mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
856df9ea3db5952ed209be53b87da5be0eea84cf
Commit Graph

2700 Commits

Author SHA1 Message Date
Alexis Rico
224ccbb79d Make organization domains optional 
Closes #31285

Signed-off-by: Alexis Rico <sferadev@gmail.com>
 2025-08-27 18:11:15 -03:00
Pedro Ruivo
a01571c2cc Import client sessions into Infinispan concurrently for persistent sessions 
Closes #41074

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-26 22:16:04 +02:00
Stefan Guilhen
8eb6ee619f Rework getEligibleResourcesForInitialAction so it returns all resources that are eligible to be associated with a policy 
Closes #42106

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-08-26 11:52:46 -03:00
Alexander Schwartz
36cbbbc7b4 Avoid deleting old client sessions 
If this is done concurrently, this can load to errors with Hibernate and its optimistic locking

Closes #41427

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-26 09:59:51 +02:00
Pedro Ruivo
6bcaa63124 Concurrently update the remote caches 
Closes #42096

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-25 16:39:17 +02:00
Pedro Ruivo
61e488bbf0 Skip configuring jdbc-ping stack in local mode 
Closes #42047

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-22 15:11:58 +02:00
Pedro Ruivo
2f131fa56c Detect and handle KC split brain clusters 
Closes #41561

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-21 11:18:34 +02:00
Stefan Guilhen
70659ac183 Rework RLM core to schedule action based on events @sguilhen (#42010) 
* Rework RLM core to schedule action based on events

Closes #41803

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-08-20 17:59:52 +00:00
Alexander Schwartz
09f863bf9d Don't validate duplicate credential label on update if label is unchanged 
Closes #41945

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-08-20 08:06:06 +02:00
Ryan Emerson
b0f4b4efee Log applied cache configurations as part of debug logs 
Closes #41950

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-08-19 17:01:19 +02:00
Steven Hawkins
2ce3474ed5 fix: addressing possible npes (#41944) 
close: #40659

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-08-18 23:51:17 +02:00
Ryan Emerson
168d9cc090 Simplify Cache Configuration file by removing built-in cache configurations 
Closes #41559

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-15 16:16:56 +00:00
Akbar Husain
06f80416fb Replace keySet with entrySet 
Closes #40064

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
 2025-08-14 17:31:15 +02:00
Pedro Igor
3bf46e5421 "linked-accounts" endpoint displays all Identity providers 
Closes #19732

Signed-off-by: Réda Housni Alaoui <reda-alaoui@hey.com>
Co-authored-by: Réda Housni Alaoui <reda-alaoui@hey.com>
 2025-08-14 15:21:03 +02:00
Dennis Kniep
d74a10d87a Add TiDB as supported db 
Closes #41455

Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-14 07:27:21 +00:00
Peter Skopek
651d651c30 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822) 
Signed-off-by: Peter Skopek <pskopek@redhat.com>
 2025-08-12 16:50:17 +02:00
vramik
a8225655cf Initial commit for the RLM feature 
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
 2025-08-11 17:34:41 -03:00
Pedro Ruivo
ee5607727c Allow setting the number of owners 
Closes  #10875

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-07 08:13:15 -03:00
Martin Bartoš
534a37f356 Remove workaround for PostgreSQL and Liquibase 
Closes #40687

This reverts commit 3a7569662e.

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-08-05 16:35:25 -03:00
Steven Hawkins
11924e6473 enhance: adding the ability to get the root config from a Scope 
closes: #36268

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-08-05 18:51:33 +02:00
Pedro Ruivo
75afda4104 Ensure cache configuration has correct number of owners 
Closes #41558

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-05 15:19:03 +01:00
Steven Hawkins
a79e603272 fix: cutting down on the memory footprint for import (#41196) 
closes: #40875

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-08-04 11:02:39 -04:00
Alexander Böhm
9cdbd1cc35 added a non-null check to check whether the to be exported realm exists (#40655) 
* added non-null check for the exported realm like already used in SingleFileExportProvider to have a proper error message in case the realm does not exist

Closes #39122

Signed-off-by: Alexander Böhm <boehm.alexanderb@gmail.com>

* added tests based upon review conversation

Closes #39122

Signed-off-by: Alexander Böhm <boehm.alexanderb@gmail.com>

* updating tests for non existent realm name

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Alexander Böhm <boehm.alexanderb@gmail.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2025-08-04 08:42:55 -04:00
Oliver
27cd19e68e add index for user_id and type on event_entity 
Closes #26995

Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-30 20:52:48 +00:00
Alexander Schwartz
c9943af4f3 Reduce likelihood of multiple coordinators on concurrent startup 
Closes #41290

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-07-30 15:39:44 +02:00
Pedro Ruivo
cf21fa10fd Update docs how to verify that a cluster has formed 
Closes #40296

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-28 10:01:00 +00:00
Alexander Schwartz
8d8ed924c4 Setting 'write_data_on_find' to true to ensure merging of views 
Closes #41390

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-24 16:25:08 +02:00
Martin Bartoš
4a23e43e02 Avoid additional execution of Liquibase changelog lock table statement 
Closes #41295

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-24 12:18:25 +02:00
Martin Bartoš
74cfa87f3c Remove obsolete code for the Liquibase LogHistoryService 
Closes #41229

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-22 13:50:30 +02:00
Alexander Schwartz
7fd3380b19 OpenTelemetry Tracing: Visualize JGroups communication (#39659) 
Closes #39658

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-22 11:51:58 +02:00
Steven Hawkins
98612bbb67 fix: adding group import handling similar to users 
closes: #41235

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-22 09:29:32 +00:00
Martin Bartoš
b27213aef5 Remove obsolete Liquibase FK snapshot generator 
Closes #41293

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-22 10:15:33 +02:00
rmartinc
e0bba39da0 Allow configure encryption details for SAML clients 
Closes #40933

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-07-18 20:13:40 +02:00
Ryan Emerson
52a83509dc Default jdbc-ping cluster setup for distributed caches fails in Oracle 
* Add DatabaseConfig to TestDatabase so the underlying DB can be
  configured per test
* Allow DB initScripts to be configured by tests

Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-17 15:57:25 +00:00
Ryan Emerson
7ea7c2dcc4 Document spi-user-sessions--infinispan--use-batches 
Closes #41219

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-17 12:41:53 +00:00
Ryan Emerson
4bb02305c3 Implement CompatibilityMetadataProvider for Cache CLI args 
Closes #41138

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-16 19:52:51 +02:00
Martin Bartoš
23c301f2ed Upgrade to the Quarkus 3.24.2 version (#40867) 
Closes #40592

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-07-15 16:15:03 +02:00
Ricardo Martin
164274ac51 Check if PK for DATABASECHANGELOG already exists 
Closes #41082

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-07-11 16:06:08 +02:00
Pedro Ruivo
5219a331b9 Skip computing lifespan for read-only sessions 
Fixes #40980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-07-10 20:40:28 +02:00
Pedro Igor
88069cd5fb Mark user session for removal when the user bound to cannot be resolved 
Closes #40398

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-07-10 20:37:18 +02:00
Pascal Knüppel
f39a37d8d1 [OID4VCI] Move realm attributes to clientScope and protocol-mappers (#39768) 
fixes #39527


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
 2025-07-10 14:46:36 +02:00
Pedro Ruivo
21eda2ae7a Improve logging for client sessions load 
Closes #41034

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-07-10 10:08:27 +00:00
rmartinc
900d8c7400 Changing default passwordless webauthn policy to follow recommended values in the documentation 
Closes #40792

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-07-09 11:34:28 +02:00
vramik
332c9b6e4a Fix NPE when accessing group concurrently 
Closes #40368

Signed-off-by: vramik <vramik@redhat.com>
 2025-07-08 16:13:54 -03:00
Pedro Ruivo
9322d71d61 UserSession Offline removed from DB if not in cache 
Fixes #40754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-07-07 20:52:06 +02:00
Ryan Emerson
eb7ce6ae15 Provide CLI Parameters for jgroups.* options 
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-07 13:07:45 +02:00
Steven Hawkins
c9f38d36a9 fix: reducing memory footprint for cached entries 
closes: #35932

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-06-30 18:18:29 +00:00
Steven Hawkins
2b44c5676f fix: adding logic to isolate realm migration processing (#39377) 
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-06-30 08:31:57 -04:00
Douglas Palmer
a981f6b6d5 Access Token IDs have less than 128 bits of entropy 
Closes #38663

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
 2025-06-26 16:48:03 +02:00
Anchels
1c05c8df63 Adjusted the comparisons for PersistentClientSessionEntity 
Closes #40663

Signed-off-by: Anchels <mishtitov@gmail.com>
 2025-06-26 10:55:08 +02:00