Commit graph

1613 commits

Author SHA1 Message Date
Ruchika Jha
60b369c622
Validate client session timeout and lifetime settings on realm settings edit
Closes #44910

Signed-off-by: Ruchika <Ruchika.Jha1@ibm.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-05 08:50:56 +00:00
Jens Erat
adeb41e82b
Extend documentation on ServiceMonitor creation (#45071)
The documentation so far only mentions how to disable the ServiceMonitor, leading to the assumption that it is enabled by default.

Getting a service monitor created also requires enabling metrics in keycloak, though:

658faf210f/operator/src/main/java/org/keycloak/operator/controllers/KeycloakServiceMonitorDependentResource.java (L50)

While the missing setting creates a warning, the administrator should already have this information before applying the configuration.

Closes #45070

Signed-off-by: Jens Erat <email@jenserat.de>
2026-01-05 09:10:18 +01:00
Stian Thorgersen
f2c527239d
Update JNDI reference in LDAP referrals documentation (#45129)
Clarified the term 'JNDI' in the LDAP referrals section.

Closes #45040
2026-01-05 09:01:40 +01:00
Robin Meese
0d0d468f27
Add ability to delete offline sessions via account console
Closes #15502

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2026-01-05 08:26:47 +01:00
Christian Ja
374e45b883
Use default locale from realm an intermediate fallback
closes #40990

Signed-off-by: Christian Janker <christian.janker@gmx.at>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-01 14:23:33 +00:00
Robin Meese
35ee49b5d4
Add logout event to UserSessionLimitsAuthenticator
Closes #44843

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-01 13:22:54 +00:00
Stefan Guilhen
43634dd2ed Update docs/documentation/server_admin/topics/workflows/understanding-workflow-definition.adoc
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-29 10:29:38 -03:00
Stefan Guilhen
9865791084 Fix wrong provider references in workflows documentation
Closes #45077

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-29 10:29:38 -03:00
Robin Meese
0957572751
Add logout event to SessionResource
Closes #44842

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-12-29 12:25:45 +00:00
Stefan Guilhen
0d09f755f1
Fix wrong event names in workflows documentation (#45002)
Closes #45001

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-19 13:01:20 -05:00
Peter Zaoral
7da8a8a2e3
feat: add Windows service support (#44496)
Closes: #37704

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
2025-12-19 16:55:42 +00:00
Steven Hawkins
6bb586e871
fix: updating the health check docs
closes: #44634

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Klemens Böswirth <23529132+kodebach@users.noreply.github.com>
2025-12-19 14:31:22 +01:00
Stephan Seifermann
aefecade5c
Client cert lookup provider compliant to RFC 9440 (#36161)
* Client cert lookup provider compliant to RFC 9440 (#20761)

Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>

* Release notes

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-12-19 12:38:54 +01:00
Ricardo Martin
efc75f09b0
Fix link to https://azure.microsoft.com/en-us (#45036)
Closes #45023

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-12-19 12:27:05 +01:00
Pedro Igor
6a437521a9
Only allow LDAP URL references when following referrals (#44993)
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2025-12-18 14:27:10 +01:00
Pedro Igor
7512a0412b
wip - workflows doc (#44685)
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Stan Silvert <ssilvert@redhat.com>
2025-12-18 07:52:41 -05:00
Takashi Norimatsu
ce67ec0d22
MCP Documentation for 26.5 (#44572)
closes #44571

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-18 13:49:16 +01:00
Marek Posolda
4b68f6998b
Release notes update for Keycloak 26.5 with core-clients related contributions (#44986)
closes #44192

Signed-off-by: mposolda <mposolda@gmail.com>
2025-12-18 10:48:27 +01:00
Giuseppe Graziano
790fb557db
Limit access Token expiration for jwt authorization grant (#44775)
Closes #43972


Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-12-18 09:21:29 +01:00
Martin Bartoš
548a89c823
[OTel] Micrometer to OpenTelemetry bridge support for metrics (#41716)
* [OTel] Micrometer to OpenTelemetry bridge support for metrics

Closes #41006

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Review: Docs rewording

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Review: Make TELEMETRY Option descriptions consistently use OpenTelemetry to reflect pattern established by telemetry-enabled, telemetry-endpoint etc

