keycloak

mirror of https://github.com/keycloak/keycloak.git synced 2026-05-28 04:13:22 -04:00

Author	SHA1	Message	Date
Steven Hawkins	2b44c5676f	fix: adding logic to isolate realm migration processing (#39377 ) * fix: adding logic to isolate realm migration processing also adding an info log for each realm migrated closes: #33978 #38649 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * switching to an export strategy tolerant to read committed also preventing creating cached users during export Signed-off-by: Steve Hawkins <shawkins@redhat.com> * updating the docs to still recommend shutting the server down for export Signed-off-by: Steve Hawkins <shawkins@redhat.com> * accounting for null managed users Signed-off-by: Steve Hawkins <shawkins@redhat.com> * refinements based upon review comments Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Scaling back the docs Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> * Remove rogue release note Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>	2025-06-30 08:31:57 -04:00
Ricardo Martin	8624101701	Documentation changes for Passkeys (#40728 ) Closes #40705 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Signed-off-by: Ricardo Martin <rmartinc@redhat.com>	2025-06-27 14:59:46 +02:00
Alexander Schwartz	7e2a38ae4c	Move section in the upgrading guide Closes #39063 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-27 13:25:25 +02:00
Michal Hajas	d944823277	Make rolling-updates-v2 preview feature (#40732 ) Closes #38883 Signed-off-by: Michal Hajas <mhajas@redhat.com>	2025-06-26 19:28:35 +02:00
Martin Bartoš	d475c5aecc	Missing Quarkus flag for Syslog counting framing (#40621 ) * Missing Quarkus flag for Syslog counting framing Closes #39893 Signed-off-by: Martin Bartoš <mabartos@redhat.com> * Remove handling of mapFrom Signed-off-by: Martin Bartoš <mabartos@redhat.com> * Add notable change Signed-off-by: Martin Bartoš <mabartos@redhat.com> --------- Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-06-25 17:36:41 +02:00
Steven Hawkins	a50d15be05	fix: refining breaking behavior (#40697 ) closes: #39063 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2025-06-25 17:28:00 +02:00
rmartinc	86f0a7864f	Disable email verification when email manually changed by idp review Closes #40446 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-06-25 08:56:03 +02:00
Ricardo Martin	dd4c21700f	Deprecate the original Passkeys Conditional UI Authenticator (#40674 ) Closes #40033 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Ricardo Martin <rmartinc@redhat.com>	2025-06-24 20:32:39 +02:00
Pedro Ruivo	f4d5fa68c1	Update documentation about volatile sessions Closes #40639 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-20 16:45:22 +00:00
andymunro	e7b4f745ad	Clarify OpenShift instructions (#40488 ) Closes #40487 Signed-off-by: AndyMunro <amunro@redhat.com>	2025-06-20 17:07:48 +02:00
Alexander Schwartz	c4eafcf2ae	Rework AsciiDoc warnings Closes #40445 Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2025-06-18 14:57:39 +02:00
Alexander Schwartz	872a56f237	Reworking the release notes for the upcoming release Closes #40547 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>	2025-06-18 10:45:31 +02:00
Alexander Schwartz	61586ff328	Disabling persistent sessions affects also offline session cache Closes #40483 Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-17 08:02:28 +00:00
Henrik S.	c952cb66ad	Update authentication flows documentation to match new GUI Closes #40514 Signed-off-by: Henrik S. <henrik.strath@volvocars.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-16 08:24:43 +00:00
Ryan Emerson	78f575b53b	Default to num_owners=2 when the persistent-user-sessions feature is disabled Closes #39429 Closes #40472 Signed-off-by: Ryan Emerson <remerson@redhat.com>	2025-06-16 09:43:39 +02:00
Steven Hawkins	76bc9fadcb	fix: adding a -- separator for spi options (#40005 ) * fix: adding a -- separator for spi options closes: #39063 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * adding a warning for ambiguous spi options also adding a note about the change Signed-off-by: Steve Hawkins <shawkins@redhat.com> # Conflicts: # docs/documentation/upgrading/topics/changes/changes-26_3_0.adoc * updating docs to the new format Signed-off-by: Steve Hawkins <shawkins@redhat.com> # Conflicts: # docs/guides/high-availability/examples/generated/keycloak-ispn.yaml # docs/guides/high-availability/examples/generated/keycloak.yaml * internally using the new spi options also adding a deprecation notice Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Apply suggestions from code review Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * correcting options output adding + + inlining where needed Signed-off-by: Steve Hawkins <shawkins@redhat.com> * adding test showing the env mapping with __ Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2025-06-13 16:13:53 +02:00
Martin Bartoš	21bd46cb18	Add templates for release notes and migration guide Closes #40441 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-06-12 11:38:06 +02:00
Alexander Schwartz	0b3950529e	Re-sort the release notes and upgrading guide (#40424 ) Closes #40422 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2025-06-12 10:25:42 +02:00
Ricardo Martin	b89f8a0225	Documentation changes for the 2FA additions Closes #40001 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-06-12 09:30:27 +02:00
Alexander Schwartz	4af3d7cc9d	Redirect requests from outdated theme version to the current theme version Closes #39723 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-11 11:13:55 +02:00
vramik	aafb140529	Add a note to release notes about admin roles mapping Fixes #39956 Signed-off-by: vramik <vramik@redhat.com>	2025-06-09 09:34:45 -03:00
Ryan Emerson	0c62bd0878	Change discovery in Kubernetes to jdbc-ping Closes #39544 Signed-off-by: Ryan Emerson <remerson@redhat.com>	2025-06-05 16:48:30 +02:00
mposolda	b03b9f9e3a	Improve documentation of service-accounts and make it more clear. Delete the unused file service-accounts.adoc closes #39748 Signed-off-by: mposolda <mposolda@gmail.com>	2025-06-05 08:45:12 +02:00
rmartinc	abd7f88526	Make the checkbox "Sign out from other devices" unchecked by default Closes #39975 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-06-04 14:11:29 +02:00
Alexander Schwartz	2b2d7bbcbe	Updated documentation to handle the conf folder on upgrades (#40175 ) Closes #40046 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-06-03 16:14:11 +02:00
Pedro Igor	7cc055f8a6	Verify brokered user email based on the email_verified claim from the ID Token returned by the OP Closes #39885 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-05-29 10:45:18 -03:00
Pedro Igor	e6e6fa60fa	Adding OAuth2-based identity broker Closes #35266 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-05-27 12:07:01 -03:00
Michal Hajas	88f660b235	Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751 ) ...e for patch releases Closes #38882 Signed-off-by: Michal Hajas <mhajas@redhat.com>	2025-05-27 11:17:42 -03:00
foliengriller	54b131e34e	Update themes-react.adoc Fixes link formatting Signed-off-by: foliengriller <info@simpelwebservice.de>	2025-05-27 09:19:05 +02:00
Pedro Igor	b22b1f298c	Adding parameter to control whether the count of subgroups of subgroups should be returned Closes #39668 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-05-22 11:15:38 -03:00
rmartinc	3c511635ba	Skip AIA for webauthn register if a crendential of teh correct type already exists Closes #39191 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-05-20 18:09:12 +02:00
mposolda	fe2790a09d	Fix documentation link to quickstarts to point to 'main' branch instead of 'latest' branch closes #39798 Signed-off-by: mposolda <mposolda@gmail.com>	2025-05-19 10:32:06 +02:00
