27505 Commits

Author SHA1 Message Date
Bruno Oliveira da Silva
95d9147b0b Add CLOMonitor Badge to the README
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>

Closes #37535
2025-02-20 12:31:58 -03:00
dependabot[bot]
07547993ac
Bump uuid from 11.0.5 to 11.1.0 in /js (#37514)
Bumps [uuid](https://github.com/uuidjs/uuid) from 11.0.5 to 11.1.0.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-20 16:08:05 +01:00
dependabot[bot]
7185151bda
Bump vitest from 3.0.5 to 3.0.6 in /js (#37517)
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.0.5 to 3.0.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.0.6/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-20 16:06:47 +01:00
dependabot[bot]
35b213c6eb
Bump @patternfly/react-table from 5.4.14 to 5.4.15 in /js (#37518)
Bumps [@patternfly/react-table](https://github.com/patternfly/patternfly-react) from 5.4.14 to 5.4.15.
- [Release notes](https://github.com/patternfly/patternfly-react/releases)
- [Commits](https://github.com/patternfly/patternfly-react/compare/@patternfly/react-table@5.4.14...@patternfly/react-table@5.4.15)

---
updated-dependencies:
- dependency-name: "@patternfly/react-table"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-20 16:06:30 +01:00
dependabot[bot]
0285ad8d74
Bump @patternfly/react-core from 5.4.12 to 5.4.13 in /js (#37519)
Bumps [@patternfly/react-core](https://github.com/patternfly/patternfly-react) from 5.4.12 to 5.4.13.
- [Release notes](https://github.com/patternfly/patternfly-react/releases)
- [Commits](https://github.com/patternfly/patternfly-react/compare/@patternfly/react-core@5.4.12...@patternfly/react-core@5.4.13)

---
updated-dependencies:
- dependency-name: "@patternfly/react-core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-20 16:05:44 +01:00
Pedro Igor
853995cdd0
Add action token to the login action url
Closes #37449

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-20 15:34:16 +01:00
Steven Hawkins
5e61b03b8e
fix: allow ignored artifacts to find the default (#37498)
closes: #37128

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-20 14:51:27 +01:00
Alexander Schwartz
5d77e7ea7d
Add a HTML sanitizer for translated message resources
Closes #37428

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-20 12:18:44 +01:00
Giuseppe Graziano
21d5311284 Remove saml2 support for standard token exchange v2
Closes #37121

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-20 11:37:23 +01:00
Weblate (bot)
5b441ee87e
Updated translation for Spanish (#37474)
Language: es

Signed-off-by: Hernan Lopez <hernan.lopez@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Hernan Lopez <hernan.lopez@gmail.com>
2025-02-20 09:25:12 +01:00
Giuseppe Graziano
9adec8e94d Specification parameters tests for standard token exchange v2
Closes #37114

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>

request and response parameters tests for token exchange

Closes #37114

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-20 08:23:14 +01:00
rmartinc
510f8f7711 Allow TE for clients with consents approved by the user
Close #37112

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-20 08:08:53 +01:00
Stian Thorgersen
d5de190a0d
Add OAuthClient supplier for new test framework (#37487)
Closes #37486

Signed-off-by: stianst <stianst@gmail.com>
2025-02-20 06:22:40 +01:00
Pedro Igor
782ad86a1b Allow changing locale when using action tokens
Closes #37127

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-19 18:47:29 -03:00
Yoshiyuki Tabata
a1f5e14781 Add OpenSSF Scorecard badge to README #32385
Signed-off-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
2025-02-19 18:02:26 -03:00
Bruno Oliveira da Silva
9bfa4cd138 Supress the false positives reported by scorecards
Closes #37499

Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-19 16:16:56 -03:00
Niko Köbler
9a3f47d68c
Set directAccessGrantsEnabled default value to false (#37505)
* Set directAccessGrantsEnabled to false

The Resource Owner Password Credentials Grant must not be used and should not be the default in Keycloak.

Signed-off-by: Jim Martens <github@2martens.de>
Closes #30226

* another default value...

Signed-off-by: Niko Köbler <niko@n-k.de>

---------

Signed-off-by: Niko Köbler <niko@n-k.de>
Co-authored-by: Jim Martens <github@2martens.de>
2025-02-19 14:10:54 -05:00
Akbar Husain
d9e4981742
- Replaces dagre dependency with @dagrejs/dagre. (#37469)
Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 13:48:15 -05:00
mposolda
6549057900 Remove authorization settings from testrealm-token-exchange-v2.json
closes #37493

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-19 16:34:57 +01:00
mposolda
f03f511844 Polishing support for id-token in standard token exchange
closes #37113

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-19 14:44:29 +01:00
Giuseppe Graziano
892397333f Remove public client support for standard token exchange v2
Closes #37111

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-19 12:23:00 +01:00
Michal Hajas
8cd97ddb21
Make event metrics supported (#37391)
* Make event metrics supported

Closes #37389

Signed-off-by: Michal Hajas <mhajas@redhat.com>

* Address comments from reviews

Signed-off-by: Michal Hajas <mhajas@redhat.com>

---------

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-19 12:20:15 +01:00
Lukas Hanusovsky
4c172d99d2
[Test framework] Moving provider classes to specific package (#37484)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-02-19 11:00:36 +00:00
Steven Hawkins
acfca3ad74
fix: making the deadline override applicable to all remote tests (#37408)
closes: #37392

