External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-10 15:32:05 -03:30
Code Issues Packages Projects Releases Wiki Activity
29,166 Commits 26 Branches 288 Tags
Commit Graph

29166 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Bartoš
1b7709bfa2
Test JDK 25 in CI (#42447) 
Closes #42733

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-09-18 12:13:45 +00:00
mposolda
f5c71e3e55 Incorrect scheme in the WWW-Authenticate when Authorization: DPoP used 
closes #42706

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-09-18 12:22:00 +02:00
Stian Thorgersen
37a99154a5
Refactor and improve tests for federated client authentication (#42720) 
Closes #42718

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-18 09:30:01 +00:00
Guido Grazioli
2d34ebe33e
federation-sssd-setup add ifp section 
Closes #42726

Signed-off-by: Guido Grazioli <ggraziol@redhat.com>
 2025-09-18 09:09:52 +00:00
Stan Silvert
f99c91291c
Remove duplicated themes documentation. (#42571) 
* Remove duplicated themes documentation.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Move Theme SPI documentation to Themes Guide

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix link so test will pass.

Fixes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken links.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken link.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2025-09-18 10:31:52 +02:00
dependabot[bot]
716aed8b00 Bump tar-fs from 3.1.0 to 3.1.1 in /js 
Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 3.1.0 to 3.1.1.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 17:30:10 -03:00
dependabot[bot]
e0e5bd9af2 Bump p-debounce from 4.0.0 to 5.0.0 in /js 
Bumps [p-debounce](https://github.com/sindresorhus/p-debounce) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/sindresorhus/p-debounce/releases)
- [Commits](https://github.com/sindresorhus/p-debounce/compare/v4.0.0...v5.0.0)

---
updated-dependencies:
- dependency-name: p-debounce
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 17:29:34 -03:00
dependabot[bot]
52c0fefbd1 Bump jsdom from 26.1.0 to 27.0.0 in /js 
Bumps [jsdom](https://github.com/jsdom/jsdom) from 26.1.0 to 27.0.0.
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](https://github.com/jsdom/jsdom/compare/26.1.0...27.0.0)

---
updated-dependencies:
- dependency-name: jsdom
  dependency-version: 27.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 17:29:14 -03:00
dependabot[bot]
50e641b1ca Bump fs-extra from 11.3.1 to 11.3.2 in /js 
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.3.1 to 11.3.2.
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.1...11.3.2)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-version: 11.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 17:28:55 -03:00
dependabot[bot]
0e2c6ff545 Bump rollup from 4.50.1 to 4.50.2 in /js 
Bumps [rollup](https://github.com/rollup/rollup) from 4.50.1 to 4.50.2.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.50.1...v4.50.2)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.50.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 17:28:27 -03:00
Stian Thorgersen
3a33a2ecbf
Add metrics to alternative lookup cache (#42689) 
Closes #42688

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-17 17:52:38 +00:00
Steven Hawkins
373257a5d0
fix: improving the local apiserver test cleanup (#42701) 
closes: #42693

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-17 19:01:13 +02:00
Ryan Emerson
aa8321b837
Update 26.4 release notes to refer to old multi-site architecture 
Closes #42702

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-09-17 17:56:24 +02:00
dependabot[bot]
fec4d0463d Bump commander from 14.0.0 to 14.0.1 in /js 
Bumps [commander](https://github.com/tj/commander.js) from 14.0.0 to 14.0.1.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tj/commander.js/compare/v14.0.0...v14.0.1)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-17 11:40:41 -03:00
Weblate (bot)
221850a4a5
Translations update from Hosted Weblate (#42539) 
* Updated translation for German

Language: de

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Catalan

Language: ca

Co-authored-by: Ecron <ecron_89@hotmail.com>
Signed-off-by: Ecron <ecron_89@hotmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Dutch

Language: nl

Co-authored-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Translated using Weblate (Chinese (Traditional Han script))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hant/

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Ecron <ecron_89@hotmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Ecron <ecron_89@hotmail.com>
Co-authored-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
 2025-09-17 16:38:13 +02:00
Pedro Igor
39222e8ca5
Validate actions that support aggregating actions (#42624) 
Closes #42381

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-09-17 14:15:10 +02:00
Stian Thorgersen
34c9b47414
Update issue templates (#42612) 
* Update issue templates

Closes #42611

Signed-off-by: stianst <stianst@gmail.com>

* Update .github/ISSUE_TEMPLATE/milestone.yml

Signed-off-by: Stian Thorgersen <stian@redhat.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
 2025-09-17 13:58:53 +02:00
Alexander Schwartz
b918270a3a
Adding CodeQL for GitHub Actions 
Closes #42661

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-09-17 08:46:39 -03:00
Stian Thorgersen
f9ee040ef0
Add federated subject configuration option to federated-jwt authenticator (#42610) 
Closes #42608

Signed-off-by: stianst <stianst@gmail.com>
 2025-09-17 13:39:50 +02:00
Pedro Ruivo
f7ff7e55d8
Replace UUID with composite key for client session cache 
Closes #42547