Kai J. Witt	c76bb0683c	Make max auth age configurable for all required actions by default Moved the current configuration implementation for the update password Closes #39408 Signed-off-by: Kai Josef Witt <KWitt@vhv.de> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Kai Josef Witt <KWitt@vhv.de> Co-authored-by: Marek Posolda <mposolda@gmail.com>	2025-05-15 08:44:38 +02:00
Douglas Palmer	64cb66f451	Inconsistency in User enabled status in Rest query results. Closes #39549 #28713 Signed-off-by: Douglas Palmer <dpalmer@redhat.com>	2025-05-14 20:10:14 +02:00
Pedro Igor	34ad280665	Build user representations when searching based on the user profile settings Closes #39595 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-05-14 10:42:25 +02:00
Pedro Igor	4171da9fbb	Updating upgrading guide with the changes to theme templates Closes #39562 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-05-14 09:38:41 +02:00
yorickdevries	d5b873d705	Change screenshot from permissions view to correct resources view Cropped it in accordance with the other images Closes #39697 Signed-off-by: Yorick <yorickdevries@live.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-05-14 07:00:37 +00:00
Awambeng	ea4ef74917	Fix doc(oid4vc): Correct realm-attributes example and update HTTP method in docs (#39409 ) Closes #39264 Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>	2025-05-13 10:09:14 +02:00
andymunro	0fc18c3a0b	Make links generic Closes #39469 Signed-off-by: AndyMunro <amunro@redhat.com>	2025-05-09 16:18:15 +02:00
andymunro	afe6d4d4a0	Fix callouts Closes #39590 Signed-off-by: AndyMunro <amunro@redhat.com>	2025-05-09 14:10:59 +00:00
Alexander Schwartz	a17f551eb2	Log out other sessions including offline sessions on password change Closes #38850 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-05-06 14:04:13 +02:00
Daniel Höxtermann	46ed361278	Fix footer ftl snippet in documentation Closes #39442 Signed-off-by: Daniel Höxtermann <daniel@hxtm.dev>	2025-05-05 06:46:15 +00:00
Alexander Schwartz	f79408788d	Document how to configure Istio to allow for JGroups mTLS Closes #39065 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>	2025-05-02 12:08:02 +00:00
Steven Hawkins	24910d9e1c	addresses slow import/export performance by limiting persistence context size (#37926 ) * fix: addresses slow import/export performance with more batching closes: #37991 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * removing flush/detach manipulation Signed-off-by: Steve Hawkins <shawkins@redhat.com> * refining the doc note about using multiple files for larger user counts Signed-off-by: Steve Hawkins <shawkins@redhat.com> * adding doc note about useExistingSession method removal and expanding javadocs Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2025-04-29 18:57:45 -04:00
Steven Hawkins	08b5183784	fix: relaxes the admin root redirect check (#39095 ) * fix: relaxes the admin root redirect check also deprecates the usage of local_admin closes: #39085 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * moving deprecation to 26.3 also changing the adminroot test to seem like it's coming from a proxy Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2025-04-29 11:09:51 -04:00
rmartinc	4730dbdd8d	Make recovery codes supported Closes #38994 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-04-29 10:25:46 +02:00
mposolda	e9283ee71d	Documentation for recovery codes (deprecation of password policy and required action config) closes #39245 Signed-off-by: mposolda <mposolda@gmail.com>	2025-04-29 09:29:38 +02:00
Pedro Ruivo	eafe08a73a	Create CacheEmbeddedConfigProvider Closes #38497 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-28 13:00:53 +02:00
Steven Hawkins	837c2e25a2	fix: adding docs about h2 migration (#39159 ) * fix: adding docs about h2 migration closes: #39046 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * Update docs/documentation/upgrading/topics/migrate_db.adoc Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * Apply suggestions from code review Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2025-04-24 17:37:03 +02:00
Emmanuel Lécharny	a48469896e	Added a link to the ApacheDS doc for server side password hashing Closes #39136 Signed-off-by: Emmanuel Lécharny <elecharny@gmail.com>	2025-04-24 09:25:03 +00:00
Alexander Schwartz	050d3ccba4	Fix broken link for XOAUTH2 configuration Closes #39096 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-23 08:47:40 +02:00
Emmanuel Lécharny	1dc97d5d4d	Update ldap.adoc with ApacheDS details Added some precision about ApacheDS password management. Closes #39136 Signed-off-by: Emmanuel Lécharny <elecharny@apache.org> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2025-04-23 07:55:59 +02:00
Marek Posolda	f8a4a8da86	Unexpected AIA Cause Server Errors closes #37526 Signed-off-by: mposolda <mposolda@gmail.com>	2025-04-17 14:15:07 +00:00
Marek Posolda	025b2ba442	Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952 ) closes #37269 closes #35446 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2025-04-17 13:20:05 +02:00
Alexander Schwartz	a312632468	Add new user event metrics to the release notes Closes #39027 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-17 10:58:34 +02:00
Alexander Schwartz	2be2958b8e	Update release notes docs for removed remote store Closes #39028 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-17 10:56:29 +02:00
Pedro Igor	1ba8fe16ac	Deprecate for removal Instagram Identity Broker (#38998 ) Closes #37967 Closes #36562 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-04-17 09:07:06 +02:00
andymunro	17e3bad7b2	Clarify upgrading language Closes #38956 Signed-off-by: AndyMunro <amunro@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2025-04-16 20:32:03 +00:00
Martin Bartoš	60fb7a5fa7	Support asynchronous logging (#38094 ) Closes #38578 Closes #28851 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-04-16 15:08:15 +00:00
Michal Hajas	4dc4de7c12	Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature Closes #34160 Signed-off-by: Michal Hajas <mhajas@redhat.com>	2025-04-16 12:01:55 +00:00
Martin Bartoš	e7c7dce5c7	[Docs] Broken link in ExternalLinksTest for importmap (#38969 ) Closes #38930 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-04-15 09:02:57 +00:00
Pedro Igor	288b6dae12	More information to docs Closes #38798 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-04-10 20:03:05 +02:00
Thomas Darimont	478e0b3264	Make sure that there is single audience allowed by default in JWT tokens sent to client authentication closes #38819 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com> Co-authored-by: mposolda <mposolda@gmail.com>	2025-04-10 18:08:10 +02:00
Pedro Igor	ae88d7921f	Improvements to partial evaluation Closes #38732 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-04-09 18:15:28 +02:00
Pedro Igor	87430fc181	Add impersonate-members scope to group resource type Closes #38566 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-04-07 14:56:27 +00:00
vramik	6488890585	[FGAP:V2] remove configure scope from Client resource type Closes #38567 Signed-off-by: vramik <vramik@redhat.com>	2025-04-07 07:05:02 -03:00
Marek Posolda	f984644d07	Clarify in documentation that legacy token exchange requires FGAP:v1 (#38694 ) closes #38693 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2025-04-07 08:27:56 +02:00
Alexander Schwartz	d69a530d5b	Check HTML head for redirects Closes #38655 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-04 18:40:41 +02:00
Stefan Guilhen	c4c3e2eee6	Allow redirection to idp when user email matches any of the org domains Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> Co-authored-by: Martin Panzer <martin.panzer@active-logistics.com> Closes #33804	2025-04-04 11:28:04 -03:00
Vlasta Ramik	18c8308bb4	[FGAP] Remove redundant sentense from fine grained admin permissions docs Closes #38677 Signed-off-by: vramik <vramik@redhat.com>	2025-04-04 09:41:17 +02:00
vramik	f076b99407	FGAP documentation Closes #37245 Signed-off-by: vramik <vramik@redhat.com>	2025-04-03 09:44:32 -03:00