Signed-off-by: Ryan Emerson <remerson@ibm.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-12-17 17:03:56 +01:00
Sebastian Łaskawiec
9597537bf3
Additional fields for the Welcome Resource (#44758)
* Additional fields added to the Welcome Page

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Updated the order of fields

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
2025-12-17 13:11:44 +01:00
Martin Kanis
012cefb654 The existence of an organization attribute called id is not validated
Closes #44522

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-12-17 08:05:32 -03:00
Steven Hawkins
148d14816c
fix: allowing settable connection request timeout (#44592)
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
also defaulting to 5000

closes: #44500

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-12-16 16:35:01 +00:00
Palpable
94ee6d81fb
[OID4VCI] Realign naming of attribute configuring algorithms for credential (#44765)
Closes #44621


Signed-off-by: Vitalisn4 <ngamvitalisyuh@gmail.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>
2025-12-16 14:46:17 +01:00
Martin Bartoš
917fb86438
[docs] Remove paragraph about Quarkus OTel logging guide reference (#44911)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-15 19:43:08 +01:00
Martin Bartoš
29fdcedbc8
[OTel] Introduce preview support for OpenTelemetry Logs (#41265)
Closes #41264

Co-authored-by: Ryan Emerson <remerson@redhat.com

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-15 10:50:30 +01:00
Václav Muzikář
da6c4df5ec
Support EDB 18 (#44856)
* Support EDB 18

Closes #44494

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update test-framework/db-edb/container/README.md

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-12-15 07:36:26 +01:00
Ruchika Jha
26fe8dc7d8
Added validation for client session timeout post comparing the realm session timeouts
Closes #41019

Signed-off-by: ruchikajha95 <Ruchika.Jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-11 13:58:04 +01:00
Giuseppe Graziano
c0c4067bdd JWT Authorization Grant feature to preview
Closes #44492

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-12-11 10:37:30 +01:00
Martin Bartoš
8def691053
[OTel] Provide general options for telemetry settings (#41705)
* [OTel] Provide general options for telemetry settings

Closes #41263

Co-authored-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/observability/telemetry.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide release notes and deprecation note

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Ignore link to the telemetry guide for now

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-12-10 12:03:46 +00:00
Christian Glasmachers
921b10ee80
Login failure cache: Evict entries after the configured failure reset time
Closes #44801

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Co-authored-by: Christian Glasmachers <Christian.Glasmachers-extern@deutschebahn.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-12-10 11:20:19 +01:00
rmartinc
c9686cc040 Documentation for JWT Authorization Grant
Closes #44136

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-12-09 12:13:21 +01:00
vramik
5dbc91e028 Deprecate Fine-Grained Admin Permissions v1
Closes #44121

Signed-off-by: vramik <vramik@redhat.com>
2025-12-08 10:26:27 -03:00
Alexander Schwartz
2f81a2fb76
Updating and ordering the release notes
Closes #44706

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-08 10:55:33 +01:00
alyneldc
56b08c02ed
Add documentation warning about 0.0.0.0 binding in dev mode (#43522)
Inform users that Keycloak binds to all network addresses (0.0.0.0) by default in development mode. Add warning in Getting Started guide and configuration documentation, and enhance HttpOptions description.

Closes #43522

Signed-off-by: Lopes De Carvalho Alyne <alynelopes298@gmail.com>
2025-12-07 14:45:34 +00:00
Pascal Knüppel
46e5979b17
[OID4VCI] Handle key_attestation_required in metadata endpoint (#44471)
fixes #43801


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Pascal Knüppel <captain.p.goldfish@gmx.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
Co-authored-by: Ingrid Kamga <xingridkamga@gmail.com>
2025-12-05 16:00:32 +01:00
Sebastian Schuster
b5178a2bec
Added section on recommended isolation level to db guides
Closes #44611

Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-05 14:48:31 +01:00
forkimenjeckayang
4dd68c0316
[OID4VCI] Conformance Test Fixes (#44439)
closes #44659


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
2025-12-04 09:03:38 +01:00
Robin Meese
a9c1bcc9bd
Add zh_Hans translators to docs/translation.md (#44610)
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>

Closes #44609
2025-12-02 20:50:22 +01:00
Sebastian Łaskawiec
aa789dd023 Logout confirmation
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
2025-11-28 14:24:32 +01:00
Hisanobu Okuda
efa881d016
Add MariaDB to MySQL description and specify SQL to support UTF-8
Closes #44548

