When an organization's redirect URL is left empty, Keycloak currently defaults
to the account console URL, ignoring the account client's configured Home URL
(base URL). This fix checks the account client's base URL before falling back
to the default account console URL.
Changes:
- Added resolveAccountClientBaseUrl() helper method in OrganizationInvitationResource
- Added setBaseUrl() method to ClientAttributeUpdater test utility
- Added integration tests for the new behavior
Closes#45052
Signed-off-by: Rathan Naik <30756840+Rathan-Naik@users.noreply.github.com>
Closes#15502
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
closes#40990
Signed-off-by: Christian Janker <christian.janker@gmx.at>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Closes#44843
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Closes#44842
Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
* feat(openapi): add missing OpenAPI annotations to API methods
Add missing OpenAPI annotations to API methods across the REST services so the generated OpenAPI spec and Swagger UI include the complete API metadata.
Ensures consistent tagging and parameter/response descriptions for admin endpoints.
No behavior change; only adds documentation annotations.
Closes#42695
Signed-off-by: MOUNIAT-1002 <20225680@etud.univ-evry.fr>
* Add missing OpenAPI annotations
Closes#42695
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
---------
Signed-off-by: MOUNIAT-1002 <20225680@etud.univ-evry.fr>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: MOUNIAT-1002 <20225680@etud.univ-evry.fr>
- Downgrade request-level INFO logs in the OID4VC issuer flow to DEBUG and log malformed display metadata as WARN instead of INFO to keep lifecycle logs clean.
Closes#44675
Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
Signed-off-by: Awambeng <awambengrodrick@gmail.com>
* Additional fields added to the Welcome Page
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
* Updated the order of fields
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
---------
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
- expose /.well-known/jwt-vc-issuer/realms/{realm} and keep legacy route with deprecation headers
- build consumer metadata URL per draft-ietf-oauth-sd-jwt-vc-13 and add realm-path coverage
- add integration test for new path plus deprecation headers on legacy endpoint
Closes#44256
Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
Signed-off-by: Awambeng <awambengrodrick@gmail.com>
* Add configurable SMTP timeouts
closes#35836#14509
Signed-off-by: Christian Janker <christian.janker@gmx.at>
* Allow setting SMTP timeout in realm settings
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
---------
Signed-off-by: Christian Janker <christian.janker@gmx.at>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
* Fix for missing object representation in admin event log when deleting user, group, client
Closes#33009
Signed-off-by: jwozniakowski <wozniakowski@netguardians.ch>
* Fix issues and add role representation when deleting a role
Closes#33009
Signed-off-by: Martin Kanis <mkanis@redhat.com>
---------
Signed-off-by: jwozniakowski <wozniakowski@netguardians.ch>
Signed-off-by: Martin Kanis <mkanis@redhat.com>
Co-authored-by: jwozniakowski <wozniakowski@netguardians.ch>
