upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-18 18:37:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 15
30207 commits 24 branches 294 tags 871 MiB
Commit graph

30207 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pedro Ruivo
d04d833ec5
Update external Infinispan metrics documentation 
Closes #46390

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-17 10:34:17 +00:00
Alexander Schwartz
3f8b1c8e70
Optimize user joining group or role 
Closes #45689

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-17 11:32:57 +01:00
Akbar Husain
3f62bb4d2b
Make shebang in bash scripts consistent (#37369) 
Closes #34983

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
 2026-02-17 11:32:28 +01:00
Alexander Schwartz
ac83dfda42
Notify language maintainers on PR merge 
Close #46344

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Robin Meese <39960884+robson90@users.noreply.github.com>
 2026-02-17 11:19:32 +01:00
Giuseppe Graziano
f791337eec
Fix max expiration id in jwt authorization grant idp config 
Closes #46303

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-02-17 10:52:51 +01:00
Zorian Motso
8258fceb33
Fix duplicate client-uuid path parameter in OpenAPI spec
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Details 
Rename {client-uuid} to {targetClientUuid} in RoleContainerResource to
avoid duplicate parameter names when the resource is mounted under
ClientResource. {clientUuid} is not sufficient because code generators
normalise {client-uuid} from the parent path to clientUuid as well.

Closes #46015

Signed-off-by: Zorian Motso <zorianmotso@gmail.com>
 2026-02-16 16:28:15 +00:00
Geremia Taglialatela
418700b4f8
Fix duplicate header in VERIFY_EMAIL flow 
Fix #46105

Signed-off-by: Geremia Taglialatela <tagliala.dev@gmail.com>
Co-authored-by: tagliala <556268+tagliala@users.noreply.github.com>
 2026-02-16 16:26:22 +01:00
Ruchika Jha
f92c27e26d
Make rolling updates for patch releases fully supported and Updated docs, release notes and upgrading guide for zero-downtime patch releases 
Closes #45381
Closes #45756

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-16 15:11:16 +00:00
Ruchika Jha
4e0085954f
Improved documentation for running the keycloak test mail server locally 
Closes #45837

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-16 13:30:36 +01:00
Stian Thorgersen
ddaec23a29
Fix NPE with GitHubActionReport if running test on actions without git checkout 
Closes #46322

Signed-off-by: stianst <stianst@gmail.com>
 2026-02-16 13:01:40 +01:00
etn
4619c440b4
Added parentId to GroupRepresentation 
Closes #46366

Signed-off-by: etn <1438257+etn406@users.noreply.github.com>
 2026-02-16 10:28:23 +00:00
Weblate (bot)
18b8ef16d0
Translations update from Hosted Weblate (#46101)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
* Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: spctr <spctr@users.noreply.github.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: spctr <spctr@users.noreply.github.com>

* Updated translation for German

Language: de

Updated translation for German

Language: de

Translated using Weblate (German)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/de/

Updated translation for German

Language: de

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Martin Kylián <martin.kylian@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kylián <martin.kylian@gmail.com>

* Updated translation for Italian

Language: it

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Nicholas Amadori <nico282@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Nicholas Amadori <nico282@gmail.com>

* Added translation for Indonesian

Language: id

Added translation for Indonesian

Language: id

Added translation for Indonesian

Language: id

Added translation for Indonesian

Language: id

Added translation for Indonesian

Language: id

Added translation for Indonesian

Language: id

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Georgian

Language: ka

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: spctr <spctr@users.noreply.github.com>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Martin Kylián <martin.kylian@gmail.com>
Signed-off-by: Nicholas Amadori <nico282@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: spctr <spctr@users.noreply.github.com>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Martin Kylián <martin.kylian@gmail.com>
Co-authored-by: Nicholas Amadori <nico282@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Co-authored-by: 秉虎 <s96016641@gmail.com>
 2026-02-15 14:42:38 +01:00
Stefan Guilhen
aeda5c4f01 Increase workflow executor timeout to 5 seconds by default
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
Closes #46332

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-13 14:33:31 -03:00
Steven Hawkins
c28cac9db3
fix: ensuring proper error handling for duplicate protocol mappers 
closes: #26946

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-13 16:33:01 +00:00
Michal Vavřík
404ba76526
test(quarkus): run with dist placed in a dir with special chars (#46301) 
Adds tests for https://github.com/keycloak/keycloak/issues/45971 (fixed by https://github.com/keycloak/keycloak/pull/45972).

Closes: https://github.com/keycloak/keycloak/issues/46135

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-02-13 16:20:04 +00:00
Pedro Igor
5c67b60920
Fixing authorization service docs to remove references to the default settings 
Closes #46159

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-02-13 17:18:15 +01:00
Steven Hawkins
83159fc162
fix: removing client crds from prod operator (#46286) 
remote testing now requires a build option

closes: #45794

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-13 15:56:32 +00:00
Martin Bartoš
5a4e90dfc0
Show login page for quick theme and change basic attributes (#45483) 
Closes #45524

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-13 16:34:42 +01:00
Stefan Guilhen
c17d9d0d0c Add section about handling failures to the workflows documentation 
Closes #45175

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-13 12:01:00 -03:00
Stefan Guilhen
0b93d23201 Record every step in the workflow step table so immediate steps can recover from failure 
Closes #45175

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-13 12:01:00 -03:00
Stefan Guilhen
1384d3b72a Make RunWorkflowTask aware of executor cancellation due to timeout 
Closes #45175

