upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-03 20:39:33 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
30079 commits 23 branches 291 tags 855 MiB
Commit graph

30079 commits

This branch
This branch
All branches
Author SHA1 Message Date
forkimenjeckayang
f2f185b367
[OID4VCI] Add OID4VCI request/response support to OAuthClient utility (#45784) 
closes: #44671


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
 2026-01-28 11:54:42 +01:00
NAMAN JAIN
5e3c0b6b28 Fix realm context handling for StoreSyncEvent processing 
Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>

Fix realm context handling for StoreSyncEvent processing

Ensure the correct realm is resolved and set when handling StoreSyncEvent
inside transactional jobs. Restore the original session realm context to
avoid leakage and make StoreSyncEvent constructors public so events can be
safely published after transaction commit from RealmManager.

Closes #44574
 2026-01-28 11:40:45 +01:00
Giuseppe Graziano
adbbb81299 Remove admin console public config endpoint 
Closes #45728

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-01-28 10:43:20 +01:00
Erik Jan de Wit
ffc19d997e
added ability to refresh token when within time (#45789) 
fixes: #44379

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2026-01-28 08:17:36 +01:00
Stefan Guilhen
bc0e2ff10b Move init/postInit/close to WorkflowConditionProviderFactory, cleanup implementations 
Closes #45767

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-01-27 15:06:01 -03:00
Stefan Guilhen
c13a1772f8 Adds ability to migrate scheduled workflow resources from one step to another step in the same or different workflow 
Closes #45174

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-01-27 13:46:18 -03:00
Steven Hawkins
38b5466093
fix: aligns our dev http-host default behavior with that of quarkus (#45691) 
closes: #42876

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
 2026-01-27 16:51:47 +01:00
Václav Muzikář
ed513486d1
Add operationId to OpenAPI spec for Client v2 (#45752) 
Closes #45573

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-01-27 15:26:37 +01:00
Pedro Ruivo
5cb13268ee Remove fatal log messages from ConsistentHash 
Fixes #45780

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-27 12:52:22 +00:00
Giuseppe Graziano
6744f46841 Max expiration for Google IDToken 
Closes #45725

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-01-27 13:18:51 +01:00
Fabian Bieler
6550d1b808 Login[v2]: Improve a11y for authenticator selector 
Clickable elements should be focusable and have interactive semantics.
See: https://developer.mozilla.org/en-US/docs/Web/Accessibility/Guides/Understanding_WCAG/Keyboard?utm_source=devtools&utm_medium=a11y-panel-checks-keyboard#Interactive_elements_must_be_focusable

Closes #45227

Signed-off-by: Fabian Bieler <fabian.bieler@scoop-software.de>
 2026-01-27 13:08:44 +01:00
Martin Bartoš
eac504cce5 OTEL: Ability to specify headers for exporters 
Closes #45220

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-27 10:36:18 +00:00
Peter Zaoral
d2be206a9f
Run new test framework db tests on Azure (#45735) 
* Run new test framework db tests on Azure

Closes: #45658

Signed-off-by: Peter Zaoral <pepo48@gmail.com>

* Run new test framework db tests on Azure

Closes: #45658

Signed-off-by: Peter Zaoral <pepo48@gmail.com>

---------

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
 2026-01-27 08:11:37 +00:00
Weblate (bot)
521c826003
Translations update from Hosted Weblate (#45532)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
* Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Translated using Weblate (Turkish)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/tr/

Updated translation for Turkish

Language: tr

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for German

Language: de

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for German

Language: de

Co-authored-by: Ettore Atalan <atalanttore@googlemail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Martin Schmidt <martin.schmidt@qualityminds.de>
Signed-off-by: Ettore Atalan <atalanttore@googlemail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Schmidt <martin.schmidt@qualityminds.de>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Translated using Weblate (French)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/fr/

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Translated using Weblate (French)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/fr/

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Translated using Weblate (Chinese (Traditional Han script))

