keycloak

mirror of https://github.com/keycloak/keycloak.git synced 2026-02-03 20:39:33 -05:00

Author	SHA1	Message	Date
Peter Zaoral	78299ae82d	Enhancement: normalize FilesPlaintextVaultProvider secret paths to prevent false positives in CSAs (#44345 ) Signed-off-by: Peter Zaoral <pzaoral@redhat.com>	2026-02-03 21:21:04 +00:00
Stian Thorgersen	1f0fceb867	Add sanity check for test framework with embedded server (#45967 ) Closes #45378 Signed-off-by: stianst <stianst@gmail.com>	2026-02-03 17:57:17 +00:00
Stefan Guilhen	63d9a19982	Allow step-runner-task-timeout to be specified using ISO-8601 format Closes #45987 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-03 14:53:19 -03:00
Stefan Guilhen	2111dcf913	Check only for the existence of the attribute if only the key is specified Closes #45983 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-03 14:52:34 -03:00
Stefan Guilhen	021d544000	Ensure required action is enabled at the realm level before adding it to the user via workflow step Closes #45976 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-03 14:51:28 -03:00
Stefan Guilhen	c379192bf8	Adjust event names in workflows documentation to match the new event provider names Closes #45968 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-03 14:47:41 -03:00
Erik Jan de Wit	52119f839e	use group resource from context instead (#45883 ) fixes: #45882 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>	2026-02-03 11:39:50 -05:00
Martin Bartoš	3e568fc81b	OTEL: Use suggested 'code.function.name' for span attributes Closes #45944 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2026-02-03 15:56:48 +01:00
Ryan Emerson	e3c4ec6112	Document the minimum required ServiceMonitor CRD version Signed-off-by: Ryan Emerson <remerson@ibm.com>	2026-02-03 14:55:11 +00:00
Ryan Emerson	2c6f56acdc	Avoid breaking DB changes during patch releases Closes #38888 Signed-off-by: Ryan Emerson <remerson@ibm.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com> Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com> Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>	2026-02-03 15:26:01 +01:00
Ricardo Martin	047230a052	Remove XMLUtils.java from the SSSD federation provider Closes #45962 Signed-off-by: rmartinc <rmartinc@redhat.com>	2026-02-03 12:40:14 +00:00
rmartinc	c63f54ba3a	Client policy executor to allow extra audiences for JWT authorization grant Closes #45180 Signed-off-by: rmartinc <rmartinc@redhat.com>	2026-02-03 13:39:31 +01:00
Pedro Igor	072f547b71	Make sure disabled organization is ignored when re-authenticating Closes #45924 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-02-03 12:41:39 +01:00
Ryan Emerson	47408e8620	Update Infinispan CRs in multi-cluster architecture to use InPlaceRolling upgrade strategy Closes #45424 ISPN16 related Signed-off-by: Ryan Emerson <remerson@ibm.com>	2026-02-03 12:38:57 +01:00
NAMAN JAIN	cfa1ed8236	refactor: Use Awaitility in logging tests to reliably assert asynchronous log messages. Closes #45522 Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>	2026-02-03 08:46:08 +00:00
Erik Jan de Wit	033b43f616	Fixing small admin ui bundle issue (#45255 ) * small fix to bundle Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * added source mapping to bundle fixes: #45254 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> --------- Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>	2026-02-02 20:25:27 -05:00
Martin Bartoš	dde0725206	Do not use deprecated test containers in tests (#45942 ) Closes #45941 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2026-02-02 20:10:42 +01:00
forkimenjeckayang	3adcca44a7	[OID4VCI] CredentialEndpoint can be invoked with incorrect access token (#45816 ) closes #44670 closes #44580 Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>	2026-02-02 19:29:40 +01:00
Steven Hawkins	9462f0f00b	updating to quarkus 3.31.1 (#45612 ) Some checks failed Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled Details * fix: updating to quarkus 3.31.0.CR1 closes: #45576 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * updating test containers for 3.31.0.CR1 also adding a managed version for microprofile-metrics-api Signed-off-by: Steve Hawkins <shawkins@redhat.com> * excluding quarkus-bootstrap-runner to prevent trace logging Signed-off-by: Steve Hawkins <shawkins@redhat.com> * changing to new logging context for hibernate jpa Signed-off-by: Steve Hawkins <shawkins@redhat.com> * switching to 3.31.0 release Signed-off-by: Steve Hawkins <shawkins@redhat.com> * switching to 3.31.1 release Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Follow upgrading guide for Quarkus 3.31.0 Signed-off-by: Martin Bartoš <mabartos@redhat.com> * turning of specific hibernate logging Signed-off-by: Steve Hawkins <shawkins@redhat.com> * removing quarkus-bootstrap-runner from the model test classpath Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2026-02-02 17:50:56 +01:00
Steven Hawkins	a2e2634940	fix: allow the same vm to run a keycloak instance multiple times (#45936 ) closes: #45921 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2026-02-02 16:00:58 +00:00
Stefan Guilhen	6e408dd7bc	Introduce WorkflowEventSpi - supports custom event handling beyond the built-in workflow capabilities. Closes #43916 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-02 11:18:27 -03:00
Stefan Guilhen	43b5b3484b	Fix: use valid format for condition used in the documentation Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-02-02 10:15:18 -03:00
rmartinc	2aa17f5c12	Show jwks, certificate or publicKey for the key information Closes #44284 Signed-off-by: rmartinc <rmartinc@redhat.com>	2026-02-02 12:45:37 +01:00
rmartinc	d4e9b16ea9	Include version in system-info for manage-realm and restrict view-system mapping Closes #45776 Signed-off-by: rmartinc <rmartinc@redhat.com>	2026-02-02 12:40:57 +01:00