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-13 12:01:00 -03:00
Stefan Guilhen
04d8886678 Execute each workflow step in its own transaction 
Closes #45175

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-13 12:01:00 -03:00
Pedro Ruivo
463ec1ee56
Incorrect code used return value 
Fixes #46290

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-13 15:59:44 +01:00
Martin Bartoš
92881fb42b
Missing anti-ID phishing check for getting client (#46056) 
* Missing anti-ID phishing check for getting client

Closes #46010

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid any other phishing based on error message, for PATCH + improve service exceptions

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Ensure no ID phishing for DELETE

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-13 14:53:14 +00:00
Steven Hawkins
19118a097c
fix: adding admin role invalidation when a new realm is found (#46019) 
* fix: adding admin role invalidation when a new realm is found

closes: #45966

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update model/infinispan/src/main/java/org/keycloak/models/cache/infinispan/RealmCacheSession.java

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* adding a comment and a permission tweak for imported realms

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* checking getShouldUseLightweightToken

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2026-02-13 15:52:52 +01:00
Martin Bartoš
74988b5c0a
Extend client policies tests to check exact events (#46093) 
Closes #46114

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-13 15:47:38 +01:00
Thomas Diesler
d2150a19d5 [OID4VCI] Make natural_person configuration available in all formats 
Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-02-13 15:30:55 +01:00
Thomas Diesler
80839bfc44 -- make ctors package protected 
Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-02-13 15:29:04 +01:00
Thomas Diesler
4341b8a314 [OID4VCI] Revisit and fix OAuthClient.preAuthorizedCodeGrantRequest() 
Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-02-13 15:29:04 +01:00
Ruchika Jha
e82e107b85
Enable graceful HTTP shutdown and document default behavior 
Closes #43589

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-13 14:28:49 +00:00
Erik Jan de Wit
4be89ef2a3
token could be undefined when using other grant type (#46185) 
fixes: #46178

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2026-02-13 15:16:35 +01:00
Pedro Igor
8df79202a0
Fixing organization members docs to mention they can join multiple organizations 
Closes #46040

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-02-13 14:54:10 +01:00
Ricardo Martin
1f49f67991
Upgrade docker-maven-plugin to last version (#46313) 
Closes #46312

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-13 12:15:20 +01:00
Giuseppe Graziano
a8418b251d Unique issuer for identity providers 
Closes #45747

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-02-13 08:44:07 +01:00
Martin Bartoš
51b764b577
Missing translations for role descriptions 
Closes #22569

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-12 18:37:25 +01:00
Thomas Diesler
44e7cf2da9 [OID4VCI] Simplify OID4VCAuthorizationDetail handling 
Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-02-12 17:09:07 +01:00
rmartinc
bd703eb767 Upgrade santuario to 3.0.6 to fix SANTUARIO-617 
Closes #45680

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-12 15:57:50 +01:00
Ricardo Martin
bef8f7f0fd
Move upgrading note for the serverinfo to 26.5.4 
Closes #46267

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-12 14:50:45 +01:00
vramik
5a4685909e Ability to add attributes to organization groups 
Closes #46263

Signed-off-by: vramik <vramik@redhat.com>
 2026-02-12 10:43:18 -03:00
Peter Zaoral
83c51c6214
Upgrade to Quarkus 3.32.0.CR1 (#46256) 
Closes: #46255

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2026-02-12 13:14:49 +00:00
Steven Hawkins
115b260a47
fix: normalizing the baseUri to end with / (#46253) 
closes: #46235

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-12 13:55:07 +01:00
Martin Bartoš
d6faeed3ab
[quick-theme] Merge the dark/light selector tabs (#46247)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Details 
Closes #45528

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-12 12:16:44 +01:00
Steven Hawkins
3aa5ab0072
fix: updating the fix for docker ulimits (#46254) 
it will now be applied by default

closes: #44232

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-12 10:28:53 +01:00
Martin Bartoš
479d5546a6
[client-v2] Create tests for checking permissions (#45981) 
* [client-v2] Create tests for checking permissions

Closes #45975

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Simplify admin client creation, test abstraction

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Address Vasek's comments

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-11 18:18:49 +01:00
Steven Hawkins
27fb8fae5c
fix: refining how the junit Keycloak is launched (#46182) 
closes: #46160

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-11 16:44:43 +01:00
Steven Hawkins
783ea304af
fix: document passthrough backchannel limitation (#45915) 
closes: #45606

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-02-11 10:44:19 -05:00
Stefan Guilhen
dd0edc24c2 Decode objectGUID when it is imported as a group attribute 
Closes #45917

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-02-11 11:13:39 -03:00
rmartinc
569f86ffeb Show button in tokens tab when openId4vci is not enabled 
Closes #45818

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-11 15:02:22 +01:00
Thomas Diesler
5659fa9ac7 [OID4VCI] Revisit and fix OAuthClient.credentialRequest() 
Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
 2026-02-11 12:05:06 +01:00
NAMAN JAIN
5967093142
Move HTTP access logs to data/log directory (#45991) 
* Move HTTP access logs to data/log directory

The HTTP access log file is now written to the /data/log directory, alongside server logs.

Directory is created at runtime initialization if it does not exist.

Closes #45629

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>

* Update help command expectations for HTTP access log directory change

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>

* Apply suggestions from code review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix build

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-02-11 11:50:22 +01:00