upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-18 18:37:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 17
30127 commits 24 branches 294 tags 871 MiB
Commit graph

30127 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pedro Ruivo
c438da8d8b
Use cached realm attributes for PAR and CIBA config
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
Closes #46100

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-09 19:12:08 +01:00
Konstantinos Kyriakou
24193928c3
fix: decode URI path before opening JAR file (#45972) 
fix: use getSchemeSpecificPart

updating how we determine the script jar file

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Konstantinos Kyriakou <kkyriakou@altair.com>
 2026-02-09 17:43:13 +01:00
andymunro
88eb05d114
Update Operator instructions for Custom Access (#46036) 
Closes #45992

Signed-off-by: AndyMunro <amunro@redhat.com>
 2026-02-09 12:45:15 +01:00
Martin Kanis
586463b772 Protocol Mappers for Organization Groups (OIDC/SAML) 
Closes #45511

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2026-02-09 08:34:18 -03:00
Stian Thorgersen
d10fbde0c8
Distribution server sometimes uses wrong pid for started Keycloak server 
Closes #46110

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-09 10:41:09 +00:00
Alexander Schwartz
fc7b1b1e83
Check if two IDPs with the same issuer URL exist before caching them 
Closes #45453

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-09 11:30:09 +01:00
Pedro Ruivo
47f245f81e
New key affinity for session ids 
Closes #46090

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-09 10:46:45 +01:00
Peter Zaoral
630b5de525
[quarkus-next] DatasourcesDistTest fails due to Quarkus stdout/stderr capture changes (#46086) 
Closes: #46084

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2026-02-09 10:15:23 +01:00
Michal Vavřík
0d28b664d3
docs(quarkus): merge quarkus/CONTRIBUING.md into quarkus/README.md (#46033) 
Closes #45805

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-02-09 09:45:16 +01:00
Giuseppe Graziano
d95f456b4f Inaccuracy in the client registration guide 
Closes #45738

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-02-09 09:19:15 +01:00
Šimon Vacek
20e78e468d
Test framework validations and error messages (#45869) 
Closes #38163

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2026-02-09 06:51:31 +01:00
Stefan Guilhen
9a32b5e2c4 Add ProviderEvents to workflows 
- custom listeners can now react to workflow operations

Closes #45170

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-06 16:48:03 -03:00
Nicola Beghin
464883079f
SAMLEndpoint - move some fields/methods from private to protected for easier extension of SAML-related protocols 
Closes #45880

Signed-off-by: Nicola Beghin <nicolabeghin@gmail.com>
 2026-02-06 19:46:40 +01:00
Pedro Ruivo
02c6499d96
Deprecate unused methods in UserSessionProvider 
Closes #45823

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-06 19:04:19 +01:00
Weblate (bot)
fcd7923e52
Translations update from Hosted Weblate (#45769) 
* Updated translation for Japanese

Language: ja

Updated translation for Japanese

Language: ja

Translated using Weblate (Japanese)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/ja/

Updated translation for Japanese

Language: ja

Updated translation for Japanese

Language: ja

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>

* Updated translation for Italian

Language: it

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: emouty <emouty@users.noreply.hosted.weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: emouty <emouty@users.noreply.hosted.weblate.org>

* Updated translation for Dutch

Language: nl

Update translation files

Updated by "Remove blank strings" hook in Weblate.

Updated translation for Dutch

Language: nl

Updated translation for Dutch

Language: nl

Updated translation for Dutch

Language: nl

Updated translation for Dutch

Language: nl

Translated using Weblate (Dutch)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/nl/

Updated translation for Dutch

Language: nl

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jan Herrygers <jherrygers@vaa.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Jan Herrygers <jherrygers@vaa.com>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Georgian

Language: ka

Updated translation for Georgian

Language: ka

Translated using Weblate (Georgian)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/ka/

Updated translation for Georgian

Language: ka

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: 翁震軒 <benwater12@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: 翁震軒 <benwater12@gmail.com>

---------

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Signed-off-by: emouty <emouty@users.noreply.hosted.weblate.org>
Signed-off-by: Jan Herrygers <jherrygers@vaa.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: 翁震軒 <benwater12@gmail.com>
Co-authored-by: Kohei Tamura <ktamura.biz.80@gmail.com>
Co-authored-by: emouty <emouty@users.noreply.hosted.weblate.org>
Co-authored-by: Jan Herrygers <jherrygers@vaa.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: 翁震軒 <benwater12@gmail.com>
 2026-02-06 19:01:32 +01:00
Peter Zaoral
fe7b2b2d67
[quarkus-next] Tests fail due to missing build step ordering constraint on disableHealthCheckBean (#46076) 
Closes: #46075

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2026-02-06 18:23:36 +01:00
Erik Jan de Wit
618384efe9
initial version of the client v2 policy test (#46029) 
* initial version of the policy v2 policy test

fixes: #46074

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Extract client profile/policy to dedicated method

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* removed test method prefix

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-06 18:16:15 +01:00
Stian Thorgersen
c7c27a031e
Add support for setup and cleanup for a test 
Closes #46071

