mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
00a45a40e7ede6cc58fa9cf7a818999e5043ddef
Commit Graph

4734 Commits

Author SHA1 Message Date
Pedro Igor
30b3afbf69 Re-calculate the organization scope when re-authenticating in the browser flow 
Closes #35935
Closes #35830

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-14 09:43:40 +01:00
Stefan Guilhen
a0318812d9 Update UP via provider instead of going through the UserProfileResource 
- prevents error when updating realm

Closes #34540

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit abf0eb7f92)
 2025-01-13 14:41:53 -03:00
Martin Kanis
1cd854fe73 Incomplete registration form when edit email is disabled and email is set as username 
Closes #34876

Signed-off-by: Martin Kanis <mkanis@redhat.com>
(cherry picked from commit dbd9429256)
 2025-01-13 14:24:10 -03:00
Pedro Igor
99775848f6 Fix NPE when exchanging external using the issuer value 
Closes #36053

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-13 17:52:25 +01:00
Martin Kanis
d1c7a9b347 Translations specified in the admin console do not override the translations specified in a theme (#36275) 
Closes #36037

Signed-off-by: Martin Kanis <mkanis@redhat.com>
(cherry picked from commit 03b6f4b306)
 2025-01-13 17:50:35 +01:00
Steven Hawkins
0ba546d384 Remove the use of regex for determining local addresses (#36228) (#36282) 
Closes #36227

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 696bc07103)
 2025-01-13 17:49:06 +01:00
Martin Bartoš
ed16c89b7d Upgrade to Quarkus 3.15.2 (#36246) 
Closes #35077
Closes #33469
Closes #36009

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-01-13 17:47:58 +01:00
Marek Posolda
3e4cbfac14 Failed to authenticate client with method client_secret_jwt when client has keys generated (#35992) 
closes #34547

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 9b01e958dc)
 2025-01-13 17:47:03 +01:00
Pedro Igor
caec411d9b Better path parameter names for organization and member APIs 
Closes #35745

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-13 17:45:49 +01:00
mposolda
f9dcfbd59c Token revocation may not correctly revoke related access tokens 
closes #35813

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit efdc42c2a4)
 2025-01-13 17:43:18 +01:00
mposolda
0bd989fd0e When using the token revocation endpoint with refresh-token, only particular clientSession related to given refresh token should be terminated 
closes #35486

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 3fca2f3b7f)
 2025-01-13 17:43:18 +01:00
Giuseppe Graziano
4e13c0bbd3 Avoid a NullPointerException when client roles are associated with a client that no longer exists (#35489) 
Closes #34444

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
(cherry picked from commit 8f417d6318)

Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-01-13 17:29:37 +01:00
Pedro Igor
7a76858fe4 Restrict access to environment variables when at the server runtime 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-12-16 10:12:52 -03:00
mposolda
edbf75e6ee Keycloak arquillian testsuite not working with the default embedded undertow 
closes #35802

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-12-16 10:12:52 -03:00
Douglas Palmer
93b2a7327b EMBARGOED CVE-2024-11734 org.keycloak/keycloak-quarkus-server: Denial of Service in Keycloak Server via Security Headers (#228) 
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2024-12-13 10:43:31 +01:00
rmartinc
e96ffa1c42 Set clientId in the VerifyEmailActionToken when no one is passed 
Closes #35317

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit d19ba82779)
 2024-12-10 12:59:25 +01:00
Steven Hawkins
0bd8a1fec9 fix: using regex to expand local ipv6 matching (#35736) (#35737) 
closes: #35675

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 80890737d4)
 2024-12-09 19:39:53 +01:00
Steven Hawkins
c6d06e0226 fix: changing the bootstrapping suggestion to the command (#35616) (#35666) 
closes: #35526

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 4c7dea5d70)
 2024-12-06 11:25:21 +01:00
Martin Kanis
4fd52adc8c Intermittent missing organization claim in Keycloak JWT token 
Closes #35324

Signed-off-by: Martin Kanis <mkanis@redhat.com>
(cherry picked from commit 2482302d4d)
 2024-12-04 16:37:46 -03:00
rmartinc
68d979882e Create a new logout session when initiating it for another client 
Closes #34207

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit e41553bcfb)
 2024-12-03 12:24:35 +01:00
Venkatesh Kannan
1fae6be539 Persist admin event only when roles is non-empty 
Currently, an adminEvent is created regardless of if the roles passed to the
role-mapping API is empty. The event should only be created when the list
`roles` is non-empty.

Closes #33195

Signed-off-by: Venkatesh Kannan <venkatesprasad512@gmail.com>
 2024-11-29 15:59:58 +01:00
Rishabh Singh
babd6563a0 setting the user in ExecuteActionsActionTokenHandler.handleToken to manage user null case in FreeMarkerLoginFormsProvider.createResponse 
Closes #17233

Signed-off-by: Rishabh Singh <rishabhsvats@gmail.com>
(cherry picked from commit 8cad78b1df)
 2024-11-29 13:11:17 +01:00
rmartinc
73ed0613ee Do not count current sessions in UserSessionLimitsAuthenticator 
Closes #35276

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 8a4651c664)
 2024-11-28 13:02:39 +01:00
Agnieszka Gancarczyk
f0243a8c0b Backport to expose membership type 
Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com>
 2024-11-27 11:15:25 -03:00
Pedro Igor
3a9cc8e3bd Make sure unmanaged attributes are populated before updating username when in update email context 
Closes #34930

