15313 Commits

Author SHA1 Message Date
Michal Hajas
f22fbd97d3
Fix missing migration when reading TERMS_AND_CONDITIONS required action in legacy store (#19420)
Closes #17277

(cherry picked from commit e49dfe534e979db7f401021b7e2bb7d8c4c7cd73)
2023-03-30 12:38:21 +02:00
Václav Muzikář
f6128909e5
Allow global maintainers to approve PRs to anything with the exception of UI (#19076) (#19079)
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-03-16 14:48:21 +00:00
Václav Muzikář
5b1294104a
Upgrade agroal (#17642)
Closes #17161
2023-03-16 15:17:09 +01:00
Václav Muzikář
9db7c8fb34
Update the server guide for the RPM-minimized container (#17444)
* Update the server guide for the RPM-minimized container

Closes #17273

Co-authored-by: Alex Szczuczko <aszczucz@redhat.com>
Co-authored-by: YO!CHI KIKUCHI <i@yo1000.com>
2023-03-09 16:50:28 -03:00
Carsten Hoffmann
5ff54562fd Upgrade WildFly Elytron to 1.20.3 to fix multiple CVEs
Closes #16652
Closes #16779
Closes #17094
Closes #17095
2023-03-06 17:12:49 -03:00
Alexander Schwartz
82f263355c Increase memory for the model tests to avoid an OOM error
Closes #17427
2023-03-03 14:16:49 +01:00
Alexander Schwartz
c0895f549a
Write AsciiDoc output as UTF-8 independent of system file encoding. (#17419) (#17429)
This preserves the UTF-8 encoding of the AsciiDoc input files.

Closes #17417
2023-03-03 09:52:23 +00:00
Michal Hajas
80aa479c00 Fix testReleaseAllLocksMethod timing out intermittently
Closes #17337

(cherry picked from commit e02c95f9d30a66cbc9ecd229b3d16d571a720f08)
2023-03-02 11:03:05 +01:00
Alexander Schwartz
7879758088 Avoid recording metrics for http server endpoints while they contain resource IDs
Closes #17281
2023-03-02 08:44:16 +01:00
Marek Posolda
bc74d4f0eb
NPE on Theme after upgrade to 21 when parent or import theme not exists (#17350) (#17379)
closes #17313

(cherry picked from commit 59f4fe1c60a74bf4eb018ef4fecb00f27c766e52)
2023-03-01 19:35:42 +01:00
Stian Thorgersen
ec8109112e
Make sure the code is bound to the user session (#18) (#17380)
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2023-03-01 19:35:24 +01:00
Pedro Igor
008b73d04e
Remove duplicated set-cookie header from response when expiring cookies (#17342)
Closes #17192
2023-02-28 15:55:44 +01:00
Stian Thorgersen
328977c67f
Change the list features to the format of a description list (#17237) (#17296)
CIAM-5050

Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2023-02-27 14:58:27 +01:00
Stian Thorgersen
5e90c3f915
Fix NPE in MigrateTo21_0_0 when admin theme is not set explicitly (#17249) (#17260)
Only update admin-console theme to keycloak.v2 if it is explicitly set to "keycloak" or "rh-sso".

Fixes #17248

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
2023-02-24 08:40:36 +01:00
Yohan Siguret
82423f38a1 Add user id to TOKEN_EXCHANGE events
Co-authored-by: thaDude <ogdude@googlemail.com>
2023-02-22 17:13:48 -03:00
Pedro Igor
2b98fcdecb Support for standard Forwarded header
Closes #11580
2023-02-22 19:28:04 +01:00
Hynek Mlnarik
7d136c5cca Generate map-like collection accessors
Along the way fixes also problem with field delegates which
applied manually-crafted methods like `MapUserEntity.removeCredential(id)`
to the delegate itself rather than to the underlying object.

Co-authored-By: Michal Hajas <mhajas@redhat.com>

Closes: #17223
2023-02-22 17:26:31 +01:00
Hynek Mlnarik
878debd2ab Forbid changing ID
Closes: #16881
2023-02-22 17:19:22 +01:00
Marek Posolda
b9ab942ef8
FIPS related docs (#17196)
* FIPS related docs
Closes #16444 #12432 #12429

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2023-02-22 12:47:15 +01:00
rmartinc
f91ac2970d
Polish fips-mode switch for preview (#17228)
* Polish fips-mode switch for preview
Closes #17208 #17210 


Co-authored-by: mposolda <mposolda@gmail.com>
2023-02-22 12:12:52 +01:00
Stian Thorgersen
9df7ef4331
Switch to JDK 17 as default JDK on GitHub Actions (#16014)
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2023-02-22 07:20:14 +01:00
mposolda
5ac8f7c1ef Link 'Sign out' incorrectly hardcoded to localhost in the authz example applications
closes #17216
2023-02-21 15:49:20 +01:00
Alexander Schwartz
9ebbf9ceef
Avoid nested table for downstream docs (#17145)
* Avoid nested table for downstream docs

CIAM-5051

* WIP

* Next iteration: making the options and their values monospaced. Merge the default column into the values column