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hant/

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Ettore Atalan <atalanttore@googlemail.com>
Signed-off-by: Martin Schmidt <martin.schmidt@qualityminds.de>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Ettore Atalan <atalanttore@googlemail.com>
Co-authored-by: Martin Schmidt <martin.schmidt@qualityminds.de>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
 2026-01-26 21:45:24 +01:00
Stian Thorgersen
c51e1af941
Test framework doesn't stop running Keycloak instance if reuse is turned off 
Closes #45750

Signed-off-by: Stian Thorgersen <st@li-fbf8e8cc-23c4-11b2-a85c-be35f7de969a.ibm.com>
Co-authored-by: Stian Thorgersen <st@li-fbf8e8cc-23c4-11b2-a85c-be35f7de969a.ibm.com>
 2026-01-26 18:50:17 +01:00
Steven Hawkins
77704a91b6
fix: adding support for xforwarded prefix (#45699) 
closes: #35298

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-26 18:14:54 +01:00
mposolda
e414050524 Remove AuthorizationDetailsResponse and make AuthorizationDetailsJSONRepresentation as base of RAR processors 
closes #45706

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-26 17:21:45 +01:00
Tomáš Kyjovský
b247ef12cd
Fix indentation in sample Keycloak CR YAML in Operator rolling updates doc 
Closes #45755 

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
 2026-01-26 16:52:27 +01:00
mposolda
76c4263db9 Polishing based on PR review. Fix flaky tests 
closes #44961

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-26 08:45:41 +01:00
mposolda
416a6017c2 Make authorizationDetails processing more generic and not tightly coupled to OID4VCI. Fixes 
closes #44961

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-26 08:45:41 +01:00
forkimenjeckayang
17a2678438 Resolve bug: Authorization_details added to token-response even when should not be 
closes #44961

Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
 2026-01-26 08:45:41 +01:00
Martin Bartoš
d03bba598c
Improve client creation with PKCE in admin console (#44365)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
Closes #44364

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-23 17:30:58 +01:00
Pedro Ruivo
2f4f36eabc
Add realm id column to offline_client_session table 
Closes #44424

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-23 16:28:34 +01:00
Pedro Ruivo
fcdc03a2f6
Fix mixed-cluster-compatibility-tests version matrix 
Fixes #45708

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-23 15:07:48 +00:00
Alexander Schwartz
ea29c25f20
Additional restrictions when to issue a redirect to the caller on rolling updates 
Closes #45574

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2026-01-23 07:33:41 -03:00
Stan Silvert
a24183a344
Display scheduled workflows for a user in admin console (#45491)
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Details 
* Display scheduled workflows for a user in admin console

Resolves #44955

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Minor changes from feedback.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix duplicate blank error.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2026-01-22 15:12:57 -05:00
Šimon Vacek
8f0cbcb244
Run new framework db testsuite on Aurora
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Details 
Closes #41940

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2026-01-22 20:14:54 +01:00
Alexander Schwartz
e278a2f6fd
Changing default clock skew for not-issued-before to 10 seconds 
Closes #45620

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-22 19:11:10 +01:00
Erik Jan de Wit
5f84b04ef5
use helptext field from condition instead of message bundle 
Also removed some duplictate state

fixes: #45586

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-22 17:24:30 +01:00
Martin Bartoš
57f0b15c80
OTEL: Add Telemetry options to Keycloak CR (#45397) 
* OTEL: Add Telemetry options to Keycloak CR

Closes #45348

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Add validation to resource attributes

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid unnecessary warning logs during the operator tests execution

Closes #45623

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-22 16:02:06 +00:00
Martin Bartoš
44375e2178
Hibernate Validator is enabled by default when not used (#45681) 
* Hibernate Validator is enabled by default when not used

Closes #45677

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Disable Hibernate Validator factory customizer only for non testing

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-22 16:59:39 +01:00
rmartinc
50366f03a6 Documentation for Authorization Chaining Across Domains 
Closes #45466

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-01-22 16:33:27 +01:00
Geremia Taglialatela
7149203b79 Wrap form buttons in kcFormButtonsClass div 
Previously, the buttons in `login-config-totp.ftl` were not enclosed
in a `<div>` with the `${properties.kcFormButtonsClass!}` class.

