183 Commits

Author SHA1 Message Date
Peter Skopek
651d651c30 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-08-12 16:50:17 +02:00
vramik
a8225655cf Initial commit for the RLM feature
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
2025-08-11 17:34:41 -03:00
Šimon Vacek
20cb13e8dc
fix UserConfigBuilder usage (#41794)
fixes: #41326

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-08-11 14:49:56 -03:00
Lukas Hanusovsky
f12ab6b189
Move RealmTest.java to the new testsuite (#41326)
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-08-11 16:24:27 +02:00
Šimon Vacek
e664e56b62
Test framework config builders name unification (#41727)
* Test framework config builders name unification

Closes #37275

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Update test-framework/core/src/main/java/org/keycloak/testframework/realm/RealmConfigBuilder.java

Signed-off-by: Stian Thorgersen <stian@redhat.com>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
2025-08-11 12:56:33 +00:00
Alexander Schwartz
e1b3afb686
Refresh token for an OAuth2 based IDP when retrieving the IDP token
Closes #14644

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-31 11:11:34 +02:00
rmartinc
1f608fae6e Create a new condition for credential type and add it to default flows
Closes #41354

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-31 10:14:15 +02:00
Steven Hawkins
10947d002f
fix: using localtest.me instead of nip.io
closes: #40645

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-26 11:36:01 +02:00
Stian Thorgersen
b71b1f5fea
Disable tests for specific databases and servers in test framework (#41358)
Closes #41357

Signed-off-by: stianst <stianst@gmail.com>
2025-07-24 09:34:15 +02:00
Stian Thorgersen
bd676ea845
Test suites config for the new test framework (#41318)
Closes #41316

Signed-off-by: stianst <stianst@gmail.com>
2025-07-23 09:23:16 +02:00
Šimon Vacek
eb000cfbe0
Move ComponentsTest.java to the new testsuite (#41169)
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-07-22 11:26:06 +00:00
Lukas Hanusovsky
d7273e6b1f
Move ConsentsTest.java to the new testsuite (#40323)
* Moving files to the new test suite

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Move ConsentsTest.java, UserRoleTest.java to the new testsuite

Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-22 12:31:59 +02:00
Ryan Emerson
52a83509dc
Default jdbc-ping cluster setup for distributed caches fails in Oracle
* Add DatabaseConfig to TestDatabase so the underlying DB can be
  configured per test
* Allow DB initScripts to be configured by tests

Closes #40784
Closes #41105

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-17 15:57:25 +00:00
Takashi Norimatsu
f00cd980c4 Add FAPI 2.0 + DPoP security profile as default profile of client policies
closes #35441

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-07-16 09:30:11 +02:00
Lukas Hanusovsky
788e981917 Move UserTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-16 08:13:30 +02:00
Lukas Hanusovsky
5e805ac6b3 Move UserStorageRestTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-15 13:39:32 +02:00
Lukas Hanusovsky
2145830d57 Moving files to the new test suite
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-15 13:39:32 +02:00
Lukas Hanusovsky
17beaa1359 Migrate FineGrainAdminUnitTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-15 13:38:03 +02:00
Pedro Igor
d5206b61f6 Update email feature only enabled if the required action is enabled at the realm
Closes #41045

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-07-14 16:31:15 -03:00
Lukas Hanusovsky
660a4aa48a Move IdentityProviderTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-14 15:55:50 +02:00
Lukas Hanusovsky
21d033dc3a Moving files to the new test suite
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-14 15:55:50 +02:00
Lukas Hanusovsky
73aa3e9c18 Move IllegalAdminUpgradeTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-14 14:31:59 +02:00
Lukas Hanusovsky
d2b45373d3 Move PartialImportTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-14 14:00:17 +02:00
Lukas Hanusovsky
cabd7cd474 Move ConcurrencyTest.java, AbstractConcurrencyTest.java to the new testsuite
Part of: #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-07-14 11:10:54 +02:00
Pascal Knüppel
f39a37d8d1
[OID4VCI] Move realm attributes to clientScope and protocol-mappers (#39768)
fixes #39527


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
2025-07-10 14:46:36 +02:00
Martin Kanis
5a42390341 Make UPDATE_EMAIL a supported feature
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-07-09 10:15:48 -03:00
vramik
332c9b6e4a Fix NPE when accessing group concurrently
Closes #40368

Signed-off-by: vramik <vramik@redhat.com>
2025-07-08 16:13:54 -03:00
Ryan Emerson
f0c623598e
Run clustering compatibility tests on release/x.y branches
Closes #39966

