mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
071accefe25488f568bca229b4febed6bb7bfee0
Commit Graph

1180 Commits

Author SHA1 Message Date
andymunro
d106de4f83 Clarify podman use 
Closes #39418

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-05-05 16:16:58 +02:00
Daniel Höxtermann
46ed361278 Fix footer ftl snippet in documentation 
Closes #39442

Signed-off-by: Daniel Höxtermann <daniel@hxtm.dev>
 2025-05-05 06:46:15 +00:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS 
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-05-02 12:08:02 +00:00
Steven Hawkins
faa1c194f3 fix: remove ANY mode modification of truststores (#39366) 
also note that ANY should not be used in production

closes: CVE-2025-3501 #39350 #38392



Add a test for the error (#1)



Update docs/guides/server/keycloak-truststore.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-04-30 15:00:12 +00:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926) 
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 18:57:45 -04:00
Steven Hawkins
08b5183784 fix: relaxes the admin root redirect check (#39095) 
* fix: relaxes the admin root redirect check

also deprecates the usage of local_admin

closes: #39085

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving deprecation to 26.3

also changing the adminroot test to seem like it's coming from a proxy

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 11:09:51 -04:00
Alexander Schwartz
4c17ec26e3 SLO measurement should mention a month as a period 
Closes #39312

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2025-04-29 14:19:19 +02:00
rmartinc
4730dbdd8d Make recovery codes supported 
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-29 10:25:46 +02:00
mposolda
e9283ee71d Documentation for recovery codes (deprecation of password policy and required action config) 
closes #39245

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-04-29 09:29:38 +02:00
Alexander Schwartz
54499d94ab Avoid automatic DB upgrades (#39275) 
Closes #39274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-29 09:02:10 +02:00
Pedro Ruivo
eafe08a73a Create CacheEmbeddedConfigProvider 
Closes #38497

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 13:00:53 +02:00
Steven Hawkins
68096ee27e fix: documenting known issues with docker (#39162) 
* fix: documenting known issues with docker

closes: #38801 #38893

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/containers.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-25 11:21:04 +02:00
Francisco Freire
e2958d3783 fix: metric name Update jgrp_metrics.adoc (#39205) 
Closes #39206

fix UDP metric name

Signed-off-by: Francisco Freire <franciscocfreire@gmail.com>
 2025-04-25 11:05:55 +02:00
Alexander Schwartz
c9c49129c7 Remove outdated information about configuring the email server 
Closes #38351

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-04-25 10:55:18 +02:00
andymunro
75557bc312 Adjust introductory sentences 
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-04-25 09:18:04 +02:00
Steven Hawkins
837c2e25a2 fix: adding docs about h2 migration (#39159) 
* fix: adding docs about h2 migration

closes: #39046

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/upgrading/topics/migrate_db.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-24 17:37:03 +02:00
Emmanuel Lécharny
a48469896e Added a link to the ApacheDS doc for server side password hashing 
Closes #39136

Signed-off-by: Emmanuel Lécharny <elecharny@gmail.com>
 2025-04-24 09:25:03 +00:00
Alexander Schwartz
050d3ccba4 Fix broken link for XOAUTH2 configuration 
Closes #39096

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-23 08:47:40 +02:00
Emmanuel Lécharny
1dc97d5d4d Update ldap.adoc with ApacheDS details 
Added some precision about ApacheDS password management.

Closes #39136

Signed-off-by: Emmanuel Lécharny <elecharny@apache.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-04-23 07:55:59 +02:00
Alexander Schwartz
579b185e7a Document operator Auto update strategy when used with podTemplate 
Closes #39059

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-17 21:19:32 +02:00
Marek Posolda
f8a4a8da86 Unexpected AIA Cause Server Errors 
closes #37526

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-04-17 14:15:07 +00:00
Michal Hajas
922294cd28 Change Grafana dashboards guide title to plural 
Closes #39057

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-04-17 15:17:19 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952) 
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-17 13:20:05 +02:00
Alexander Schwartz
a312632468 Add new user event metrics to the release notes 
Closes #39027

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-17 10:58:34 +02:00
Alexander Schwartz
2be2958b8e Update release notes docs for removed remote store 
Closes #39028

