28602 Commits

Author SHA1 Message Date
Pedro Igor
08de42a57d
Do not try to lookup the user if the sub claim is missing from the admin bearer token (#41981)
Closes #41098

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-08-19 14:45:44 +00:00
Martin Bartoš
d7e6ccb267
Upgrade to Quarkus 3.20.2.1 (#41964)
Closes #41963

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-08-19 14:47:21 +02:00
Ricardo Martin
c712e4a388 Allow and control sending UTF-8 emails in the default email sender impl
Closes #41023

Signed-off-by: rmartinc <rmartinc@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
(cherry picked from commit 949ef35a3bda916b24763c435033258a84ba8596)
2025-08-19 09:46:58 +02:00
Steven Hawkins
4a6a66a449
fix: warn instead of an error if optimized provider timestamps change (#41798) (#41946)
closes: #41268


(cherry picked from commit 02cd3ddfb7ed550cb7c4ac97fb98b4af9f0f1f8d)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-18 17:37:38 +02:00
Ryan Emerson
ec6e015dff
Upgrade to Infinispan 15.0.19.Final
Closes #41934

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-08-18 13:51:01 +02:00
Alexander Schwartz
c1b00ac15a Adjust the test to dynamically remove all sessions
This will handle even those sessions created by other tests.

Closes #41545

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-15 16:40:22 -03:00
Alexander Schwartz
e7c98a4714
Fix typo in caching docs: 'Proving' → 'Providing'
Closes #41663

Signed-off-by: Ramlah7 <ramlahmunir786@gmail.com>
Co-authored-by: RAMLAH MUNIR <ramlahmunir786@gmail.com>
2025-08-15 10:33:16 +02:00
Pedro Igor
56da6c4b7d
memberOf attribute empty or values with a DN that does not match the role base DN fetches all roles
Closes #41842

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-08-14 17:16:16 +02:00
rmartinc
0e23856dce Use Optional instead of getOrDefault for settings in testSMTPConnection
Closes #41643

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit a58556d761cdee0647bb7293665d99d1770152fb)
2025-08-13 14:22:43 +02:00
Ricardo Martin
75fed7d71d Upgrade angus mail to 2.0.4
Closes #41808

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit facffa36cc047de214aa025c21b4fdfa71236b67)
2025-08-13 10:00:54 +02:00
Jose Renato Villela Dantas
cc2f76738a
Set client in the session context for logout token encode
Closes #40984

Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
2025-08-13 04:37:49 +00:00
Stefan Guilhen
16255afa18
Change e-mail verification to perform a find by UUID on LDAP only when the local and imported users are different
Closes #41532


(cherry picked from commit 5b4973f0e88d5b6a50dfaf7f5532af9aae6db5b6)

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-08-08 17:33:32 +02:00
Pedro Ruivo
2ebe03ae2d Ensure cache configuration has correct number of owners
Closes #41558

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-08-06 18:49:18 +01:00
Steven Hawkins
d7630b0cea
fix: correcting how provider default is found (#41678) (#41697)
closes: #41677


(cherry picked from commit 5731cdf6738bc4344d495bd1193fe531f4f7ed7a)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-06 12:30:59 +00:00
Alexander Schwartz
1b5e05c8f5
Reduce likelihood of multiple coordinators on concurrent startup
Closes #41290

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-08-04 08:41:46 -03:00
Martin Kanis
4e699e10da
LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and KERBEROS_PRINCIPAL was null on creation
Closes #41520


(cherry picked from commit 79fc97056e22ebfd6a8f87a83f9e01a000441ac1)

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-08-01 10:55:12 +00:00
mposolda
4699ea0662 Getting error 405 'Method Not Allowed' when calling the 'certs' endpoint with HEAD method
closes #41537

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 2dab73063dd5cc1fdcd5080f8a9f01222ea32d81)
2025-08-01 10:44:46 +02:00
Alexander Schwartz
699f61f168
Making IDs for configuration options unique
Closes #41423

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-30 10:11:25 -03:00
Martin Bartoš
55cd851ecc ExternalLinks are broken in documentation
Closes #41491

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-30 13:38:42 +02:00
Martin Bartoš
58b69351be Synchronize Maven surefire plugin with Quarkus
Closes #41488

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-30 13:38:42 +02:00
Alexander Schwartz
8634cdaa4a
Close spans in the exceptional path
Closes #41469

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-29 14:49:16 +02:00
Alexander Schwartz
ff4d4233f4
Fix broken anchor for caching docs
Also shorten the docs as KC is now encrypting by default.