Marek Posolda	6654e56a7c	Polish documentation for audience and client scopes (#38484 ) closes #19127 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2025-04-03 08:43:06 +02:00
rmartinc	a10c8119d4	Define a max expiration window for Signed JWT client authentication Closes #38576 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-04-02 18:32:54 +02:00
Alexander Schwartz	e7474646ee	Explicit target for cross-reference 2FA in server admin guide (#38573 ) Closes #38572 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-04-01 13:29:30 +02:00
mposolda	cd4e5bc784	Release notes for oid4vci docs closes #38485 Signed-off-by: mposolda <mposolda@gmail.com>	2025-03-29 19:25:24 +01:00
Steven Hawkins	06e0885f46	fix: adds back reporting of non-ip client addresses (#37797 ) closes: #36843 Signed-off-by: Steve Hawkins <shawkins@redhat.com> # Conflicts: # services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/AbstractTokenExchangeProvider.java # services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/StandardTokenExchangeProvider.java	2025-03-27 19:33:20 +00:00
Stefan Guilhen	89d659ee36	Add section about support for federated members in the organization documentation Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> Closes #38471	2025-03-27 08:03:35 -03:00
Ricardo Martin	a7e63837db	Recovery codes documentation (#38407 ) Closes #30702 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2025-03-27 09:59:14 +01:00
Awambeng	27a7a301e7	Add documentation for configuring Keycloak as a VC issuer closes #38256 Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>	2025-03-26 20:50:43 +01:00
Marek Posolda	db23d8e665	Clarify that XOAUTH2 configuration with Microsoft Office365 is community contributed Closes #38376 Signed-off-by: mposolda <mposolda@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2025-03-26 15:54:38 +01:00
mposolda	11cb332964	Release notes updates for the community contributions related to core-clients areas closes #38374 Signed-off-by: mposolda <mposolda@gmail.com>	2025-03-24 12:49:52 +01:00
Laurids Møller Jepsen	8f7c1871a7	Add client OIDC configuration for setting the header type in access tokens. If this setting is On, the access token header type will be "at+jwt" in compliance with RFC 9068, see https://datatracker.ietf.org/doc/html/rfc9068#section-2.1. If the setting is Off, the access token header type will be "JWT". The setting is Off per default. Closes #36696 Signed-off-by: Laurids Møller Jepsen <laurids.jepsen@cryptomathic.com>	2025-03-24 10:35:41 +01:00
Sebastian Rose	4fb1c41155	Sending Mails via SMTP and XOAUTH2 authentication mechanism Closes #17432 Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>	2025-03-21 10:12:18 +01:00
Stian Thorgersen	a18948f731	Reorder items in release notes for 26.2 (#38290 ) Signed-off-by: stianst <stianst@gmail.com>	2025-03-20 11:52:53 +01:00
Alexander Schwartz	c9b88c6bf6	Finalizing release notes and documentation for initial rolling update Closes #38168 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-03-19 21:34:09 +01:00
Alexander Schwartz	b5d8c46202	Fix links that have been moved Closes #38190 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-03-18 13:36:41 +01:00
Takashi Norimatsu	eb2153379a	DPoP: Refresh token created with DPoP can be refreshed without proof closes #36475 Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>	2025-03-17 12:53:19 +01:00
andymunro	1f6f1571fd	update screens for new realm selector Closes #37083 Signed-off-by: AndyMunro <amunro@redhat.com>	2025-03-15 10:54:00 +01:00
Marek Posolda	290905c9cf	Documentation for supported token-exchange (#38008 ) closes #37126 Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2025-03-14 09:55:44 +01:00
Steven Hawkins	d9c3511fa5	fix: adding a check if the proxy is trusted prior to using a cert header (#37465 ) closes: #35861 Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com>	2025-03-12 11:21:33 +01:00
Mihir Vadalia	11a20a2eb3	Documentation for Optional Email Events Closes #37998 Signed-off-by: Mihir Vadalia <mihir@defensepoint.com> Co-authored-by: Mihir Vadalia <mihir@defensepoint.com>	2025-03-11 21:21:45 +01:00
Uche Nwachukwu	df9efdf590	Update themes-react.adoc (#37977 ) Spelling adjustment. Signed-off-by: Uche Nwachukwu <nwachukwuuche@gmail.com>	2025-03-10 22:33:04 +00:00
Stefan Guilhen	86b2a6a95c	Fix docs to also mention roles Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> Closes #28569 Signed-off-by: Jakob Overrein <jakob.overrein@basefarm-orange.com>	2025-03-10 16:13:36 -03:00
Stefan Guilhen	d44ebfd4d1	Document the addition of the Relative User Creation DN Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-03-10 16:13:36 -03:00
Alexander Schwartz	151e019935	Make NetworkPolicy supported and enabled by default Closes #36036 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>	2025-03-10 11:12:38 +01:00
Alexander Schwartz	b1785ce179	Quote a link that shouldn't be rendered as a link This should not be clickable. Closes #37765 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-03-06 16:50:04 -03:00
Alexander Schwartz	bc7ec1208e	Enable the TLS based JGroups encryption by default and update the docs Closes #37696 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-03-03 10:50:51 -03:00
Giuseppe Graziano	690b5ecb25	Grant Type condition for client policies (#37665 ) Closes #37124 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-02-27 11:51:06 +01:00
Jon Koops	873e4ffb1f	Replace i18next backend with `i18next-fetch-backend` (#37633 ) Signed-off-by: Jon Koops <jonkoops@gmail.com>	2025-02-26 08:36:12 -05:00
Martin Bartoš	6f0ed46404	Upgrade to Quarkus 3.19.0.CR1 (#37492 ) Closes #37436 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-02-24 19:52:01 +01:00
Akbar Husain	9d3cfe0672	Remove `X-XSS-Protection` header (#36881 ) Closes #21728 Signed-off-by: akbarhusainpatel <apatel@intermiles.com>	2025-02-19 08:42:26 +01:00
Michal Hajas	f54bb16a61	Add Grafana dashboards to release notes Closes #37402 Signed-off-by: Michal Hajas <mhajas@redhat.com>	2025-02-18 14:04:23 +01:00
Jon Koops	3ccc88628f	Fix broken external link in Gitlab IdP docs (#37435 ) Closes #37434 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2025-02-18 11:03:53 +00:00
Václav Muzikář	764ca50fc4	Upgrade to Quarkus 3.18.2 (#37300 ) * Upgrade to Quarkus 3.18.2 Closes #37056 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> * Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Signed-off-by: Václav Muzikář <vaclav@muzikari.cz> --------- Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> Signed-off-by: Václav Muzikář <vaclav@muzikari.cz> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2025-02-17 16:30:05 +01:00
rmartinc	6850f41060	Force login in reset-credentials to federated users Closes #37207 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-02-12 13:47:39 -03:00
Alexander Schwartz	822eb4471d	Ensure a sufficient virtual threads pool (#37197 ) Closes #37162 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-02-10 16:28:24 +01:00
Pedro Igor	bf3dcda87b	Updating messages Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-02-07 10:42:45 -03:00
Alexander Schwartz	690b0e4bef	VERIFY_EMAIL as supported Application Initiated Action Closes #25154 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2025-02-06 16:49:28 +01:00
Martin Bartoš	98f74026c6	Certificate reloading does not work for the management interface (#37052 ) Fixes #37039 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Steven Hawkins <shawkins@redhat.com>	2025-02-05 14:39:21 +01:00
Pedro Igor	602df06191	Allows querying credential from user storage providers Closes #35020 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-02-05 07:56:05 -03:00
Martin Bartoš	20203746fb	Support ECS for logs Closes #36854 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-02-04 17:59:30 +01:00
