also note that ANY should not be used in production
closes: CVE-2025-3501
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Add a test for the error (#1)
Signed-off-by: Ricardo Martin <rmartinc@redhat.com>
Update docs/guides/server/keycloak-truststore.adoc
Co-authored-by: Marek Posolda <mposolda@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
* shows wildcard handling only at the end of keys
closes: #37772
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* fix: allow for additional wildcard key characters
also refine the wildcard logic to be based upon just prefix and suffix
matching
closes: #37772
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Update quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/mappers/WildcardPropertyMapper.java
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
* review refinements, mainly to use Optional
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Closes#36786
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
* fix: generalizing the reporting of names by property mapping
closes: #37503#37781#37780
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Update quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/NestedPropertyMappingInterceptor.java
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
* adding more explanation of going from a parent to wildcard values
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* refining the nested logic and comments
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* preventing nested expressions from always resolving the mapped value
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Closes#37316
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
* fix: hardening to prevent usage of proxy-protocol with proxy-headers
closes: #37458
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Update docs/guides/server/reverseproxy.adoc
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
* Make event metrics supported
Closes#37389
Signed-off-by: Michal Hajas <mhajas@redhat.com>
* Address comments from reviews
Signed-off-by: Michal Hajas <mhajas@redhat.com>
---------
Signed-off-by: Michal Hajas <mhajas@redhat.com>
* Upgrade to Quarkus 3.18.2
Closes#37056
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
---------
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Closes#36750
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
