21759 Commits

Author SHA1 Message Date
Stian Thorgersen
6ff1c40a15
Update 21_1_0.adoc 2023-09-12 13:28:20 +02:00
Stian Thorgersen
89cc315bd1
Update 21_1_0.adoc 2023-09-12 13:26:35 +02:00
Marek Posolda
5c6c55945a Improper Client Certificate Validation for OAuth/OpenID clients (#20)
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-28 08:01:05 +02:00
Ricardo Martin
a1cfe6e24e Check the redirect URI is http(s) when used for a form Post (#22)
Closes https://github.com/keycloak/security/issues/22

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-28 08:01:05 +02:00
Pedro Igor
04e6244c38 Verify holder of the device code (#21)
Closes https://github.com/keycloak/security/issues/32

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-28 08:01:05 +02:00
Bruno Oliveira da Silva
4433af5340
[Backport] High severity - Use of a Broken or Risky Cryptographic Algorithm vulnerability in org.bitbucket.b_c:jose4j (#20924)
Closes #20631
2023-06-13 08:19:10 +02:00
Marek Posolda
c99c5ebb07
Fix for certificate revalidation (#20693)
closes https://security.snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-5291542

(cherry picked from commit bf9c5821cb39d25188367558897deab2921a7a09)

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-01 11:48:28 +02:00
Erik Jan de Wit
5967c71bf7
use the first value from options as default (#20652)
fixes: #20379

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-01 10:52:46 +02:00
Erik Jan de Wit
c84fcbfff9
navigate back to list when deleted (#20653)
fixes: #20370

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
2023-06-01 10:52:21 +02:00
Erik Jan de Wit
6ea1aadbb3
moved filter to it's own component (#20712)
fixes: #19999

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-01 10:51:54 +02:00
Stian Thorgersen
3b7b8fa132
Use Chrome as the default JavaScript browser (#14702) (#20701)
* Use Chrome as the default JavaScript browser (#14702)

* Sync changes to ci.yml from main

---------

Co-authored-by: Jon Koops <jonkoops@gmail.com>
2023-06-01 10:16:22 +02:00
Bruno Oliveira da Silva
24bc76b3f3
Update Snyk Workflow to target other branches (#20602)
Closes #20364

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2023-06-01 09:03:12 +02:00
Stian Thorgersen
f546e28306
Remove override of mime4j version in parent pom (#20687) 2023-05-31 16:57:34 +02:00
Pedro Igor
827a29a585
Avoid using user property mapper when resolving root user attributes (#20629)
Closes #20613
2023-05-31 10:02:08 +02:00
Jon Koops
bce7c4b919
Improve third-party storage access detection and cookie fallback (#20595)
Backports #19835
2023-05-31 09:54:27 +02:00
Erik Jan de Wit
9be9abb6ff
Made tree view paging based on count query (#19758) (#20644) 2023-05-31 09:27:56 +02:00
Václav Muzikář
0be8e72a36
Upgrade Operator to QOSDK 4.0.9 (#20665)
Closes #20664
2023-05-30 18:07:39 +00:00
Bruno Oliveira da Silva
ea99049c7b Update Keycloak to Quarkus 2.13.8.Final
Closes #20562
2023-05-30 13:22:23 +02:00
Alexander Schwartz
10e96f387a Upgrade to latest Infinispan version 14.0.8 2023-05-30 13:22:23 +02:00
Douglas Palmer
963da364f0 Changing the email address has no impact at username regardless "Email as username" toggle
closes #20459
2023-05-29 10:20:00 -03:00
Jon Koops
1fe434664c
Due to a bug in chromedriver version < 113.0.5672.92, temporarily ignoring some tests. (#20598)
Backports #20307

Co-authored-by: Miquel Simon <msimonma@redhat.com>
2023-05-26 13:58:31 -04:00
Jon Koops
eca3fd5a10
Raise required version of Node.js to 18 (#20594)
Backports #20515
2023-05-26 10:03:51 +00:00
Jon Koops
f90559a1c5
Ensure client secret is encoded properly in Authorization header (#20557)
Backports #19879

Co-authored-by: Mica Hallin <mica.hallin@gmail.com>
2023-05-25 13:00:56 +02:00
Erik Jan de Wit
505e67d1cc
add disabled and required to User Profile fields (#20408) 2023-05-25 08:05:33 +02:00
Erik Jan de Wit
9a1e697fc5
empty array instead of null (#20313)
fixes: #20068
2023-05-25 08:02:11 +02:00
Erik Jan de Wit
29bf2fc9c6
added min length > 0 check to required (#20312)
fixes: #20096
2023-05-25 08:01:13 +02:00
Erik Jan de Wit
e83147581d
add 'seconds' unit if value not valid (#20311)
fixes: #17165
2023-05-25 08:00:22 +02:00
Erik Jan de Wit
f96880c1ac
added check for undefined (#20247)
fixes: #19883
2023-05-25 07:59:03 +02:00
Erik Jan de Wit
28158b8c71
added missing fields when dynamic scope is enabled (#20246)
fixes: #19865
2023-05-25 07:57:09 +02:00
Václav Muzikář
3a0f721624
Fix processing of env variable references (#20462) (#20493)
Closes #20032

