mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
7e83269b5ce644292d1f31fd68e63dfea50e4bfa
Commit Graph

1212 Commits

Author SHA1 Message Date
vramik
aafb140529 Add a note to release notes about admin roles mapping 
Fixes #39956

Signed-off-by: vramik <vramik@redhat.com>
 2025-06-09 09:34:45 -03:00
Steven Hawkins
f8ba9d3429 fix: adding docs about Keycloak CR security (#40260) 
closes: #40188

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-06 16:47:33 +02:00
Ryan Emerson
0c62bd0878 Change discovery in Kubernetes to jdbc-ping 
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-05 16:48:30 +02:00
mposolda
b03b9f9e3a Improve documentation of service-accounts and make it more clear. Delete the unused file service-accounts.adoc 
closes #39748

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-06-05 08:45:12 +02:00
rmartinc
abd7f88526 Make the checkbox "Sign out from other devices" unchecked by default 
Closes #39975

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-06-04 14:11:29 +02:00
Alexander Schwartz
2b2d7bbcbe Updated documentation to handle the conf folder on upgrades (#40175) 
Closes #40046
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-03 16:14:11 +02:00
SoMin Park
a115a442f4 Add warning about using exec in custom entrypoint scripts 
Closes #39817

Signed-off-by: Somin Park <ps4708@naver.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-02 17:49:20 +02:00
Pedro Igor
7cc055f8a6 Verify brokered user email based on the email_verified claim from the ID Token returned by the OP 
Closes #39885

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-29 10:45:18 -03:00
Pedro Igor
e6e6fa60fa Adding OAuth2-based identity broker 
Closes #35266

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-27 12:07:01 -03:00
Michal Hajas
88f660b235 Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751) 
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-05-27 11:17:42 -03:00
Pedro Ruivo
077173d24f Improve JGroups network bind address documentation (#39874) 
Closes #39872

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-05-27 08:35:01 +00:00
foliengriller
54b131e34e Update themes-react.adoc 
Fixes link formatting

Signed-off-by: foliengriller <info@simpelwebservice.de>
 2025-05-27 09:19:05 +02:00
Yoshiyuki Tabata
5a04f4a07a Update translation.md (#39978) 
Add @k-tamura as a new Japanese language maintainer.

Signed-off-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
 2025-05-27 08:50:20 +02:00
Pedro Igor
b22b1f298c Adding parameter to control whether the count of subgroups of subgroups should be returned 
Closes #39668

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 11:15:38 -03:00
Stan Silvert
b7db98383b New UI Customization Guide (#39756) 
* New UI Customization Guide

Closes #33721

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix grammatical error.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Minor changes.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix typo.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Added preview warning.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2025-05-22 08:23:34 -04:00
rmartinc
3c511635ba Skip AIA for webauthn register if a crendential of teh correct type already exists 
Closes #39191

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-20 18:09:12 +02:00
mposolda
fe2790a09d Fix documentation link to quickstarts to point to 'main' branch instead of 'latest' branch 
closes #39798

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-05-19 10:32:06 +02:00
Steven Hawkins
603ecf20eb fix: adding a doc note about clean up (#39731) 
closes: #39338

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-15 14:08:31 +02:00
Kai J. Witt
c76bb0683c Make max auth age configurable for all required actions by default 
Moved the current configuration implementation for the update password

Closes #39408

Signed-off-by: Kai Josef Witt <KWitt@vhv.de>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Kai Josef Witt <KWitt@vhv.de>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-05-15 08:44:38 +02:00
Douglas Palmer
64cb66f451 Inconsistency in User enabled status in Rest query results. 
Closes #39549 #28713

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2025-05-14 20:10:14 +02:00
Pedro Igor
34ad280665 Build user representations when searching based on the user profile settings 
Closes #39595

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-14 10:42:25 +02:00
Pedro Igor
4171da9fbb Updating upgrading guide with the changes to theme templates 
Closes #39562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-14 09:38:41 +02:00
yorickdevries
d5b873d705 Change screenshot from permissions view to correct resources view 
Cropped it in accordance with the other images

Closes #39697

Signed-off-by: Yorick <yorickdevries@live.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-14 07:00:37 +00:00
Awambeng
ea4ef74917 Fix doc(oid4vc): Correct realm-attributes example and update HTTP method in docs (#39409) 
Closes #39264