papastepano	0c46ad299c	Outdated documentation reCAPTCHA Closes #36887 Signed-off-by: Stepan Papazyan <papastepano@gmail.com>	2025-01-29 21:03:45 +00:00
Ricardo Martin	8671f86046	Provide an option to force login after reset credentials (#36856 ) Closes #36844 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: Ricardo Martin <rmartinc@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Co-authored-by: Marek Posolda <mposolda@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2025-01-28 18:35:02 +01:00
Giuseppe Graziano	7896af5827	Remove Node.js adapter documentation (#36573 ) closes #36440 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-01-28 12:23:17 +01:00
andymunro	1912602a5a	Add Dependency section for creating an SPI Closes #36798 Signed-off-by: AndyMunro <amunro@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-01-27 18:54:03 +01:00
Giuseppe Graziano	bd807ceac3	Select auth flow via acr using client policies (#36441 ) Closes #24297 Co-authored-by: Ben Cresitello-Dittmar <bcresitellodittmar@mitre.org> Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-01-23 19:46:07 +01:00
vramik	b5c95e9f1c	Update `index-creation-threshold` in migrate_db.adoc Closes #36669 Signed-off-by: vramik <vramik@redhat.com>	2025-01-23 15:45:13 +01:00
rmartinc	6cf92d9dc7	Add crl cache to certificate validation Closes #26473 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-01-22 14:58:35 +01:00
rmartinc	f89be1813d	Check next update time for CRL in certificate validation Closes #35983 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-01-22 14:58:35 +01:00
rmartinc	17d2dd58ca	Add some common headers for the links check in docs Closes #36675 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-01-22 12:21:29 +01:00
Stian Thorgersen	fc2b9018f1	Extend REST API for login and admin events to support sync scenarios (#36601 ) Closes #36600 Signed-off-by: stianst <stianst@gmail.com>	2025-01-20 14:32:55 +01:00
Pedro Igor	aca84824c0	Allow enforce that users are members of organizations when authenticating Closes #34275 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-01-17 19:48:55 +01:00
Martin Bartoš	af3f6281b8	ExternalLinksTest is broken after Keycloak 26.1.0 release Fixes #36486 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-01-15 13:12:55 +01:00
Martin Bartoš	ed1b3e77b5	Wrong link for tracing in 26.1.0 release notes Fixes #36483 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-01-15 12:43:35 +01:00
Stian Thorgersen	c1c147cb17	Restrict access to environment variables when at the server runtime (#36472 ) Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-01-15 09:36:19 +01:00
Alexander Schwartz	05e612bfb6	Moving the docs for password metrics to a new guide Closes #36442 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2025-01-14 16:17:04 +00:00
Stian Thorgersen	bc2665fc2a	Re-order items in release notes for 26.1 (#36346 ) * Re-order items in release notes for 26.1 Signed-off-by: stianst <stianst@gmail.com> * Review (#161) Signed-off-by: Alexander Schwartz <aschwart@redhat.com> --------- Signed-off-by: stianst <stianst@gmail.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2025-01-14 09:21:04 +00:00
Selvi	db5a8466ad	Remove duplicate "the" in documentation (#36329 ) Signed-off-by: Selvi <SelviA@users.noreply.github.com>	2025-01-09 16:12:30 +01:00
Stian Thorgersen	f14dde7358	Add 26.1.0 release to release notes (#36328 ) Signed-off-by: stianst <stianst@gmail.com>	2025-01-09 14:51:54 +01:00
Michal Hajas	3839f8e3b5	Add metric for password validations (#36049 ) Closes #36048 Signed-off-by: Michal Hajas <mhajas@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2025-01-07 10:05:47 +01:00
Martin Bartoš	3e8f8277d4	Remove ignored links from the documentation tests after KC 26 release Closes #32071 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2025-01-06 22:37:01 +01:00
Michael Warnecke	3f7c26bc95	Remove unnecessary word from docs Fixes #36055 Signed-off-by: Michael Warnecke <13361@nordakademie.de>	2025-01-02 20:49:47 +01:00
Marek Posolda	4ab34f4816	Updating release notes with core-clients contributions and features (#36066 ) closes #35953 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-12-20 10:15:55 +01:00
Marek Posolda	a3fd076960	Adding ConditionalClientScopeAuthenticator (#36020 ) closes #36081 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-12-20 09:53:51 +01:00
Jan Verhaeghe	56246096e0	Align on one realm-name placeholder Closes #36047 Signed-off-by: Jan Verhaeghe <jan@hwfaq.be>	2024-12-19 13:48:18 +00:00
Pedro Ruivo	3767642f93	[Operator] Network Policy Rules Closes #35598 Signed-off-by: Pedro Ruivo <pruivo@redhat.com>	2024-12-19 10:06:25 +01:00
Thomas Darimont	3cdbbc5b15	Add support for Initiating User Registration via prompt=create (#10701 ) (#35903 ) Fixes #10701 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2024-12-16 19:54:52 +01:00
Steven Hawkins	cb1d28d043	fix: deprecating the default db value in production mode (#35674 ) closes: #23805 Fix typo in docs, some improvements adding a negative assertion Update docs/documentation/upgrading/topics/changes/changes-26_1_0.adoc Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>	2024-12-13 11:59:55 +01:00
Marek Posolda	0265cb6254	Update upgrading notes with the changes related to core clients (#35860 ) closes #35859 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-12-13 10:12:37 +01:00
Marek Posolda	47753b9624	Release note about node.js adapter and javascript adapter released in… (#35857 ) closes #35856 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Jon Koops <jonkoops@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> --------- Signed-off-by: mposolda <mposolda@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Jon Koops <jonkoops@gmail.com>	2024-12-13 09:38:55 +01:00
Martin Bartoš	41356dff24	Add Keycloak CR support for Tracing options (#35703 ) Closes #32092 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-12-12 12:59:27 +01:00
Ricardo Martin	bbca6116b0	Implement a conditional authenticator to check if a sub-flow was executed or not previously in the process (#35668 ) Closes #35231 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-12-12 11:16:30 +01:00
Martin Bartoš	8f2c825835	Enable opentelemetry feature by default (#35756 ) Closes #35753 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-12-11 16:53:14 +00:00
Václav Muzikář	9993e17346	Ability to specify log category levels through separate options (#35138 ) Closes #34957 Co-authored-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-12-11 17:27:44 +01:00
rmartinc	769bd6c9d0	Improve the note about group synchronization in sssd Closes #35643 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-12-11 07:40:04 -03:00
Niko Köbler	2639f3ee43	set default ldap connection pooling to plain and ssl (#35763 ) * set default ldap connection pooling to plain and ssl closes #35758	2024-12-10 12:05:14 -03:00
Alexander Schwartz	7c4a5aed77	Restructuring the migration guide (#35724 ) Closes #35487 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-12-10 12:07:32 +01:00
Stian Thorgersen	5bc4ab1429	Delete OpenShift 3.x identity provider (#34331 ) Closes #34330 Signed-off-by: stianst <stianst@gmail.com>	2024-12-06 11:24:47 +01:00
Marek Posolda	d0cab170a3	Update release notes for Keycloak 26.1.0 with new community additions (#35590 ) closes #35588 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-12-04 18:51:15 +01:00
Alexander Schwartz	13e3439246	Upgrading guide 26.0.6 is missing in the upgrading guide (#35545 ) Closes #35544 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-12-03 11:58:32 +01:00
Alexander Schwartz	b98cd12b58	Changing mis-formatted definition list of hashing algorithms to a table Closes #35416 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-12-02 15:05:05 -03:00
Pedro Igor	e9e19c2683	Allow asking for additional scopes when querying the account console root URL Closes #35243 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-12-02 12:54:00 +00:00