Šimon Vacek	14fc381eaa	Registry extends AutoCloseable directly (#45887 ) Closes #45886 Signed-off-by: Simon Vacek <simonvacky@email.cz>	2026-02-02 07:37:31 +01:00
Pedro Igor	13cf35ded3	Only realm admins can manage workflows Some checks failed Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled Details Closes #45875 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-01-30 21:18:06 +01:00
Pedro Igor	2dab08d5ed	Make sure disabled organizations are not available from selection Closes #45874 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-01-30 21:17:35 +01:00
NAMAN JAIN	c652adff78	Add format-specific credential metadata contribution for OID4VC Introduce a CredentialBuilder hook that allows credential formats to contribute format-specific metadata to the OID4VC issuer well-known configuration. The issuer delegates metadata shaping to the corresponding CredentialBuilder implementation. Refactor metadata contribution to work directly with SupportedCredentialConfiguration and CredentialScopeModel, improving type-safety and avoiding unnecessary serialization. Add integration tests to verify that SD-JWT credentials expose `vct` without `credential_definition`, and JWT_VC credentials expose `credential_definition` without `vct`. Closes #45485 Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>	2026-01-30 19:39:07 +01:00
Thomas Diesler	c08ed20f78	[OID4VCI] Add support for user did as subject id (#45008 ) closes #45006 Signed-off-by: Thomas Diesler <tdiesler@ibm.com>	2026-01-30 17:29:47 +01:00
Martin Kanis	0433b0017d	Organization Groups Import/Export Closes #45507 Signed-off-by: Martin Kanis <mkanis@redhat.com>	2026-01-30 12:11:03 -03:00
Martin Bartoš	1f8744e57e	Upgrade minikube for CI tests (#45893 ) Closes #45892 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2026-01-30 11:30:21 +00:00
dependabot[bot]	4e3016a45f	Bump lodash-es from 4.17.22 to 4.17.23 in /js (#45664 ) Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.22 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits/4.17.23) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.17.23 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-01-29 15:33:00 -05:00
mposolda	7b36fa174b	Duplicate processing of authorization_details from AuthorizationDetailsProcessorManager closes #45859 Signed-off-by: mposolda <mposolda@gmail.com>	2026-01-29 17:24:03 +01:00
Pedro Ruivo	02066f4985	Bugfix Refactor SessionsResource Closes #45727 Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com> Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>	2026-01-29 14:51:50 +01:00
Stan Silvert	df27734f72	Playwright tests for user workflows tab. (#45771 ) Closes #45619 Signed-off-by: Stan Silvert <ssilvert@redhat.com>	2026-01-29 08:17:00 -05:00
Peter Zaoral	615b54e7e6	mixed-cluster-compatibility-tests fail due to incorrectly masked content (#45821 ) Closes: #45745 Signed-off-by: Peter Zaoral <pepo48@gmail.com>	2026-01-29 13:49:46 +01:00
Pedro Igor	0023c0a881	Removing netbeans project directory (#45858 ) Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-01-29 13:36:04 +01:00
Pedro Ruivo	bae3963d25	Refactor SessionsResource for better memory usage and performance Closes #45727 Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com> Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>	2026-01-29 11:38:54 +01:00
Tero Saarni	47b91b995d	Add revert button to client credentials form Some checks failed Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled Details Signed-off-by: Tero Saarni <tero.saarni@est.tech>	2026-01-28 18:36:36 +01:00
Tero Saarni	cb4c533464	Add support for looking up client secrets via Vault SPI (#39650 ) Fixes #13102 Signed-off-by: Tero Saarni <tero.saarni@est.tech>	2026-01-28 16:45:30 +01:00
Martin Bartoš	9563eb276c	Remove unstable ImportDistTest.testImportLargeUserCount test on CPU-constrainted agents (#45834 ) Closes #45831 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2026-01-28 16:38:49 +01:00
Giuseppe Graziano	0bc95be9cc	Remove ignored-links after 26.5.0 Closes #44810 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2026-01-28 15:08:08 +00:00
Awambeng	d14e1d56a0	[OID4VCI] Fix OID4VCI credential requests to restrict Default client scopes (#45011 ) Closes #44737 Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>	2026-01-28 15:50:02 +01:00
Eren Kan	5ad68321f6	Fix SearchDropdown clear button and URI search in Authorization tabs (#45407 ) - Add defaultValues to useForm for proper form reset - Call reset(defaultValues) in Clear button handler - Fix form field name from 'uris' to 'uri' to match API parameter - Add missing 'reset' dependency to useEffect Closes #45406 Signed-off-by: erenkan <eren@keymate.io>	2026-01-28 09:01:04 -05:00
Stefan Guilhen	b0f93232e9	Prevent NPE when evaluating policies and policy is deleted Closes #45561 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2026-01-28 10:51:16 -03:00
Pedro Igor	26a33409c5	Covering hiding username/email when brute force is enabled during identity-first login Closes #45685 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-01-28 08:29:46 -03:00
Ruchika Jha	aecd677e12	Add documentation for running UI test cases locally using playwright Closes #45343 Signed-off-by: Ruchika <ruchika.jha1@ibm.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>	2026-01-28 12:29:13 +01:00
Pedro Igor	b9243a7270	Only enable JS policies if the scripts feature is enabled Closes #44132 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2026-01-28 12:28:32 +01:00
Martin Kanis	d73b1f926f	Update email AIA: Back to Application URL invokes OIDC callback with missing parameters Closes #44488 Signed-off-by: Martin Kanis <mkanis@redhat.com>	2026-01-28 08:24:57 -03:00
Alexander Schwartz	0ddb355d3d	Optimize deletion of composite roles Closes #45065 Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>	2026-01-28 08:05:16 -03:00

1 2 3 4 5 ...

30079 commits