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
 2025-05-13 10:09:14 +02:00
Steven Hawkins
a74b60199b fix: updating the examples to bind docker/podman 8080 only to localhost (#39584) 
closes: #39144

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-13 09:40:33 +02:00
andymunro
0fc18c3a0b Make links generic 
Closes #39469

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-09 16:18:15 +02:00
andymunro
afe6d4d4a0 Fix callouts 
Closes #39590

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-09 14:10:59 +00:00
andymunro
1e2b0fdfc4 Edit Observability guide 
Close #39572

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-09 15:02:47 +02:00
andymunro
0b3de6ee6c Fix link to FGAP v1 
Closes #39541

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-08 09:00:40 +02:00
andymunro
eb51c03f90 Edit Operator Guide 
Closes #39543

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-08 08:45:41 +02:00
Alexander Schwartz
a17f551eb2 Log out other sessions including offline sessions on password change 
Closes #38850

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-06 14:04:13 +02:00
Steven Hawkins
3e05f676e5 fix: adds a warning about auto-build behavior (#38899) 
also correcting the language across the warnings

closes: #38662

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-05 18:24:19 +02:00
andymunro
d106de4f83 Clarify podman use 
Closes #39418

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-05-05 16:16:58 +02:00
Daniel Höxtermann
46ed361278 Fix footer ftl snippet in documentation 
Closes #39442

Signed-off-by: Daniel Höxtermann <daniel@hxtm.dev>
 2025-05-05 06:46:15 +00:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS 
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-05-02 12:08:02 +00:00
Steven Hawkins
faa1c194f3 fix: remove ANY mode modification of truststores (#39366) 
also note that ANY should not be used in production

closes: CVE-2025-3501 #39350 #38392



Add a test for the error (#1)



Update docs/guides/server/keycloak-truststore.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-04-30 15:00:12 +00:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926) 
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 18:57:45 -04:00
Steven Hawkins
08b5183784 fix: relaxes the admin root redirect check (#39095) 
* fix: relaxes the admin root redirect check

also deprecates the usage of local_admin

closes: #39085

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving deprecation to 26.3

also changing the adminroot test to seem like it's coming from a proxy

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 11:09:51 -04:00
Alexander Schwartz
4c17ec26e3 SLO measurement should mention a month as a period 
Closes #39312

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2025-04-29 14:19:19 +02:00
rmartinc
4730dbdd8d Make recovery codes supported 
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-29 10:25:46 +02:00
mposolda
e9283ee71d Documentation for recovery codes (deprecation of password policy and required action config) 
closes #39245

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-04-29 09:29:38 +02:00
Alexander Schwartz
54499d94ab Avoid automatic DB upgrades (#39275) 
Closes #39274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-29 09:02:10 +02:00
Pedro Ruivo
eafe08a73a Create CacheEmbeddedConfigProvider 
Closes #38497

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 13:00:53 +02:00
Steven Hawkins
68096ee27e fix: documenting known issues with docker (#39162) 
* fix: documenting known issues with docker

closes: #38801 #38893

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/containers.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-25 11:21:04 +02:00
Francisco Freire
e2958d3783 fix: metric name Update jgrp_metrics.adoc (#39205) 
Closes #39206

fix UDP metric name

Signed-off-by: Francisco Freire <franciscocfreire@gmail.com>
 2025-04-25 11:05:55 +02:00
Alexander Schwartz
c9c49129c7 Remove outdated information about configuring the email server 
Closes #38351

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-04-25 10:55:18 +02:00
andymunro
75557bc312 Adjust introductory sentences 
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-04-25 09:18:04 +02:00
Steven Hawkins
837c2e25a2 fix: adding docs about h2 migration (#39159) 
* fix: adding docs about h2 migration

closes: #39046

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/upgrading/topics/migrate_db.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-24 17:37:03 +02:00
Emmanuel Lécharny
a48469896e Added a link to the ApacheDS doc for server side password hashing 
Closes #39136

Signed-off-by: Emmanuel Lécharny <elecharny@gmail.com>
 2025-04-24 09:25:03 +00:00
Alexander Schwartz
050d3ccba4 Fix broken link for XOAUTH2 configuration 
Closes #39096

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-23 08:47:40 +02:00