Stefan Guilhen	9861acc2aa	UserSessionProvider.removeUserSessions now removes all user sessions (both regular and offline) Closes #31359 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-11-29 12:35:15 -03:00
Giuseppe Graziano	a659c8d1cb	Sign AUTH_SESSION_ID cookie (#35297 ) closes #34027 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-11-28 17:28:52 +01:00
Sebastian Rose	015f06b5b8	Adjust documentation according to new home in keycloak/docs/documentation - refer mvnw instead of mvn - contributing.adoc reflects GitHub-Issues and new git-structure Closes #35373 Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>	2024-11-28 14:28:11 +01:00
Pedro Igor	45f9bcd673	Resolve scopes from bearer tokens when processing requests to the Account API Closes #35357 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-11-27 14:17:53 -03:00
Martin Kanis	20770d8aaa	Fix upgrading guide about deprecation of getAll() methods in the organization APIs Closes #34975 Signed-off-by: Martin Kanis <mkanis@redhat.com>	2024-11-25 10:10:02 +01:00
rmartinc	b0b247f1f1	Passivate imported keys if the associate certificate is expired Closes #34973 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-11-25 09:40:59 +01:00
Cornelius Roemer	29abfd3e89	Fix typos in .md and .adoc files using codespell interactive mode Closes #35256 This PR fixes a bunch of typos in docs files. I ran codespell on `.adoc` and `.md` files in the repo in interactive mode carefully checking each identified typo and proposed fix for false positives. The most widely read file with typos identified is likely the changelog/migration guide. Signed-off-by: Cornelius Roemer <cornelius.roemer@gmail.com>	2024-11-25 08:21:26 +01:00
Cornelius Roemer	e11db03d76	fix(doc): v24 changelog grammar typo "longer" -> "no longer" () Closes #35163 The missing "no" makes this really confusing to read Signed-off-by: Cornelius Roemer <cornelius.roemer@gmail.com>	2024-11-22 11:56:48 +01:00
Cornelius Roemer	610c08a0f3	Fix typo `www.recatcha.net` -> `www.recaptcha.net` in docs (#35210 ) closes #35210 Signed-off-by: Cornelius Roemer <cornelius.roemer@gmail.com>	2024-11-22 10:39:52 +01:00
AndyMunro	e2d221c4bd	Address QE comments on Server Admin Guide Closes #34916 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-11-22 10:20:18 +01:00
Václav Muzikář	d60cb9aaef	fix: prevent inclusion of characters that could lead to FileVault path traversal (#35223 ) Closes: #35215 Signed-off-by: Peter Zaoral <pzaoral@redhat.com> Co-authored-by: Peter Zaoral <pepo48@gmail.com>	2024-11-22 10:18:00 +01:00
Václav Muzikář	cf622e8d51	Update docs with security warning around client certificate lookup (#35222 ) Closes #35217 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-11-22 10:12:21 +01:00
Martin Kanis	05116f7951	getAll() organization and organization members only returns the first 10 items Closes #34975 Signed-off-by: Martin Kanis <mkanis@redhat.com>	2024-11-21 17:29:37 -03:00
Marek Posolda	a56378e989	Remove upgrading client libraries from the server documentation (#35101 ) closes #34949 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-11-20 16:14:42 +01:00
Ricardo Martin	ca1c10f7ba	Use short UUID for ldap components (#34815 ) Closes #32143 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-11-15 15:15:04 +01:00
michielpeeters	cec081961b	Update upgrade guide docs 25.0.0 cache options Closes #34987 Signed-off-by: michielpeeters <michielpeeters@users.noreply.github.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-11-15 14:27:57 +01:00
AndyMunro	da9774b281	Update Leveraging Jakarta EE Closes #34873 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-11-13 10:14:06 +01:00
AndyMunro	85765f94f2	Apply QE authorization services guide comments Closes #34882 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-11-13 10:06:06 +01:00
Marek Posolda	92d9ac6621	Update KEYCLOAK_SESSION cookie to not have sessionId in plaintext (#34551 ) closes #34026 Signed-off-by: mposolda <mposolda@gmail.com>	2024-11-11 18:47:18 +01:00
Pedro Ruivo	d7e5319f70	Document network ports for Keycloak clustering Also switch the default to jdbc-ping as this should be a drop-in replacement looking at the networking behavior of udp. Closes #34658 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-11-11 13:28:15 +01:00
Pedro Igor	0a05ba49d1	Adding a details map to admin events to store additional contextual data when the event is fired Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-11-07 17:19:43 -03:00
Pedro Ruivo	33cae33ae4	Remove JGroups thread pool docs from HA Guide Clustering is disabled with multi-site deployment and there is no JGroups thread pool to configure. Closes #34715 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-11-07 09:00:48 +00:00
Ricardo Martin	226daa41c7	Add service account mappers via client scope instead of dedicated scope (#34664 ) Closes #10417 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Ricardo Martin <rmartinc@redhat.com>	2024-11-07 08:45:11 +01:00
Ricardo Martin	ce454bda47	Remove online session when offline access is requested as the first request (#34346 ) Closes #34001 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> --------- Signed-off-by: rmartinc <rmartinc@redhat.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-11-06 08:33:12 +01:00
Gilvan Filho	910caf5ff8	Update brute force docs Fixes #27378 Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-11-04 09:41:26 +00:00
Ryan Emerson	a79b67cac8	Deprecate other transport stacks (ec2, azure, google) Closes #34253 Signed-off-by: Ryan Emerson <remerson@redhat.com>	2024-10-31 11:47:13 +01:00
Erik Jan de Wit	19ef0a608b	Add switch to toggle dark mode (#33822 ) Closes #33821 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> Signed-off-by: Jon Koops <jonkoops@gmail.com> Co-authored-by: Jon Koops <jonkoops@gmail.com>	2024-10-31 10:19:03 +00:00
Pedro Igor	4ad462fbd3	Do not rely on the pwdLastSet attribute when updating AD entries Closes #34467 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-10-30 17:43:07 +01:00
AndyMunro	4984900bae	Make organizations chapter available in downstream Closes #34382 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-10-28 10:28:24 +01:00
Andy	f994cc54d5	Remove robots.txt entirely * remove robots.txt entirely, as blocking page- crawling prevents the `X-Robots-Tag` headers (and similar meta tags) from working as intended. Closes #17433 Signed-off-by: Andy <andy@slice.is> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-25 12:09:50 +00:00
Dave Meyer	883b0a3378	doc: Replaced dead link (#34239 ) Replaced dead link to quickstart template with a (similar) template. Signed-off-by: Dave Meyer <7davidmeyer@gmail.com>	2024-10-24 15:28:42 +02:00
Ryan Emerson	902abfdae4	JDBC_PING as default discovery protocol Closes #29399 - Add ProviderFactory#dependsOn to allow dependencies between ProviderFactories to be explicitly defined - Disable Infinispan default shutdownhook disabled to ensure lifecycle is managed exclusively by Keycloak - Remove Infinispan shutdown hook in KeycloakRecorder and manage EmbeddedCacheManager lifecycle only in DefaultInfinispanConnectionProviderFactory#close Signed-off-by: Ryan Emerson <remerson@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-22 20:19:19 +00:00
Gilvan Filho	e6cd1a05c1	Update docs/documentation/server_admin/topics/threat/brute-force.adoc Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>	2024-10-22 10:33:22 -03:00
Gilvan Filho	c4005d29f0	add linear strategy to brute force closes #25917 Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>	2024-10-22 10:33:22 -03:00
Pedro Ruivo	fffa9aa72e	Enable virtual threads in Infinispan and JGroups by default Closes #33939 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-21 16:02:28 +00:00
Simon Levermann	dcf1d83199	Enable enforcement of a minimum ACR at the client level (#16884 ) (#33205 ) closes #16884 Signed-off-by: Simon Levermann <github@simon.slevermann.de>	2024-10-21 13:54:02 +02:00
