29138 Commits

Author SHA1 Message Date
Steven Hawkins
6b6cefd827
fix: aligning the elytron alt name extraction logic (#41975)
closes: #40629

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-16 10:11:30 -04:00
vramik
d0e83cc05e Rename RLM to Workflows
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
2025-09-16 08:52:50 -03:00
Ricardo Martin
a2acdda535
Automatic download and cache of the SAML client public keys (#41947)
Closes #17028

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-16 13:07:33 +02:00
MartinFMartin
3940f51cf0
Update Slovenian translations for login messages (#42637)
Signed-off-by: MartinFMartin <139436601+MartinFMartin@users.noreply.github.com>
2025-09-16 10:57:59 +00:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 09:38:52 +00:00
Ryan Emerson
6e7a836c96
Create default ServiceMonitor with Operator
Closes #40406

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-16 10:57:35 +02:00
Awambeng
20f9306b78
[OID4VCI] Adjust Credential Issuer Metadata endpoint, return issuer metadata at /.well-known/openid-credential-issuer/realms/{realm} (#42577)
Closes #41589

Signed-off-by: Awambeng <awambengrodrick@gmail.com>
2025-09-16 10:24:44 +02:00
rmartinc
8a94bd90f9 redirectToAuthentication if the request uses PAR to not lose the single object after a refresh
Closes #36716

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-16 10:14:35 +02:00
andymunro
bbe2beebbb
Keycloak 26.4 Upgrading Guide
Closes #42564

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 08:59:28 +02:00
Pedro Ruivo
714d71b4f5
Concurrent update embedded caches and database
Closes #42374

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-15 18:38:03 +00:00
Alexander Schwartz
cdea7d79a7
Fix chinese language names
Closes #42575

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-15 15:01:08 -03:00
Steven Hawkins
c7ae7185e6
fix: updating export option text (#42621)
closes: #42011

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 15:25:54 +00:00
Steven Hawkins
bb7e5ab7b2
fix: cleaning up dockerfile build warnings (#42573)
closes: #42572

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 17:07:27 +02:00
Pedro Igor
9eb0a3a326 Make sure refresh expiration is set together with setting the previous refresh token
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-15 10:40:19 -03:00
Matthias Peter
4774d68d4f added null check also for optional expires_in parameter 2025-09-15 10:40:19 -03:00
Matthias Peter
db4d6bb0d9 added junit tests for refreshExpiresIn fix 2025-09-15 10:40:19 -03:00
Matthias Peter
6f6419378d fixed getter setter for expiresIn comparable to refreshExpiresIn 2025-09-15 10:40:19 -03:00
pematth
0265c6c255 removed unused include
Signed-off-by: pematth <matthiaspeter@freenet.de>
2025-09-15 10:40:19 -03:00
pematth
d72d7a407d fix proposal for issue 41804
Signed-off-by: pematth <matthiaspeter@freenet.de>
2025-09-15 10:40:19 -03:00
Lukas Hanusovsky
0aff081946
Keycloak CI - Refactoring ci.yml, removing surefire reports and jvm heapdump actions (#42425)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-09-15 14:53:45 +02:00
forkimenjeckayang
64e0b450aa
[OID4VCI]: Add support for parsing and understanding authorization_details at the Token Endpoint (#40751)
Closes #39278
Closes #39279


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: mposolda <mposolda@gmail.com>
2025-09-15 14:02:45 +02:00
rmartinc
605b51905c Do not regenerate the secret key when the size is not explicitly passed
Closes #42405

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-15 13:30:35 +02:00
Ogenbertrand
d854703a21 Update key attestation header typ from keyattestation+jwt to key-attestation+jwt
Signed-off-by: Ogenbertrand <ogenbertrand@gmail.com>
2025-09-15 09:21:51 +02:00
Ogen Bertrand
70b50e93e9
[OID4VCI] Add support for credential_request_encryption in metadat (#42169)
closes #41594
closes #41593
closes #41592
closes #41582
closes #41595


Signed-off-by: Ogenbertrand <ogenbertrand@gmail.com>
2025-09-15 09:19:15 +02:00
Stefan Guilhen
20f5a15278 Adjust scheduled action time so that it is always based on the previous action
Closes #42385

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-09-12 15:50:38 -03:00
Martin Kanis
5a02bc1adb Admin UI hides local users when LDAP provider fails
Closes #42276

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-09-12 10:43:08 -03:00
Ricardo Martin
6d7191844e
Disable preview of the json file if the content is more than 100KB (#42528)
Closes #40557

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-12 09:21:10 -04:00
Pedro Ruivo
971016f743
More efficient secure ID generator
Closes #42283

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-12 13:52:26 +02:00
Stefan Wiedemann
232c91e6b7
Allow configuration of clientId in TargetRoleMapper again (#42377)
closes #42375


Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>
2025-09-12 08:56:53 +02:00
forkimenjeckayang
66677da8f7
[OID4VC]: Update the issuer metadata for signed metadata (#42428)
Closes #41588

Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
2025-09-12 08:51:56 +02:00
Ryan Emerson
73a4020baa
Remove default cache configurations from cache-local.xml
Closes #42351

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-11 21:11:56 +02:00
dependabot[bot]
df478a8a8f Bump github/codeql-action from 3.30.1 to 3.30.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f1f6e5f6af...192325c861)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-11 14:27:38 -03:00
Alexander Schwartz
78ab69b0e7
Edit Keycloak 26.4 release notes
Closes #42532

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-09-11 14:26:12 -03:00
Steven Hawkins
3724409c5e
fix: further refining when profile info is logged (#42483)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-11 18:17:01 +02:00
Alexander Schwartz
6ea3c8aedf
Session IDs and auth codes should have 128 bits of entropy
Closes #42274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 17:05:40 +02:00
KONSTANTINOS GEORGILAKIS
b6cee86e74
Add openid scope in Allowed Client Scopes options of client registration access policies
Closes #42339

Signed-off-by: cgeorgilakis-grnet <cgeorgilakis@admin.grnet.gr>
Co-authored-by: cgeorgilakis-grnet <cgeorgilakis@admin.grnet.gr>
2025-09-11 16:04:31 +02:00
Alexander Schwartz
6a202146b4
Handle already existing user session in the store
Closes #40374

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 14:58:53 +02:00
andymunro
801e892be1
Edit Keycloak 26.4 release notes
Closes #42532

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-09-11 14:17:19 +02:00
Stian Thorgersen
51465f52a3
Get client by client attribute
Closes #42543

Signed-off-by: stianst <stianst@gmail.com>
2025-09-11 12:07:13 +00:00
Alexander Schwartz
d98c474cdc
Add upstream architectures for the Operator (#42099)
Closes #38928

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 12:06:50 +02:00
Alexander Schwartz
5cfdaebcea
Add missing fields for client offline session timeout and lifespan
Closes #42369

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 11:46:50 +02:00
Stian Thorgersen
22cccdd1db
Update Admin UI for SPIFFE Identity Provider (#42507)
Closes #42464

Signed-off-by: stianst <stianst@gmail.com>
2025-09-11 11:44:44 +02:00
Weblate (bot)
f26e487edb
Translations update from Hosted Weblate (#42395)
* Translated using Weblate (Portuguese (Brazil))

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/pt_BR/

Updated translation for Portuguese (Brazil)

Language: pt_BR

Updated translation for Portuguese (Brazil)

Language: pt_BR

Updated translation for Portuguese (Brazil)

Language: pt_BR

Updated translation for Portuguese (Brazil)

Language: pt_BR

Co-authored-by: Felipe Zorzo <felipe.b.zorzo@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Felipe Zorzo <felipe.b.zorzo@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for German

Language: de

Updated translation for German

Language: de

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>

* Updated translation for Catalan

Language: ca

Updated translation for Catalan

Language: ca

Updated translation for Catalan

Language: ca

Translated using Weblate (Catalan)

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/ca/

Updated translation for Catalan

Language: ca

Updated translation for Catalan

Language: ca

Updated translation for Catalan

Language: ca

Co-authored-by: Ecron <ecron_89@hotmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jordi Mallach <jordi@mallach.net>
Signed-off-by: Ecron <ecron_89@hotmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Jordi Mallach <jordi@mallach.net>

* Updated translation for Dutch

Language: nl

Updated translation for Dutch

Language: nl

Updated translation for Dutch

Language: nl

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

---------

Signed-off-by: Felipe Zorzo <felipe.b.zorzo@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
Signed-off-by: Ecron <ecron_89@hotmail.com>
Signed-off-by: Jordi Mallach <jordi@mallach.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Felipe Zorzo <felipe.b.zorzo@gmail.com>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: Ecron <ecron_89@hotmail.com>
Co-authored-by: Jordi Mallach <jordi@mallach.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
2025-09-10 21:41:10 +02:00
Pedro Ruivo
8567eec526
ClientSession timestamp not updated in the database
Closes #42012

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-10 20:34:22 +02:00
Pedro Igor
f20916b632
Catch specific expeception and add logging when there is no active request context
Closes #42525

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-10 16:38:15 +00:00
Steven Hawkins
ae1e1d3cc3
fix: allows for schedulings to be defined for operator jobs (#42310)
* fix: allows for schedulings to be defined for operator jobs

closes: #42057

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-10 16:28:12 +00:00
Pedro Igor
0d5dfc3eae
Add support for ad-hoc policies (#42508)
Closes #42126

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-10 15:40:17 +00:00
Stefan Guilhen
371e4289c3
Add action that sets a required action for a user (#42509)
Closes #42506

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-09-10 14:40:20 +00:00
Alexander Schwartz
473864a45d
Fixing the indentation of the sections
Closes #42501

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-10 13:54:50 +02:00
Václav Muzikář
c66bc10946
Upgrade to Quarkus 3.27.0.CR1 (#42495)
Closes #42494

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-10 08:14:38 -03:00