414 Commits

Author SHA1 Message Date
Stian Thorgersen
3841fea16d
Promote CLIENT_AUTH_FEDERATED and SPIFFE features to preview (#42753)
Closes #42722

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 09:46:37 +00:00
vramik
d0e83cc05e Rename RLM to Workflows
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
2025-09-16 08:52:50 -03:00
Pedro Ruivo
971016f743
More efficient secure ID generator
Closes #42283

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-12 13:52:26 +02:00
Alexander Schwartz
6ea3c8aedf
Session IDs and auth codes should have 128 bits of entropy
Closes #42274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 17:05:40 +02:00
Steven Hawkins
0897560513
fix: moves unsupported feature logging (#42380)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 19:21:20 +02:00
Stian Thorgersen
320ea5a9a7
Experimental SPIFFE identity provider (#42314)
Closes #42313

Signed-off-by: stianst <stianst@gmail.com>
2025-09-04 14:48:18 +02:00
stianst
57242d2497 Experimental federated client authentication
Closes #42228

Signed-off-by: stianst <stianst@gmail.com>
2025-09-02 10:02:51 -03:00
trataka
9afe5fb8a9
Add wasm support for themes (#38898)
Closes #38897

Signed-off-by: trataka <jonathan@trataka.net>
2025-09-02 14:22:09 +02:00
Alexander Schwartz
ca1e61047a
Adding TiDB dialect for Quarkus
Closes #41897

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Co-authored-by: Dennis Kniep <kniepdennis@gmail.com>
2025-08-26 17:44:45 -03:00
Steven Hawkins
fdca122469
fix: ensuring streams are closed
closes: #40660

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-15 07:40:54 +02:00
Akbar Husain
06f80416fb
Replace keySet with entrySet
Closes #40064

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-08-14 17:31:15 +02:00
rmartinc
acf39b34c3 Make passkeys feature supported
Closes #41556

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-08-12 11:18:57 +02:00
vramik
a8225655cf Initial commit for the RLM feature
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
2025-08-11 17:34:41 -03:00
Steven Hawkins
a79e603272
fix: cutting down on the memory footprint for import (#41196)
closes: #40875

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-04 11:02:39 -04:00
mposolda
3cc8808465 Wrap deprecated passkeys authenticator behind the feature
closes #40696

Signed-off-by: mposolda <mposolda@gmail.com>
2025-08-01 16:48:57 +02:00
Björn Eickvonder
c7cc162f6b
Support for RSA Key Size of 3072
Closes #41551

Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
2025-07-31 13:30:33 +02:00
Björn Eickvonder
d62d5030fe
Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Ryan Emerson
0a745d6aeb
Allow Features to declare that they support Rolling upgrades
Closes #41022

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 12:10:29 +02:00
Martin Kanis
5a42390341 Make UPDATE_EMAIL a supported feature
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-07-09 10:15:48 -03:00
rmartinc
70f0731b21 Make passkeys feature dependent on web_authn
Closes #40975

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-08 13:59:43 +02:00
Michal Hajas
d944823277
Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Douglas Palmer
a981f6b6d5 Access Token IDs have less than 128 bits of entropy
Closes #38663

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2025-06-26 16:48:03 +02:00
mposolda
ab7edb0d01 Introduce ExternalToInternalTokenExchangeProvider. Make it working with Google IDP using token-info endpoint instead of user-info endpoint
closes #40146
closes #40133

Signed-off-by: mposolda <mposolda@gmail.com>
2025-06-04 10:03:52 +02:00
Michal Hajas
88f660b235
Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751)
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-05-27 11:17:42 -03:00
rmartinc
5c28ee4d4c Create client passwords calculating the entropy size for JWT with client secret
Closes #38621

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-27 10:23:58 +02:00
Alexander Schwartz
a17f551eb2
Log out other sessions including offline sessions on password change
Closes #38850

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-05-06 14:04:13 +02:00
rmartinc
4730dbdd8d Make recovery codes supported
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-04-29 10:25:46 +02:00
Pedro Igor
1ba8fe16ac
Deprecate for removal Instagram Identity Broker (#38998)
Closes #37967
Closes #36562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-04-17 09:07:06 +02:00
Michal Hajas
4dc4de7c12
Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
2025-04-08 13:00:47 -03:00
lrozenblyum
a0852eaa2e
Prevent NPE in CryptoIntegration.setProvider
Closes #38596

Signed-off-by: Leonid Rozenblyum <lrozenblyum@gmail.com>
2025-04-03 08:06:00 +00:00
Steven Hawkins
06e0885f46
fix: adds back reporting of non-ip client addresses (#37797)
closes: #36843

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/AbstractTokenExchangeProvider.java
#	services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/StandardTokenExchangeProvider.java
2025-03-27 19:33:20 +00:00
Tero Saarni
c7f0fc7ac3
Support EC in PEM utils
This change adds

- Support for decoding EC private keys.
- Support for decoding certificate bundles.