mposolda	dbcb3151a9	Align admin console for client for backchannel and frontchannel logout closes #10138 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Erik Jan de Wit <edewit@redhat.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-10-21 11:32:03 +02:00
Jon Koops	7657e71be1	Automatically retrieve configuration for authorization Closes #14562 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-10-18 14:03:36 +02:00
Jake	946798aa01	Small grammatical error in documentation Closes #34009 Signed-off-by: Jake <156826184+jlanning-gl@users.noreply.github.com>	2024-10-16 18:49:49 +02:00
Marek Posolda	94b5f05c64	Re-add links to policy-enforcer to the authorization services documen… (#33905 ) closes #32644 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-10-15 08:34:56 +02:00
Stefan Guilhen	a832381a37	Add section to clarify the impact of having imported LDAP users when performing searches Closes #16451 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-10-11 11:01:14 -03:00
kennhhhhh	dbfd059b21	fix: available SPIs should be found in Provider info (#33805 ) Signed-off-by: kennhhhhh <164991693+kennhhhhh@users.noreply.github.com>	2024-10-11 06:47:24 +00:00
Pedro Ruivo	464fc90519	Fail to start if work cache is not replicated Keycloak will now fail to start if the work cache is replicated. Listeners require the data to be local. Closes #33702 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-09 19:40:24 +00:00
Pedro Ruivo	0e3554934e	Read cache-ispn.xml from conf/ by default Fixed #31492 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-09 16:40:17 +00:00
Jon Koops	05e8b932c3	Add dark mode support to welcome theme and unify approach (#32495 ) Closes #26178 Signed-off-by: Jon Koops <jonkoops@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>	2024-10-04 08:27:37 -04:00
Alexander Schwartz	d8c8c6a0be	Fixing broken links after KC26 docs changes (#33577 ) Closes #33576 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-04 13:59:47 +02:00
Stian Thorgersen	64e096d89c	Update 26_0_0.adoc Signed-off-by: Stian Thorgersen <stianst@gmail.com>	2024-10-04 10:54:19 +02:00
Stian Thorgersen	81f1974f7a	Re-order items in release notes for 26 (#33551 ) Signed-off-by: stianst <stianst@gmail.com>	2024-10-04 06:47:08 +02:00
Jon Koops	b475f936d5	Use `crypto.randomUUID()` to generate UUIDs for Keycloak JS (#33518 ) Closes #33515 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-10-03 12:07:57 -03:00
Stian Thorgersen	2be2b2ffe5	Upgrade guide updates for renaming account, admin, and login features (#33521 ) * Upgrade guide updates for renaming account, admin, and login features Signed-off-by: stianst <stianst@gmail.com> * Update docs/documentation/upgrading/topics/changes/changes-26_0_0.adoc Signed-off-by: Stian Thorgersen <stian@redhat.com> --------- Signed-off-by: stianst <stianst@gmail.com> Signed-off-by: Stian Thorgersen <stian@redhat.com>	2024-10-03 15:05:48 +02:00
vramik	b7eaa9b0cb	Wildcard search not working for custom user attributes Closes #32451 Signed-off-by: vramik <vramik@redhat.com>	2024-10-03 08:48:36 -03:00
Maksim Zvankovich	35eba8be8c	Add option to include the organization id in the organization claims Closes #32746 Signed-off-by: Maksim Zvankovich <m.zvankovich@nexovagroup.eu> Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>	2024-10-03 08:11:36 -03:00
Jon Koops	aacdf80664	Add shim for Web Crypto API to admin and account console (#33480 ) Closes #33330 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-10-03 10:51:23 +00:00
mposolda	41c72d46d2	Document users hashed passwords with argon2 does not work in FIPS environment closes #33296 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-10-03 08:47:45 +02:00
Pedro Aguiar	f60be4bf8e	update: fix typo "a email" (#33482 ) - "a email" becomes "an email". Signed-off-by: Pedro Aguiar <contact@codespearhead.com>	2024-10-02 19:34:33 +02:00
Alexander Schwartz	cb12f03003	Rework AWS Lambda doc to show it is required (#33462 ) Closes #33461 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-10-02 12:42:11 +02:00
vramik	c1653448f3	[Organizations] Allow orgs to define the redirect URL after user registers or accepts invitation link Closes #33201 Signed-off-by: vramik <vramik@redhat.com>	2024-10-02 07:37:48 -03:00
Jon Koops	21704a70c1	Update documentation and release notes for Keycloak JS (#33409 ) Closes #32843 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-10-01 10:29:23 +02:00
vramik	412f1f85a9	Update Organization documentation Closes #33410 Signed-off-by: vramik <vramik@redhat.com>	2024-10-01 09:29:49 +02:00
Peter Zaoral	d5d6390b1c	Make Keycloak fail with an error when the persisted build options differs from those provided (#33241 ) * PropertyException is now thrown instead of a warning * Operator guides clarification around health and metrics options Closes: #32717 Signed-off-by: Peter Zaoral <pzaoral@redhat.com>	2024-09-30 19:28:23 +02:00
Stan Silvert	b4a200d333	Fixes release notes section on new login theme, keycloak.v2 (#33359 ) * Fixes #33351 Signed-off-by: Stan Silvert <ssilvert@redhat.com> * Fixes #33351 Signed-off-by: Stan Silvert <ssilvert@redhat.com> * Ignore saml.xml.org because of expired cert. Signed-off-by: Stan Silvert <ssilvert@redhat.com> --------- Signed-off-by: Stan Silvert <ssilvert@redhat.com>	2024-09-30 15:38:29 +02:00
Steven Hawkins	5d99d91818	fix: allows for the detection of a master realm with --import-realms (#32914 ) also moving initial bootstrapping after import closes: #32689 Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2024-09-30 14:40:16 +02:00
Steven Hawkins	53102521d2	fix: correcting the recovery upgrade note (#33356 ) closes: #33307 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-09-30 08:22:29 -04:00
Steven Hawkins	cf2ecf87f6	fix: add the proxy-protocol option (#33276 ) * fix: add the proxy-protocol-enabled option closes: #10492 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/guides/server/reverseproxy.adoc Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2024-09-27 23:44:59 +02:00
Václav Muzikář	fc76bad1fd	Undeprecate `https-trust-store-*` options and enhance mTLS docs Closes #33172 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-09-27 18:07:57 +02:00
Stefan Guilhen	b717810061	Update organizations documentation in the server admin guide Closes #33199 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-09-27 16:27:54 +02:00
Stefan Guilhen	e2810b788e	Fix duplicated screenshot in Authorization Services Guide Closes #23028 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-09-27 09:05:06 +02:00
Stefan Guilhen	d87f67b4e6	Fix duplicated screenshots in the Fine grain admin permissions section of the Server Admin Guide Closes #31083 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-09-27 09:04:01 +02:00
Marek Posolda	061e74267f	Release notes update with the core-clients contributions (#33279 ) closes #32990 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-09-26 06:53:33 +02:00
mposolda	8f038f19dd	Upgrade BCFIPS to 2.0 closes #30415 Signed-off-by: mposolda <mposolda@gmail.com>	2024-09-26 06:52:21 +02:00
Jon Koops	021a2af2fd	Compute SHA-256 digest for PKCE using the Web Crypto API (#33251 ) Closes #33250 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-09-25 16:19:16 +02:00
Ryan Emerson	adb8d989f5	Allow Embedded Cache sizes to be configured via the CLI Closes #31514 Signed-off-by: Ryan Emerson <remerson@redhat.com>	2024-09-24 14:35:24 +02:00
mposolda	a79d95d1bc	Documentation note about Java 8 support for client libraries closes #33186 Signed-off-by: mposolda <mposolda@gmail.com>	2024-09-23 11:54:39 +02:00
Martin Bartoš	84564f080a	Redirect to relative-path from the root path (#32868 ) Closes #32863 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-09-18 16:37:28 +02:00
mposolda	f1ec0a9bb6	Release notes and upgrading guide for the client libraries closes #30815 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2024-09-18 14:52:11 +02:00