Signed-off-by: Hisanobu Okuda <hisanobu.okuda@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-28 11:03:11 +01:00
Pedro Ruivo
3ed15e740a
Add new option to schedule user session expiration
Closes #44068

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-11-27 23:01:32 +01:00
Alexis Rico
b0b38176f0
Manage Organization Invites
Closes #38809

Signed-off-by: Alexis Rico <sferadev@gmail.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-11-27 10:28:52 +01:00
Alexander Schwartz
2210b1ed50
Avoid un-escaped strings in the login templates for HTML entities
Closes #44296

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-26 07:55:35 -03:00
ruchikajha95
570ac40025
Promote MDC Logging Feature to Supported State
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Closes #41205

Signed-off-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-25 18:53:34 +00:00
Ryan Emerson
ebd4a6936a
Utilise community wording in downstream high-availability guides
Closes #4428

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-25 09:10:21 +00:00
Awambeng
8406cf34fb
[OID4VCI]: Realm-Configurable Time-Claim Normalization (Randomize/Round) to Mitigate Correlation (#43834)
Closes #43399


Signed-off-by: Awambeng <awambengrodrick@gmail.com>
2025-11-24 11:07:07 +01:00
Sebastian Łaskawiec
081d8e5a01
Move Kubernetes IdP to preview
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Closes #42947

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-22 12:56:09 +01:00
Stian Thorgersen
2a78bc67d7
Refactoring around federated client authenticator to better handling lookup of IdPs and clients. Also, introducing updates to documentation. (#44325)
Closes #44253
Closes #42987
Closes #44063

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-22 12:53:22 +01:00
Alexander Schwartz
bb971dc6fc
Efficient row-count on PostgreSQL
Closes #44057

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-21 12:28:09 +01:00
Martin Bartoš
a71ceee8f1
[Docs] Warn users about printing headers in HTTP access logs (#44353)
Closes #43156

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-20 14:48:01 +01:00
ruchikajha95
dc62067cfe
Detailed how to skip test while building keycloak
Closes #44338

Signed-off-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Ruchika Jha <ruchika@li-0551ffcc-341d-11b2-a85c-a28deda416be.ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-20 11:29:56 +01:00
Pedro Ruivo
13ef89664c
More accurate user session expiration logic
Closes #44204

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-19 21:06:17 +01:00
Carlos Rodríguez Hernández
2a876c143f
Add support for PostgreSQL 18 (#44288)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com>
2025-11-19 11:39:36 +01:00
Alexander Schwartz
15a9a36569
Align formatting of referenced RFCs
Closes #44246

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
2025-11-17 21:30:13 +01:00
Alexander Schwartz
167249dd6c
Updating the specifics around kubernetes service accounts
Closes #44064

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-17 11:23:39 +01:00
AvivGuiser
3c8af6dec5
set auto-mount service account token to false in keycloak pods (#40605)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
closes #38843

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-11-14 15:41:39 +00:00
Ricardo Martin
20f9bb1570
Fix recaptcha links to the new docs.cloud.google.com site
Closes #44187

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-11-14 09:37:54 +01:00
Stian Thorgersen
a2c1055f8d
Proposed import order (#43432)
* Add importOrder to Spotless

Closes #43235

Signed-off-by: stianst <stianst@gmail.com>

* Re-order imports with Spotless

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
2025-11-14 09:34:49 +01:00
Chance Coleman
b2317dabdc
Add configurable HTTP retry mechanism for OCSP validation (#42535)
Closes #42401


Signed-off-by: UnicornChance <chance@defenseunicorns.com>
Signed-off-by: Chance Coleman <139784371+chance-coleman@users.noreply.github.com>
2025-11-13 13:21:13 +01:00
vramik
748b58bf64 Remove creation of default policy, resource and permission upon enabling authorization for a client
Closes #43867

Signed-off-by: vramik <vramik@redhat.com>
2025-11-13 09:14:56 -03:00
Sebastian Łaskawiec
3288f83dc9
Adding an integration test with Minikube for Kubernetes Service Account Federated Authenticator
Closes #42983

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-13 08:52:46 +01:00
Ricardo Martin
de49500393
Client policy to enforce only downscoping in Token Exchange (#44030)
Closes #43931

