314 Commits

Author SHA1 Message Date
Pedro Ruivo
ba495d1ab1
Remote Infinispan should return count per client only for the current realm (#44948)
Closes #44577

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-12-17 07:40:49 +01:00
Stian Thorgersen
2f1628d1a9
Remove log4j 1.x from testsuite/model
Closes #44554

Signed-off-by: stianst <stianst@gmail.com>
2025-12-11 10:23:03 +01:00
Christian Glasmachers
921b10ee80
Login failure cache: Evict entries after the configured failure reset time
Closes #44801

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Co-authored-by: Christian Glasmachers <Christian.Glasmachers-extern@deutschebahn.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-12-10 11:20:19 +01:00
Martin Bartoš
52bf0face3
ModelTests are broken after consolidating config logic
Closes #44700

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-05 11:27:18 +00:00
Pedro Ruivo
b35dd72392
User session deleted events for invalid sessions
Closes #44513

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-28 15:43:59 +00:00
Pedro Ruivo
3ed15e740a
Add new option to schedule user session expiration
Closes #44068

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-11-27 23:01:32 +01:00
Pedro Igor
96aea99d6c
Make sure LDAP sync runs in a single cluster node and respecting the configured period
Closes #43752

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-27 08:08:20 +01:00
Pedro Ruivo
13ef89664c
More accurate user session expiration logic
Closes #44204

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-19 21:06:17 +01:00
Pedro Ruivo
7dc7c81b25
Fix UserSessionProviderOfflineModelTest#testLoadUserSessionsWithNotDeletedOfflineClientSessions
Fixes #43886

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-14 20:46:02 +01:00
Pedro Ruivo
70e1dba2c3
Create remember_me column for user sessions
Closes #44112

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-14 14:41:04 +01:00
Stian Thorgersen
a2c1055f8d
Proposed import order (#43432)
* Add importOrder to Spotless

Closes #43235

Signed-off-by: stianst <stianst@gmail.com>

* Re-order imports with Spotless

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
2025-11-14 09:34:49 +01:00
Pedro Ruivo
0876ca9aa1
Use batches to expire entries from Database
Closes #44067

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-13 15:13:15 +00:00
Pedro Ruivo
39964befef
Sessions not removed when user is deleted
Fixes #43323

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-11-11 14:09:05 +01:00
Pedro Ruivo
18eeef7b26
Create user session expired event
Closes #43942

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-07 22:36:47 +00:00
Alexander Schwartz
3ef8c565f3
Avoid touching the database layer if no changes are necessary for a user
Closes #43682

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-05 06:44:48 -03:00
Pedro Ruivo
e40c5de050
Session cache affinity
Closes #42776

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 21:01:09 +00:00
stianst
aedd7fe5db Remove unused imports as part of #43233
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Pedro Ruivo
f7ff7e55d8
Replace UUID with composite key for client session cache
Closes #42547

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-17 10:25:51 +00:00
Alexander Schwartz
6a202146b4
Handle already existing user session in the store
Closes #40374

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 14:58:53 +02:00
Pedro Ruivo
8567eec526
ClientSession timestamp not updated in the database
Closes #42012

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-10 20:34:22 +02:00
Alexander Schwartz
e46c879cde
Retry duplicate exceptions to handle concurrent client sessions
Closes #42278

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-02 10:43:03 -03:00
Pedro Ruivo
6bcaa63124
Concurrently update the remote caches
Closes #42096

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-08-25 16:39:17 +02:00
Martin Bartoš
e4f0bfc8e7
Make UPDATE_TIME unique for MIGRATION_MODEL table
Closes #40088

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-18 13:08:42 +00:00
Pedro Igor
0188d276d8
Invalidate user cache entries when email or username are different from storage
Closes #40085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 20:44:01 +00:00
Martin Bartoš
ad92af3c58
MigrationModel duplicate entry
Closes #39866

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 10:54:29 +02:00
Pedro Ruivo
eafe08a73a
Create CacheEmbeddedConfigProvider
Closes #38497

