upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-03 20:39:33 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
30079 commits 23 branches 291 tags 855 MiB
Commit graph

30079 commits

This branch
This branch
All branches
Author SHA1 Message Date
rmartinc
7e20b87136 Add abstract property for themes and do not display base for selection 
Closes #41924

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-01-21 15:42:52 +01:00
Hathoute
ea2083ed2c Support for clients in workflows 
Signed-off-by: Hathoute <whitesmith.thedj@gmail.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-21 11:20:30 -03:00
Ruchika Jha
dbd8d47036
Upgrade command rolling updates for patch releases / step 3: Infinispan/JGroups 
Closes #38884

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
 2026-01-21 15:16:18 +01:00
Alexander Schwartz
ad16c642ec
Reduce FIPS logging noise 
Closes #45608

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-20 19:47:57 -03:00
Alexander Schwartz
cc8947a060
Keycloak should not allow matrix parameters in URLs as we don't use them 
Closes #45533

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-20 19:45:02 -03:00
Rathan-Naik
11fa632d01
Fix missing validation error labels when editing a user (#45551) 
When editing a user and validation errors occur:
- Toast notification now shows actual error messages instead of empty string
- Inline errors now appear below custom User Profile attributes
- Errors are properly extracted and displayed for both single and multiple errors

The fix ensures that custom User Profile attributes (with 'attributes.' prefix)
are handled correctly even when unmanaged attributes are enabled.

Closes #44819

Signed-off-by: Rathan Naik <30756840+Rathan-Naik@users.noreply.github.com>
 2026-01-20 12:24:05 -05:00
Stian Thorgersen
e265012b4b
Fix embedded server for new test framework 
Signed-off-by: stianst <stianst@gmail.com>
 2026-01-20 15:26:16 +00:00
Martin Bartoš
1138952ba7
Provide HTTP access logs written to file with rotation (#45437) 
Closes #41353

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-20 15:16:33 +01:00
Giuseppe Graziano
3c3915556c OIDC identity provider issuer config 
Closes #45590

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-01-20 13:19:16 +01:00
Luca Tronchin
a351784c33
Remove empty labels from keycloak_user_events_total metric (#45583) 
Closes #45582

Signed-off-by: Luca Tronchin <ltronky@gmail.com>
 2026-01-20 13:18:27 +01:00
Stian Thorgersen
0223b6823b
Updates testframework to JUnit 6 and Test Containers 2.x. Removed transitive dependencies from keycloak-junit5
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
CLoses #44350, Closes #45383, Closes #44490

Signed-off-by: stianst <stianst@gmail.com>
 2026-01-20 11:42:28 +01:00
Alexander Schwartz
df42e9140d
Fix nesting of argon2 semaphore acquisition and release 
Closes #45564

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-20 11:16:30 +01:00
Alexander Schwartz
dd0214bc78
Do not use whitelist/blacklist in the UI 
Closes #45539

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-20 11:12:23 +01:00
Pedro Igor
a1e9e63f06
Drop IDX_IDP_FOR_LOGIN index before changing columns 
Closes #45396

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-20 09:41:41 +01:00
Alexander Schwartz
5724ae1534
Updating specifications list to show DPoP as supported 
Closes #45584

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-20 09:35:26 +01:00
Peter Zaoral
654a819dca
Enable HelpCommandDistTest on Windows runners (#45197) 
* Enable HelpCommandDistTest on Windows runners

Closes: #45044

Signed-off-by: Peter Zaoral <pepo48@gmail.com>

* Enable HelpCommandDistTest on Windows runners

Closes: #45044

Signed-off-by: Peter Zaoral <pepo48@gmail.com>

* Enable HelpCommandDistTest on Windows runners

Closes: #45044

Signed-off-by: Peter Zaoral <pepo48@gmail.com>

---------

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
 2026-01-19 22:05:08 -05:00
Martin Bartoš
137a35c110
Mask certain HTTP headers and cookies in the HTTP access log (#45400) 
* Mask certain HTTP headers and cookies in the HTTP access log

Closes #43811

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Improve tests, Improve docs

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix test

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-19 19:01:45 +01:00
vramik
13a5a92a92 Fix ORG_DOMAIN.ORG_ID charset and collation on mysql and mariadb 
Closes #45526

Signed-off-by: vramik <vramik@redhat.com>
 2026-01-19 11:35:31 -03:00
Martin Bartoš
581880dfa3 Add comment on why it is used 
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-19 14:18:40 +01:00
Martin Bartoš
27a2fe6862 ConcurrentModificationException in KeycloakProcessor#configureProfile 
Closes #45501

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-19 14:18:40 +01:00
forkimenjeckayang
fa28ddddb2
[OID4VCI] Disable OID4VCI functionality when Verified Credentials switch is off (#44995) 
closes #44622


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
 2026-01-19 14:09:42 +01:00
Pedro Igor
c8a41dea99 Reverting format changes, updating docs, and only exposing the method to fetch first-factor credentials 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-19 08:30:47 -03:00
Nikita Bohuslavskyi
348670ae32 Align organization broker redirect after OTP setup 
Closes #40510

Signed-off-by: Nikita Bohuslavskyi <nikita.bohuslavskyi@student.tuke.sk>
 2026-01-19 08:30:47 -03:00
Steve Hawkins
eff97618ef fix: moving nonserver defaults out of application.properties 
closes: #42332

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-19 12:11:12 +01:00
Pedro Ruivo
6ceaa2d391
Skip required runtime properties during build stage 
Fixes #45415