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-17 10:56:29 +02:00
Pedro Igor
1ba8fe16ac Deprecate for removal Instagram Identity Broker (#38998) 
Closes #37967
Closes #36562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-17 09:07:06 +02:00
andymunro
17e3bad7b2 Clarify upgrading language 
Closes #38956

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-04-16 20:32:03 +00:00
Martin Bartoš
60fb7a5fa7 Support asynchronous logging (#38094) 
Closes #38578

Closes #28851

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-16 15:08:15 +00:00
Michal Hajas
4dc4de7c12 Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature 
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-04-16 12:01:55 +00:00
Louis FRULEUX
263e7fbf45 fix doc typo getting started 
Closes #39014

Signed-off-by: Louis Fruleux <louis.fruleux1@gmail.com>
 2025-04-16 11:12:38 +02:00
Nicola Baiocco
34630a4176 fix(docs): correct typo in token exchange guide 
Fixed a typo in the example token exchange request section by replacing "folowing" with "following." This improves the clarity and professionalism of the documentation.

Closes #38976

Signed-off-by: Nicola Baiocco <nicola.baiocco@intesys.it>
 2025-04-15 22:34:02 +02:00
Robin Meese
278801c391 Update translations.md for Portugese (Brazil) and French (#38961) 
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-04-15 22:25:45 +02:00
Martin Bartoš
e7c7dce5c7 [Docs] Broken link in ExternalLinksTest for importmap (#38969) 
Closes #38930

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-15 09:02:57 +00:00
Alexander Schwartz
c7ed9fe2c7 Avoid duplicate ID in downstream 
Closes #38920

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-15 08:41:05 +02:00
Yoshiyuki Tabata
0443cc5480 Add tnorimat as Japanese language maintainer (#38915) 
Signed-off-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
 2025-04-14 10:38:52 +02:00
sophie [⛧-440729]
d1ff1b186e add option to the nginx x509 client cert lookup provider to not url-decode the passed client cert 
Closes #17171 

Signed-off-by: ⛧-440729 [sophie] <sophie@999eagle.moe>
 2025-04-11 10:38:38 +02:00
Pedro Igor
288b6dae12 More information to docs 
Closes #38798

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-10 20:03:05 +02:00
Thomas Darimont
478e0b3264 Make sure that there is single audience allowed by default in JWT tokens sent to client authentication 
closes #38819

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
 2025-04-10 18:08:10 +02:00
Peter Zaoral
6d6f9667c6 Document how Keycloak is upgraded when Operator is upgraded via OLM (#38297) 
Closes: #35901

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-04-10 13:56:42 +02:00
Pedro Igor
ae88d7921f Improvements to partial evaluation 
Closes #38732

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-09 18:15:28 +02:00
Robin Meese
c0df401ccf add janher to dutch translation maintainer 
Closes: #38792

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
 2025-04-09 18:08:19 +02:00
Falko Modler
770a575f95 Allow zero tracing-sampler-ratio 
Closes #38764

Signed-off-by: Falko Modler <famod@users.noreply.github.com>
 2025-04-09 11:57:03 +00:00
Alexander Schwartz
73ee966feb Sorting the chapters of the HA guide 
Closes #38721

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-08 07:23:53 -03:00
Alexander Schwartz
2ad776553a Adding a guide on how to enable and use exemplars 
Closes #38688

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-08 07:23:28 -03:00
Pedro Igor
87430fc181 Add impersonate-members scope to group resource type 
Closes #38566

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-07 14:56:27 +00:00
vramik
6488890585 [FGAP:V2] remove configure scope from Client resource type 
Closes #38567

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-07 07:05:02 -03:00
Marek Posolda
f984644d07 Clarify in documentation that legacy token exchange requires FGAP:v1 (#38694) 
closes #38693

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-07 08:27:56 +02:00
Alexander Schwartz
38b543af19 Review comments to align with style guide 
Closes #38338

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-05 14:04:21 -03:00
Alexander Schwartz
d69a530d5b Check HTML head for redirects 
Closes #38655

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-04 18:40:41 +02:00
Stefan Guilhen
c4c3e2eee6 Allow redirection to idp when user email matches any of the org domains 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Martin Panzer <martin.panzer@active-logistics.com>

Closes #33804
 2025-04-04 11:28:04 -03:00