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-19 11:25:37 +01:00
Bruno Oliveira da Silva
bcb2498247 Upgrade to Quarkus 3.18.3 to address CVE issues
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-19 07:00:36 -03:00
Akbar Husain
9d3cfe0672
Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Šimon Vacek
40e8c0eba3
Migrate InstallationTest to the new testsuite (#37394)
* Migrate InstallationTest to the new testsuite

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Migrate InstallationTest to the new testsuite

Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Added Client cleanup to the test framework

Signed-off-by: Simon Vacek <simonvacky@email.cz>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-02-19 08:30:22 +01:00
Giuseppe Graziano
53795fa758 Separate tests for standard token exchange v2
Closes #37105

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-18 17:41:13 +01:00
Weblate (bot)
640f3b178d
Translations update from Hosted Weblate (#37409)
* Updated translation for German

Language: de

Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>

* Update translation files

Updated by "Squash Git commits" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
2025-02-18 15:27:16 +01:00
Michal Hajas
f54bb16a61
Add Grafana dashboards to release notes
Closes #37402

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-18 14:04:23 +01:00
mposolda
2bcd2dbe74 Password policies like NoUsername should compare in case-insensitive way
closes #37431

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-18 13:22:36 +01:00
Stian Thorgersen
74417fae33
Refactor OAuthClient - part 3 (#37423)
Closes #37225

Signed-off-by: stianst <stianst@gmail.com>
2025-02-18 12:36:39 +01:00
dependabot[bot]
9e1e5e9c0f
Bump typescript-eslint from 8.24.0 to 8.24.1 in /js (#37420)
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.24.0 to 8.24.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.24.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 11:06:30 +00:00
Jon Koops
3ccc88628f
Fix broken external link in Gitlab IdP docs (#37435)
Closes #37434

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2025-02-18 11:03:53 +00:00
Robin Meese
7c12086243
Fix typo and alter dialog to be like all the others
Closes #37415

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-02-18 12:00:37 +01:00
dependabot[bot]
ce9d1b5e8d
Bump rollup from 4.34.7 to 4.34.8 in /js (#37419)
Bumps [rollup](https://github.com/rollup/rollup) from 4.34.7 to 4.34.8.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.34.7...v4.34.8)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 11:31:20 +01:00
Pedro Igor
f3c8e8f348 Make sure resources are properly managed when updating permissions
Closes #37337

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-17 15:11:34 -03:00
Stefan Guilhen
5babc6c1a3 Ensure the group being joined is not an organization group in GroupLDAPStorageMapper
Closes #37393

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-02-17 14:41:53 -03:00
Martin Bartoš
61e48f1cd3
Properties mapped in our property mappers are overriden (#37265)
Fixes #36927

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-17 16:39:51 +00:00
Václav Muzikář
764ca50fc4
Upgrade to Quarkus 3.18.2 (#37300)
* Upgrade to Quarkus 3.18.2

Closes #37056

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 16:30:05 +01:00
Šimon Vacek
2b74e6148e
Migrate ClientSearchTest to the new testsuite (#37171)
* Move ClientSearchTest.java to the new testsuite

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Move ClientSearchTest.java to the new testsuite

Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-02-17 13:17:35 +01:00
dependabot[bot]
a4bd8b96f1
Bump rollup from 4.34.6 to 4.34.7 in /js (#37384)
Bumps [rollup](https://github.com/rollup/rollup) from 4.34.6 to 4.34.7.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.34.6...v4.34.7)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 11:29:17 +00:00
dependabot[bot]
783435643e
Bump chai from 5.1.2 to 5.2.0 in /js (#37381)
Bumps [chai](https://github.com/chaijs/chai) from 5.1.2 to 5.2.0.
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](https://github.com/chaijs/chai/compare/v5.1.2...v5.2.0)

---
updated-dependencies:
- dependency-name: chai
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:56 +01:00
dependabot[bot]
cb7cf4b9fe
Bump cypress-split from 1.24.10 to 1.24.13 in /js (#37382)
Bumps [cypress-split](https://github.com/bahmutov/cypress-split) from 1.24.10 to 1.24.13.
- [Release notes](https://github.com/bahmutov/cypress-split/releases)
- [Commits](https://github.com/bahmutov/cypress-split/compare/v1.24.10...v1.24.13)

---
updated-dependencies:
- dependency-name: cypress-split
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:42 +01:00
dependabot[bot]
87af2d4e59
Bump @octokit/rest from 21.1.0 to 21.1.1 in /js (#37383)
Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 21.1.0 to 21.1.1.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v21.1.0...v21.1.1)

---
updated-dependencies:
- dependency-name: "@octokit/rest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:26 +01:00
Steven Hawkins
f774786db7
doc: adding a full example of overriding the startup probe timeout (#37096)
* doc: adding a full example of overriding the startup probe timeout

closes: #35261

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-02-17 10:41:30 +01:00
rmartinc
2340adb64c Reject token exchange request if the requested audience is not present
Closes #37104

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-17 10:23:37 +01:00
Hernan Javier Lopez
9132d6ed6e
Update translation.md with Spanish translation conventions (#37180)
Signed-off-by: Hernan Javier Lopez <herver1971@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 07:50:23 +00:00
Steven Hawkins
785d74e2fc
fix: adds a full hpa example with some notes on memory
closes: #37306

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-14 21:24:57 +01:00
Martin Bartoš
324757316b
Improve docs about JPA provider configuration for DB migration strategy (#37080)
Closes #37079

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-14 17:54:26 +01:00