36:27 +01:00
  • b537fc954a Cleaning no-longer used message keys (#43719) Alexander Schwartz 2025-10-28 14:25:03 +01:00
  • 1bd9a3f473 Only add the none verifier when attestation conveyance preference is none Closes #43723 rmartinc 2025-10-27 09:05:18 +01:00
  • 334f403653 Add authorization checks for workflows Marco N. 2025-10-27 17:46:25 +01:00
  • 8136b03c67 Add authorization checks for workflows Marco N. 2025-10-27 17:45:48 +01:00
  • 53142d8f92 Fixing flaky test KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP Pedro Igor 2025-10-27 13:28:28 -03:00
  • defd03c747 Manage workflowJSON state in the form. Stan Silvert 2025-10-23 10:34:01 -04:00
  • 398cf1afed Change workflow view function to update. Also handle authorization. Stan Silvert 2025-10-22 13:08:22 -04:00
  • b287543f6c Clean up based on review. Stan Silvert 2025-10-10 14:26:59 -04:00
  • 23f21c8232 Implement workflow view/copy/enable/disable. Stan Silvert 2025-10-09 10:48:44 -04:00
  • aadffb94fb Fix typo in LDAP edit mode in the docs Alexander Schwartz 2025-10-26 19:57:23 +01:00
  • 5995815bcc Fixing tests Alexander Schwartz 2025-10-24 16:45:35 +02:00
  • 76f2e85b1e Role mapper should check if an update is needed for the role Alexander Schwartz 2025-10-24 15:40:03 +02:00
  • 3751bc050d Workflows enhancements - Allow specifying a parameter in events to better tie workflows to more specific events (e.g. user-role-added(name-of-role)) - Make workflows 'if' and 'on' fields use expressions by default - Fix condition evaluation inconsistencies by having a single param for each condition - Remove need to use double quotes for condition parameters - Reference groups by path instead of id in conditions Stefan Guilhen 2025-10-25 10:18:09 -03:00
  • 3b20ca2496 Translations update from Hosted Weblate (#43598) Weblate (bot) 2025-10-26 19:30:06 +01:00
  • 0407446206 Prevent the username field from being rendered when running the identity-first login flow Pedro Igor 2025-10-26 14:45:49 -03:00
  • abd5cd292f Do not lower-case username and email if users are not imported from LDAP Pedro Igor 2025-10-26 13:37:44 -03:00
  • ee29c72ed6 Parallelize client scope tests for the admin console (#43675) Jon Koops 2025-10-24 22:08:33 +02:00
  • 84a3c29f2b Manage the error when the admin console reads the certificate info Closes #43547 rmartinc 2025-10-23 17:59:20 +02:00
  • d415cc1385 DPoP replay check should take clockSkew into account Closes #43505 rmartinc 2025-10-21 17:06:58 +02:00
  • 59b20d1d63 Allow managing realm admin roles if the the realm-admin role is granted Pedro Igor 2025-10-23 16:53:17 -03:00
  • 2d2f0dafca Added backchannelLogoutUserSessionFromClient and changed backchannelLogoutUserFromClient (#42557) Tamas Adam 2025-10-23 16:47:59 +02:00
  • 422eadecf4 fix: adding type validation and lazily adding cli options (#43467) Steven Hawkins 2025-10-23 09:46:35 -04:00
  • b5ed45f2a0 Ability to define workflows with YAML vramik 2025-10-19 18:32:44 +02:00
  • b1c0c15ad5 Add validation for Workflwow, Condition and Steps fields vramik 2025-10-17 10:36:00 +02:00
  • c88e56707b Bump @types/node from 24.6.2 to 24.8.0 in /js dependabot[bot] 2025-10-23 10:47:38 +00:00
  • e4d4570404 Prevent the username field from being rendered when running the identity-first login flow Pedro Igor 2025-10-23 08:02:57 -03:00
  • 6527b139dc Do not lower-case username and email if users are not imported from LDAP Pedro Igor 2025-10-23 08:02:33 -03:00
  • 2b785425fa Allow managing realm admin roles if the the realm-admin role is granted Pedro Igor 2025-10-17 13:32:58 -03:00
  • 60dc235ca3 Set version to 26.4.2 26.4.2 github-actions[bot] 2025-10-23 06:29:47 +00:00
  • 84fd00c9f7 SPIFFE should support OIDC JWK endpoint (#43651) (#43656) Stian Thorgersen 2025-10-23 08:08:31 +02:00
