124 Commits

Author SHA1 Message Date
github-actions[bot]
96cdef8e08 Set version to 26.4.3 2025-11-06 09:56:20 +00:00
Pedro Igor
0b1a17b82d
Migration step to add the reset-password scope to user resource type resources
Closes #43736

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-10-29 13:30:55 +00:00
Pedro Ruivo
f4af3e2d23
Restarting an user session broken for persistent sessions
Fixes #43161

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-10-03 19:27:12 +02:00
Stefan Guilhen
7f29c9bb88 Improve workflow logging messages
- every execution gets its own id that can be used to track all activities related to that particular workflow execution

Closes #42952

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-09-29 23:10:21 -03:00
Pedro Igor
54d2451b35 Make user read-only and a proper error message when the user federation provider is not available
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 04:03:13 -03:00
Pedro Igor
d65c17ebc7 Do not fail when querying user federation providers and log messages to indicate the problem
Closes #42276

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 04:03:13 -03:00
Pedro Ruivo
4ccf7407ed
Lazy load client sessions
Closes #42628

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 10:45:11 +00:00
Stian Thorgersen
f9ee040ef0
Add federated subject configuration option to federated-jwt authenticator (#42610)
Closes #42608

Signed-off-by: stianst <stianst@gmail.com>
2025-09-17 13:39:50 +02:00
Pedro Ruivo
f7ff7e55d8
Replace UUID with composite key for client session cache
Closes #42547

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-17 10:25:51 +00:00
vramik
d0e83cc05e Rename RLM to Workflows
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
2025-09-16 08:52:50 -03:00
Stefan Guilhen
20f5a15278 Adjust scheduled action time so that it is always based on the previous action
Closes #42385

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-09-12 15:50:38 -03:00
Martin Kanis
5a02bc1adb Admin UI hides local users when LDAP provider fails
Closes #42276

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-09-12 10:43:08 -03:00
Stian Thorgersen
51465f52a3
Get client by client attribute
Closes #42543

Signed-off-by: stianst <stianst@gmail.com>
2025-09-11 12:07:13 +00:00
Pedro Ruivo
8567eec526
ClientSession timestamp not updated in the database
Closes #42012

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-10 20:34:22 +02:00
Pedro Igor
0d5dfc3eae
Add support for ad-hoc policies (#42508)
Closes #42126

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-10 15:40:17 +00:00
vramik
3507773854 [RLM] Cleanup code from initial PR
Closes #42316

Signed-off-by: vramik <vramik@redhat.com>
2025-09-08 11:31:12 -03:00
Stefan Guilhen
8eb6ee619f Rework getEligibleResourcesForInitialAction so it returns all resources that are eligible to be associated with a policy
Closes #42106

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-08-26 11:52:46 -03:00
Stefan Guilhen
70659ac183
Rework RLM core to schedule action based on events @sguilhen (#42010)
* Rework RLM core to schedule action based on events

Closes #41803

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-08-20 17:59:52 +00:00
Akbar Husain
06f80416fb
Replace keySet with entrySet
Closes #40064

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-08-14 17:31:15 +02:00
Peter Skopek
651d651c30 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-08-12 16:50:17 +02:00
vramik
a8225655cf Initial commit for the RLM feature
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
2025-08-11 17:34:41 -03:00
Steven Hawkins
98612bbb67
fix: adding group import handling similar to users
closes: #41235

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-22 09:29:32 +00:00
rmartinc
e0bba39da0 Allow configure encryption details for SAML clients
Closes #40933

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-18 20:13:40 +02:00
Pascal Knüppel
f39a37d8d1
[OID4VCI] Move realm attributes to clientScope and protocol-mappers (#39768)
fixes #39527


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
2025-07-10 14:46:36 +02:00
rmartinc
900d8c7400 Changing default passwordless webauthn policy to follow recommended values in the documentation
Closes #40792

