mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
2aca97bd19ea5b16b04400dcb7bc668b35ca5c7d
Commit Graph

2655 Commits

Author SHA1 Message Date
Ryan Emerson
eb7ce6ae15 Provide CLI Parameters for jgroups.* options 
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-07 13:07:45 +02:00
Steven Hawkins
c9f38d36a9 fix: reducing memory footprint for cached entries 
closes: #35932

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-30 18:18:29 +00:00
Steven Hawkins
2b44c5676f fix: adding logic to isolate realm migration processing (#39377) 
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-06-30 08:31:57 -04:00
Douglas Palmer
a981f6b6d5 Access Token IDs have less than 128 bits of entropy 
Closes #38663

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2025-06-26 16:48:03 +02:00
Anchels
1c05c8df63 Adjusted the comparisons for PersistentClientSessionEntity 
Closes #40663

Signed-off-by: Anchels <mishtitov@gmail.com>
 2025-06-26 10:55:08 +02:00
Martin Bartoš
3a7569662e Use updated PostgresDatabase from Liquibase 4.32.0 (#40530) 
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-06-24 18:26:30 +02:00
Douglas Palmer
c5964b4ac8 Issue with Handling Negative Values in Certain Fields of Brute Force Detection 
Closes #40353

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2025-06-24 09:13:00 -03:00
Pedro Ruivo
f4d5fa68c1 Update documentation about volatile sessions 
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-20 16:45:22 +00:00
Alexander Schwartz
cde47667fd Making DefaultLazyLoader thread safe 
Closes #40531

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 15:24:07 -03:00
Martin Bartoš
e4f0bfc8e7 Make UPDATE_TIME unique for MIGRATION_MODEL table 
Closes #40088

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-18 13:08:42 +00:00
Pedro Igor
0188d276d8 Invalidate user cache entries when email or username are different from storage 
Closes #40085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-06-17 20:44:01 +00:00
Alexander Schwartz
61586ff328 Disabling persistent sessions affects also offline session cache 
Closes #40483

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-17 08:02:28 +00:00
Pedro Igor
6062ddc6b2 Avoid calling the underlying user storage multiple times when lazily loading model attributes 
Closes #40213

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-06-16 20:06:32 +02:00
Ryan Emerson
78f575b53b Default to num_owners=2 when the persistent-user-sessions feature is disabled 
Closes #39429
Closes #40472

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-16 09:43:39 +02:00
Pavuluri Sai Krishna
76ab8bd21d Implemented validation to ensure each OTP device has a unique label 
Closes #38465

Signed-off-by: Saikrishna <saikrishnap@optimeyes.ai>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Saikrishna <saikrishnap@optimeyes.ai>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-12 12:08:05 +02:00
Martin Bartoš
ad92af3c58 MigrationModel duplicate entry 
Closes #39866

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-11 10:54:29 +02:00
Vlasta Ramik
4b0c994055 Keycloak fails to start on MySQL Cluster due to missing primary key in databasechangelog 
Closes #38602

Signed-off-by: vramik <vramik@redhat.com>
 2025-06-10 08:36:15 +00:00
Ryan Emerson
56af1aa22a Remove outdated tests in model/infinispan 
Closes #40203

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-05 16:01:58 +00:00
Ricardo Martin
41110823c7 Integrate current auth-username-password-form authenticator with passkeys isConditionalMediationAvailable (#38781) 
Closes #29596

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-05 08:53:00 +02:00
Pascal Knüppel
17e2602a56 [OID4VCI] Fix creation of clientScopes with protocol oid4vc (#39556) 
closes #39527

Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2025-06-05 08:49:05 +02:00
Ryan Emerson
f3a1dc4aee Remove kubernetes stack port_range workarounds 
Closes #39546

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-04 17:08:28 +00:00
Ryan Emerson
706390addd JGroups: Switch to "per-destination" bundler for jdbc-ping 
Closes #39545

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-04 12:58:36 +00:00
Alexander Schwartz
5e59370c28 Cache the client session if it is missing from the cache (#39786) 
Closes #39785

