29797 Commits

Author SHA1 Message Date
Pedro Igor
f36819e943
Adding join and leave group steps (#44841)
Closes #44649

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-12-18 13:07:23 +01:00
mposolda
08e96435c8 DefaultCryptoSdJwsTest.shouldValidateAgeSinceIssued_IfJwtIsTooOld() sometimes fails in CI
closes #44971

Signed-off-by: mposolda <mposolda@gmail.com>
2025-12-18 10:59:34 +01:00
Marek Posolda
92314bccc6
More capabilities in SdJwtVP API when creating presentations (#44977)
closes #44976

Signed-off-by: mposolda <mposolda@gmail.com>
2025-12-18 10:58:55 +01:00
Marek Posolda
4b68f6998b
Release notes update for Keycloak 26.5 with core-clients related contributions (#44986)
closes #44192

Signed-off-by: mposolda <mposolda@gmail.com>
2025-12-18 10:48:27 +01:00
Giuseppe Graziano
790fb557db
Limit access Token expiration for jwt authorization grant (#44775)
Closes #43972


Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-12-18 09:21:29 +01:00
forkimenjeckayang
f5a3086027
Use correct parameter for the getCredentialOfferPreflight method (#44931)
Closes #44742

Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
2025-12-17 18:41:57 +01:00
Pascal Knüppel
b2778a6792
[OID4VCI] Add mapper for mapping unmanaged attributes (#44828)
closes #44780


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
2025-12-17 18:39:00 +01:00
Martin Bartoš
548a89c823
[OTel] Micrometer to OpenTelemetry bridge support for metrics (#41716)
* [OTel] Micrometer to OpenTelemetry bridge support for metrics

Closes #41006

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Review: Docs rewording

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Review: Make TELEMETRY Option descriptions consistently use OpenTelemetry to reflect pattern established by telemetry-enabled, telemetry-endpoint etc

Signed-off-by: Ryan Emerson <remerson@ibm.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-12-17 17:03:56 +01:00
Lukas Hanusovsky
92849ef5d3
Move AdminClientTest to the new testsuite (#44705)
* Moving files to the new test suite

Signed-off-by: Simon Vacek <simonvacky@email.cz>

* Move AdminClientTest to the new testsuite

Part of: #35040

Signed-off-by: Simon Vacek <simonvacky@email.cz>
Co-authored: Lukas Hanusovsky <lhanusov@redhat.com>

* Refactoring of ManagedCertificates

* Fix compatiblity issue with ManagedCertificates dependency

Signed-off-by: stianst <stianst@gmail.com>

* Fixing trustStrategy for SSLContext truststore.

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Fix FIPS

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: Simon Vacek <simonvacky@email.cz>
Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Co-authored-by: Simon Vacek <simonvacky@email.cz>
Co-authored-by: stianst <stianst@gmail.com>
2025-12-17 14:31:22 +00:00
forkimenjeckayang
ca617d9711
[OID4VCI]: Use Keycloak time utility for OID4VC related timestamps (#44871)
Closes: #44235


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
2025-12-17 14:58:01 +01:00
Awambeng Rodrick
3218cd1847 Adjust OID4VC request logging verbosity
- Downgrade request-level INFO logs in the OID4VC issuer flow to DEBUG and log malformed display metadata as WARN instead of INFO to keep lifecycle logs clean.

Closes #44675

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
Signed-off-by: Awambeng <awambengrodrick@gmail.com>
2025-12-17 14:08:02 +01:00
Stian Thorgersen
aa6890f539
Support running test methods on the server side (#44937)
Closes #44936

Signed-off-by: stianst <stianst@gmail.com>
2025-12-17 13:15:42 +01:00
Sebastian Łaskawiec
9597537bf3
Additional fields for the Welcome Resource (#44758)
* Additional fields added to the Welcome Page

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Updated the order of fields

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
2025-12-17 13:11:44 +01:00
Peter Zaoral
7b80e1f7a4
Remove unused azure-credentials input from azure-create-database action (#44958)
Closes: #44956

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
2025-12-17 12:48:14 +01:00
Ryan Emerson
9f6b8159ec
Create a LocalCacheProvider SPI (#44950)
Closes #42223

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-12-17 12:46:05 +01:00
Martin Kanis
012cefb654 The existence of an organization attribute called id is not validated
Closes #44522

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2025-12-17 08:05:32 -03:00
Xabi
bf18942c34
Basque (eu) translation (#44916)
* Add Basque translations for login messages

Added Basque language translations for login messages.

