426 Commits

Author SHA1 Message Date
Pedro Igor
ded372a57f Adding utility class for working with throwables and updating the cause check to limit the number of iterations on the stacktrace
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-11-11 08:48:26 -03:00
Martin Bartoš
1f9694358f
Ability to enable/disable feature via single property (#43542)
* Ability to enable/disable feature via single property

Closes #43541

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide support for specifying profile preview

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove duplication check, use the new WildcardOptionUtil

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Create quarkus specific single profile config resolver

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the feature profile capability for single feature option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-07 13:35:39 +01:00
Václav Muzikář
9c86eae7ed
Initial Client API v2 impl (#43395)
Closes #43224

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-11-03 14:31:54 +01:00
Pedro Ruivo
e40c5de050
Session cache affinity
Closes #42776

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 21:01:09 +00:00
Tomáš Kyjovský
4c64b7189c
Deprecate org.keycloak.common.util.Base64
Closes #43370

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: 1867605+tkyjovsk@users.noreply.github.com
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-30 09:12:14 +01:00
Giuseppe Graziano
a25a0268de
Experimental feature for JWT Authorization Grant (#43624)
Closes #43444

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-10-22 15:34:33 +02:00
Martin Bartoš
37bea126c7
[PERF] Jackson reflection-free serialization/deserialization (#42946)
* [PERF] Jackson reflection-free serialization/deserialization

Closes #42945

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Docs improvements

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polish the features template macros

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-10-17 20:24:47 +02:00
stianst
aedd7fe5db Remove unused imports as part of #43233
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Pedro Igor
fe8fce859d Improve the Workflow JSON schema
Closes #42697

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-09-24 04:04:44 -03:00
Giuseppe Graziano
e4114e6c74 Promote DPoP feature to supported by default
Closes #42032

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-09-24 08:26:09 +02:00
Peter Skopek
14e4e1aed2
Enable branding without code changes (#34246)
closes #34244

Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-09-24 07:25:40 +02:00
Stian Thorgersen
f72482bfd2
Experimental Kube service accounts identity provider
Closes #37600

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-23 00:11:24 +02:00
Stian Thorgersen
3841fea16d
Promote CLIENT_AUTH_FEDERATED and SPIFFE features to preview (#42753)
Closes #42722

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 09:46:37 +00:00
vramik
d0e83cc05e Rename RLM to Workflows
Closes #42512

Signed-off-by: vramik <vramik@redhat.com>
2025-09-16 08:52:50 -03:00
Pedro Ruivo
971016f743
More efficient secure ID generator
Closes #42283

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-12 13:52:26 +02:00
Alexander Schwartz
6ea3c8aedf
Session IDs and auth codes should have 128 bits of entropy
Closes #42274

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 17:05:40 +02:00
Steven Hawkins
0897560513
fix: moves unsupported feature logging (#42380)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 19:21:20 +02:00
Stian Thorgersen
320ea5a9a7
Experimental SPIFFE identity provider (#42314)
Closes #42313

Signed-off-by: stianst <stianst@gmail.com>
2025-09-04 14:48:18 +02:00
stianst
57242d2497 Experimental federated client authentication
Closes #42228

Signed-off-by: stianst <stianst@gmail.com>
2025-09-02 10:02:51 -03:00
trataka
9afe5fb8a9
Add wasm support for themes (#38898)
Closes #38897

Signed-off-by: trataka <jonathan@trataka.net>
2025-09-02 14:22:09 +02:00
Alexander Schwartz
ca1e61047a
Adding TiDB dialect for Quarkus
Closes #41897

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Co-authored-by: Dennis Kniep <kniepdennis@gmail.com>
2025-08-26 17:44:45 -03:00
Steven Hawkins
fdca122469
fix: ensuring streams are closed
closes: #40660

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-15 07:40:54 +02:00
Akbar Husain
06f80416fb
Replace keySet with entrySet
Closes #40064

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-08-14 17:31:15 +02:00
rmartinc
acf39b34c3 Make passkeys feature supported
Closes #41556

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-08-12 11:18:57 +02:00
vramik
a8225655cf Initial commit for the RLM feature
Closes #40340
Closes #40341