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-11-12 08:48:42 +01:00
Steven Hawkins
ed9d6cc40a
fix: adding the built system property to the README (#43850)
* fix: adding the built system property to the README

closes: #43606

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing the doc / note about directly launching from the jar

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/building.md

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* removing one more reference to running the jar directly

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Move a chapter in README

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-11-11 15:06:48 +01:00
Stian Thorgersen
36011008e8
Remove PostgreSQL 13.x support (#44103)
Closes #42905

Signed-off-by: stianst <stianst@gmail.com>
2025-11-11 09:35:27 +01:00
Martin Kanis
39e1e40be4 Document missing artifact dependency for UserStoragePrivateUtil
Closes #43212

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-11-10 10:41:12 -03:00
Martin Bartoš
1f9694358f
Ability to enable/disable feature via single property (#43542)
* Ability to enable/disable feature via single property

Closes #43541

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide support for specifying profile preview

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove duplication check, use the new WildcardOptionUtil

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Create quarkus specific single profile config resolver

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the feature profile capability for single feature option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-07 13:35:39 +01:00
Steven Hawkins
4a63fcffaf
fix: considering source ordinality with spi options (#43805)
closes: #43793

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-06 18:01:18 +01:00
Stian Thorgersen
b278dbbb3d
Allow identity provider configuration without defaults for user authentication (#43963)
Closes #43552

Signed-off-by: stianst <stianst@gmail.com>
2025-11-05 10:13:40 -03:00
KONSTANTINOS GEORGILAKIS
1c0d4616a5
hide scopes from scopes_supported in discovery endpoint
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Closes #10388

Signed-off-by: cgeorgilakis-grnet <cgeorgilakis@admin.grnet.gr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-03 16:26:12 +00:00
Robin Meese
27a47b2537
Add Czech translators (#43910)
Closes: #43909

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-11-03 15:52:59 +01:00
Steven Hawkins
f7735b573c
fix: removing the fast start optimization (#43686)
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
* fix: removing the fast start optimization

closes: #38790 #42960

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs based upon a review comment

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-03 12:37:13 +01:00
Alexander Schwartz
52ba359cc3
Make client and IDP required when using federated client authentication (#43890)
Closes #43889

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-03 07:21:55 +01:00
蔡秀吉
e84a1d6363
Fix typos and formatting in OIDC auth flows documentation
Closes #43818

Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com>
2025-11-01 19:14:41 +00:00
Tobi
479859a7a3
Add new indices on offline_client_session
Closes #43566

Signed-off-by: twobiers <22715034+twobiers@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-31 17:49:47 +01:00
Martin Bartoš
8502cc3ae1
Including OTLP headers for tracing (#43122)
* Including OTLP headers for tracing

Closes #41007

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polishing, add test for the util class, address review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the WildcardOptionsUtil#isKcWildcardOption

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-31 15:46:05 +01:00
Pedro Ruivo
e40c5de050
Session cache affinity
Closes #42776

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 21:01:09 +00:00
Alexander Schwartz
0f01444543
Allow only normalized paths in requests (#43765)
Closes #43763

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-30 14:37:50 +01:00
Pedro Ruivo
6317c02a27
Refactor AuthenticationSessionManager
Closes #43825

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 12:26:07 +01:00
Stian Thorgersen
be6a3814fb
Add CORS support to OIDC dynamic client registration endpoints (#43625)
Closes #8863

Signed-off-by: stianst <stianst@gmail.com>
2025-10-30 12:12:08 +01:00
Peter Zaoral
f65adbf628
win-fix: correct hostname normalization condition for loopback addresses (#43634)
Closes: #42794

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-10-30 08:49:45 +01:00
Steven Hawkins
ccc7568879
fix: updating build docs (#43607)
* fix: updating build docs

closes: #43606

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/building.md

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-29 12:05:49 -04:00
Marek Posolda
2fc5419676
Avoid using UserCredentialManager from user storage extensions (#43695)
closes #43694

Signed-off-by: mposolda <mposolda@gmail.com>
2025-10-29 16:26:59 +01:00
Ryan Emerson
3ba8a68f2c
Document debug log settings required to show applied Infinispan configuration
Closes #43655

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-10-29 12:36:53 +01:00
Marek Posolda
5693899246
Picture of the token-exchange flow in the documentation
closes #39881

Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-29 10:38:37 +00:00
Alexander Schwartz
aadffb94fb Fix typo in LDAP edit mode in the docs
Closes #43720

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-27 08:42:44 -03:00
Pedro Igor
6527b139dc
Do not lower-case username and email if users are not imported from LDAP
Closes #43621

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-10-23 13:02:33 +02:00
Pedro Igor
2b785425fa Allow managing realm admin roles if the the realm-admin role is granted
Closes #43579
Closes #43578

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Vlasta Ramik <vramik@users.noreply.github.com>
2025-10-23 08:02:05 -03:00
Stian Thorgersen
f6ac64907d
SPIFFE should support OIDC JWK endpoint (#43651)
Closes #43650

Signed-off-by: stianst <stianst@gmail.com>
2025-10-22 15:19:56 +02:00
Stian Thorgersen
84a161d4dd
Extract related methods from IdentityProvider to UserIdentityProvider (#43535)
Closes #43534

Signed-off-by: stianst <stianst@gmail.com>
2025-10-21 14:27:07 +00:00
Alexander Schwartz
6080f21c64
Adding this as a breaking change plus deprecation
Closes #43022

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-21 09:58:33 -03:00
Steven Hawkins
4443834d06
fix: refines how defaults are shown
closes: #43421

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-21 14:35:55 +02:00
Martin Bartoš
419afce847
Fix anchors in the documentation
Closes #43084

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-21 12:33:32 +00:00
Pedro Igor
c5b560e2d8
Update user profile to allow returning a brief user representation
Closes #42225

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-10-21 12:52:31 +02:00
Ronaldo Paulino Jiconda
987ce19b45
Fix OIDC IDP broker basic auth encoding
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Ensures that the client_id and client_secret are URL-encoded before being Base64-encoded for the Basic Auth header, following RFC 6749. This fixes authentication failures when the client_id contains special characters.

Closes #26374
Closes #43022

Signed-off-by: rpjicond <ronaldopaulino32@hotmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: rpjicond <ronaldopaulino32@hotmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: cgeorgilakis-grnet <cgeorgilakis@admin.grnet.gr>
2025-10-20 23:48:24 +02:00
Martin Bartoš
37bea126c7
[PERF] Jackson reflection-free serialization/deserialization (#42946)
* [PERF] Jackson reflection-free serialization/deserialization

Closes #42945

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Docs improvements

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polish the features template macros

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-10-17 20:24:47 +02:00
Martin Bartoš
b807a45091
Divide logging guide to sub-guides for every log handler (#43132)
* Divide logging guide to sub-guides for every log handler

Closes #43125

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Ability to set level offset to guides, remove emojis

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Add all relevant options to the logging guide

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/file.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/syslog.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/syslog.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/syslog.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/syslog.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/console.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/logging/console.adoc

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Improve link to other section

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-10-17 16:37:48 +02:00
Peter Zaoral
2300b3fc78
Handle canonical hostname checks for localhost on Windows (#42799)
Closes: #42794

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
2025-10-17 13:40:08 +00:00
Steven Hawkins
736d4920d7
fix: noting db support level changes (#43549)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
closes: #43191

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-17 14:01:10 +02:00
Alexander Schwartz
7b8626ead5
Make intra-document links work in downstream
Closes #43544

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-17 10:52:58 +02:00
Martin Kanis
3f70da04f6 Final review and update for UPDATE_EMAIL documentation
Closes #42991

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-10-16 09:57:23 -03:00
Steven Hawkins
43ee41e8a8
fix: refining activation condition error handling (#43197)
closes: #43096

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-15 11:44:39 +00:00
Alexander Schwartz
3b8bcd3f8a
Use quoted values for boolean and number values in Operator examples
Closes #43459

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-14 18:53:00 +02:00
Giuseppe Graziano
bda0e2a67c
Invalidate sessions created with remember me when remember me is disabled for realm
Closes #43328

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-10-14 15:00:41 +00:00
Steven Hawkins
700b86fad8
fix: refining https-protocols documentation (#43420)
closes: #43164

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 08:01:08 -04:00
Steven Hawkins
f66359ce19
fix: updating service account docs
closes: #17268

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-10-14 11:02:20 +02:00
rmartinc
248d6d1feb Upgrade xmlsec to 3.0.4 and remove KeycloakFipsSecurityProvider workaround
Closes #43263

