mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
2aca97bd19ea5b16b04400dcb7bc668b35ca5c7d
Commit Graph

154 Commits

Author SHA1 Message Date
Alexander Schwartz
05d0c34681 Automatically connect to a writer instance of PostgreSQL (#40384) 
Closes #40383

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-04 16:46:49 +02:00
Barathwaja S
81a7f38a76 Added emailVerified filtering for users endpoint; updated user count endpoint with logic to support enabled, emailVerified, idpAlias, idpUserId, and exact field query parameters 
Closes #38556
Closes #29295

Signed-off-by: Barathwaja S <sbarathwaj4@gmail.com>
 2025-07-03 17:05:36 -03:00
Lukas Hanusovsky
046f8da7e3 [Test framework] ImpersonationTest migration 
Part of #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-06-26 15:04:35 +02:00
Ryan Emerson
9543008899 Create clustering test cases for OIDC flows (#40623) 
Closes #39965

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2025-06-25 15:06:10 +02:00
Michal Hajas
d2f4635ea0 Add clustering tests to new test framework 
Closes #39962

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@redhat.com>
 2025-06-13 20:26:07 +02:00
Giuseppe Graziano
1d9ecb2d7a Added WebAuthn and recovery codes as disabled in the First Broker Login Flow (#40319) 
Closes #40000

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2025-06-09 12:40:53 +02:00
rmartinc
2ec1496c5b Rename "Browser - Conditional OTP" to "Browser - Conditional 2FA" in default browser flow 
Closes #40281

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-09 08:41:23 +02:00
rmartinc
c3bbf45a7b Add webauthn and recovery codes to the default browser flow as disabled 
Closes #39999

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-05 16:09:32 +02:00
Pascal Knüppel
17e2602a56 [OID4VCI] Fix creation of clientScopes with protocol oid4vc (#39556) 
closes #39527

Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2025-06-05 08:49:05 +02:00
vramik
9590221ef8 Allow mapping Admin roles by server administrator only 
Closes #39956


Signed-off-by: vramik <vramik@redhat.com>
 2025-06-04 15:05:51 -03:00
Pedro Igor
43a7b27301 Resolve roles inherited from groups and composite roles 
Closes #39850

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-26 14:15:06 -03:00
Ricardo Martin
ef4ad0d59c Remove parent and children composite dependencies when removing roles 
Closes #39724

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-23 11:29:18 +02:00
Pedro Igor
b22b1f298c Adding parameter to control whether the count of subgroups of subgroups should be returned 
Closes #39668

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 11:15:38 -03:00
Pedro Igor
7aab9fade8 Move FGAP types to a specific package 
Closes #39712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 09:53:16 -03:00
rmartinc
598154bc58 Only reuse SMTP authentication data for testing endpoint when the same auth, host, port and user are passed 
Closes #39486

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-21 14:01:02 +02:00
Šimon Vacek
175102d03d Migration util imrovements (#39161) 
Closes #37691
Implements #37283



migration util rewrite static imports



migration util add more assert methods



migration util rewrite common statements



migration util fix diff tool usage



Update test migration README



migration util review fixes

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-05-19 09:55:25 +02:00
Kai J. Witt
c76bb0683c Make max auth age configurable for all required actions by default 
Moved the current configuration implementation for the update password

Closes #39408

Signed-off-by: Kai Josef Witt <KWitt@vhv.de>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Kai Josef Witt <KWitt@vhv.de>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-05-15 08:44:38 +02:00
Steven Hawkins
f40cb88db4 fix: removing KeycloakApplication usage of keycloak-add-user.json (#39460) 
* fix: removing KeycloakApplication usage of keycloak-add-user.json

closes:#39428

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Removing the test keycloak-add-user.json

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-08 07:58:09 +00:00
Keshav Deshpande
8026a68ec8 Change JWKS header 
Closes #39110