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-17 10:25:51 +00:00
Lukas Hanusovsky
d9b4bd047f
[Keycloak Test Framework] Infinispan cache + ClusterlessTestSuite configuration (#42172) 
* [Keycloak Test Framework] Infinispan server + ClusterlessTestSuite and MultisiteTestSuite configuration

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Utilise ClientIntelligence.BASIC to ensure that internal docker IPs
never used by Infinispan client

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Code refactoring + properties utility

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
 2025-09-17 07:13:11 +00:00
Alexander Schwartz
63538629db
Stabilizing test by waiting for the response 
Closes #42650

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-16 14:20:13 -03:00
Ryan Emerson
0c5b6398a9
Document Operator ServiceMonitor generation in release notes 
Closes #42642

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-09-16 18:04:58 +02:00
Pedro Ruivo
f1bd42116e
NullPointerException when persisting a client session 
Fixes #42652

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-09-16 17:49:36 +02:00
Marek Posolda
d9d19791a4
Clarifying OIDC logout documentation. Removing obsolete unused docs p… (#42636) 
closes #41792


Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
 2025-09-16 17:37:42 +02:00
Steven Hawkins
e9bf3bc2f8
fix: updating docs related to the number of executor threads 
closes: #39342

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-16 17:02:15 +02:00
Giuseppe Graziano
fd7f5351ad Client Authenticator configurable per client 
Closes #42044

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2025-09-16 16:54:39 +02:00
Steven Hawkins
26597c2d9a
fix: adding docs about mTLS and probes (#42561) 
closes: #42191

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-16 16:30:37 +02:00
Steven Hawkins
6b6cefd827
fix: aligning the elytron alt name extraction logic (#41975) 
closes: #40629

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-16 10:11:30 -04:00
vramik
d0e83cc05e Rename RLM to Workflows 
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
 2025-09-16 08:52:50 -03:00
Ricardo Martin
a2acdda535
Automatic download and cache of the SAML client public keys (#41947) 
Closes #17028

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-09-16 13:07:33 +02:00
MartinFMartin
3940f51cf0
Update Slovenian translations for login messages (#42637) 
Signed-off-by: MartinFMartin <139436601+MartinFMartin@users.noreply.github.com>
 2025-09-16 10:57:59 +00:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB 
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-16 09:38:52 +00:00
Ryan Emerson
6e7a836c96
Create default ServiceMonitor with Operator 
Closes #40406

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-09-16 10:57:35 +02:00
Awambeng
20f9306b78
[OID4VCI] Adjust Credential Issuer Metadata endpoint, return issuer metadata at /.well-known/openid-credential-issuer/realms/{realm} (#42577) 
Closes #41589

Signed-off-by: Awambeng <awambengrodrick@gmail.com>
 2025-09-16 10:24:44 +02:00
rmartinc
8a94bd90f9 redirectToAuthentication if the request uses PAR to not lose the single object after a refresh 
Closes #36716

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-09-16 10:14:35 +02:00
andymunro
bbe2beebbb
Keycloak 26.4 Upgrading Guide 
Closes #42564

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-16 08:59:28 +02:00
Pedro Ruivo
714d71b4f5
Concurrent update embedded caches and database 
Closes #42374

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-15 18:38:03 +00:00
Alexander Schwartz
cdea7d79a7
Fix chinese language names 
Closes #42575

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-09-15 15:01:08 -03:00
Steven Hawkins
c7ae7185e6
fix: updating export option text (#42621) 
closes: #42011

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-15 15:25:54 +00:00
Steven Hawkins
bb7e5ab7b2
fix: cleaning up dockerfile build warnings (#42573) 
closes: #42572

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2025-09-15 17:07:27 +02:00
Pedro Igor
9eb0a3a326 Make sure refresh expiration is set together with setting the previous refresh token 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-09-15 10:40:19 -03:00
Matthias Peter
4774d68d4f added null check also for optional expires_in parameter 2025-09-15 10:40:19 -03:00
Matthias Peter
db4d6bb0d9 added junit tests for refreshExpiresIn fix 2025-09-15 10:40:19 -03:00
Matthias Peter
6f6419378d fixed getter setter for expiresIn comparable to refreshExpiresIn 2025-09-15 10:40:19 -03:00
pematth
0265c6c255 removed unused include 
Signed-off-by: pematth <matthiaspeter@freenet.de>
 2025-09-15 10:40:19 -03:00
pematth
d72d7a407d fix proposal for issue 41804 
Signed-off-by: pematth <matthiaspeter@freenet.de>
 2025-09-15 10:40:19 -03:00
Lukas Hanusovsky
0aff081946
Keycloak CI - Refactoring ci.yml, removing surefire reports and jvm heapdump actions (#42425) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2025-09-15 14:53:45 +02:00
forkimenjeckayang
64e0b450aa
[OID4VCI]: Add support for parsing and understanding authorization_details at the Token Endpoint (#40751) 
Closes #39278
Closes #39279


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
 2025-09-15 14:02:45 +02:00
rmartinc
605b51905c Do not regenerate the secret key when the size is not explicitly passed 
Closes #42405

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-09-15 13:30:35 +02:00