25318 Commits

Author SHA1 Message Date
Thomas Darimont
8c813e0e3a Ensure realm attributes import happens before client import
Fixes #32799

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
(cherry picked from commit 445a7da9020e4c48561d99040edca36cda61d4cf)
2024-09-11 16:38:54 +02:00
Stian Thorgersen
109db4fe7d
Remove @NoCache annotation in admin client interfaces (#32795)
Closes #32731

Signed-off-by: stianst <stianst@gmail.com>
(cherry picked from commit e140e71a52dec87bf632a5cb9787e48fff975da6)
2024-09-11 15:15:34 +02:00
Alexander Schwartz
19e557daab Set idle time the same as for the internal cache, but extend it for refreshes
Closes #32100

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2024-09-10 10:12:22 +02:00
Jon Koops
48c2b02005
Include rfc4648 in the import map for login v2
Closes #32578

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-09-10 10:11:42 +02:00
Giuseppe Graziano
21362ae8e6 Removing BOM character from SAML entity descriptor
Closes #30604

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
(cherry picked from commit c2c74faec0481c9cd6ee9506b65f42c08bb7442d)
2024-09-10 10:10:48 +02:00
Agnieszka Gancarczyk
57f035b67a
Backport to fix default roles (#32277)
Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com>
2024-09-10 10:10:11 +02:00
Ricardo Martin
2341d6ee7a
Honor turnOffChangeSessionIdOnLogin in SAML adapter (#185)
Closes keycloak/keycloak-private#183

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-08-20 09:35:52 +02:00
Ricardo Martin
3916169930
SAML IdMapperUpdaterSessionListener should be added always and must implement HttpSessionIdListener interface (#32234)
Closes #32084

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-08-20 09:18:40 +02:00
Alexander Schwartz
94e213a13b
Load client sessions in chunks from the database (#32208)
Closes #32180

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-08-16 16:01:24 +00:00
Ricardo Martin
7bf8841e31
better unset check (#32062) (#32207)
* better unset check

fixes: #32059
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* better explanation

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fix min value

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Steal some code from `react-hook-form`

Signed-off-by: Jon Koops <jonkoops@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit 862854bc2915516a1d7a9b3874c39bdfc48f8422)

Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-08-16 15:23:40 +00:00
Michal Hajas
db95afd73c Set clientId if it is not set in the entity
Closes #32195

Signed-off-by: Michal Hajas <mhajas@redhat.com>
(cherry picked from commit 6a9245546e92a05c00410a8d7ac5897f3261a116)
2024-08-16 15:50:22 +02:00
Stan Silvert
9bd5075caa Hide User Reg tab if you don't have permissions (#32021)
Fixes #31920

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
(cherry picked from commit 35fbcf5af8eae283fcb83f1152ebaecf3e8fecef)
2024-08-16 08:29:42 -04:00
Alexander Schwartz
31d393a12a
Specify version column name in a case-sensitive manner (#32190)
Closes #32127

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-08-16 13:27:37 +02:00
Michal Hajas
6dbe66b3a0 Remove information about online_user_session table
Closes #32178

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
(cherry picked from commit 36ad5fb3bd365314e77bd4103d62e91d89111066)
2024-08-16 11:32:15 +02:00
Alexander Schwartz
01ae858fe9
Handle non-existing client gracefully (#32167)
Closes #32150

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-08-16 10:15:51 +02:00
Alexander Schwartz
5edffb4564
Caches the id-to-user mapping for the evaluation in the current session (#32138)
Closes #31519

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-08-16 10:15:24 +02:00
himanshi1099
04a3b22603 Fix for Network error attempting to view default realm roles without permissions (#31902)
* fix for issue #29211

Signed-off-by: Himanshi Gupta <higupta@redhat.com>

* fix for issue #29211

Signed-off-by: Himanshi Gupta <higupta@redhat.com>

---------

Signed-off-by: Himanshi Gupta <higupta@redhat.com>
(cherry picked from commit 7cf9946040ba3334fecef144170520ea08e25c3e)
2024-08-13 14:55:25 -04:00
Alexander Schwartz
e0d37bd18d
Cache node binary for Windows to avoid download failures (#32053)
Closes #31835