Vlasta Ramik	4ce40be1af	Make the ORGANIZATION a default feature (#32404 ) Closes #32395 Signed-off-by: vramik <vramik@redhat.com>	2024-09-18 12:19:28 +02:00
Jon Koops	8bb3598129	Remove deprecated `setOrCreateChild()` method from Admin Client (#33022 ) Closes #33021 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-09-18 09:33:54 +02:00
Jon Koops	cf90247441	Ignore documentation links with broken certificate (#33026 ) Closes #33023 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-09-17 13:17:32 +02:00
Václav Muzikář	83c00731c3	Upgrade to Quarkus 3.14.2 (#32519 ) Closes #32517 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-09-13 20:18:48 +02:00
Martin Bartoš	45ef84a397	Possibility to separately specify log levels for log handlers - basic (#32779 ) * Possibility to separately specify log levels for log handlers Closes #32619 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> * Edit properties description Signed-off-by: Martin Bartoš <mabartos@redhat.com> --------- Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>	2024-09-13 12:05:03 +02:00
Steven Hawkins	f0bf290c28	fix: add a reload period property (#32715 ) closes: #23771 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-09-13 09:47:21 +02:00
Jon Koops	188893222f	Remove references of statically served Keycloak JS from documentation Closes #32821 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-09-12 09:38:00 +02:00
Pedro Ruivo	24fce87a8e	Deprecate old remote store (feedback) Closes #32577 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-09-11 14:08:53 +00:00
Alexander Schwartz	b88ecc0237	Removing the extra two-minute Window for persistent user sessions (#32660 ) Closes #28418 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2024-09-09 09:28:48 +02:00
Giuseppe Graziano	a14548a7a2	Lightweight access tokens for Admin REST API (#32347 ) * Lightweight access tokens for Admin REST API Closes #31513 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-09-04 18:04:23 +02:00
Pedro Ruivo	3274591fe1	Deprecate old remote store Closes #32577 Signed-off-by: Pedro Ruivo <pruivo@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-09-04 10:25:51 +00:00
rmartinc	cce9ae94c7	Move documentation to keycloak-client Closes #31870 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-09-04 10:55:46 +02:00
Theresa Henze	a1c23fef8c	introduce event types to update/remove credentials Closes #10114 Signed-off-by: Theresa Henze <theresa.henze@bare.id>	2024-09-03 18:27:27 +02:00
Thomas Darimont	88a5c96fff	Add `kc_action` to redirect URI after a required action is cancelled (#31925 ) Closes #31894 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2024-09-03 14:26:23 +00:00
Jon Koops	2d17024b14	Remove `redirect_uri` support from OIDC logout endpoint Closes #10983 Signed-off-by: Jon Koops <jonkoops@gmail.com> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2024-08-30 12:52:49 +00:00
Michal Hajas	af53af1506	Document persistent sessions are enabled by default Closes #32387 Signed-off-by: Michal Hajas <mhajas@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-08-30 09:20:58 +00:00
Steve Hawkins	c9779cfa24	fix: adding a first-class option for trusted proxies closes: #32135 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-08-29 14:00:27 +02:00
Václav Muzikář	7d3dcae96e	Additional datasources now require XA (#32403 ) * Additional datasources now require XA Closes #32402 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> * Apply suggestions from code review Co-authored-by: Steven Hawkins <shawkins@redhat.com> Signed-off-by: Václav Muzikář <vaclav@muzikari.cz> * Relax validation Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> * Added a note on recovery Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> * Fix `CustomJpaEntityProviderDistTest` Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> --------- Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> Signed-off-by: Václav Muzikář <vaclav@muzikari.cz> Co-authored-by: Steven Hawkins <shawkins@redhat.com>	2024-08-29 11:16:38 +02:00
Václav Muzikář	9bbfec5cdd	Remove GELF (#32230 ) Closes #27365 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-08-28 21:25:05 +02:00
Steven Hawkins	29eb0171de	task: remove hostname v1 (#32352 ) closes: #27731 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-08-28 17:48:06 +02:00
Yuvi Panda	5210b7e546	Use Google as example, not Google+ Google+ no longer exists Signed-off-by: Yuvi Panda <yuvipanda@gmail.com>	2024-08-26 10:18:52 +02:00
Jon Koops	5ac8ffa5b5	Move unrelated files out of `common` resources (#32285 ) Closes #24861 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-08-22 09:57:15 +02:00
Steven Hawkins	087647dab3	fix: adding docs around client redirect uris and hostname-strict (#32101 ) * fix: adding docs around admin client redirect uris and hostname-strict closes: #31640 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/documentation/upgrading/topics/changes/changes-25_0_0.adoc Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * Update docs/documentation/upgrading/topics/changes/changes-25_0_0.adoc Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>	2024-08-21 14:19:30 +00:00
yelhouti	e8840df0e0	Fix: admin GUI not working with 1000s of realms Search by RealmName is done before loading all realms when filtering Closes #31956 Signed-off-by: Youssef El Houti <youssef.elhouti@gmail.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-08-21 14:58:36 +02:00
Pedro Igor	c1f6d5ca64	Support for selecting an organization when requesting the organization scope Closes #31438 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-08-21 13:04:58 +02:00
Pedro Ruivo	4675a4eda9	Deprecate UserSessionCrossDCManager Fixes #31878 Signed-off-by: Pedro Ruivo <pruivo@redhat.com>	2024-08-21 08:52:39 +02:00
Pedro Igor	eeae50fb43	Make sure federationLink always map to the storage provider associated with federated users Closes #31670 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-08-20 11:27:22 +02:00
Stefan Guilhen	fa7c2b5da6	Address review comments Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-08-19 09:06:35 -03:00
Stefan Guilhen	f82159cf65	Rework logic to fetch IDPs for the login page so that IDPs are fetched from the provider and not filtered in code. Closes #32090 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-08-19 09:06:35 -03:00
Václav Muzikář	cb418b0bfc	Upgrade to Quarkus 3.13.2 (#31678 ) * Upgrade to Quarkus 3.13.2 Closes #31676 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com> Co-authored-by: Peter Zaoral <pzaoral@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2024-08-16 11:41:34 +02:00
Erik Jan de Wit	e85f25434f	added documentation on how use npm packages (#31426 ) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>	2024-08-16 11:09:18 +02:00
Michal Hajas	36ad5fb3bd	Remove information about online_user_session table Closes #32178 Signed-off-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2024-08-16 09:23:14 +02:00
Stian Thorgersen	310824cc2b	Remove legacy cookies Closes #16770 Signed-off-by: stianst <stianst@gmail.com> Signed-off-by: Jon Koops <jonkoops@gmail.com> Co-authored-by: Jon Koops <jonkoops@gmail.com>	2024-08-15 15:27:38 +02:00
Yoshiyuki Tabata	cb6eb187ac	Client Policy - Condition : Client - Client Attribute Closes https://github.com/keycloak/keycloak/issues/31766 Signed-off-by: Yoshiyuki Tabata <yoshiyuki.tabata.jy@hitachi.com>	2024-08-14 09:56:56 +02:00
Alexander Schwartz	d4991ce56f	Fix server guide cross-references for downstream docs Closes #31947 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-08-13 14:51:01 -03:00
Martin Bartoš	d17a48f8f8	Add docs for the OpenTelemetry tracing Closes #31908 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>	2024-08-13 08:46:48 +02:00
Steven Hawkins	ea3937f37c	fix: always replacing placeholders (#31871 ) closes: #31625 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-08-12 16:20:47 +00:00