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-13 15:38:58 +02:00
Robin Meese
ca368706cc
Update translation.md docs (#43402)
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-10-13 13:26:23 +02:00
Alexander Schwartz
934ac48a54
Rework formatting for release notes
Closes #43320

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-10 07:42:53 -03:00
mposolda
c2e49c8c59 'Service accounts roles' should be 'Service account roles'
closes #43087

Signed-off-by: mposolda <mposolda@gmail.com>
2025-10-10 11:25:37 +02:00
Pedro Ruivo
48f1978531
Update docs to include PostgreSQL SSL certificate
Closes #43311

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-10-09 15:02:53 +02:00
Alexander Schwartz
94d428d450
Adding attributes for section links so they work in upstream and downstream
Closes #43286

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-08 11:37:13 -03:00
rmartinc
94a4e062f7 Add a debug statement when the KeycloakFipsSecurityProvider is created
Closes #43015

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-07 16:59:22 +02:00
Martin Kanis
a493213ad4
Hide read-only email attribute in update profile context with update … …email enabled (#43024)
* Hide read-only email attribute in update profile context with update email enabled

Closes #42990

Signed-off-by: Martin Kanis <mkanis@redhat.com>

* Simplifying conditions when checking read/write on email attribute and more tests

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

---------

Signed-off-by: Martin Kanis <mkanis@redhat.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-10-07 12:52:55 +02:00
Steven Hawkins
7bfc33fd5f
fix: auto-defaulting log console color (#42669)
closes: #42445

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-06 17:14:30 +00:00
Ryan Emerson
5cb0562fd2
Prevent users configuring max-count=-1 for caches with a default upper-bound
Closes #33146

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-10-02 19:58:28 +00:00
Pedro Ruivo
c1f108297e
Update Grafana dashboard version
Closes #43148

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-10-02 10:18:35 +02:00
Martin Bartoš
70a9a600de
ExternalLinksTest is broken due to missing path parameters
Closes #43082

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-02 10:15:58 +02:00
Alexander Schwartz
6b615650ec
Moving section to the correct place
Closes #43104

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-01 09:53:04 +02:00
Václav Muzikář
367fbdb78f
Remove a link to Docker web from the docs
Closes #43072

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-30 11:35:15 +00:00
Alexander Schwartz
37c808bd11
Reorder the release notes (#43026)
* Reorder the release notes

Closes #42994

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Update docs/documentation/release_notes/topics/26_4_0.adoc

Co-authored-by: Stian Thorgersen <stian@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Update docs/documentation/release_notes/topics/26_4_0.adoc

Co-authored-by: Stian Thorgersen <stian@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
2025-09-30 06:47:55 +00:00
Pedro Igor
a3db07a8f5
Re-adding max age setting to the update email action (#43036)
Closes #43035

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-30 05:31:23 +02:00
Alexander Schwartz
7bcf08fa31
Adding AWS reference to the documentation
Closes #43032

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-29 22:28:53 +02:00
Vít Zikmund
896f147075
docs: Use BASH TCP redirect for HEALTHCHECK (#38131)
* docs: Use BASH TCP redirect for HEALTHCHECK

Add a BASH script to perform an in-container healtcheck.

For the curious, here's how this works:

1. For the code within braces, a TCP connection is made to the keycloak's management port and a successful connection is redirected in the read-write fashion to the descriptor 0 (stdin).
   - When bash fails to connect (TCP RST), it ends up with an error right away.
   - When the connection is hanging (no reply till TCP retry timeout, usually about 1 minute), it just hangs, virtually being a subject to the HEALTHCHECK's timeout (which should be definitely smaller than the usual TCP retry timeout).
2. Then a simple hand-crafted HTTP HEAD request is sent to the socket using printf. This is supposed to always succeed, unless the send buffer of the socket is set ridiculously small on the target OS. In the other case it will just hang again, not being able to push all the bytes through, until that eventually happens or times out.
3. Next, the eventual response is being checked with grep to be the successful one. Only at this time it's return code (and the final) is 0.
   - When no response comes, it's hanging forever and is subject to timeout.
   - When a 503 response comes, grep doesn't match anything and returns 1.