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-08-13 09:04:21 +02:00
Stan Silvert
b072f6df07
Fix for Network error attempting to view events without permissions (#31920) (#31988)
* Fix for #31918

Signed-off-by: kaustubh B <kbawanka@redhat.com>

* Update js/apps/admin-ui/src/realm-settings/RealmSettingsTabs.tsx

Co-authored-by: Stan Silvert <ssilvert@redhat.com>
Signed-off-by: kaustubh-rh <88367583+kaustubh-rh@users.noreply.github.com>

---------

Signed-off-by: kaustubh B <kbawanka@redhat.com>
Signed-off-by: kaustubh-rh <88367583+kaustubh-rh@users.noreply.github.com>
Co-authored-by: Stan Silvert <ssilvert@redhat.com>
(cherry picked from commit e090b0d26035af69def569410e60dac58ea845f0)

Co-authored-by: kaustubh-rh <88367583+kaustubh-rh@users.noreply.github.com>
2024-08-09 10:58:36 +01:00
rmartinc
2a8f104f26 Adding upgrading notes for brute force changes
Closes #31960

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-08-09 09:49:47 +02:00
rmartinc
99f92ad5ff Remove the attempt in brute force when the off-thread finishes
Closes #31881

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-08-09 09:49:47 +02:00
Pedro Igor
2fb358e1a2 Support for blocking concurrent requests when brute force is enabled
Closes #31726

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
2024-08-09 09:49:47 +02:00
Ryan Emerson
c70f729a67 Upgrade to Infinispan 15.0.7.Final
Closes #31963

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2024-08-07 15:42:59 +02:00
Erik Jan de Wit
546820bc55
Use TextControl in StringComponent (#31442) (#31743)
* Use TextControl in StringComponent

This makes that the field is required and partially fixes:

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
#26963

* enable test-id override

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 0b5f42f95d13296a124c64a63ee355d7a1c962dd)
2024-08-06 12:52:59 +01:00
Erik Jan de Wit
4c9b422357
use stringify on use meta data descriptor (#31717) (#31906)
fixes: #31687

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 3f6136c6487f715bee2badf3d686efd3520eac21)
2024-08-06 12:47:36 +01:00
Erik Jan de Wit
3702df5882
disable save when all fields are readonly (#31535) (#31765)
fixes: #31304

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 814e958e1184874b591ff037458fe57ddb8dea26)
2024-08-06 12:46:33 +01:00
agagancarczyk
9aef33f5be
Backport to revert accidental change to logout url (#31933)
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-08-06 12:16:04 +01:00
agagancarczyk
1f35877a10
Backport to make realm the namespace so we can change the bundle (#31666)
* Backport to make realm the namespace so we can change the bundle

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

* fix

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

---------

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-07-31 12:50:19 +00:00
Alexander Schwartz
10aaa67d1a
For persistent sessions, don't remove user session if there is no session in the remote store (#31787)
Closes #31115

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-31 12:00:23 +02:00
Alexander Schwartz
213063bed1
Trigger clearing the user cache when the duplicate email allowed flag changes (#31722)
Closes #31045

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-30 14:58:32 +02:00
Marek Posolda
89ad2e6b17 Documentation for Delete Credential action and related changes (#31719)
closes #31718

Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
(cherry picked from commit 5b521173518a80b9ce87ae8fd48bb13e86a657ca)
2024-07-30 10:13:41 +02:00
Giuseppe Graziano
b65ec7f2c7 Client scope assignment for client registration
Closes #31062

