27489 Commits

Author SHA1 Message Date
Niko Köbler
9a3f47d68c
Set directAccessGrantsEnabled default value to false (#37505)
* Set directAccessGrantsEnabled to false

The Resource Owner Password Credentials Grant must not be used and should not be the default in Keycloak.

Signed-off-by: Jim Martens <github@2martens.de>
Closes #30226

* another default value...

Signed-off-by: Niko Köbler <niko@n-k.de>

---------

Signed-off-by: Niko Köbler <niko@n-k.de>
Co-authored-by: Jim Martens <github@2martens.de>
2025-02-19 14:10:54 -05:00
Akbar Husain
d9e4981742
- Replaces dagre dependency with @dagrejs/dagre. (#37469)
Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 13:48:15 -05:00
mposolda
6549057900 Remove authorization settings from testrealm-token-exchange-v2.json
closes #37493

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-19 16:34:57 +01:00
mposolda
f03f511844 Polishing support for id-token in standard token exchange
closes #37113

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-19 14:44:29 +01:00
Giuseppe Graziano
892397333f Remove public client support for standard token exchange v2
Closes #37111

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-19 12:23:00 +01:00
Michal Hajas
8cd97ddb21
Make event metrics supported (#37391)
* Make event metrics supported

Closes #37389

Signed-off-by: Michal Hajas <mhajas@redhat.com>

* Address comments from reviews

Signed-off-by: Michal Hajas <mhajas@redhat.com>

---------

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-19 12:20:15 +01:00
Lukas Hanusovsky
4c172d99d2
[Test framework] Moving provider classes to specific package (#37484)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-02-19 11:00:36 +00:00
Steven Hawkins
acfca3ad74
fix: making the deadline override applicable to all remote tests (#37408)
closes: #37392

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-19 11:25:37 +01:00
Bruno Oliveira da Silva
bcb2498247 Upgrade to Quarkus 3.18.3 to address CVE issues
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-19 07:00:36 -03:00
Akbar Husain
9d3cfe0672
Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Šimon Vacek
40e8c0eba3
Migrate InstallationTest to the new testsuite (#37394)
* Migrate InstallationTest to the new testsuite

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Migrate InstallationTest to the new testsuite

Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Added Client cleanup to the test framework

Signed-off-by: Simon Vacek <simonvacky@email.cz>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-02-19 08:30:22 +01:00
Giuseppe Graziano
53795fa758 Separate tests for standard token exchange v2
Closes #37105

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-18 17:41:13 +01:00
Weblate (bot)
640f3b178d
Translations update from Hosted Weblate (#37409)
* Updated translation for German

Language: de

Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>

* Update translation files

Updated by "Squash Git commits" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
2025-02-18 15:27:16 +01:00
Michal Hajas
f54bb16a61
Add Grafana dashboards to release notes
Closes #37402

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-18 14:04:23 +01:00
mposolda
2bcd2dbe74 Password policies like NoUsername should compare in case-insensitive way
closes #37431

Signed-off-by: mposolda <mposolda@gmail.com>
2025-02-18 13:22:36 +01:00
Stian Thorgersen
74417fae33
Refactor OAuthClient - part 3 (#37423)
Closes #37225

Signed-off-by: stianst <stianst@gmail.com>
2025-02-18 12:36:39 +01:00
dependabot[bot]
9e1e5e9c0f
Bump typescript-eslint from 8.24.0 to 8.24.1 in /js (#37420)
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.24.0 to 8.24.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.24.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 11:06:30 +00:00
Jon Koops
3ccc88628f
Fix broken external link in Gitlab IdP docs (#37435)
Closes #37434

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2025-02-18 11:03:53 +00:00
Robin Meese
7c12086243
Fix typo and alter dialog to be like all the others
Closes #37415

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-02-18 12:00:37 +01:00
dependabot[bot]
ce9d1b5e8d
Bump rollup from 4.34.7 to 4.34.8 in /js (#37419)
Bumps [rollup](https://github.com/rollup/rollup) from 4.34.7 to 4.34.8.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.34.7...v4.34.8)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 11:31:20 +01:00
Pedro Igor
f3c8e8f348 Make sure resources are properly managed when updating permissions
Closes #37337

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-17 15:11:34 -03:00
Stefan Guilhen
5babc6c1a3 Ensure the group being joined is not an organization group in GroupLDAPStorageMapper
Closes #37393

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-02-17 14:41:53 -03:00
Martin Bartoš
61e48f1cd3
Properties mapped in our property mappers are overriden (#37265)
Fixes #36927

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-17 16:39:51 +00:00
Václav Muzikář
764ca50fc4
Upgrade to Quarkus 3.18.2 (#37300)
* Upgrade to Quarkus 3.18.2

Closes #37056

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 16:30:05 +01:00
Šimon Vacek
2b74e6148e
Migrate ClientSearchTest to the new testsuite (#37171)
* Move ClientSearchTest.java to the new testsuite

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Move ClientSearchTest.java to the new testsuite

