mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
d91688198c9c1e0313880b2ab67056aa89e00a5c
Commit Graph

200 Commits

Author SHA1 Message Date
Steven Hawkins
a74b60199b fix: updating the examples to bind docker/podman 8080 only to localhost (#39584) 
closes: #39144

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-13 09:40:33 +02:00
andymunro
afe6d4d4a0 Fix callouts 
Closes #39590

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-09 14:10:59 +00:00
Steven Hawkins
3e05f676e5 fix: adds a warning about auto-build behavior (#38899) 
also correcting the language across the warnings

closes: #38662

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-05 18:24:19 +02:00
andymunro
d106de4f83 Clarify podman use 
Closes #39418

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-05-05 16:16:58 +02:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS 
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-05-02 12:08:02 +00:00
Steven Hawkins
faa1c194f3 fix: remove ANY mode modification of truststores (#39366) 
also note that ANY should not be used in production

closes: CVE-2025-3501 #39350 #38392



Add a test for the error (#1)



Update docs/guides/server/keycloak-truststore.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-04-30 15:00:12 +00:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926) 
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 18:57:45 -04:00
Steven Hawkins
68096ee27e fix: documenting known issues with docker (#39162) 
* fix: documenting known issues with docker

closes: #38801 #38893

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/containers.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-25 11:21:04 +02:00
andymunro
75557bc312 Adjust introductory sentences 
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-04-25 09:18:04 +02:00
Martin Bartoš
60fb7a5fa7 Support asynchronous logging (#38094) 
Closes #38578

Closes #28851

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-16 15:08:15 +00:00
sophie [⛧-440729]
d1ff1b186e add option to the nginx x509 client cert lookup provider to not url-decode the passed client cert 
Closes #17171 

Signed-off-by: ⛧-440729 [sophie] <sophie@999eagle.moe>
 2025-04-11 10:38:38 +02:00
Alexander Schwartz
73ee966feb Sorting the chapters of the HA guide 
Closes #38721

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-08 07:23:53 -03:00
Alexander Schwartz
38b543af19 Review comments to align with style guide 
Closes #38338

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-05 14:04:21 -03:00
Akbar Husain
6d2de61b8e Fix some ascii doc warnings 
Closes #38479

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
 2025-03-27 19:42:18 +01:00
Peter Zaoral
1d6ef3c7a7 [Windows] Improve docs on handling quotes in PowerShell (#37468) 
Closes: #36697

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2025-03-27 17:00:15 +01:00
Alexander Schwartz
c9b88c6bf6 Finalizing release notes and documentation for initial rolling update 
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-03-19 21:34:09 +01:00
Alexander Schwartz
d4054032a6 Fix broken link to configuration for production 
Closes #38152

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-03-17 09:31:50 -03:00
Steven Hawkins
d9c3511fa5 fix: adding a check if the proxy is trusted prior to using a cert header (#37465) 
closes: #35861

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
 2025-03-12 11:21:33 +01:00
Alexander Schwartz
bc7ec1208e Enable the TLS based JGroups encryption by default and update the docs 
Closes #37696

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-03-03 10:50:51 -03:00
Pedro Ruivo
f7e21af82e JGroups certificate rotation 
Closes #37316

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-27 12:56:18 +01:00
Martin Bartoš
6f0ed46404 Upgrade to Quarkus 3.19.0.CR1 (#37492) 
Closes #37436

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-24 19:52:01 +01:00
Steven Hawkins
a819a213f9 fix: hardening to prevent usage of proxy-protocol with proxy-headers (#37463) 
* fix: hardening to prevent usage of proxy-protocol with proxy-headers

closes: #37458

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/reverseproxy.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-24 14:48:06 +01:00
Martin Bartoš
324757316b Improve docs about JPA provider configuration for DB migration strategy (#37080) 
Closes #37079

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-14 17:54:26 +01:00
Pedro Ruivo
70e2a28ff9 Create CA certificate for JGroups encryption 
Closes #36750

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-02-13 10:32:43 +00:00
Pedro Ruivo
0f91e67b90 Feature flag: rolling-updates 
Closes #36840

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-02-06 17:03:50 +01:00
Alexander Schwartz
757f46a75a Document external port and address feature for JGroups (#36913) 
Closes #36858