rmartinc	347f595913	Add ECDH-ES encyption algorithms to the java keystore key provider Closes #32023 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-08-09 15:57:51 +02:00
Pedro Igor	3ab2446074	Do not return identity providers when querying the realm representation Closes #21072 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-08-07 10:06:51 -03:00
rmartinc	acbbfde4ab	Adding upgrading notes for brute force changes Closes #31960 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-08-07 14:38:30 +02:00
Ryan Emerson	db14ab1365	Refactor HA guide to refer to generic multi-site deployments Old Active/Passive guides replaced with Active/Active architecture, but A/P vs A/A distinction hidden from users in favour of generic multi-site docs. Closes #31029 Signed-off-by: Ryan Emerson <remerson@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-08-07 08:22:59 +00:00
Tero Saarni	62fd969fe1	Allow requests from local IPv6 addresses If administrator selects EXTERNAL for Require SSL setting, allow clear-text HTTP requests when client is coming from IPv6 link-local or unique local address (ULA). Previously only private IPv4 addresses were allowed and private IPv6 addresses were rejected. Closes #30678 Signed-off-by: Tero Saarni <tero.saarni@est.tech>	2024-08-05 16:38:55 +02:00
rmartinc	942d5d0aa3	Convert chapter planning for securing applications and services to guides Final removal of the securing_apps documentation Final checks for links, order and other minor things Closes #31328 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-08-01 16:45:56 +02:00
Giuseppe Graziano	adb2af442a	Move token exchange documentation to guides (#31707 ) Closes #31334 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Marek Posolda <mposolda@gmail.com>	2024-07-30 21:04:05 +02:00
Giuseppe Graziano	a3c9944610	Move Keycloak JavaScript adapter to guides (#31751 ) Closes #31695 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: Marek Posolda <mposolda@gmail.com>	2024-07-30 18:39:33 +02:00
rmartinc	b07b120f2a	Convert chapter client registration CLI from securing apps into guides Closes #31333 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-30 18:30:46 +02:00
rmartinc	b2b27f8a4e	Convert chapter client registration service from securing apps into guides Closes #31332 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-30 18:30:46 +02:00
Giuseppe Graziano	e1266c2678	Move mod-auth-openidc.adoc to guides Closes #31697 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-07-30 18:23:40 +02:00
Peter Zaoral	07cfdac862	Document admin bootstrapping and recovery Closes: #30011 Signed-off-by: Peter Zaoral <pzaoral@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>	2024-07-30 15:45:56 +02:00
Giuseppe Graziano	ca2b6dc754	Move Node.js adapter to guides Closes #31696 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-07-30 11:29:51 +02:00
Marek Posolda	5b52117351	Documentation for Delete Credential action and related changes (#31719 ) closes #31718 Signed-off-by: mposolda <mposolda@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-07-30 10:05:14 +02:00
Giuseppe Graziano	c3019fb2d3	Move oidc documentation to guides (#31627 ) Closes #31329 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-07-30 09:46:14 +02:00
Steven Hawkins	22f8e5cdf0	Added field to the RealmImport spec to replace environment variables within the realm import (#31232 ) * Added field to the RealmImport spec to replace environment variables within the realm import Closes #26470 Signed-off-by: stustison <scott.tustison@gmail.com> * Added field to the RealmImport spec to replace environment variables within the realm import Closes #26470 Signed-off-by: stustison <scott.tustison@gmail.com> * testing refinement for placeholder handling closes: #26470 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * changing from placeholdersecret to placeholder Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/guides/operator/realm-import.adoc Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * Update docs/documentation/release_notes/topics/26_0_0.adoc Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> --------- Signed-off-by: stustison <scott.tustison@gmail.com> Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: stustison <scott.tustison@gmail.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2024-07-29 11:16:09 +02:00
rmartinc	e97ffe7a32	Convert chapter docker registry from securing apps into guides Closes #31331 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-26 15:39:51 +02:00
Alexander Schwartz	227c71f7f0	Persisting revoked access tokens Closes #31296 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-07-26 11:46:14 +02:00
rmartinc	e30230488e	Convert chapter mod_auth_mellon from securing apps into guides Closes #31569 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-24 21:16:49 +02:00
Pedro Igor	f4b1a5ca88	Updating docs Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-07-24 15:12:16 -03:00
Maciej Mierzwa	97e89e2071	feature: password age in days policy Closes #30210 Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>	2024-07-24 15:12:16 -03:00
rmartinc	9f2eddead8	Re-add notes about not supporting DPoP and holder-of-key in the remaining adapters Closes #30874 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-24 11:55:47 +02:00
rmartinc	ccab30d5f2	Move saml documentation to guides Closes #31330 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-24 11:50:24 +02:00
Thomas Darimont	dbd4079f92	Allow users to customize the footer of a login theme (#31391 ) Closes #31390 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2024-07-23 09:29:38 +02:00
Hynek Mlnarik	a7374f92be	Update login theme to login v2 Fixes: #29009 Signed-off-by: Hynek Mlnarik <hmlnarik@redhat.com>	2024-07-18 14:33:22 +02:00
rmartinc	764ef4831a	Release notes and some notes for JavaKeystoreProvider changes Closes #31226 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-17 10:44:45 +02:00
Stian Thorgersen	865c2dabea	Update themes.adoc (#31362 ) Closes #30816 Signed-off-by: Stian Thorgersen <stianst@gmail.com>	2024-07-17 10:32:45 +02:00
Thomas Darimont	e79d10e71e	Add missing user event translations to admin-ui Fixes #27677 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-07-12 10:04:57 +02:00
Steven Hawkins	4970a9b729	fix: deprecate KEYCLOAK_ADMIN and KEYCLOAK_ADMIN_PASSWORD closes: #30658 Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Jon Koops <jonkoops@gmail.com>	2024-07-11 18:07:57 +02:00
rmartinc	e80c3fee9b	Change link to https://github.com/eclipse/microprofile/wiki/JWT_Auth Closes #31219 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-11 18:03:57 +02:00
Steve Hawkins	9247029ca3	fix: removes the operator's usage of the v1 proxy option closes: #30945 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-07-11 14:21:50 +02:00
rmartinc	096e335a92	Support for vault and AES and HMAC algorithms to JavaKeystoreKeyProvider Closes #30880 Closes #29755 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-11 12:40:45 +02:00
Lucy Linder	0f7c2364f0	Update links in ReCAPTCHA doc Google links changed and are now causing redirect issues reports. Closes: #31187 Signed-off-by: Lucy Linder <lucy.derlin@gmail.com>	2024-07-11 00:27:09 +02:00
Martin Kanis	922eaa9fc8	Disable username prohibited chars validator when email as username is… (#31140 ) * Disable username prohibited chars validator when email as the username is set Closes #25339 Signed-off-by: Martin Kanis <mkanis@redhat.com> Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-07-10 09:46:24 -03:00
rmartinc	ce195b81f8	Improve consent deletion when a realm is removed Closes #30992 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-07-10 09:44:42 +02:00
Gilvan Filho	a918eb1e30	Fix user storage spi jpa quickstart description Closes #30941 Signed-off-by: Gilvan Filho <gfilho@redhat.com>	2024-07-08 14:44:41 +02:00

... 4 5 6 7 8 ...

980 commits