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-22 12:18:17 +01:00
Ricardo Martin
154e14122f Check the authentication config exists before returning its reference 
Closes #34888


(cherry picked from commit 8d559d542c)

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-11-22 12:11:42 +01:00
Jon Koops
cd8a801a85 Ignore Accept-Language header for email themes 
Closes #10233

(cherry picked from commit 84f60bc121)

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
Co-authored-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2024-11-22 12:08:45 +01:00
Giuseppe Graziano
63180be938 Check "Always use lightweight access token" is enabled on the client for Admin REST APIs 
Closes #34944

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
(cherry picked from commit 5d600be6f2)
 2024-11-22 12:07:31 +01:00
Pedro Igor
cc64375c88 Allow returning attributes when querying organizations 
Closes #34590

Signed-off-by: Himanshi Gupta <higupta@redhat.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Himanshi Gupta <higupta@redhat.com>
 2024-11-22 11:50:28 +01:00
Peter Zaoral
7bdc16f029 fix: prevent inclusion of characters that could lead to FileVault path traversal (#212) 
Closes: #211

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-11-18 09:27:50 +01:00
Steven Hawkins
6a10c0e345 fix: returning addresses instead of hosts on the ClientConnection (#208) 
also consolidates checks of whether a host or address is local

closes: #CVE-2024-9666

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-11-18 09:25:44 +01:00
Douglas Palmer
b956819187 EMBARGOED CVE-2024-10270 org.keycloak/keycloak-services: Keycloak Denial of Service (#214) 
Closes #CVE-2024-10270

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2024-11-14 09:47:04 +01:00
Erik Jan de Wit
12890936cb add brute force enabled so we can render switch (#34282) (#34476) 
fixes: #34065

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 4d25128018)
 2024-11-12 10:51:19 +01:00
Pedro Igor
5c9f1837d7 Added a representation that includes an organization and user model 
Closes #34013

Signed-off-by: Robert Rieser <Robert.Rieser@degoya.studio>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Robert Rieser <Robert.Rieser@degoya.studio>
 2024-11-12 10:12:51 +01:00
Pedro Igor
80c17f8392 Better message when updating users when import is disabled 
Closes #31456

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-11 22:41:30 +01:00
Jonas Suter
fd7125c769 Strip Double Quotes from Request Content in Organization API 
Closes #34401

Signed-off-by: Jonas Suter <jonas_suter@gmx.ch>
(cherry picked from commit 35b425736a)
 2024-11-11 11:44:28 -03:00
Achim Rolle
5aa874eab1 Fix credential_type in update/remove credential email template 
Closes #34687

Signed-off-by: Achim Rolle <achim.rolle@aoe.com>
Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 83065b85a2)
 2024-11-08 07:46:28 +01:00
Stefan Guilhen
a5daed4bd9 Remove Provider annotation along with default constructors from org resources 
Closes #34335

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit 2e51775acc)
 2024-11-07 10:12:53 -03:00
Gilvan Filho
c5d9edf7b7 add linear strategy to brute force 
closes #25917

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
 2024-10-28 10:47:02 -03:00
Steven Hawkins
f0446f023d fix: refines the provider caching logic (#34220) 
closes: #34219

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 964f6b9aac)
 2024-10-24 07:25:59 -03:00
Steven Hawkins
2e02b49b1c fix: providing a separate session for each file (#34210) (#34252) 
closes: #34095

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit bd499755a2)
 2024-10-23 13:56:55 +00:00
Stefan Guilhen
4194f9e517 Add explicit getter method for organizations in RealmAdminResource 
- makes OrganizationsResource reachable to OpenAPI generator

Closes #30832

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit b03ce0047c)
 2024-10-23 09:19:13 -03:00
Stefan Guilhen
2bbf6d49a2 Invalidate user session when associated IdP is missing (previously removed) 
Closes #31724

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit 7d8ff710c2)
 2024-10-22 17:31:38 -03:00
Ricardo Martin
d63d1100ae Change order of absolute path and normalize in the theme folder (#34153) 
Closes #34028

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit a84a2c2ac2)
 2024-10-22 13:13:45 +02:00
Pedro Igor
89032d4a1b Fixing action token lifespan information in the invitation email 
Closes #34049

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-10-18 14:13:14 +02:00
Pedro Igor
c5cd59e80e Do not show domain match message in the identity-first login when no login hint is provided 
Closes #34069

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-10-18 13:42:41 +02:00
Pedro Igor
fad3c9dbb0 Respect the locale set to a user when redering verify email pages 
Closes #34063

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-10-18 13:29:14 +02:00
Martin Kanis
7a69477663 Auth not possible for auth session where user was enabled in the meantime (#33966) 
Closes #33883

Signed-off-by: Martin Kanis <mkanis@redhat.com>
(cherry picked from commit 8fb5ecaa6c)
 2024-10-16 11:32:22 +02:00
Jon Koops
bb5f7cd4ef Check if deviceRepresentation is set (#33828) 
Closes #33814

Signed-off-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit 008faf44cf)
 2024-10-15 11:50:11 +02:00
Jon Koops
627da7d76d Fix NPE on whoami with unknown Realm 
Closes #33907

(cherry picked from commit 936cf68050)

Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com>
Co-authored-by: Oliver <antikalk@users.noreply.github.com>
 2024-10-15 09:04:02 +00:00