Closes #41421

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-28 14:57:39 -03:00
Alexander Schwartz
dcba51c0af
Setting 'write_data_on_find' to true to ensure merging of views (#41401)
Closes #41390

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-25 13:22:15 +02:00
Martin Bartoš
089975417b
MariaDB connector dependency is not properly overriden (#41372)
Closes #41370

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-23 18:29:17 +02:00
Martin Bartoš
7c7ad7946d
Update MariaDB connector to 3.5.3 (#41361)
Closes #39634

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-23 13:16:13 +00:00
Martin Bartoš
7787c9047c
Upgrade to Quarkus 3.20.2 (#41359)
Closes #40591

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-23 11:04:43 +00:00
Vlasta Ramik
114425c37f
Fix #40995 avoid ModelException: At least one condition should be provided to OR query
Closes #40995

Signed-off-by: Sylvere Richard <sylvere.richard@gmail.com>
Co-authored-by: Sylvere Richard <sylvere.richard@gmail.com>
2025-07-22 09:45:44 +00:00
Ryan Emerson
e982aa20be
Upgrade to Infinispan 15.0.18.Final
Closes #41257

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-21 15:57:06 +00:00
Steven Hawkins
00640d629b
fix: refine test for rolling
closes: #41204


(cherry picked from commit 6c7be65456153bc912edff7a3673eee355b7e14c)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-21 14:00:18 +02:00
Steven Hawkins
df1329f70a
fix: prevent quarkus from persisting logging runtime defaults (#41005) (#41166)
* fix: ensures that build time logging wildcards are not used at runtime

closes: #40977



* fix: removing the usage of ConfigValue.getRawValue where not appropriate

closes:



* correcting auto logging tests



---------


(cherry picked from commit cf7c9a6ecd21c9a538e9c84aa154edb981ae3b08)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-19 14:15:20 +00:00
Ryan Emerson
91eec167ad
Default jdbc-ping cluster setup for distributed caches fails in Oracle
Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-18 14:21:43 +02:00
Stan Silvert
e378bb87ba
Only view svc acct users on exact search
Closes #41103


(cherry picked from commit bfd725d851d39f2f9bc1b483cf7e26c2d7068d61)

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2025-07-17 13:13:46 +00:00
Alexander Schwartz
1d646e8f70
Fix em-dash in SPI options in the docs
Closes #41152

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-07-17 08:41:27 -03:00
Ricardo Martin
68f4cd392a
Check if PK for DATABASECHANGELOG already exists
Closes #41082


(cherry picked from commit 164274ac51b748cd9c3a94ad28fbb3a85384b2ae)

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-14 12:03:56 +02:00
mposolda
5fff25edc8 Add option 'Requires short state parameter' to OIDC IDP
closes #40237

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 274afa88fae0967ab281be93d41ec0ad1e8586cc)
2025-07-14 08:43:08 +02:00
Stian Thorgersen
ff0b79c636
Increase timeout when publishing to Maven Central (#41100)
Signed-off-by: stianst <stianst@gmail.com>
2025-07-11 07:23:28 +00:00
Pedro Ruivo
d944cd0d43
Skip computing lifespan for read-only sessions
Fixes #40980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-07-11 08:59:37 +02:00
Pedro Ruivo
d291e7170c
Improve logging for client sessions load
Closes #41034

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-07-10 18:21:00 +02:00
Ricardo Martin
74c0fed5fd
Remove /etc/system-fips file before executing fips-mode-setup
Closes #41038


(cherry picked from commit e631ef4f92683b073f9cac9ae0f55ac0a3483187)

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-10 10:51:32 +00:00
Ryan Emerson
7ff4014d4b
Run clustering compatibility tests on release/x.y branches
Closes #40970

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-09 21:02:39 +02:00
rmartinc
dbfca95a99 Do not add steps if feature disabled in default flows
Allow login if a step is disabled even the authenticator is not enabled by profile
Closes #40954

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit d62114e50ea85920f229ba32d08a30034ecca596)
2025-07-09 13:05:41 +02:00
vramik
8428e2064d Fix NPE when accessing group concurrently
Closes #40368

Signed-off-by: vramik <vramik@redhat.com>
2025-07-09 08:05:04 -03:00
Alexander Schwartz
d181ed2fff
Update documentation when no rolling update is performed
Closes #40962

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-08 08:18:13 +02:00
Steven Hawkins
5d6883d4b6
fix: correcting spi-theme options
closes: #40930


(cherry picked from commit eba493495069325e4d281e0341573bf7b0c4a962)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-07 14:30:59 +00:00
Steven Hawkins
10b179c703
fix: reducing memory footprint for cached entries (#40807)
closes: #35932


(cherry picked from commit c9f38d36a97764dc161b6126eb8eff24b3c9a1c1)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-07 10:19:20 -04:00
Steven Hawkins
21d24ffc57
fix: detecting when we can set the serviceName
closes: #40890


(cherry picked from commit 919838089ffefd5924ab4cbcf6bc17a2f2eb7ed7)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-06 20:53:40 +02:00
Ryan Emerson
a661d1ab8c
Upgrade to Infinispan 15.0.16.Final
Closes #40851

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-03 16:54:20 +02:00
Martin Bartoš
d5f1be60c9
Unable to configure TLS reloading in Keycloak version 26.2.0 or later (#40790) (#40881)
Closes #40713



(cherry picked from commit 664827de98f325406d67b9ebe93d9006a2b33073)

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2025-07-03 14:12:39 +00:00
Ricardo Martin
b6fb34ee1b
Only include new fields for key generation if not useFile
Closes #40860

(cherry picked from commit 6535ae687e212011b847f538defaeecbe03a7be9)

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-02 19:45:33 +02:00
Steven Hawkins
1e6ef591b5
fix: map just logging env wildcards to . (#40834) (#40865)
* fix: map just logging env wildcards to .

closes: #40833



* updates based upon review comments



---------


(cherry picked from commit 3760e726cd2cee22155eebf3d74c2121c9e9ee99)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-02 14:20:25 +00:00