(cherry picked from commit 1aa3e2d7e341ba167d3f509cc3de04223cef90f8)
2023-05-23 12:54:20 +02:00
Stan Silvert
d1dd05055b
Fix otp on credentials page. (#20414)
Fixes #20258
2023-05-17 10:14:24 -04:00
Erik Jan de Wit
0c623f0669
use event id instead of name (#20109) (#20181)
* use id instead of name to add event

* "translated" ids to name
2023-05-09 11:21:42 +02:00
Stan Silvert
fa1b928c2c
Fix custom userFed that doesn't implement CredentialInputUpdater (#20062) (#20136)
* Fix custom userFed that doesn't implement CredentialInputUpdater
Fixes #19491

* Cleanup from Jon's review

* Specify dependency

* Revert "Specify dependency"

This reverts commit a52d5d993aa1f9cf4503e6101eb49c20b27b38fc.
2023-05-08 12:27:41 -04:00
Erik Jan de Wit
22f582b974
on the roles page we have paging on others not (#20142)
fixes:  #19981
2023-05-05 11:50:01 +02:00
rmartinc
32b0332d07 Adding support for rsa-oaep for SAML encryption
Closes https://github.com/keycloak/keycloak/issues/19689
2023-05-04 09:24:33 +02:00
Alexander Schwartz
3f874a3c0c
Remove latest vs. archive document header (#20110)
This is done as the docs are no longer built twice.

Closes #19974

(cherry picked from commit 75ea22bad27c7bb9ed337074d60c05ac9e8e9c35)
2023-05-03 10:26:15 +00:00
Alexander Schwartz
1e8da38a60
Fix the links to the docs which have three groups starting from KC19 (#20099)
Relates to #19974

(cherry picked from commit ff284182ba7a707c9e81a30a62dfba7005344fd8)
2023-05-03 09:56:28 +02:00
Jon Koops
8367f8f3d3
Use Admin API extension to group sessions (#19960)
Backports #19673

Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2023-04-26 09:53:26 +00:00
Jon Koops
1a6a2dcfe3
Make JavaScript authorization policy read-only (#19961)
Backports #19532

Co-authored-by: kaustubh-rh <88367583+kaustubh-rh@users.noreply.github.com>
2023-04-26 09:09:36 +00:00
Marek Posolda
4665fba269
Ability to override default/built-in providers with same providerId. Using ProviderFactory.order() for choosing priority providers (#19947)
Closes #19867

(cherry picked from commit a3f2ebb1935c544cab0bd101fbba92913c63d7ee)
2023-04-26 08:50:42 +02:00
Peter Zaoral
d9592ff941
Fix Base Testsuite timeouts on Windows (#19944)
(cherry picked from commit 78958ae4348f879bf91ea59fae6c8a793ccf8bd2)
2023-04-25 15:49:19 +00:00
Jon Koops
3b3de78ed1
Ensure correct options are displayed for 'Archive format' (#19920) 2023-04-24 16:15:47 +00:00
Alexander Schwartz
8278caad14 Rewrite changelog SQL to make it work on Oracle
Closes #19841

(cherry picked from commit 7562f8ec6ea202323b5313e3b808367b185c79a0)
2023-04-24 14:53:07 +02:00
Jon Koops
a1a664eb7a
Disable stringify by default and enable it for authorization (#19874)
Backports #19871
2023-04-21 12:36:47 +00:00
Stian Thorgersen
5d1f377d03
Include account-ui and admin-ui in deployment to Maven repo (#19860) (#19866)
Closes #19850
2023-04-21 10:11:50 +00:00
Jon Koops
c639ae1a2c
Fix layout issues in groups UI (#19845) 2023-04-20 13:26:46 +00:00
Stian Thorgersen
df43d971e9
Explicltly set version for specific packages only (#19811) (#19828)
Co-authored-by: Jon Koops <jonkoops@gmail.com>
2023-04-20 09:14:20 +02:00
Stian Thorgersen
8405eddbce
Fix setting versions for docs (#19826) (#19827)
Closes #19801
2023-04-20 09:08:30 +02:00
Stian Thorgersen
3ebffbc457
Fix setting versions (#19796) (#19797) 2023-04-19 09:34:06 +02:00
Jon Koops
685199ee57
Restore legacy Promise APIs for Keycloak JS (#19776)
This reverts commit 8f627517cb14cdb609d7b6b289a573dcb0c8db4a.
2023-04-18 12:23:13 +02:00