---------

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-02-21 13:44:39 +00:00
Fouad Almalki
1ed46ac56b
Add Arabic locale to messages (#17090)
Co-authored-by: Mouhand Kaddo <mohand90098@gmail.com>
2023-02-21 12:45:47 +01:00
Alexander Schwartz
54048f1e6c Callers need to indicate if cookies need to be set at the end of the transaction
Closes #17141
2023-02-21 11:54:32 +01:00
Ivon Göttgens
ac04ef634c
Added missing Dutch translations for login and account (v2) (#17143)
* Added missing Dutch translations for login and account

* Apply suggestions from code review

Resolved review suggestions

Co-authored-by: Jon Koops <jonkoops@gmail.com>

---------

Co-authored-by: Ivon Göttgens <i.gottgens@innovadis.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
2023-02-21 11:45:26 +01:00
andymunro
b8e01596f6
Apply to Keycloak documentation style to the Getting Started guides (#17173)
Closes #17133
2023-02-20 13:58:57 +01:00
Douglas Palmer
1d75000a0e Create an SPI for DeviceActivityManager
closes #17134
2023-02-20 09:29:11 +01:00
Erik Jan de Wit
9c431f3b90
introduced combined sessions table needed (offline and regular) (#17023) 2023-02-20 08:59:38 +01:00
Erik Jan de Wit
d0828148a2
removed invalid search (#16913)
fixes: https://github.com/keycloak/keycloak-ui/issues/4320
2023-02-20 08:59:26 +01:00
vramik
055b7c3b16 Remove deprecated methods from login-failure area from user-session interface
Closes #15053
2023-02-17 13:03:02 +01:00
Hynek Mlnarik
e30e1eca68 Ensure that concatenated Stream is closed once read
Fixes: #15781
2023-02-17 13:00:32 +01:00
Michal Hajas
1c79a5666d Deprecate RoleModel.SearchableFields.IS_CLIENT_ROLE field
Closes #17144
2023-02-16 20:50:46 +01:00
Zakaria Amine
0972edd6a5
Fix label for IdpReviewProfileAuthenticatorFactory (take 2) (#17062)
Use static english text for IdpReviewProfileAuthenticatorFactory label config
Closes #16658
2023-02-16 19:16:00 +01:00
drohwer89
4ff180da64
Terminating all sessions above the session limit (#16068)
Adjusts implementation of UserSessionLimitsAuthenticator to terminate all sessions above the session limit.

Closes #14689

Co-authored-by: Marek Posolda <mposolda@gmail.com>
2023-02-16 17:56:59 +01:00
rmartinc
9995a3cdd4 lastSync value into COMPONENT_CONFIG is always updated
Closes https://github.com/keycloak/keycloak/issues/17022
2023-02-16 17:48:49 +01:00
Andre Nascimento
cb78ea06b0 Make sure the customized Ingress resource isn't deleted when the Keycloak deployed by Operator is killed.
Closes #14433
2023-02-16 17:31:31 +01:00
summersab
a64f6dcfc2 Update TotpBean.java
Add a `getUsername()` method to the `TotpBean` class so usernames can be used in the TOTP templates.
2023-02-16 08:13:39 -03:00
mposolda
4f068fcdcc Make https-trust-store-type set to bcfks by default in strict-mode
Closes #17119
2023-02-16 08:00:21 -03:00
Alexander Schwartz
e76418e3de Removing unused code, as JPA Map storage always uses JTA nowadays
Closes #13222
2023-02-16 11:08:37 +01:00
Alexander Schwartz
febe134d5b Make the event listeners specific to the persistence unit
Closes #13219
2023-02-16 11:08:15 +01:00
Pedro Igor
3be2775f9e Do not enable storage chm by default if db option is set 2023-02-16 08:30:45 +01:00
Václav Muzikář
2089878740 Update Operator container to UBI 9 / RHEL 9
Closes #17068
2023-02-15 16:26:29 -03:00
rmartinc
3f8c4e24e2 Change container image in FIPS tests to ubi9
Closes https://github.com/keycloak/keycloak/issues/12422
2023-02-15 20:23:59 +01:00
Jon Koops
9432bd601f
Bump NPM versions in set-version.sh (#17128) 2023-02-15 16:31:48 +01:00
sui.jieqiang
1f6fa0501c Fix search user groups without limit
Closes #12649
2023-02-15 15:50:46 +01:00
rmartinc
fbc9177f27 Doublecheck if we need to override properties in java.security
Closes https://github.com/keycloak/keycloak/issues/16702
2023-02-15 12:33:48 +01:00
Hynek Mlnarik
d768e75be7 Fix clientRole warning
Fixes: #16857
2023-02-15 10:59:52 +01:00
vramik
7b604d6784 Sync properties in map-storage-jpa-cocroach with other profiles
Closes #17107
2023-02-15 10:49:22 +01:00
Michal Hajas
1f929c78af Make lockTimeout more friendly for JPA map storage
Closes #16616
2023-02-15 10:38:18 +01:00