Stephan Seifermann
aefecade5c
Client cert lookup provider compliant to RFC 9440 ( #36161 )
...
* Client cert lookup provider compliant to RFC 9440 (#20761 )
Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>
* Release notes
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
---------
Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-12-19 12:38:54 +01:00
Stian Thorgersen
ab9c6e36ee
Remove legacy/jakarta Undertow as we only need one, and upgrade to the latest to fix CVEs ( #44901 )
...
Closes #44814
Signed-off-by: stianst <stianst@gmail.com>
2025-12-15 10:39:19 +01:00
Stian Thorgersen
7eb3b693b2
Remove log4j 1.x from testsuite/utils
...
Closes #44557
Signed-off-by: stianst <stianst@gmail.com>
2025-12-10 20:08:03 +00:00
Pedro Igor
96aea99d6c
Make sure LDAP sync runs in a single cluster node and respecting the configured period
...
Closes #43752
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-27 08:08:20 +01:00
Stian Thorgersen
a2c1055f8d
Proposed import order ( #43432 )
...
* Add importOrder to Spotless
Closes #43235
Signed-off-by: stianst <stianst@gmail.com>
* Re-order imports with Spotless
Signed-off-by: stianst <stianst@gmail.com>
---------
Signed-off-by: stianst <stianst@gmail.com>
2025-11-14 09:34:49 +01:00
Stian Thorgersen
d8275fe5df
Remove wildcard imports ( #44060 )
...
Closes #44059
Signed-off-by: stianst <stianst@gmail.com>
2025-11-10 11:46:05 +01:00
stianst
aedd7fe5db
Remove unused imports as part of #43233
...
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Pedro Ruivo
f7ff7e55d8
Replace UUID with composite key for client session cache
...
Closes #42547
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-17 10:25:51 +00:00
Sebastian Łaskawiec
988bf9cb0b
WelcomeResource do not create temporary admins ( #41416 )
...
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
2025-08-18 17:31:26 +02:00
Akbar Husain
06f80416fb
Replace keySet with entrySet
...
Closes #40064
Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-08-14 17:31:15 +02:00
Peter Skopek
651d651c30
Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. ( #40822 )
...
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-08-12 16:50:17 +02:00
mposolda
3cc8808465
Wrap deprecated passkeys authenticator behind the feature
...
closes #40696
Signed-off-by: mposolda <mposolda@gmail.com>
2025-08-01 16:48:57 +02:00
Ryan Emerson
31656b8df9
Reuse InfinispanClusterProvider instances in InfinispanClusterProviderFactory ( #39269 )
...
Closes #39254
Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-05-02 16:09:16 +02:00
Pedro Ruivo
29368b23fa
Tests failing with embedded undertow due the infinispan
...
Added Infinispan configuration file as it is required now
Fixes #39336
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-05-02 09:40:30 +02:00
Pedro Ruivo
eafe08a73a
Create CacheEmbeddedConfigProvider
...
Closes #38497
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-28 13:00:53 +02:00
Pedro Ruivo
d7b9a0691e
Fix test configuration for remote infinispan
...
Closes #39097
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-04-22 08:25:05 +02:00
Michal Hajas
4dc4de7c12
Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
...
Closes #34160
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
Martin Bartoš
6f0ed46404
Upgrade to Quarkus 3.19.0.CR1 ( #37492 )
...
Closes #37436
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-24 19:52:01 +01:00
Stian Thorgersen
c1c147cb17
Restrict access to environment variables when at the server runtime ( #36472 )
...
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-01-15 09:36:19 +01:00
mposolda
23440972fe
KeycloakServer application not working
...
closes #36301
Signed-off-by: mposolda <mposolda@gmail.com>
2025-01-08 16:42:38 +01:00
mposolda
349fc63de1
Keycloak arquillian testsuite not working with the default embedded undertow
...
closes #35802
Signed-off-by: mposolda <mposolda@gmail.com>
2024-12-11 13:42:27 +01:00
Pedro Igor
5c901016e7
Removing unnecessary configuration from auth servers
...
Closes #35604
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-12-06 13:36:50 +01:00
Steven Hawkins
b2ccde29bb
fix: persist build time spi options ( #34157 )
...
closes : #33902
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-23 16:51:11 +02:00
Stian Thorgersen
40049f31fa
Remove ProxyClassLoader and PlatformProvider returning script classloader ( #32806 )
...
Closes #32804
Signed-off-by: stianst <stianst@gmail.com>
2024-09-11 17:11:26 +02:00
Jon Koops
2d17024b14
Remove redirect_uri support from OIDC logout endpoint
...
