mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
d91688198c9c1e0313880b2ab67056aa89e00a5c
Commit Graph

2628 Commits

Author SHA1 Message Date
Ricardo Martin
ef4ad0d59c Remove parent and children composite dependencies when removing roles 
Closes #39724

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-23 11:29:18 +02:00
vramik
f45b8e0c6d Move FGAP classes to specific package 
Signed-off-by: vramik <vramik@redhat.com>
 2025-05-22 09:53:16 -03:00
Pedro Igor
7aab9fade8 Move FGAP types to a specific package 
Closes #39712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 09:53:16 -03:00
Erik Jan de Wit
cbd0d18f6a add description to groups 
fixes #39172

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-14 06:41:01 -04:00
Abhishek Kumar Gupta
7776e8c587 Persist refresh token for IDP token exchange (#31275) 
Closes #39502

Signed-off-by: abhishek818 <abhishekguptaatweb17@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>


Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-14 10:57:13 +02:00
Alexander Schwartz
4b47697c83 Lazily process sessions from ISPN to avoid fetching client sessions (#39639) 
Closes #39638

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 13:16:41 +02:00
Alexander Schwartz
7a7543dcc6 Send events in batch with the new method (#39654) 
Closes #39653

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 12:25:59 +02:00
Alexander Schwartz
32a8c124be More eagerly clear references to client sessions from the user session (#39652) 
Closes #39651

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-05-13 11:35:47 +02:00
Pedro Igor
8716d2425d Skip partial evaluation if there is no realm bound to the session 
Closes #39465

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-08 09:29:53 +02:00
Steve Hawkins
abc448e4d1 fix: performing inline user import for multi-file 
closes: #38251

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-07 14:22:39 -03:00
Pedro Ruivo
a263e6c72a Patch kubernetes stack with port_range=0 
Fixes #39023

Fixes #39454

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-05-07 19:20:20 +02:00
vramik
56389c44c8 [FGAP] Refactor permission evaluation code for V2 
Closes #38086

Signed-off-by: vramik <vramik@redhat.com>
 2025-05-05 17:11:16 -03:00
Ryan Emerson
31656b8df9 Reuse InfinispanClusterProvider instances in InfinispanClusterProviderFactory (#39269) 
Closes #39254
Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-05-02 16:09:16 +02:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926) 
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 18:57:45 -04:00
Ryan Emerson
c29dd4a9cf Add dependsOn implementation to RemoteLoadBalancerCheckProviderFactory (#39257) 
Closes #39256

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-04-29 10:23:07 +02:00
Paul Schwabauer
8f860c810e Fix duplicate users on searching attributes with multiple entries 
Closes #39246

Signed-off-by: koplas <pschwabauer@intevation.de>
 2025-04-28 19:35:37 +02:00
Ryan Emerson
7eb7eb286d Reuse InfinispanConnectionProvider instances in DefaultInfinispanConnectionProviderFactory (#39263) 
Closes #39253

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-04-28 15:54:34 +02:00
Pedro Ruivo
eafe08a73a Create CacheEmbeddedConfigProvider 
Closes #38497

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 13:00:53 +02:00
Alexander Schwartz
660217dc41 Avoid inefficient SQL when deleting a role (#39238) 
Closes #39237
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-28 09:29:05 +00:00
Pedro Ruivo
d7b9a0691e Fix test configuration for remote infinispan 
Closes #39097

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-22 08:25:05 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952) 
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-17 13:20:05 +02:00
Pedro Ruivo
c97a9563ef Refactor JGroups configuration 
Closes #37325

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-17 10:28:28 +02:00
Pedro Ruivo
636fffe0bc Create CacheRemoteConfigProvider (#38570) 
Closes #38496

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-16 17:08:43 +02:00
Michal Hajas
4dc4de7c12 Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature 
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-04-16 12:01:55 +00:00
Pedro Igor
cf6c8b07c5 Querying group by name should use an equal predicate 
Closes #38982

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-15 22:51:06 +02:00
vramik
bd58b70447 Test coverage for count methods when filtering 
Closes #38692

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-15 15:31:02 -03:00
Stefan Guilhen
8b35fa58de Add valid checksum v8 to the 2.5.0-unicode-oracle changeset 
- allows migration from earlier Keycloak versions where liquibase was using version 8 of the checksum algorithm

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #38937
 2025-04-15 11:03:07 -03:00
Alexander Schwartz
e60c4e7154 Do not terminate persistent sessions worker on exceptions (#38942) 
Closes #38925

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-15 08:59:44 +02:00
Peter Tóth
c6e1878087 Add organizations count endpoint 
Closes #38262

Signed-off-by: Péter Tóth <tothp@sztaki.hu>
 2025-04-14 19:44:44 +00:00
Thomas Darimont
716eaab487 Enable logging of slow database operations 
We consider db operations slower than 10s for now.