Signed-off-by: Keshav Deshpande <keshavprashantdeshpande@gmail.com>
 2025-05-05 12:23:15 +02:00
Steven Hawkins
08b5183784 fix: relaxes the admin root redirect check (#39095) 
* fix: relaxes the admin root redirect check

also deprecates the usage of local_admin

closes: #39085

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving deprecation to 26.3

also changing the adminroot test to seem like it's coming from a proxy

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 11:09:51 -04:00
Simon Vacek
ba150ed0f9 Split GroupTest into multiple files 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 11:52:15 +02:00
Simon Vacek
a8e33732cd Move AbstractGroupTest.java, GroupMappersTest.java, GroupTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/RealmConfigBuilder.java
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/UserConfigBuilder.java

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/ClientConfigBuilder.java
 2025-04-29 11:52:15 +02:00
Simon Vacek
9e1d519e2c Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 11:52:15 +02:00
rmartinc
4730dbdd8d Make recovery codes supported 
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-29 10:25:46 +02:00
Simon Vacek
bea2c75f5f Split PermissionsTest into multiple files 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Simon Vacek
b2f3a8a65b Move PermissionsTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Simon Vacek
ebfa750805 Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Šimon Vacek
666868a08d Move ClientTest.java to the new testsuite (#38933) 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:18:49 +02:00
rmartinc
08704df651 Make DateUtil convert the local dates into epoch in milliseconds 
Closes #38911

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-25 17:25:45 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952) 
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-17 13:20:05 +02:00
vramik
bd58b70447 Test coverage for count methods when filtering 
Closes #38692

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-15 15:31:02 -03:00
Martin Bartoš
83001e4024 OTelHttpClientFactory not configured properly when tracing enabled 
Closes #38740

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-08 17:04:23 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported 
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-08 13:00:47 -03:00
Pedro Igor
79b533ee02 Allow managing client authorization settings is manage scope is granted for clients 
Closes #38726

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 13:07:48 +02:00
Pedro Igor
be880ae204 Do not cache partial results when FGAP is enabled 
Closes #38705

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 08:22:22 +02:00
Pedro Igor
87430fc181 Add impersonate-members scope to group resource type 
Closes #38566

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-07 14:56:27 +00:00
Pedro Igor
d98ca0a2a2 Make sure searches by identifiers are filtered 
Closes #38679

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-07 14:59:43 +02:00
Lukas Hanusovsky
f5323fec24 [Test framework] AdminConsoleWhoAmILocaleTest migration (#38158) 
* Moving files to the new test suite

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Move AdminConsoleWhoAmILocaleTest.java, DeclarativeUserTest.java to the new testsuite

Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-04-07 12:45:52 +02:00
Šimon Vacek
2f852b4b9a Move ClientRolesTest to the new testsuite (#38505) 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-07 12:34:49 +02:00
vramik
6488890585 [FGAP:V2] remove configure scope from Client resource type 
Closes #38567

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-07 07:05:02 -03:00
Pedro Igor
e5ff19b327 Adding missing fgap filtering to user count methods 
Closes #38510

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-04 14:21:57 +02:00
Pedro Igor
9f079f7874 Permission checks that do not check a specific client should check the permissions granted to the client resource type 
Closes #38653

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 17:00:47 +00:00
vramik
8127a9da60 [FGAP] Allow user creation when the admin has permission to manage-members and manage-membership for all existing groups defined in UserRepresentation 
Closes #38269

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-03 12:08:46 -03:00
Pedro Igor
dbb0179a93 Aligning partial evaluation with the outcome from regular evaluations 
Closes #38626

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 12:07:30 -03:00
Pedro Igor
29d3dcb49a Do not allow delete the FGAP client 
Closes #38644

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 14:57:06 +02:00
vramik
f12fa0b5bb [FGAP] remove transitiveness from auth scopes 
Closes #38557

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-02 16:56:25 -03:00
Pedro Igor
61cb0acbc4 Fixing inconsistencies when evaluating permission in the evaluation tab 
Closes #38498

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-01 11:40:27 -03:00
Václav Muzikář
2a0ce46471 Prevent frontend endpoint redirect to admin endpoint (#38464) 
Closes #38463

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-03-28 18:44:43 +01:00
Pedro Igor
78aa8b486f User not visible when permission with different scope exists 
Closes #38369

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-27 08:01:04 -03:00
Pedro Igor
75651ff5c0 Partial evaluation processing only permissions with scope view 
Closes #38436

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-27 08:01:04 -03:00