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-02 16:30:49 +02:00
Alexander Schwartz
ad10cde87e Add options to configure JPQL comments and slow SQL threshold (#39589) 
Closes #39587

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-02 14:55:43 +02:00
Ryan Emerson
15469d58e1 Throw an exception if transport mTLS keystore or Truststore does not exist (#40089) 
Closes #40024

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-05-30 15:38:24 +02:00
rmartinc
669cc2533c Use previous password in SMTP when the the authType defaults to basic 
Closes #39781

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-30 08:50:22 +02:00
Michal Hajas
88f660b235 Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751) 
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-05-27 11:17:42 -03:00
Ricardo Martin
ef4ad0d59c Remove parent and children composite dependencies when removing roles 
Closes #39724

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-23 11:29:18 +02:00
vramik
f45b8e0c6d Move FGAP classes to specific package 
Signed-off-by: vramik <vramik@redhat.com>
 2025-05-22 09:53:16 -03:00
Pedro Igor
7aab9fade8 Move FGAP types to a specific package 
Closes #39712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 09:53:16 -03:00
Erik Jan de Wit
cbd0d18f6a add description to groups 
fixes #39172

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-14 06:41:01 -04:00
Abhishek Kumar Gupta
7776e8c587 Persist refresh token for IDP token exchange (#31275) 
Closes #39502

Signed-off-by: abhishek818 <abhishekguptaatweb17@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>


Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-14 10:57:13 +02:00
Alexander Schwartz
4b47697c83 Lazily process sessions from ISPN to avoid fetching client sessions (#39639) 
Closes #39638

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 13:16:41 +02:00
Alexander Schwartz
7a7543dcc6 Send events in batch with the new method (#39654) 
Closes #39653

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 12:25:59 +02:00
Alexander Schwartz
32a8c124be More eagerly clear references to client sessions from the user session (#39652) 
Closes #39651

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 11:35:47 +02:00
Pedro Igor
8716d2425d Skip partial evaluation if there is no realm bound to the session 
Closes #39465

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-08 09:29:53 +02:00
Steve Hawkins
abc448e4d1 fix: performing inline user import for multi-file 
closes: #38251

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-07 14:22:39 -03:00
Pedro Ruivo
a263e6c72a Patch kubernetes stack with port_range=0 
Fixes #39023

Fixes #39454

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-05-07 19:20:20 +02:00
vramik
56389c44c8 [FGAP] Refactor permission evaluation code for V2 
Closes #38086

Signed-off-by: vramik <vramik@redhat.com>
 2025-05-05 17:11:16 -03:00
Ryan Emerson
31656b8df9 Reuse InfinispanClusterProvider instances in InfinispanClusterProviderFactory (#39269) 
Closes #39254
Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-05-02 16:09:16 +02:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926) 
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 18:57:45 -04:00
Ryan Emerson
c29dd4a9cf Add dependsOn implementation to RemoteLoadBalancerCheckProviderFactory (#39257) 
Closes #39256

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-04-29 10:23:07 +02:00
Paul Schwabauer
8f860c810e Fix duplicate users on searching attributes with multiple entries 
Closes #39246

Signed-off-by: koplas <pschwabauer@intevation.de>
 2025-04-28 19:35:37 +02:00
Ryan Emerson
7eb7eb286d Reuse InfinispanConnectionProvider instances in DefaultInfinispanConnectionProviderFactory (#39263) 
Closes #39253

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-04-28 15:54:34 +02:00
Pedro Ruivo
eafe08a73a Create CacheEmbeddedConfigProvider 
Closes #38497

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 13:00:53 +02:00
Alexander Schwartz
660217dc41 Avoid inefficient SQL when deleting a role (#39238) 
Closes #39237
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 09:29:05 +00:00
Pedro Ruivo
d7b9a0691e Fix test configuration for remote infinispan 
Closes #39097

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-22 08:25:05 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952) 
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-17 13:20:05 +02:00
Pedro Ruivo
c97a9563ef Refactor JGroups configuration 
Closes #37325

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-17 10:28:28 +02:00
Pedro Ruivo
636fffe0bc Create CacheRemoteConfigProvider (#38570) 
Closes #38496

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-16 17:08:43 +02:00