This resulted in inconsistent margins and alignment compared to other
base theme templates, especially affecting button groups.

Update the markup to wrap the buttons in a `kc-form-buttons` div
with the appropriate class. This aligns the template with the styling
standards used elsewhere and ensures margin consistency across the UI.

Related to: #45164

Signed-off-by: Geremia Taglialatela <tagliala.dev@gmail.com>
 2026-01-22 16:28:55 +01:00
Nate Drake
139de283cc
Add missing space to fix markdown code rendering (#45621) 
Signed-off-by: Nate Drake <ndrake@gmail.com>
 2026-01-22 15:59:24 +01:00
Erik Jan de Wit
6ddfc86028
Value might be undefined (#45628) 
fixes: #45519

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2026-01-22 15:37:33 +01:00
Erik Jan de Wit
e16fc5938e
Add tests for mappers and representation for the admin v2 (#45376) 
* Add tests for mappers and representation for the admin v2

Fixes: #45277
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* changed OIDCClientModelMapper into an integration test

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* PR review comments

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Update rest/admin-v2/tests/pom.xml

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

* Update rest/admin-v2/tests/pom.xml

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

* Update rest/admin-v2/tests/pom.xml

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

* Update rest/admin-v2/tests/pom.xml

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-22 13:05:01 +00:00
vramik
111ba36504 Organization Groups Core Backend & API 
Closes #45562

Signed-off-by: vramik <vramik@redhat.com>
 2026-01-22 09:39:24 -03:00
rmartinc
d67349f3aa Check if requested user is enabled for impersonation in TE v1 
Closes #45651

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-01-22 12:47:55 +01:00
Alexander Schwartz
2cfef40ee3
Fix broken link for link in upgrading guide 
Closes #45643

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-22 11:50:06 +01:00
Vlasta Ramik
2f0689576b
Possible mismatch of charset/collation between columns on mysql/mariadb (#45632) 
* Possible mismatch of charset/collation between columns on mysql/mariadb

Closes #45597

Signed-off-by: vramik <vramik@redhat.com>
 2026-01-22 07:17:04 -03:00
Stian Thorgersen
fd6174ea5a
Unable to resolve current project as a dependency to test framework server config (#45670) 
Closes #45669

Signed-off-by: stianst <stianst@gmail.com>
 2026-01-22 10:52:30 +01:00
Muhammed Oğuz
051fcab5be
fix: correct permission type 
redirect in resource details

   Closes #45428

Signed-off-by: Muhammed Oguz <muhammed@keymate.io>
 2026-01-21 18:58:46 +01:00
Alexander Schwartz
fd9c513c9c
When creating or updating a Kubernetes IDP, check if issuer URL is unique 
Closes #45449

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-21 17:52:11 +01:00
Lukas Hanusovsky
59396057c1
Removing cross module dependency between tests/base and tests/clustering. (#45353) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2026-01-21 17:42:39 +01:00
Martin Bartoš
4011ef25b8
[test-framework] Dependency download error with embedded server (#45636) 
Closes #38991

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-21 17:19:40 +01:00
Awambeng
39ef0e7a6a
Fix realm import failure when OID4VCI credential-offer-create role exists (#45028) 
Closes #44637


Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2026-01-21 16:53:39 +01:00
Awambeng
9990df02b2
[OID4VCI] Add OID4VC tests to FIPS suite (#45384) 
Closes #44105


Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2026-01-21 16:50:33 +01:00
Giuseppe Graziano
b74be6ed41
JWT Authorization Grant for Google idp (#45543) 
Closes #45179

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-01-21 16:17:52 +01:00
rmartinc
b7a23e88d2 Test for authorization chaining across domains 
Closes #45468

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-01-21 15:52:59 +01:00
Erik Jan de Wit
878074ac6c use favicon for account and admin console and fix logo admin 
fixes: #44498
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2026-01-21 15:46:23 +01:00