Closes #38490

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
2025-03-27 15:44:05 +01:00
Alexander Schwartz
c9b88c6bf6
Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
rmartinc
b0654c455f Remove hierarchicalUri in KeycloakUriBuilder and parse each URI part separately
Closes #38006

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-03-13 18:27:35 +01:00
mposolda
1fc015195f Promote standard token-exchange V2 to supported by default
closes #37368

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-13 18:26:55 +01:00
Sebastian Schuster
45fb21164b
Improved uri template regex
Closes #37834

Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.io>
2025-03-05 12:15:31 +01:00
mposolda
73cfd9cc80 Polishing of token-exchange features. Remove TOKEN_EXCHANGE_FEDERATED_V2 and TOKEN_EXCHANGE_SUBJECT_IMPERSONATION_V2
closes #37367

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-03 17:32:17 +01:00
Michal Hajas
8cd97ddb21
Make event metrics supported (#37391)
* Make event metrics supported

Closes #37389

Signed-off-by: Michal Hajas <mhajas@redhat.com>

* Address comments from reviews

Signed-off-by: Michal Hajas <mhajas@redhat.com>

---------

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-19 12:20:15 +01:00
Giuseppe Graziano
f2d931ba44 Remove FGAP from standard token exchange v2
Closes #37108

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-12 12:47:23 -03:00
Martin Bartoš
491b7861ed
[PERF] Determine whether OS is Windows
Closes #33953

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-10 17:31:26 +01:00
Pedro Ruivo
0f91e67b90
Feature flag: rolling-updates
Closes #36840

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-06 17:03:50 +01:00
Marek Posolda
ec5a8d161a
Token exchange - added experimental token exchange V2 divided into mulitple features (#36407)
closes #35504

Signed-off-by: mposolda <mposolda@gmail.com>
2025-01-17 09:12:38 +01:00
Stian Thorgersen
c1c147cb17
Restrict access to environment variables when at the server runtime (#36472)
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-01-15 09:36:19 +01:00
Pedro Igor
db986c496e Allow tracing packets sent to and from LDAP for troubleshooting purposes
Closes #36087

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-01-07 12:42:23 +01:00
Thomas Darimont
7b62c0d266 Fix content-type for content.json (#35971)
We now send the content-type `application/json` when JSON resources are requested via the resources endpoint.
Previously, those resources were using content-type `application/octet-stream`.
Also removed the duplicate entry for `text/javascript` content type mapping.

Fixes #35971

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-12-17 19:45:24 -03:00
Martin Bartoš
8f2c825835
Enable opentelemetry feature by default (#35756)
Closes #35753

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-11 16:53:14 +00:00
Pedro Igor
5c901016e7 Removing unnecessary configuration from auth servers
Closes #35604

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-12-06 13:36:50 +01:00
Erik Jan de Wit
566e41cc72
color theme tab (#35179)
* added a way to customize theme colors

fixes: #33233
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added preview and grouped vars

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added dark mode

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fixed label

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added empty check

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* use json string in attributes

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* removed use of not exported type

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* output css based on JSON string

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added feature flag

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added a way to customize theme colors

fixes: #33233
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* renamed feature to quick theme

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fixed merge error

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Restore the Cache tab in Realm Settings (#34311)

closes keycloak#17727

Signed-off-by: Christian Janker <christian.janker@gmx.at>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added a way to customize theme colors

fixes: #33233
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* create a zip file instead

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added themes.json to make jar usable

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* use property instead of attribute

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fix the jar file

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fixed header for preview and some text

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Christian Janker <christian.janker@gmx.at>
Co-authored-by: Christian Ja <christian.janker@gmx.at>
2024-12-04 19:36:42 +00:00
Stefan Guilhen
3c33a7180e
Add initial IPA-Tuura federation (#35467)
* Add initial federation ipatuura plugin

Closes #35325

Signed-off-by: Justin Stephenson <jstephen@redhat.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
2024-12-02 14:59:21 -03:00