mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
NaN Commits 24 Branches 291 Tags
d91688198c9c1e0313880b2ab67056aa89e00a5c
Commit Graph

114 Commits

Author SHA1 Message Date
Pedro Igor
43a7b27301 Resolve roles inherited from groups and composite roles 
Closes #39850

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-26 14:15:06 -03:00
Ricardo Martin
ef4ad0d59c Remove parent and children composite dependencies when removing roles 
Closes #39724

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-23 11:29:18 +02:00
Pedro Igor
b22b1f298c Adding parameter to control whether the count of subgroups of subgroups should be returned 
Closes #39668

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 11:15:38 -03:00
Pedro Igor
7aab9fade8 Move FGAP types to a specific package 
Closes #39712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-22 09:53:16 -03:00
rmartinc
598154bc58 Only reuse SMTP authentication data for testing endpoint when the same auth, host, port and user are passed 
Closes #39486

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-05-21 14:01:02 +02:00
Kai J. Witt
c76bb0683c Make max auth age configurable for all required actions by default 
Moved the current configuration implementation for the update password

Closes #39408

Signed-off-by: Kai Josef Witt <KWitt@vhv.de>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Kai Josef Witt <KWitt@vhv.de>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2025-05-15 08:44:38 +02:00
Steven Hawkins
f40cb88db4 fix: removing KeycloakApplication usage of keycloak-add-user.json (#39460) 
* fix: removing KeycloakApplication usage of keycloak-add-user.json

closes:#39428

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Removing the test keycloak-add-user.json

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-05-08 07:58:09 +00:00
Steven Hawkins
08b5183784 fix: relaxes the admin root redirect check (#39095) 
* fix: relaxes the admin root redirect check

also deprecates the usage of local_admin

closes: #39085

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving deprecation to 26.3

also changing the adminroot test to seem like it's coming from a proxy

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-04-29 11:09:51 -04:00
Simon Vacek
ba150ed0f9 Split GroupTest into multiple files 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 11:52:15 +02:00
Simon Vacek
a8e33732cd Move AbstractGroupTest.java, GroupMappersTest.java, GroupTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/RealmConfigBuilder.java
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/UserConfigBuilder.java

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/ClientConfigBuilder.java
 2025-04-29 11:52:15 +02:00
Simon Vacek
9e1d519e2c Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 11:52:15 +02:00
rmartinc
4730dbdd8d Make recovery codes supported 
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-29 10:25:46 +02:00
Simon Vacek
bea2c75f5f Split PermissionsTest into multiple files 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Simon Vacek
b2f3a8a65b Move PermissionsTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Simon Vacek
ebfa750805 Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:19:52 +02:00
Šimon Vacek
666868a08d Move ClientTest.java to the new testsuite (#38933) 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-29 09:18:49 +02:00
rmartinc
08704df651 Make DateUtil convert the local dates into epoch in milliseconds 
Closes #38911

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-04-25 17:25:45 +02:00
Marek Posolda
025b2ba442 Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952) 
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
 2025-04-17 13:20:05 +02:00
vramik
bd58b70447 Test coverage for count methods when filtering 
Closes #38692

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-15 15:31:02 -03:00
Martin Bartoš
83001e4024 OTelHttpClientFactory not configured properly when tracing enabled 
Closes #38740

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-04-08 17:04:23 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported 
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-08 13:00:47 -03:00
Pedro Igor
79b533ee02 Allow managing client authorization settings is manage scope is granted for clients 
Closes #38726

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 13:07:48 +02:00
Pedro Igor
be880ae204 Do not cache partial results when FGAP is enabled 
Closes #38705

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-08 08:22:22 +02:00
Pedro Igor
87430fc181 Add impersonate-members scope to group resource type 
Closes #38566

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-07 14:56:27 +00:00
Pedro Igor
d98ca0a2a2 Make sure searches by identifiers are filtered 
Closes #38679

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-07 14:59:43 +02:00
Lukas Hanusovsky
f5323fec24 [Test framework] AdminConsoleWhoAmILocaleTest migration (#38158) 
* Moving files to the new test suite

