mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
6ced9dcec047ab4e416fc0e690f9bf6c467ff2d2
Commit Graph

166 Commits

Author SHA1 Message Date
Alexander Schwartz
4a924f6c94 Tune the caching guide for the upcoming release 
Closes #36039

Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-12-19 16:43:02 +01:00
Jan Verhaeghe
56246096e0 Align on one realm-name placeholder 
Closes #36047

Signed-off-by: Jan Verhaeghe <jan@hwfaq.be>
 2024-12-19 13:48:18 +00:00
Steven Hawkins
2bb98d9684 fix: updating the partially dynamic url to not include path (#35831) 
closes: #35706

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-12-13 12:01:13 +01:00
Václav Muzikář
9993e17346 Ability to specify log category levels through separate options (#35138) 
Closes #34957

Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-12-11 17:27:44 +01:00
Steven Hawkins
27eaaefc4f fix: removing doc that suggests using the config file for quarkus props (#35820) 
closes: #35770

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-12-11 16:35:38 +01:00
Eric Bariaux
782135684c Fixed grammar in directory-structure.adoc 
Closes #35766

Signed-off-by: Eric Bariaux <375613+ebariaux@users.noreply.github.com>
 2024-12-10 18:32:29 +00:00
Thomas Aunvik
05884e882f Changed 'http-enabled' to correct code quotes 
Closes #35611

Signed-off-by: Thomas Aunvik <contact@thaun.dev>
 2024-12-04 17:34:21 +00:00
Steven Hawkins
37dc2b6ca3 correcting handling of \ in configuration values on windows (#34462) 
closes: #34041

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
 2024-12-04 17:15:05 +01:00
Alexander Schwartz
12436fd922 Fix unordered list in caching guide 
Closes #35006

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-25 13:47:42 +01:00
Michal Hajas
cb914b2a3d Fix observability links 
Closes #35240
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-11-22 17:41:35 +01:00
Václav Muzikář
d60cb9aaef fix: prevent inclusion of characters that could lead to FileVault path traversal (#35223) 
Closes: #35215

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Peter Zaoral <pepo48@gmail.com>
 2024-11-22 10:18:00 +01:00
Václav Muzikář
cf622e8d51 Update docs with security warning around client certificate lookup (#35222) 
Closes #35217

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-11-22 10:12:21 +01:00
Michal Hajas
7049e08c7b Create a new guide category Observability and move some guides from server to it (#35144) 
Closes: #35127

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-11-21 13:57:59 +01:00
Jean-Christophe Manciot
9d10b81be2 db.adoc: Refined the 'Configuring a database' paragraph (#32483) 
* db.adoc: Refined the 'Configuring a database' paragraph

closes: #32348

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/server/db.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2024-11-14 17:13:05 +00:00
andymunro
3ca3a4ad34 Update installation locations 
Closes #34855

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-12 14:10:32 +00:00
Pedro Ruivo
d7e5319f70 Document network ports for Keycloak clustering 
Also switch the default to jdbc-ping as this  should be a drop-in replacement looking at the networking behavior of udp.

Closes #34658

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-11 13:28:15 +01:00
Stian Thorgersen
b82ec62eb7 Add database testsuite matrix to new testsuite (#34775) 
Closes #34692

Signed-off-by: stianst <stianst@gmail.com>
 2024-11-11 07:04:30 +01:00
Bernd Bohmann
7681687e0a Provide missing user event metrics from aerogear/keycloak-metrics-spi to a keycloak micrometer event listener 
inspired by
https://github.com/aerogear/keycloak-metrics-spi
https://github.com/please-openit/keycloak-native-metrics

Closes #33043

Signed-off-by: Bernd Bohmann <bommel@apache.org>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2024-11-04 08:56:24 +01:00
Max Hovens
4e540fa2a7 Remove inaccurate statement about master realm imports 
This is supported since 26.0.0

Closes #34301

Signed-off-by: maxhov <14804474+maxhov@users.noreply.github.com>
 2024-10-31 11:23:35 +00:00
Ryan Emerson
a79b67cac8 Deprecate other transport stacks (ec2, azure, google) 
Closes #34253

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-10-31 11:47:13 +01:00
Ryan Emerson
7152a8b0f3 Update caching docs to reflect that IP multicast is no longer used by default 
Closes #34495

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-30 11:47:32 +00:00
Andy
f994cc54d5 Remove robots.txt entirely 
* remove robots.txt entirely, as blocking page-
crawling prevents the `X-Robots-Tag` headers
(and similar meta tags) from working as intended.