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-06 15:59:26 +01:00
Stefan Guilhen
7882a3afa4 Add javadoc documentation to the workflows provider interfaces 
Closes #46068

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-06 11:16:10 -03:00
Stian Thorgersen
4ff023467d
Add GitHub Action summary support to new test framework 
Closes #46045

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-06 13:39:43 +01:00
vramik
ca89a0cdc4 Organization Groups Caching 
Closes #45509

Signed-off-by: vramik <vramik@redhat.com>
 2026-02-06 08:12:55 -03:00
vramik
f8246504c4 AuthorizationServices should prevent org group ids for group policies 
Closes #46050

Signed-off-by: vramik <vramik@redhat.com>
 2026-02-06 08:12:25 -03:00
Giuseppe Graziano
955131b91f Remove warn for credential provider not found 
Closes #45829

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-02-06 12:00:33 +01:00
Stian Thorgersen
658c582506
Update test framework docs 
Closes #35385

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-06 12:00:16 +01:00
Pedro Ruivo
1ee5709eab
Revisit retransmission metrics documentation 
Closes #46059

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-06 11:31:10 +01:00
Hugo Hakim Damer
292a177b10
[OID4VCI] Add support for nested claims in OID4VCI user attribute mapper (#45751) 
Closes #45748


Signed-off-by: Hugo Hakim Damer <HugoHakim.Damer@governikus.de>
 2026-02-06 10:57:12 +01:00
Lukas Hanusovsky
a21a53667e
Creating user with roles/clientRoles via UserSupplier is not supported. (#46070) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2026-02-06 08:55:19 +00:00
rmartinc
69fabcf902 Documentation changes to deprecate Token Exchange V1 
Closes #45792

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-05 17:32:04 +01:00
Aggelos Sachtouris
6c003a41aa Format: apply code formatting using spotless 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
fb58f1c40f fix: Test Old ResourceOperationType to UserCreatedWorkflowEventFactory 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
e6e4017d3d doc: Changed comment on Unlink User Test 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
9d8d59f206 Remove unnecessary implemented functions 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
7b360adb19 Fix: implemented function name for supported resource types 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
28bb0b2cd9 Create documentation for unlink user workflow step 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
dc6c1683bd Create test for unlink user workflow step 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Dimitris Papachristou
90404e9f4e Added unlink user workflow step to META-INF/services 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Aggelos Sachtouris
664980bf0f Unlink User Worflow Step 
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
 2026-02-05 12:22:37 -03:00
Martin Bartoš
79f8405b7a
Upgrade to Quarkus 3.31.2 (#46044) 
Closes #46043

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-05 11:51:38 +01:00
Michal Vavřík
0949fa61aa
refactor(quarkus): drop RuntimeConfigSetupCompleteBuildItem (#46035) 
https://github.com/keycloak/keycloak/pull/45612 bumped Quarkus version to 3.31 and the `RuntimeConfigSetupCompleteBuildItem` has no function in Quarkus 3.31.
The item is deprecated and marked for removal because runtime config is always ready when runtime values are recorder.
Almost shame to run CI for this PR.

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-02-05 11:30:53 +01:00
Steven Hawkins
8a471bb0d2
Operator logic for clients in admin api v2 (#45316) 
Operator logic for clients in admin api v2

Closes #46022

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
 2026-02-05 09:16:29 +00:00
Awambeng
85d9360e45
[OID4VCI] Add replay protection for credential offers by reference (#45558) 
closes #44660


Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2026-02-05 10:06:58 +01:00
rmartinc
e30bb37443 Mark Token Exchange v1 as deprecated but in preview 
Closes #45791

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-05 09:16:44 +01:00
vramik
2411c21429 JpaOrganizationProvider.searchGroupsByName ignores search parameter 
Closes #46006

Signed-off-by: vramik <vramik@redhat.com>
 2026-02-04 22:17:27 -03:00
Pedro Ruivo
6b234ae471
Throw SQLException if DB connection is down 
Fixes #45980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-04 18:58:11 +01:00
Stian Thorgersen
ea4c8f65b6
Review realm cleanup in test framework 
Closes #45973

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-04 18:03:15 +01:00
Awambeng
c40590762e
[OID4VCI] Add comprehensive tests for OID4VC authorization code flow (#45391) 
closes #44795


Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2026-02-04 11:50:49 +01:00
Pedro Ruivo
297d8ac95d
Refactor ClientResource for better performance 
Closes #45838

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-02-04 11:29:18 +01:00
Peter Zaoral
0e0454586d
[quarkus-next] Fix build failure due to missing build step ordering constraints (#45994) 
Closes: #45993

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
 2026-02-04 10:33:09 +01:00
Peter Zaoral
78299ae82d
Enhancement: normalize FilesPlaintextVaultProvider secret paths to prevent false positives in CSAs (#44345) 
Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2026-02-03 21:21:04 +00:00
Stian Thorgersen
1f0fceb867
Add sanity check for test framework with embedded server (#45967) 
Closes #45378

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-03 17:57:17 +00:00