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Move AdminConsoleWhoAmILocaleTest.java, DeclarativeUserTest.java to the new testsuite

Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-04-07 12:45:52 +02:00
Šimon Vacek
2f852b4b9a Move ClientRolesTest to the new testsuite (#38505) 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-04-07 12:34:49 +02:00
vramik
6488890585 [FGAP:V2] remove configure scope from Client resource type 
Closes #38567

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-07 07:05:02 -03:00
Pedro Igor
e5ff19b327 Adding missing fgap filtering to user count methods 
Closes #38510

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-04 14:21:57 +02:00
Pedro Igor
9f079f7874 Permission checks that do not check a specific client should check the permissions granted to the client resource type 
Closes #38653

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 17:00:47 +00:00
vramik
8127a9da60 [FGAP] Allow user creation when the admin has permission to manage-members and manage-membership for all existing groups defined in UserRepresentation 
Closes #38269

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-03 12:08:46 -03:00
Pedro Igor
dbb0179a93 Aligning partial evaluation with the outcome from regular evaluations 
Closes #38626

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 12:07:30 -03:00
Pedro Igor
29d3dcb49a Do not allow delete the FGAP client 
Closes #38644

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-03 14:57:06 +02:00
vramik
f12fa0b5bb [FGAP] remove transitiveness from auth scopes 
Closes #38557

Signed-off-by: vramik <vramik@redhat.com>
 2025-04-02 16:56:25 -03:00
Pedro Igor
61cb0acbc4 Fixing inconsistencies when evaluating permission in the evaluation tab 
Closes #38498

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-01 11:40:27 -03:00
Václav Muzikář
2a0ce46471 Prevent frontend endpoint redirect to admin endpoint (#38464) 
Closes #38463

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-03-28 18:44:43 +01:00
Pedro Igor
78aa8b486f User not visible when permission with different scope exists 
Closes #38369

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-27 08:01:04 -03:00
Pedro Igor
75651ff5c0 Partial evaluation processing only permissions with scope view 
Closes #38436

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-27 08:01:04 -03:00
Pedro Igor
26c90f369f Support for partial evaluation for clients 
Closes #38393

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-25 09:04:12 -03:00
Pedro Igor
1c57035d41 Support partial evaluation for the group resource type 
Closes #38273

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-24 11:49:53 -03:00
vramik
a72d15b857 PartialEvaluator ignores view-* and manage-* roles 
Closes #38284

Signed-off-by: vramik <vramik@redhat.com>
 2025-03-24 08:30:59 -03:00
Sebastian Rose
4fb1c41155 Sending Mails via SMTP and XOAUTH2 authentication mechanism 
Closes #17432

Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>
 2025-03-21 10:12:18 +01:00
Pedro Igor
ed809d7884 Filtering not working when using view-member permission with a permission that denies access to a resource 
Closes #38304

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-20 17:06:51 -03:00
Stian Thorgersen
d7e3d480fb Sort test classes by server config (#38215) 
Signed-off-by: stianst <stianst@gmail.com>
 2025-03-20 10:41:31 +01:00
Pedro Igor
a4000575a4 Initial support for partial evaluation 
Closes #38085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-03-19 13:30:52 -03:00
Stian Thorgersen
ccbc1fa9ab Simplify TimeOffsetTest to just check time is set, rather than using events which is expensive 
Closes #38180

Signed-off-by: stianst <stianst@gmail.com>
 2025-03-18 15:28:05 +00:00
Simon Vacek
546724ddf8 Move AdminEventTest.java, LoginEventsTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

# Conflicts:
#	test-framework/core/src/main/java/org/keycloak/testframework/realm/RealmConfigBuilder.java
 2025-03-17 12:38:57 +01:00
Simon Vacek
d6561cff1b Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-03-17 12:38:57 +01:00
Simon Vacek
723f191a86 Move InitialAccessTokenResourceTest.java, RoleByIdResourceTest.java, TimeOffsetTest.java to the new testsuite 
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-03-14 10:26:58 +01:00
Simon Vacek
578a63ca03 Moving files to the new test suite 
Signed-off-by: Simon Vacek <simonvacky@email.cz>
 2025-03-14 10:26:58 +01:00