Signed-off-by: Xabi <xezpeleta@gmail.com>

* Add Basque email messages for notifications

Signed-off-by: Xabi <xezpeleta@gmail.com>

* Create Account messages basque translation

Add Basque language translations for account messages.

Signed-off-by: Xabi <xezpeleta@gmail.com>

* Add Basque localization for admin messages

Added various error messages and validation prompts in Basque for password policies, LDAP configurations, client redirect URIs, and other client-related settings.

Signed-off-by: Xabi <xezpeleta@gmail.com>

* Add Basque localization for account messages

Introduced a new properties file containing Basque translations for various account-related messages, including error prompts, user interactions, and notifications.

Signed-off-by: Xabi Ezpeleta <xezpeleta@gmail.com>

* Add Basque localization for admin messages

Introduced a new properties file containing Basque translations for various admin-related messages, including user management, permissions, and notifications.

Signed-off-by: Xabi Ezpeleta <xezpeleta@gmail.com>

* Add Basque localization for various themes

Updated theme properties files to include Basque translations for account, admin, email, and login messages, enhancing multilingual support across the application.

Signed-off-by: Xabi Ezpeleta <xezpeleta@gmail.com>

* Add Basque localization for admin messages (work-in-progress)

Signed-off-by: Xabi Ezpeleta <xezpeleta@gmail.com>

---------

Signed-off-by: Xabi <xezpeleta@gmail.com>
Signed-off-by: Xabi Ezpeleta <xezpeleta@gmail.com>
2025-12-17 11:47:55 +01:00
Pedro Ruivo
ba495d1ab1
Remote Infinispan should return count per client only for the current realm (#44948)
Closes #44577

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-12-17 07:40:49 +01:00
Vlasta Ramik
ab546c9184
Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP (#44945)
Closes #43973

Signed-off-by: vramik <vramik@redhat.com>
2025-12-16 14:58:53 -05:00
Steven Hawkins
148d14816c
fix: allowing settable connection request timeout (#44592)
also defaulting to 5000

closes: #44500

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-12-16 16:35:01 +00:00
Steven Hawkins
5bf740e383
fix: preventing raw stacktrace response and error log (#44815)
closes: #44712

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-12-16 15:28:29 +01:00
rmartinc
40eb51f10c Add timeout option for keycloak-admin-client
Closes #42644

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-12-16 14:49:35 +01:00
Palpable
94ee6d81fb
[OID4VCI] Realign naming of attribute configuring algorithms for credential (#44765)
Closes #44621


Signed-off-by: Vitalisn4 <ngamvitalisyuh@gmail.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>
2025-12-16 14:46:17 +01:00
Stian Thorgersen
5ae60f3513
Fix NPE in JWT authenticators (#44941)
Closes #44940

Signed-off-by: stianst <stianst@gmail.com>
2025-12-16 14:41:14 +01:00
Weblate (bot)
33e3e680be
Translations update from Hosted Weblate (#44766)
* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Turkish

Language: tr

Translated using Weblate (Turkish)

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/tr/

Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Translated using Weblate (German)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/de/

Updated translation for German

Language: de

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Catalan

Language: ca

Updated translation for Catalan

Language: ca

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jordi Mallach <jordi@mallach.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Jordi Mallach <jordi@mallach.net>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Czech

Language: cs

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Martin Kluska <martin@kluska.cz>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kluska <martin@kluska.cz>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Update translation files

Updated by "Cleanup translation files" hook in Weblate.

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Co-authored-by: DeathGun5201 <3124836676@qq.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: DeathGun5201 <3124836676@qq.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Jordi Mallach <jordi@mallach.net>
Signed-off-by: Martin Kluska <martin@kluska.cz>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: DeathGun5201 <3124836676@qq.com>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Jordi Mallach <jordi@mallach.net>
Co-authored-by: Martin Kluska <martin@kluska.cz>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: DeathGun5201 <3124836676@qq.com>
2025-12-16 14:01:38 +01:00
Awambeng Rodrick
a1bffa3ddc Add spec-compliant jwt vc issuer well-known endpoint
- expose /.well-known/jwt-vc-issuer/realms/{realm} and keep legacy route with deprecation headers
- build consumer metadata URL per draft-ietf-oauth-sd-jwt-vc-13 and add realm-path coverage
- add integration test for new path plus deprecation headers on legacy endpoint