Closes: #38126

Signed-off-by: Vit Zikmund <vit.zikmund@themama.ai>

* expanding bash healthcheck for scenarios that enable http health checks

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Vit Zikmund <vit.zikmund@themama.ai>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-09-29 18:04:02 +02:00
Pedro Ruivo
53007546ad
Deprecate AuthenticatedClientSessionModel timestamp
Closes #42815

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-29 14:16:39 +00:00
rmartinc
a44758d4ae Upgrade bc-fips testing and documentation to 2.1.2
Closes #42958

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-29 09:04:43 +02:00
Takashi Norimatsu
1649f8c847
Follow-up: FAPI 2.0 Message Signing final version support - updating the link to the final spec
closes #42499

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-29 08:52:27 +02:00
Stian Thorgersen
dbd516f8e6
Refactor SimpleHttp to make it injectable and usable outside server (#42936)
Closes #42902

Signed-off-by: stianst <stianst@gmail.com>
2025-09-29 08:37:05 +02:00
Václav Muzikář
97ab82e483
Mark Azure SQL as supported (#42985)
Closes #42743

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-29 08:31:08 +02:00
Martin Bartoš
f53e5ebdac
[Docs] Additional datasources support (#42655)
* [Docs] Additional datasources support

Closes #40388

Closes #42263

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Rename namedKey to wildcardKey in the code

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Clarify the defaults for DB kind

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Be more clear about the Named key reference in guide

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Vasek's review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-27 08:45:12 +00:00
Václav Muzikář
b65a60e40d
Support for EDB 17 (#42341)
Closes #42742
Closes #42293

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-26 16:04:47 +02:00
Pedro Ruivo
746a8211ff
Update documentation to prefer CacheCR in multi-site
Closes #42980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-26 11:06:28 +00:00
Pedro Ruivo
56c1823082
Document Caffeine cache metrics
Closes #42705

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-25 12:55:31 +02:00
Vinod Anandan
f001b9dde1 Trigger Build.
Signed-off-by: Vinod Anandan <vinod@owasp.org>
2025-09-25 10:14:15 +02:00
mposolda
389314a65e Typo in the latest documentation
closes #42918

Signed-off-by: mposolda <mposolda@gmail.com>
2025-09-24 17:23:52 +02:00
rmartinc
1d28c0cd35 Expose system-info information in the serverinfo endpoint only for users in the admin realm
Closes #42828

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-24 17:21:57 +02:00
Pedro Igor
73ee2cb3e2 Update upgrade guide about changes in how the parameter is propagated to OPs
Closes #42139

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 09:03:04 -03:00
Alexander Schwartz
b95cb0c276
Adding explicit anchor for downstream docs
Closes #42868

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-24 11:21:08 +02:00
Robin Meese
e0d35e7589
Add Greek translators and admin-ui properties file
Closes: #42862

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-09-24 10:26:02 +02:00
Marek Posolda
e09ce9e18d
Documentation update for DPoP (#42865)
closes #42728


Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-09-24 10:00:23 +02:00
Pedro Igor
54d2451b35 Make user read-only and a proper error message when the user federation provider is not available
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 04:03:13 -03:00
rmartinc
c05b84a0d2 Ignore external links to https://www.npmjs.com/package
Closes #42856

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-23 12:36:46 +02:00
Alexander Schwartz
a9ed355bfc
Adding missing time column to index
Closes #42792

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-23 07:33:08 -03:00
vramik
23043b40b4 Fix reset-password scope documentation and upgrading guide
Closes #42790

Signed-off-by: vramik <vramik@redhat.com>
2025-09-23 07:31:35 -03:00
Ryan Emerson
93ede306f5
Refine high-availability guide wording
Closes #42869

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-23 10:14:49 +00:00
rmartinc
2015e08e38 Move DPoP option to the capability section in the admin UI
Closes #42746

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-22 17:27:48 +02:00
Pedro Ruivo
47f85631f3
Automatically create external caches for MULTI_SITE deployments
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 18:56:38 +02:00
Ryan Emerson
bda79de605
Update docs to reflect that Operator ClusterRoleBinding contains hardcoded namespace
- Added missing labels to Operator roles

Closes #42678

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 17:27:26 +02:00
Pedro Ruivo
f9ec39bc5f
Update tested load numbers
Closes #42757

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-19 15:42:17 +02:00
stianst
fb83a8ba09 Documentation for federated client authentication
Closes #42721

Signed-off-by: stianst <stianst@gmail.com>
2025-09-19 11:54:03 +01:00