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Signed-off-by: vramik <vramik@redhat.com>
2025-08-11 17:34:41 -03:00
Steven Hawkins
a79e603272
fix: cutting down on the memory footprint for import (#41196)
closes: #40875

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-04 11:02:39 -04:00
mposolda
3cc8808465 Wrap deprecated passkeys authenticator behind the feature
closes #40696

Signed-off-by: mposolda <mposolda@gmail.com>
2025-08-01 16:48:57 +02:00
Björn Eickvonder
c7cc162f6b
Support for RSA Key Size of 3072
Closes #41551

Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
2025-07-31 13:30:33 +02:00
Björn Eickvonder
d62d5030fe
Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Ryan Emerson
0a745d6aeb
Allow Features to declare that they support Rolling upgrades
Closes #41022

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 12:10:29 +02:00
Martin Kanis
5a42390341 Make UPDATE_EMAIL a supported feature
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-07-09 10:15:48 -03:00
rmartinc
70f0731b21 Make passkeys feature dependent on web_authn
Closes #40975

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-07-08 13:59:43 +02:00
Michal Hajas
d944823277
Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Douglas Palmer
a981f6b6d5 Access Token IDs have less than 128 bits of entropy
Closes #38663

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2025-06-26 16:48:03 +02:00
mposolda
ab7edb0d01 Introduce ExternalToInternalTokenExchangeProvider. Make it working with Google IDP using token-info endpoint instead of user-info endpoint
closes #40146
closes #40133

Signed-off-by: mposolda <mposolda@gmail.com>
2025-06-04 10:03:52 +02:00
Michal Hajas
88f660b235
Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751)
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-05-27 11:17:42 -03:00
rmartinc
5c28ee4d4c Create client passwords calculating the entropy size for JWT with client secret
Closes #38621

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-05-27 10:23:58 +02:00
Alexander Schwartz
a17f551eb2
Log out other sessions including offline sessions on password change
Closes #38850

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-05-06 14:04:13 +02:00
rmartinc
4730dbdd8d Make recovery codes supported
Closes #38994

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-04-29 10:25:46 +02:00
Pedro Igor
1ba8fe16ac
Deprecate for removal Instagram Identity Broker (#38998)
Closes #37967
Closes #36562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-04-17 09:07:06 +02:00
Michal Hajas
4dc4de7c12
Remove CACHE-EMBEDDED-REMOTE-STORE experimental feature
Closes #34160

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-04-16 12:01:55 +00:00
vramik
602258d935 [FGAP] Switch the feature from Experimental to Supported
Closes #38651

Signed-off-by: vramik <vramik@redhat.com>
2025-04-08 13:00:47 -03:00
lrozenblyum
a0852eaa2e
Prevent NPE in CryptoIntegration.setProvider
Closes #38596

Signed-off-by: Leonid Rozenblyum <lrozenblyum@gmail.com>
2025-04-03 08:06:00 +00:00
Steven Hawkins
06e0885f46
fix: adds back reporting of non-ip client addresses (#37797)
closes: #36843

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/AbstractTokenExchangeProvider.java
#	services/src/main/java/org/keycloak/protocol/oidc/tokenexchange/StandardTokenExchangeProvider.java
2025-03-27 19:33:20 +00:00
Tero Saarni
c7f0fc7ac3
Support EC in PEM utils
This change adds

- Support for decoding EC private keys.
- Support for decoding certificate bundles.

Closes #38490

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
2025-03-27 15:44:05 +01:00
Alexander Schwartz
c9b88c6bf6
Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
rmartinc
b0654c455f Remove hierarchicalUri in KeycloakUriBuilder and parse each URI part separately
Closes #38006

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-03-13 18:27:35 +01:00
mposolda
1fc015195f Promote standard token-exchange V2 to supported by default
closes #37368

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-13 18:26:55 +01:00
Sebastian Schuster
45fb21164b
Improved uri template regex
Closes #37834

Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.io>
2025-03-05 12:15:31 +01:00
mposolda
73cfd9cc80 Polishing of token-exchange features. Remove TOKEN_EXCHANGE_FEDERATED_V2 and TOKEN_EXCHANGE_SUBJECT_IMPERSONATION_V2
closes #37367

Signed-off-by: mposolda <mposolda@gmail.com>
2025-03-03 17:32:17 +01:00