Part of: #34494

Signed-off-by: Simon Vacek <simonvacky@email.cz>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
2025-02-17 13:17:35 +01:00
dependabot[bot]
a4bd8b96f1
Bump rollup from 4.34.6 to 4.34.7 in /js (#37384)
Bumps [rollup](https://github.com/rollup/rollup) from 4.34.6 to 4.34.7.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.34.6...v4.34.7)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 11:29:17 +00:00
dependabot[bot]
783435643e
Bump chai from 5.1.2 to 5.2.0 in /js (#37381)
Bumps [chai](https://github.com/chaijs/chai) from 5.1.2 to 5.2.0.
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](https://github.com/chaijs/chai/compare/v5.1.2...v5.2.0)

---
updated-dependencies:
- dependency-name: chai
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:56 +01:00
dependabot[bot]
cb7cf4b9fe
Bump cypress-split from 1.24.10 to 1.24.13 in /js (#37382)
Bumps [cypress-split](https://github.com/bahmutov/cypress-split) from 1.24.10 to 1.24.13.
- [Release notes](https://github.com/bahmutov/cypress-split/releases)
- [Commits](https://github.com/bahmutov/cypress-split/compare/v1.24.10...v1.24.13)

---
updated-dependencies:
- dependency-name: cypress-split
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:42 +01:00
dependabot[bot]
87af2d4e59
Bump @octokit/rest from 21.1.0 to 21.1.1 in /js (#37383)
Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 21.1.0 to 21.1.1.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v21.1.0...v21.1.1)

---
updated-dependencies:
- dependency-name: "@octokit/rest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-17 12:22:26 +01:00
Steven Hawkins
f774786db7
doc: adding a full example of overriding the startup probe timeout (#37096)
* doc: adding a full example of overriding the startup probe timeout

closes: #35261

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-02-17 10:41:30 +01:00
rmartinc
2340adb64c Reject token exchange request if the requested audience is not present
Closes #37104

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-17 10:23:37 +01:00
Hernan Javier Lopez
9132d6ed6e
Update translation.md with Spanish translation conventions (#37180)
Signed-off-by: Hernan Javier Lopez <herver1971@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 07:50:23 +00:00
Steven Hawkins
785d74e2fc
fix: adds a full hpa example with some notes on memory
closes: #37306

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-14 21:24:57 +01:00
Martin Bartoš
324757316b
Improve docs about JPA provider configuration for DB migration strategy (#37080)
Closes #37079

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-14 17:54:26 +01:00
Martin Bartoš
f41727bec2
Stabilize QuarkusPropertiesDistTest for Windows in Quarkus IT (#37091)
Closes #37089

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-02-14 17:52:35 +01:00
Martin Bartoš
7fa4bd550c
Test logs for Quarkus IT are huge and cannot be viewed (#37088)
Closes #37087

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-14 17:50:27 +01:00
Giuseppe Graziano
b4f14b2690 Filter scopes in token exchange v2 based on requested audience
Closes #37147

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-02-14 17:19:02 +01:00
Bruno Oliveira da Silva
477843cc31
Remove warnings adding checkout [main] (#37333)
Remove warnings adding checkout

Co-authored-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-14 10:26:56 -03:00
Pedro Igor
5aa2b4c75b
Only set organization to client session when re-authenticating if user is member of the mapped organization
Closes #37169

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-14 13:50:57 +01:00
Miquel Simon
4b628610c4
Skip Maven deploy to Nexus 3 of theme-verifier-maven-plugin (#37352)
Related to #37347

Signed-off-by: Miquel Simon <msimonma@redhat.com>
2025-02-14 11:47:52 +00:00
Martin Kanis
add0d69b89 Organization invite link leads to non-defined page, when clicked second time
Closes #36569

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-02-14 08:29:28 -03:00
dependabot[bot]
2dd5e7a7f5
Bump prettier from 3.5.0 to 3.5.1 in /js (#37334)
Bumps [prettier](https://github.com/prettier/prettier) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.0...3.5.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-14 10:15:53 +01:00
dependabot[bot]
a4283400cd
Bump @types/node from 22.13.1 to 22.13.4 in /js (#37332)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.13.1 to 22.13.4.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-14 10:15:33 +01:00
Stian Thorgersen
48924a170d
Skip Maven deploy of theme-verifier-maven-plugin (#37347)
Signed-off-by: stianst <stianst@gmail.com>
2025-02-14 10:13:51 +01:00
Stian Thorgersen
60b75d4b38
Migrate AuthenticatorConfigTest (#37274)
Part of #34494

Signed-off-by: stianst <stianst@gmail.com>
2025-02-14 06:33:39 +01:00
Bruno Oliveira da Silva
953172d915 Avoid ambiguity
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-13 15:37:19 -03:00
Bruno Oliveira da Silva
730b6b129f Improve clomonitor.io score for Keycloak adding slack channels metadata
Closes #37134

Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2025-02-13 15:37:19 -03:00
rmartinc
a121418fe7 Show error message only in the username field for the login.ftl
Closes #37229

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-13 12:43:07 -03:00
Stian Thorgersen
fc6ef8ddd0
Updates to test migration tool - Adding @Before rewrite, ability to define diff command, and specify test by class name (#37277)
Signed-off-by: stianst <stianst@gmail.com>
2025-02-13 15:02:44 +01:00
Stian Thorgersen
59acbb8f67
Remove need to implement getAnnotationClass and getValueType in suppliers (#37296)
Signed-off-by: stianst <stianst@gmail.com>
2025-02-13 15:02:26 +01:00