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-07 21:08:11 +02:00
vramik
114afee7f1 Use MgmtPermissionsV2 by default
Closes #40192

Signed-off-by: vramik <vramik@redhat.com>
2025-07-07 11:07:21 -03:00
Alexander Schwartz
05d0c34681
Automatically connect to a writer instance of PostgreSQL (#40384)
Closes #40383

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-07-04 16:46:49 +02:00
Barathwaja S
81a7f38a76 Added emailVerified filtering for users endpoint; updated user count endpoint with logic to support enabled, emailVerified, idpAlias, idpUserId, and exact field query parameters
Closes #38556
Closes #29295

Signed-off-by: Barathwaja S <sbarathwaj4@gmail.com>
2025-07-03 17:05:36 -03:00
Lukas Hanusovsky
046f8da7e3
[Test framework] ImpersonationTest migration
Part of #34494

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-06-26 15:04:35 +02:00
Ryan Emerson
9543008899
Create clustering test cases for OIDC flows (#40623)
Closes #39965

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2025-06-25 15:06:10 +02:00
Michal Hajas
d2f4635ea0
Add clustering tests to new test framework
Closes #39962

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@redhat.com>
2025-06-13 20:26:07 +02:00
Giuseppe Graziano
1d9ecb2d7a
Added WebAuthn and recovery codes as disabled in the First Broker Login Flow (#40319)
Closes #40000

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-06-09 12:40:53 +02:00
rmartinc
2ec1496c5b Rename "Browser - Conditional OTP" to "Browser - Conditional 2FA" in default browser flow
Closes #40281

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-06-09 08:41:23 +02:00
rmartinc
c3bbf45a7b Add webauthn and recovery codes to the default browser flow as disabled
Closes #39999

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-06-05 16:09:32 +02:00
Pascal Knüppel
17e2602a56
[OID4VCI] Fix creation of clientScopes with protocol oid4vc (#39556)
closes #39527

Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
2025-06-05 08:49:05 +02:00
vramik
9590221ef8 Allow mapping Admin roles by server administrator only
Closes #39956


Signed-off-by: vramik <vramik@redhat.com>
2025-06-04 15:05:51 -03:00
Pedro Igor
43a7b27301 Resolve roles inherited from groups and composite roles
Closes #39850

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-05-26 14:15:06 -03:00
Ricardo Martin
ef4ad0d59c
Remove parent and children composite dependencies when removing roles
Closes #39724

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-23 11:29:18 +02:00
Pedro Igor
b22b1f298c Adding parameter to control whether the count of subgroups of subgroups should be returned
Closes #39668

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-05-22 11:15:38 -03:00
Pedro Igor
7aab9fade8 Move FGAP types to a specific package
Closes #39712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-05-22 09:53:16 -03:00
rmartinc
598154bc58 Only reuse SMTP authentication data for testing endpoint when the same auth, host, port and user are passed
Closes #39486

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-21 14:01:02 +02:00
Šimon Vacek
175102d03d
Migration util imrovements (#39161)
Closes #37691
Implements #37283



migration util rewrite static imports



migration util add more assert methods



migration util rewrite common statements



migration util fix diff tool usage



Update test migration README



migration util review fixes

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-05-19 09:55:25 +02:00
Kai J. Witt
c76bb0683c
Make max auth age configurable for all required actions by default
Moved the current configuration implementation for the update password

Closes #39408

Signed-off-by: Kai Josef Witt <KWitt@vhv.de>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Kai Josef Witt <KWitt@vhv.de>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-05-15 08:44:38 +02:00
Steven Hawkins
f40cb88db4
fix: removing KeycloakApplication usage of keycloak-add-user.json (#39460)
* fix: removing KeycloakApplication usage of keycloak-add-user.json

closes:#39428

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Removing the test keycloak-add-user.json

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-08 07:58:09 +00:00
Keshav Deshpande
8026a68ec8 Change JWKS header
Closes #39110

Signed-off-by: Keshav Deshpande <keshavprashantdeshpande@gmail.com>
2025-05-05 12:23:15 +02:00
Steven Hawkins
08b5183784
fix: relaxes the admin root redirect check (#39095)
* fix: relaxes the admin root redirect check

also deprecates the usage of local_admin

closes: #39085

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* moving deprecation to 26.3

also changing the adminroot test to seem like it's coming from a proxy

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-29 11:09:51 -04:00
Simon Vacek
ba150ed0f9 Split GroupTest into multiple files
Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-04-29 11:52:15 +02:00