Closes #44256

Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
Signed-off-by: Awambeng <awambengrodrick@gmail.com>
2025-12-16 13:46:06 +01:00
Ogen Bertrand
741c0ad959
[OID4VCI] Expose advanced realm-level OID4VCI settings in the Admin UI (#44615)
closes #43900


Signed-off-by: Ogenbertrand <ogenbertrand@gmail.com>
2025-12-16 12:54:12 +01:00
forkimenjeckayang
2f7045d7dd
Remove deferred credential endpoint from OID4VC metadata (#44907)
Closes #44779

Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
2025-12-16 12:50:12 +01:00
Robin Meese
ae853466fa
remove "createFlowHelp" key from I18n
Closes #44925

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-16 10:53:17 +00:00
Robin Meese
c8983e0388
Improve grammar on keys and remove unused
Closes #44927

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-16 10:43:45 +01:00
Stian Thorgersen
6bcbd5ab59
Clear classes loaded on the server side for run-on-server when a new execution happens (#44909)
Closes #44908

Signed-off-by: stianst <stianst@gmail.com>
2025-12-16 10:25:39 +01:00
Stan Silvert
6b300833e2 Enable workflows feature for Admin UI E2E
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2025-12-16 08:18:19 +01:00
Martin Bartoš
917fb86438
[docs] Remove paragraph about Quarkus OTel logging guide reference (#44911)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-15 19:43:08 +01:00
Lukas Hanusovsky
e8c6a7b98d
[Test Framework] Migrate initial WebAuthn setup + WebAuthnRegisterAndLoginTest. (#44016)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
2025-12-15 15:01:42 +01:00
Martin Bartoš
29fdcedbc8
[OTel] Introduce preview support for OpenTelemetry Logs (#41265)
Closes #41264

Co-authored-by: Ryan Emerson <remerson@redhat.com

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-12-15 10:50:30 +01:00
Stian Thorgersen
ab9c6e36ee
Remove legacy/jakarta Undertow as we only need one, and upgrade to the latest to fix CVEs (#44901)
Closes #44814

Signed-off-by: stianst <stianst@gmail.com>
2025-12-15 10:39:19 +01:00
Pedro Igor
5833252872 Fixing error when importing realm
Closes #44882

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-12-15 10:33:27 +01:00
Václav Muzikář
da6c4df5ec
Support EDB 18 (#44856)
* Support EDB 18

Closes #44494

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update test-framework/db-edb/container/README.md

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-12-15 07:36:26 +01:00
Stefan Guilhen
22c144dd30 Rename workflow events
- USER_ADDED -> USER_CREATED
- USER_ROLE_ADDED -> USER_ROLE_GRANTED
- USER_ROLE_REMOVED -> USER_ROLE_REVOKED

Closes #44879

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-12 14:15:24 -03:00
Stefan Guilhen
7858e6ff6b Change workflow condition grammar to accept the token 'not' as the negation operator instead of '!'
Closes #44880

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-12 13:31:55 -03:00
Stefan Guilhen
0fc9650acc Set Workflows as tech preview
Closes #44881

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2025-12-12 13:05:59 -03:00
stianst
a07500045f Move workflow tests out of admin package
Closes #44847

Signed-off-by: stianst <stianst@gmail.com>
2025-12-12 11:54:58 -03:00
Awambeng
af8e905774
refactor(oid4vc): remove notification ID handling and related endpoint (#44844)
Closes #44802


Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>
2025-12-12 14:38:01 +01:00
Pedro Igor
0419d6711f Workflow database queries not filtering based on the realm
Closes #44858

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-12-12 09:40:17 -03:00
Pedro Igor
84a0324d60 Adding grant and revoke role steps
Closes #44648

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-12-12 09:38:39 -03:00
Pedro Igor
138d1e0588 Allow restarting the step chain at a specific position
Closes #44789

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-12-12 09:38:01 -03:00
Stian Thorgersen
0e0534697e
Remove Log4j from parent pom (#44845)
Closes #27932

Signed-off-by: stianst <stianst@gmail.com>
2025-12-11 16:03:06 +01:00
Alexander Schwartz
3bd33528f3
Avoid flushing user information in batch mode
Closes #44787

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-11 14:02:45 +01:00
Ruchika Jha
26fe8dc7d8
Added validation for client session timeout post comparing the realm session timeouts
Closes #41019

Signed-off-by: ruchikajha95 <Ruchika.Jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-12-11 13:58:04 +01:00
Pedro Ruivo
2feb158554
ProtoStream marshaller for lambas
Closes #44811

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-12-11 12:47:27 +01:00