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-04 22:20:49 +01:00
Martin Bartoš
20203746fb Support ECS for logs 
Closes #36854

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-04 17:59:30 +01:00
Martin Bartoš
33782602ca Improve readability of relevant options in guides (#37015) 
Closes #37014

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-04 14:07:50 +01:00
Steven Hawkins
827e82ad25 fix: adding a check and documenting import naming conventions (#36340) 
closes: #36284 #34793

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-01-28 18:44:47 +01:00
Pedro Ruivo
588e60e058 New CLI command: update-compatibility 
Closes #36306

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-01-24 15:05:58 +00:00
James Nord
3356b9bfea fix incorrect statement about BC FIPS licences (#36680) 
closes #36679

Signed-off-by: James Nord <jtnord@users.noreply.github.com>
 2025-01-23 10:32:54 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation 
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-01-22 14:58:35 +01:00
Alexander Schwartz
caf546bdb2 Update the documentation on how to run Keycloak IPv6 only (#36393) 
Closes #36456

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-01-16 10:41:22 +01:00
Stian Thorgersen
c1c147cb17 Restrict access to environment variables when at the server runtime (#36472) 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-15 09:36:19 +01:00
Alexander Schwartz
4a924f6c94 Tune the caching guide for the upcoming release 
Closes #36039

Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-12-19 16:43:02 +01:00
Jan Verhaeghe
56246096e0 Align on one realm-name placeholder 
Closes #36047

Signed-off-by: Jan Verhaeghe <jan@hwfaq.be>
 2024-12-19 13:48:18 +00:00
Steven Hawkins
2bb98d9684 fix: updating the partially dynamic url to not include path (#35831) 
closes: #35706

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-12-13 12:01:13 +01:00
Václav Muzikář
9993e17346 Ability to specify log category levels through separate options (#35138) 
Closes #34957

Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-12-11 17:27:44 +01:00
Steven Hawkins
27eaaefc4f fix: removing doc that suggests using the config file for quarkus props (#35820) 
closes: #35770

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-12-11 16:35:38 +01:00
Eric Bariaux
782135684c Fixed grammar in directory-structure.adoc 
Closes #35766

Signed-off-by: Eric Bariaux <375613+ebariaux@users.noreply.github.com>
 2024-12-10 18:32:29 +00:00
Thomas Aunvik
05884e882f Changed 'http-enabled' to correct code quotes 
Closes #35611

Signed-off-by: Thomas Aunvik <contact@thaun.dev>
 2024-12-04 17:34:21 +00:00
Steven Hawkins
37dc2b6ca3 correcting handling of \ in configuration values on windows (#34462) 
closes: #34041

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
 2024-12-04 17:15:05 +01:00
Alexander Schwartz
12436fd922 Fix unordered list in caching guide 
Closes #35006

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-25 13:47:42 +01:00
Michal Hajas
cb914b2a3d Fix observability links 
Closes #35240
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-11-22 17:41:35 +01:00
Václav Muzikář
d60cb9aaef fix: prevent inclusion of characters that could lead to FileVault path traversal (#35223) 
Closes: #35215

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Peter Zaoral <pepo48@gmail.com>
 2024-11-22 10:18:00 +01:00
Václav Muzikář
cf622e8d51 Update docs with security warning around client certificate lookup (#35222) 
Closes #35217

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2024-11-22 10:12:21 +01:00
Michal Hajas
7049e08c7b Create a new guide category Observability and move some guides from server to it (#35144) 
Closes: #35127

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-11-21 13:57:59 +01:00
Jean-Christophe Manciot
9d10b81be2 db.adoc: Refined the 'Configuring a database' paragraph (#32483) 
* db.adoc: Refined the 'Configuring a database' paragraph

closes: #32348

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/server/db.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2024-11-14 17:13:05 +00:00
andymunro
3ca3a4ad34 Update installation locations 
Closes #34855

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-12 14:10:32 +00:00
Pedro Ruivo
d7e5319f70 Document network ports for Keycloak clustering 
Also switch the default to jdbc-ping as this  should be a drop-in replacement looking at the networking behavior of udp.

Closes #34658

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-11 13:28:15 +01:00