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-28 13:00:53 +02:00
Pedro Ruivo
d7b9a0691e
Fix test configuration for remote infinispan
Closes #39097

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-04-22 08:25:05 +02:00
Pedro Ruivo
636fffe0bc
Create CacheRemoteConfigProvider (#38570)
Closes #38496

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-04-16 17:08:43 +02:00
Michal Hajas
4dc4de7c12
Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
2025-04-08 13:00:47 -03:00
Pedro Ruivo
6aa3f9d5a7
Load all ProtoSchemas from the classpath
Closes #34971

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-03-27 15:41:01 +01:00
Alexander Schwartz
a0de3c26d7 Allow a token to be revoked twice
Closes #37621

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 10:49:41 -03:00
Pedro Igor
4b2d5ed472 Minor fixes, test coverage, and allow deleting local users
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-07 10:42:45 -03:00
Christian Janker
87db882a89 Do not remove users in LDAP when queries return an empty result
closes #34764

Signed-off-by: Christian Janker <christian.janker@gmx.at>
2025-02-07 10:42:45 -03:00
Alexander Schwartz
1cf51a700c Also cache client roles if looked up by name and not found
Closes #36919

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-03 18:12:41 -03:00
Alexander Schwartz
d9fe2dcc48 Cache empty results for role-by-name lookup
Closes #36919

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-03 18:12:41 -03:00
Arthenice
c20f7e50c7
docs: update JavaDoc for ImportSynchronization
The JavaDoc for ImportSynchronization was wrongfully referencing the
UserStorageProvider instead of the UserStorageProviderFactory.

Closes #36834

Signed-off-by: arthenice <wistful.arthenice@gmail.com>
2025-01-28 12:13:19 +01:00
Pedro Ruivo
26a3c09725 Upgrade Infinispan to 15.0.12.Final
Closes #36686

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-01-22 15:17:29 +01:00
Paul Schwabauer
7d8505a2dc
Remove usage of deprecated thread_dumps_threshold configuration (#36620)
Closes #36633

Signed-off-by: Paul Schwabauer <pschwabauer@intevation.de>
2025-01-21 15:16:23 +01:00
Stian Thorgersen
c1c147cb17
Restrict access to environment variables when at the server runtime (#36472)
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-01-15 09:36:19 +01:00
Stefan Guilhen
6f5077ddcb Increase thread sleep time when testing two different locks
Closes #35448

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-12-04 15:20:28 -03:00
Pedro Ruivo
86c475b9fc Invoking BaseUpdater.markDeleted() more than once cause the transient status to be lost
Fixes #35570

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-03 18:06:07 +01:00
Pedro Ruivo
ff939d6b28 Test AuthenticationSession optimization
Closes #35513

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-02 18:41:05 +01:00
Stefan Guilhen
9861acc2aa UserSessionProvider.removeUserSessions now removes all user sessions (both regular and offline)
Closes #31359

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-11-29 12:35:15 -03:00
Pedro Ruivo
9bd0cdc00f Flaky test: AuthenticationSessionTest
Enable transactions to handle conflicts.

Unrelated changes:
* Disable IP multicast (not available in MacOS by default)
* Bind JGroups to 127.0.0.1
* Remove FD_SOCK2 (single JVM tests do not require failure detection)

Closes #35087
Closes #35015

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-11-28 12:39:06 +01:00
Martin Bartoš
959ce9c483 Provide Tracing SPI
Closes #34711

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2024-11-28 10:45:31 +01:00
Pedro Ruivo
e143b022e5 Flaky test: AuthenticationSessionTest
Workaround for flaky test AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval

Closes #35015

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-11-25 13:49:08 +01:00
Giuseppe Graziano
05adf19848
Authentication session with changelog transaction
Closes #23881
Closes #32658

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2024-11-15 14:10:15 +01:00
Alexander Schwartz
8be4237fd4
Fix failing test AdminEventQueryTest by adding required session parameter (#34612)
Closes #34611

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-11-04 12:28:59 +01:00
Pedro Ruivo
f507caae6c Deleting a user leads to ISPN marshalling exception
Fixes #34224

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-10-23 11:53:25 +02:00