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-16 20:53:43 +01:00
Pedro Ruivo
9e75e586e1
Remove duplicated maven-javadoc-plugin 
Closes #45471

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-16 17:23:11 +00:00
jschae23
91ba06bca5
fix(admin-ui): fix setFileUpload implementation to correctly display filename
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
Closes #45488

Signed-off-by: jschae23 <56294075+jschae23@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-16 17:23:39 +01:00
Steven Hawkins
c3739efaa6
fix: making cert lookup spi public (#45010) 
closes: #33818

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-16 15:57:39 +01:00
rmartinc
07b9b9656b Allow client_id as an audience in the JWT Authorization Grant and Client Assertions 
Closes #45178

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-01-16 15:48:28 +01:00
Roni Saha
fccd46f7ba
Fix Federation Cache Policy details not shown when editing provider (#42222) (#45375) 
When the SelectControl component was refactored to use ui-shared controls,
the comparison logic for cache policy values was not updated correctly.

The refactored SelectControl returns string values ('EVICT_WEEKLY', 'EVICT_DAILY', etc.)
when using string options, but the code was still comparing against arrays (['EVICT_WEEKLY']).

This caused the conditional rendering of cache policy detail fields (evictionDay,
evictionHour, evictionMinute, maxLifespan) to always fail when editing an existing
federation provider.

Changes:
- Changed direct string comparisons instead of array comparisons
- Updated defaultValue from array to string format
- Removed array indexing from field names (e.g., 'config.evictionDay[0]' to 'config.evictionDay')
- Removed unused isEqual import from lodash-es

Signed-off-by: Roni Saha <roni.cse@gmail.com>
 2026-01-16 09:25:09 -05:00
Weblate (bot)
1547386f4f
Translations update from Hosted Weblate (#45199) 
* Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for German

Language: de

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: mwllgr <zadolux@inscomers.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: mwllgr <zadolux@inscomers.net>

* Updated translation for Japanese

Language: ja

Updated translation for Japanese

Language: ja

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Dodouce <marin.pau22@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Dodouce <marin.pau22@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

---------

Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: mwllgr <zadolux@inscomers.net>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Dodouce <marin.pau22@gmail.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: mwllgr <zadolux@inscomers.net>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Dodouce <marin.pau22@gmail.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
 2026-01-16 15:14:31 +01:00
Steve Hawkins
967180b024 fix: moving event enum expected values to quarkus logic 
closes: #44679

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-16 13:52:50 +01:00
Steve Hawkins
aa5022aaf6 fix: removing references to shaded testcontainer classes 
closes: #45188

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-16 13:52:50 +01:00
Martin Bartoš
27b1ab93f8
Ignore OpenAPI artifacts when disabled (#45499) 
Closes #45498

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-16 13:27:06 +01:00
stianst
8aaf3e4606 Allow re-using server when running tests with the new framework 
Closes #44101

Signed-off-by: stianst <stianst@gmail.com>
 2026-01-16 09:11:43 -03:00
Martin Kanis
4f91b5246e User REST Admin API - count and search returns different amount of users 
Closes #45219

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2026-01-16 07:29:42 -03:00
mposolda
fcc9ade022 Not able to find key for credential signature if client scope was saved from admin console
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Details 
closes #44699

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-16 08:51:51 +01:00
Tomohiko Ozawa
131131a003
include OrganizationInvitationResource to the admin REST API document 
Closes #45474

Signed-off-by: Tomohiko Ozawa <kota65535@gmail.com>
 2026-01-15 21:11:14 +00:00
Stefan Guilhen
c63a8aa087 Step provider factories cleanup 
- adds default init, postInit, close, getConfigProperties methods to WorkflowStepProviderFactory

Closes #45398

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-01-15 15:32:45 -03:00
Stefan Guilhen
5ed7894502 Add step implementation to remove user attributes 
Closes #44650

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-01-15 14:28:35 -03:00
Stefan Guilhen
744dfd0468 Allow ISO-8601 time formats for the workflows step-runner-task-interval config 
Closes #45172

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-01-15 14:27:20 -03:00
Sebastian Schuster
c5c83d6604 Fix test failures 
Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.com>
 2026-01-15 14:06:54 -03:00
Sebastian Schuster
9d0f679ece 45417 fixed unmanaged attributes to not allow writing when only admin can view policy is enabled 
Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.com>
 2026-01-15 14:06:54 -03:00
Ruchika Jha
e2e11a3b8e
Hide Remember Me session settings when Remember Me is disabled in realm settings edit page in UI 
Closes #44973

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Ruchika Jha <Ruchika.Jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-15 16:46:50 +00:00
Pedro Ruivo
e4bb53a743
Update maven-javadoc-plugin version to 3.2.0
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Details 
Closes #45471

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-15 15:11:33 +00:00
Pedro Igor
ab351170b4
Support aggregated policies during partial evaluation 
Closes #45324

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-15 15:20:52 +01:00
Pedro Igor
37ff64446b
Allow hide organization brokers when the user does not map to any organization during login 
Closes #45422

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-15 15:19:43 +01:00
Martin Bartoš
45e59d8181
Management interface endpoint lists available endpoints (#45438) 
Closes #45467

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-15 13:31:23 +01:00
Alexander Schwartz
391593cfa7
Implement asynchronous logging when called from nonblocking threads 
Closes #45015

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-15 09:20:34 -03:00
Thomas Diesler
8f0ec215b2
[OID4VCI] Issuer metadata contains unwanted 'id' for credential_configurations_supported (#45210) 
closes #45209

Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-01-15 12:56:13 +01:00