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
(cherry picked from commit 12732333c80db8478aa70556c62e3f71ede44cbd)
2024-07-29 16:26:24 +02:00
agagancarczyk
9273bb519a
Backport to remove needless aria-label (#31655)
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-07-29 09:40:49 +02:00
Alexander Schwartz
69642f1427
All CURL commands should check the HTTP response code (#31601)
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-26 12:38:27 +02:00
Jon Koops
ee712cc45a
don't lazy load when searching (#31100) (#31658)
fixes: #31070

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 932a92a31688e08a95e174c99e6cc15fcf2cfa14)

Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-07-26 10:14:46 +00:00
Steven Hawkins
c0ed46a011
fix: backport of looking for separated --spi arguments for the config (#31576)
closes: #31578

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-25 15:34:34 +00:00
Erik Jan de Wit
3fdc78bab9
add onOpenChange to all dropdown and selects (#31230) (#31562)
* add onOpenChange to all dropdown and selects

fixes: #31166
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* fixed test

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit b5597c629381685301f17ebd932732dd1450b817)
2024-07-25 09:02:39 +01:00
agagancarczyk
671e7a29c2
Backport to add inputOptionLabelsI18nPrefix when looking up label (#31584)
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-07-25 06:20:28 +02:00
Alexander Schwartz
d767c784c9 Filter out null values when looking up entries by ID
This should prevent null elements in the stream when doing concurrent operations.

Closes #28865

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-24 15:25:35 -03:00
Steven Hawkins
da43044494
doc: add a note about setting proxy=edge (#31486)
* doc: add a note about setting proxy=edge

closes: #30945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/basic-deployment.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-07-24 17:34:38 +02:00
Erik Jan de Wit
a573ce8203
removed strange searching pagination logic (#31430) (#31560)
fixes: #31386

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 28c1035c5ba80ec853810457cc48596d31597565)
2024-07-24 15:47:06 +01:00
Miquel Simon
fd0eddf44f Updated connection configuration for MSSQL test container
Closes #31558

Signed-off-by: Miquel Simon <msimonma@redhat.com>
(cherry picked from commit aab7a912c46527c3da2aa254aefd653504fd1cef)
2024-07-24 16:24:13 +02:00
Steven Hawkins
be8651e2b9
fix: always omit hidden options (#31488)
closes: #31340

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-24 09:27:45 +02:00
agagancarczyk
d9073d6b33
Backport to remove unused help text (#31482)
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-07-23 11:33:55 +02:00
Jon Koops
049785ef55
Fix selector used to construct list of recovery codes (#31475) (#31483)
Closes #31260

Signed-off-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit d16e1ac1069444af7b75db7ee1584238eaaca0da)
2024-07-22 13:46:24 +00:00
Erik Jan de Wit
c36a4a195c
small fix for library mode (#30645) (#31427)
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 5dd6e1412dea5f0db4dbdd34e7532a0688bb60ca)
2024-07-22 12:15:41 +02:00
rmartinc
3fa8137823 Wait for the brute force off-thread processing in AbstractAdvancedBrokerTest
Closes #30188
Closes #30641

Signed-off-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 5ea3becef57fa239961bd52f3d89235e86c238aa)
2024-07-18 15:31:33 +02:00
Ricardo Martin
d12adba078 Correctly moves to the next required action (#31358)
Closes #31014

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>

Co-authored-by: Giuseppe Graziano <g.graziano94@gmail.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
(cherry picked from commit 3d12c05005170d7c63f84850803316b047924382)
2024-07-17 12:26:09 +02:00
Erik Jan de Wit
9d7d40f6b3
fixed the url missed after refactoring (#31284) (#31298)
fixes: #31244

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit fab9028caa4ab8bbb305f9d8731947b3bddd78f4)
2024-07-17 08:43:11 +01:00
Pedro Ruivo
adb3765a84 Add default stack in cache-ispn.xml
A bug in Infinispan prevents the metrics to be registered if the "stack"
is not specified.
Change the default configuration shipped with Keycloak to use the UDP
stack as default.
UDP is the default in previous Keycloak versions.

Fixes #31218

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-16 14:43:01 -03:00