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-09 11:34:28 +02:00
Steven Hawkins
2b44c5676f
fix: adding logic to isolate realm migration processing (#39377)
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-06-30 08:31:57 -04:00
Douglas Palmer
c5964b4ac8 Issue with Handling Negative Values in Certain Fields of Brute Force Detection
Closes #40353

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2025-06-24 09:13:00 -03:00
Pedro Igor
0188d276d8
Invalidate user cache entries when email or username are different from storage
Closes #40085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 20:44:01 +00:00
Ricardo Martin
41110823c7
Integrate current auth-username-password-form authenticator with passkeys isConditionalMediationAvailable (#38781)
Closes #29596

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-06-05 08:53:00 +02:00
Pascal Knüppel
17e2602a56
[OID4VCI] Fix creation of clientScopes with protocol oid4vc (#39556)
closes #39527

Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
2025-06-05 08:49:05 +02:00
rmartinc
669cc2533c Use previous password in SMTP when the the authType defaults to basic
Closes #39781

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-30 08:50:22 +02:00
Steve Hawkins
abc448e4d1 fix: performing inline user import for multi-file
closes: #38251

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-07 14:22:39 -03:00
vramik
56389c44c8 [FGAP] Refactor permission evaluation code for V2
Closes #38086

Signed-off-by: vramik <vramik@redhat.com>
2025-05-05 17:11:16 -03:00
Steven Hawkins
24910d9e1c
addresses slow import/export performance by limiting persistence context size (#37926)
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-29 18:57:45 -04:00
Marek Posolda
025b2ba442
Introducing IdpLinkAction as AIA to replace client-initiated account linking (#38952)
closes #37269
closes #35446

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2025-04-17 13:20:05 +02:00
Michal Hajas
4dc4de7c12
Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
2025-04-08 13:00:47 -03:00
Stefan Guilhen
e694065aed User UserModel.isFederated() instead of comparing federation link to null
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #38137
2025-03-27 08:11:14 -03:00
Alexander Schwartz
afde8ece15
Avoid sending/receiving the session JSON too often (#37095)
Closs #37093

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-21 10:32:05 +01:00
Sebastian Rose
4fb1c41155 Sending Mails via SMTP and XOAUTH2 authentication mechanism
Closes #17432

Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>
2025-03-21 10:12:18 +01:00
Akbar Husain
9d3cfe0672
Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Pedro Igor
4b2d5ed472 Minor fixes, test coverage, and allow deleting local users
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-07 10:42:45 -03:00
Christian Janker
87db882a89 Do not remove users in LDAP when queries return an empty result
closes #34764

Signed-off-by: Christian Janker <christian.janker@gmx.at>
2025-02-07 10:42:45 -03:00
Olivier Boudet
e507eb6175 fix: wrong briefRepresentation behavior on Organization
Signed-off-by: Olivier Boudet <o.boudet@gmail.com>
2025-02-04 08:52:35 -03:00
Arthenice
c20f7e50c7
docs: update JavaDoc for ImportSynchronization
The JavaDoc for ImportSynchronization was wrongfully referencing the
UserStorageProvider instead of the UserStorageProviderFactory.

Closes #36834

Signed-off-by: arthenice <wistful.arthenice@gmail.com>
2025-01-28 12:13:19 +01:00
Johannes Knutsen
c889c6a79b
Update realm: Remove browser security header attributes from the list of attributes to remove if missing (#32922)
Closes #32921

Signed-off-by: Johannes Knutsen <johannes@knutsen.me>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-01-23 10:37:56 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-01-22 14:58:35 +01:00
Alexander Schwartz
c651323b7d
Trace validation of users to see contribution of external timing (#36060)
Closes #36059

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-01-07 12:35:48 +01:00
rmartinc
bac5ec8858 Better caching for federated users
Closes #35637

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-12-12 09:22:58 -03:00
Sven-Torben Janus
7531f97e54
Fix potential NPE in migration script for KC 26 (#35794)
Closes #35793

Signed-off-by: Sven-Torben Janus <sven-torben.janus@conciso.de>
2024-12-11 11:36:00 +01:00