  • 2d526eaf16 Bump eslint from 9.36.0 to 9.37.0 in /js dependabot[bot] 2025-10-22 22:03:35 +00:00
  • 1d2afb63f5 Bump lightningcss from 1.30.1 to 1.30.2 in /js dependabot[bot] 2025-10-22 20:08:36 +00:00
  • a89d575091 Bump typescript from 5.9.2 to 5.9.3 in /js dependabot[bot] 2025-10-22 18:39:08 +00:00
  • 88659cd465 Bump rollup from 4.52.2 to 4.52.4 in /js dependabot[bot] 2025-10-21 20:22:00 +00:00
  • 62f68b2f19 DPoP replay check should take clockSkew into account Closes #43505 rmartinc 2025-10-21 17:06:58 +02:00
  • a25a0268de Experimental feature for JWT Authorization Grant (#43624) Giuseppe Graziano 2025-10-22 15:34:33 +02:00
  • f6ac64907d SPIFFE should support OIDC JWK endpoint (#43651) Stian Thorgersen 2025-10-22 15:19:56 +02:00
  • ab7b835e51 Bump @rollup/plugin-commonjs from 28.0.6 to 28.0.8 in /js dependabot[bot] 2025-10-17 00:10:59 +00:00
  • 0c2c8c4830 Bump react-i18next from 16.0.0 to 16.0.1 in /js dependabot[bot] 2025-10-16 18:17:26 +00:00
  • 2e7977cfa2 Bump vite from 7.1.7 to 7.1.10 in /js dependabot[bot] 2025-10-16 18:19:09 +00:00
  • 8f7559329d Bump github/codeql-action from 3.30.6 to 4.30.8 dependabot[bot] 2025-10-13 00:05:08 +00:00
  • 9726e0f940 Bump snyk/actions from 0.5.0 to 1.0.0 dependabot[bot] 2025-10-06 00:04:29 +00:00
  • 4ad4ce5d58 Adding this as a breaking change plus deprecation Alexander Schwartz 2025-10-21 14:58:33 +02:00
  • 489d10157a Fix OIDC IDP broker basic auth encoding Ronaldo Paulino Jiconda 2025-10-20 23:48:24 +02:00
  • 84a161d4dd Extract related methods from IdentityProvider to UserIdentityProvider (#43535) Stian Thorgersen 2025-10-21 16:27:07 +02:00
  • 6080f21c64 Adding this as a breaking change plus deprecation Alexander Schwartz 2025-10-21 14:58:33 +02:00
  • 4443834d06 fix: refines how defaults are shown Steven Hawkins 2025-10-21 08:35:55 -04:00
  • 419afce847 Fix anchors in the documentation Martin Bartoš 2025-10-21 14:33:32 +02:00
  • a321c2c91f Make pending email verification attribute removable by admin Martin Kanis 2025-10-10 12:01:04 +02:00
  • 7c50d94f14 Make intra-document links work in downstream Alexander Schwartz 2025-10-21 13:16:40 +02:00
  • e7938a7c22 Make intra-document links work in downstream Alexander Schwartz 2025-10-21 13:16:22 +02:00
  • c5b560e2d8 Update user profile to allow returning a brief user representation Pedro Igor 2025-10-21 07:52:31 -03:00
  • add43bd394 Final review and update for UPDATE_EMAIL documentation Martin Kanis 2025-10-21 12:45:29 +02:00
  • c0ba2599b1 fix: noting db support level changes (#43549) (#43608) Steven Hawkins 2025-10-21 05:45:06 -04:00
  • 49305d1567 fix: generalizing the misconfiguration detection. (#43500) Steven Hawkins 2025-10-21 05:44:00 -04:00
  • eed9d70ec0 Minor technical cleanup (#42811) Tamas Adam 2025-10-21 10:00:36 +02:00
  • 987ce19b45 Fix OIDC IDP broker basic auth encoding Ronaldo Paulino Jiconda 2025-10-20 23:48:24 +02:00
  • 37c4588c7d Add session information to the current context on creation and session validation Alexander Schwartz 2025-10-20 22:59:52 +02:00
  • bcc73bc98b fix: allow for --optimized to receive signals (#43580) (#43610) Steven Hawkins 2025-10-20 13:47:15 -04:00
  • 3b7f364b4f fix: allow for --optimized to receive signals (#43580) Steven Hawkins 2025-10-20 11:52:27 -04:00
  • 657105bb41 Improve WorkflowRepresentation.Builder, changing concurrency(true) to concurrency().cancelIfRunning() for better clarity Stefan Guilhen 2025-10-17 11:18:33 -03:00
  • 3419734bf5 Handle options component with no value set. (#43548) Stan Silvert 2025-10-20 08:06:49 -04:00
  • c4edb97e68 Reviewing the email verification field and reset action Pedro Igor 2025-10-15 17:34:50 -03:00
  • 986fdd7341 Make pending email verification attribute removable by admin Martin Kanis 2025-10-10 12:01:04 +02:00