Fixes #38863

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
 2025-04-14 17:53:38 +00:00
Michal Hajas
72fb7ce905 Add release/26.2 branch to remoteLockFiles 
Closes #38877
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2025-04-11 18:04:14 +02:00
Stian Thorgersen
f798db885e Update link to 26.1 proto.lock file (#38869) 
Signed-off-by: stianst <stianst@gmail.com>
 2025-04-11 11:48:40 +00:00
Pedro Igor
e68e43cbc8 Cache resource names associated to policies to improve partial evaluation 
Closes #38837

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-10 19:50:26 +02:00
Pedro Igor
ae88d7921f Improvements to partial evaluation 
Closes #38732

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-09 18:15:28 +02:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported 
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-08 13:00:47 -03:00
Pedro Igor
be880ae204 Do not cache partial results when FGAP is enabled 
Closes #38705

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 08:22:22 +02:00
Pedro Ruivo
e730d8bec5 Fix repeated info logs running an import 
Fixes #37941

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-04-07 15:42:57 +02:00
Pedro Igor
e5ff19b327 Adding missing fgap filtering to user count methods 
Closes #38510

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-04 14:21:57 +02:00
Alexander Schwartz
5583155802 Don't update the client session's timestamp when loading it from the database (#38608) 
Closes #38591

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-04-04 09:44:03 +02:00
Stefan Guilhen
33283de8ed Add schema name for update query on Oracle 
- Fixes issue with changeset 2.5.0-unicode-oracle

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #35833
 2025-04-03 19:44:53 -03:00
Pedro Igor
dbb0179a93 Aligning partial evaluation with the outcome from regular evaluations 
Closes #38626

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 12:07:30 -03:00
skydrinker-tox
94673a6eb0 KeyUtils was warning about invalid key for valid 22 chars short ids 
Closes #37992

Signed-off-by: skydrinker_tox <skydrinker_tox@hotmail.com>
 2025-04-03 17:05:29 +02:00
Steven Hawkins
9ce4539d22 fix: switching default client scopes to lazy loading (#38553) 
closes: #38552

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-03 14:11:59 +02:00
Alexander Schwartz
f75a62c948 Clear persistent sessions cache on cluster merge (#38569) 
Closes #38568

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-04-01 13:17:00 +02:00
saravanaarh
6b3e348a23 Added condition to check offlineSessionMaxLifespanEnabled on clearing 
Closes #38063

Signed-off-by: Saravana <saravanakumar.a@kobil.com>
Co-authored-by: Saravana <saravanakumar.a@kobil.com>
 2025-03-27 20:11:13 +00:00
Pedro Ruivo
6aa3f9d5a7 Load all ProtoSchemas from the classpath 
Closes #34971

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-03-27 15:41:01 +01:00
Stefan Guilhen
e694065aed User UserModel.isFederated() instead of comparing federation link to null 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #38137
 2025-03-27 08:11:14 -03:00
Robert Hollencamp
eb990bcf23 PersistenceExceptionConverter NPE 
make sure SQLException#getSQLState is not null before attempting to call methods on it. I have observed exceptions during AWS MySQL RDS failovers where sql state is null, causing this method to throw an NPE exception rather than the expected ModelException

closes #38467

Signed-off-by: Robert Hollencamp <rhollencamp@cargurus.com>
 2025-03-27 09:01:35 +00:00
Stefan Guilhen
aeae754e88 Ensure JPAPolicyStore.findByName goes through the PolicyCache 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #38319
 2025-03-26 11:47:45 -03:00
Pedro Igor
26c90f369f Support for partial evaluation for clients 
Closes #38393

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-25 09:04:12 -03:00