Closes #10983
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2024-08-30 12:52:49 +00:00
mposolda
06f6173c8a
Add suffix to keycloak-authz-client artifact in keycloak repository
...
closes #30926
Signed-off-by: mposolda <mposolda@gmail.com>
2024-07-17 14:59:09 +02:00
mposolda
e5a4c94f75
Added suffix to keycloak-admin-client artifacts in keycloak repository
...
Signed-off-by: mposolda <mposolda@gmail.com>
2024-06-27 11:00:30 +02:00
rmartinc
f690947cea
Remove the SAML undertow adapter
...
Closes #30554
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-06-20 09:47:14 +02:00
Alexander Schwartz
6cc8d653f3
Make SessionWrapper related fields immutable that are part of the equals method
...
The cache replace logic depends on it, as values returned by reference from a local cache must never be modified on those critical fields directly.
Closes #28906
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-05-13 09:59:50 +02:00
Pedro Ruivo
cbce548e71
Infinispan 15.0.3.Final
...
Closes #29068
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-05-08 17:18:39 +02:00
Douglas Palmer
8d628d740e
Can we remove undertow OIDC adapter?
...
Closes #28788
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-05-07 19:47:46 +02:00
Jon Koops
a6e2ab5523
Remove jaxrs-oauth-client and OIDC servlet-filter adapters
...
Closes #28784
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-04-26 15:56:57 +02:00
Douglas Palmer
b2f09feebf
Remove servlet filter saml adapters
...
Closes #28786
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
rmartinc
41b706bb6a
Initial security profile SPI to integrate default client policies
...
Closes #27189
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-04-10 11:19:56 +02:00
Václav Muzikář
e4987f10f5
Hostname SPI v2 ( #26345 )
...
* Hostname SPI v2
Closes : #26084
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Fix HostnameV2DistTest#testServerFailsToStartWithoutHostnameSpecified
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Address review comment
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Partially revert the previous fix
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Do not polish values
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Remove filtering of denied categories
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
---------
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-04-09 11:25:19 +02:00
Steven Hawkins
be32f8b1bf
fix: limit the use of Resteasy to the KeycloakSession ( #28150 )
...
* fix: limit the use of Resteasy to the KeycloakSession
contextualizes other state to the KeycloakSession
close : #28152
2024-03-26 13:43:41 -04:00
Steven Hawkins
35b9d8aa49
task: remove usage of resteasy-core-spi ( #27387 )
...
closes : #27242
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-21 15:28:34 +01:00
Steven Hawkins
402c7d9b18
Removing version overrides and further aligning with quarkus versions ( #26788 )
...
* elevating wildfly-elytron-http-oidc version management
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* removing testing dependency overrides
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* further version aligment with quarkus
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* adding a resteay-core-spi that can be overriden
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* removing hamcrest override
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* aligning with 3.7.1
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 17:57:23 +01:00
Václav Muzikář
8833b9d2ac
Upgrade to Quarkus 3.7.1 ( #26736 )
...
Closes #26701
Closes #23854
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-02 15:57:23 +00:00
Václav Muzikář
4096a2657e
Supported option to specify site name for multi-site deployments
...
Closes #26460
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-01-31 11:52:19 +00:00
Ricardo Martin
b58f35fb47
Revert "Enable verify profile required action by default for new realms" ( #26495 )
...
This reverts commit 7f195acc149a32d5a4168648b41cf3dcdda0d46a.
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-01-25 12:28:16 +01:00
rmartinc
7f195acc14
Enable verify profile required action by default for new realms
...
Closes #25985
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-01-24 20:28:06 +01:00
Martin Kanis
84603a9363
Map Store Removal: Rename Legacy* classes ( #26273 )
...
Closes #24105
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-01-23 13:50:31 +00:00
Michal Hajas
ec061e77ed
Remove GlobalLockProviderSpi ( #25206 )
...
Closes #24103
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2023-12-01 16:40:56 +00:00
Martin Kanis
4279bbc6b5
Map Store Removal: Delete map profiles from testsuite
...
Closes #24094
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2023-11-30 14:59:02 +01:00
vramik
926be135e8
Remove map related modules
...
Signed-off-by: vramik <vramik@redhat.com>
Closes #24100
2023-11-13 12:34:52 +01:00
Peter Skopek
ef272f7668
SAML Adapter fix for EAP8 and WF29
...
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2023-09-07 13:32:25 +02:00
vramik
4cd34f8423
Update logging properties for showing SQL statements and JDBC parameters
...
Closes #22815
2023-08-30 12:52:08 +02:00
Václav Muzikář
776bcbcbd4
Update bcpkix and bcprov dependencies ( #21543 )
...
Closes #21360
2023-07-20 11:57:18 +02:00
Stian Thorgersen
5a411d8931
Allow setting context-path for KeycloakServer ( #21590 )
...
Closes #21589
2023-07-11 14:24:07 +00:00