Closes #17433

Signed-off-by: Andy <andy@slice.is>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-25 12:09:50 +00:00
Ryan Emerson
6eb870fcfc Add JDBC_PING2 stacks for both TCP and UDP 
Closes #34265

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-25 00:17:44 +02:00
Ryan Emerson
902abfdae4 JDBC_PING as default discovery protocol 
Closes #29399

- Add ProviderFactory#dependsOn to allow dependencies between
  ProviderFactories to be explicitly defined
- Disable Infinispan default shutdownhook disabled to ensure lifecycle
  is managed exclusively by Keycloak
- Remove Infinispan shutdown hook in KeycloakRecorder and manage
  EmbeddedCacheManager lifecycle only in DefaultInfinispanConnectionProviderFactory#close

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-22 20:19:19 +00:00
Steven Hawkins
af1a5ea2a8 fix: refining https file type detection (#33703) 
also making common trustore logic align

closes: #33649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-10-22 13:05:56 -04:00
Steven Hawkins
fd89297c15 fix: adding a server guide on installation location / layout (#33604) 
closes: #32110

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-10-21 18:02:37 +02:00
Sutou Kouhei
358ab5512c Add a description which port shoud be reverse proxied 
I misunderstood how to configure reverse proxy with different
hostname/hostname-admin. So this description will help other users.

Closes #33559

Signed-off-by: Sutou Kouhei <kou@clear-code.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-18 10:08:00 +02:00
Martin Bartoš
637ca2e138 [PERF] OpenTelemetry is initialized even when disabled (#34031) 
Change host reference in logging guide

Fixes #33948

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-10-17 15:08:50 +02:00
foliengriller
316e00bb98 Unified case in Dockerfile Example (#33774) 
This prevents a warning on build-time.
https://docs.docker.com/reference/build-checks/from-as-casing/

Signed-off-by: foliengriller <info@simpelwebservice.de>
 2024-10-10 13:22:25 +02:00
Alexander Schwartz
7b85fc3319 Fix runaway formatting 
Closes #33585

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-04 14:09:21 +02:00
Steven Hawkins
c092867c48 fix: correcting the container examples wrt hostname (#33542) 
closes: #33539

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-10-04 10:27:52 +02:00
mposolda
41c72d46d2 Document users hashed passwords with argon2 does not work in FIPS environment 
closes #33296

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2024-10-03 08:47:45 +02:00
Pedro Aguiar
002560ef3e update/fix-typo-confFileValue-should-be-keystoreValue 
- "confFileValue" appears twice consecutively in the same paragraph; the second occurrence should be "keystoreValue".

Thanks to Justin P for pointing that out in [1].

[1] https://github.com/keycloak/keycloak/discussions/33292

Signed-off-by: Pedro Aguiar <contact@codespearhead.com>
 2024-10-02 19:33:48 +02:00
Steven Hawkins
f1a7a4804e fix: adds additional info / warnings to hostname v2 (#33261) 
* fix: adds additional info / warnings to hostname v2

closes: #24815

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the proxy-headers language from #33209

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding hostname-strict-https

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving removed property check to the quarkus side

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/mappers/HostnameV2PropertyMappers.java

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/server/hostname.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-28 08:48:09 +00:00
Steven Hawkins
cf2ecf87f6 fix: add the proxy-protocol option (#33276) 
* fix: add the proxy-protocol-enabled option

closes: #10492

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/reverseproxy.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-27 23:44:59 +02:00
Václav Muzikář
fc76bad1fd Undeprecate https-trust-store-* options and enhance mTLS docs 
Closes #33172

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-09-27 18:07:57 +02:00
mposolda
8f038f19dd Upgrade BCFIPS to 2.0 
closes #30415

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-09-26 06:52:21 +02:00
Ryan Emerson
adb8d989f5 Allow Embedded Cache sizes to be configured via the CLI 
Closes #31514

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-09-24 14:35:24 +02:00
Steven Hawkins
3793d60104 fix: expanding more on proxy-headers and hostname concerns (#33211) 
closes: #33209

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-09-24 09:42:52 +02:00
Martin Bartoš
84564f080a Redirect to relative-path from the root path (#32868) 
Closes #32863

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-18 16:37:28 +02:00
Martin Bartoš
45ef84a397 Possibility to separately specify log levels for log handlers - basic (#32779) 
* Possibility to separately specify log levels for log handlers

Closes #32619

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Edit properties description

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2024-09-13 12:05:03 +02:00
Steven Hawkins
f0bf290c28 fix: add a reload period property (#32715) 
closes: #23771

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-09-13 09:47:21 +02:00
Jon Koops
188893222f Remove references of statically served Keycloak JS from documentation 
Closes #32821

Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2024-09-12 09:38:00 +02:00
Martin Bartoš
f6d880ea3f Syslog: add necessary options to cover the major usability (#32316) 
Closes #32314

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-09-06 16:20:52 +02:00
nxadm
3c16e2ac77 Document Syslog app-name option (#32524) 
Closes #32525

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Claudio Ramirez <pub.claudio@gmail.com>
 2024-09-02 12:10:15 +02:00
Peter Zaoral
7019287a67 Rename Dockerfile to Containerfile in the docs 
Closes: #27947

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2024-08-30 13:22:22 +02:00
Martin Bartoš
afcbf79582 OTEL: Profile Feature 
Closes #32231

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-08-30 13:19:09 +02:00
Michal Hajas
af53af1506 Document persistent sessions are enabled by default 
Closes #32387

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-08-30 09:20:58 +00:00
Steve Hawkins
c9779cfa24 fix: adding a first-class option for trusted proxies 
closes: #32135

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-08-29 14:00:27 +02:00
Václav Muzikář
9bbfec5cdd Remove GELF (#32230) 
Closes #27365

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-08-28 21:25:05 +02:00