1119 Commits

Author	SHA1	Message	Date
Stian Thorgersen	f6702decc0	JWK Algorithm Key Pair support (#44203) ... Closes #44141 Signed-off-by: stianst <stianst@gmail.com>	2025-11-17 07:51:08 +01:00
Stefan Guilhen	3319e8d9b5	Add optional parameter in WorkflowResource.toRepresentation to allow retrieval of the rep without the ids ... Closes #44183 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-11-14 12:20:40 -03:00
Stian Thorgersen	a2c1055f8d	Proposed import order (#43432) ... * Add importOrder to Spotless Closes #43235 Signed-off-by: stianst <stianst@gmail.com> * Re-order imports with Spotless Signed-off-by: stianst <stianst@gmail.com> --------- Signed-off-by: stianst <stianst@gmail.com>	2025-11-14 09:34:49 +01:00
Stefan Guilhen	da7993896d	Allow ISO-8601 compatible format for the after field in workflow steps ... - aligns the format with what is used in the JPA connection provider pool max lifetime for time-based configurations Closes #42913 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-11-12 18:51:49 -03:00
Stefan Guilhen	5ff2e22f18	Fix representation so that workflows can be properly disabled/enabled. ... - also removes empty 'with' configurations from the steps when retrieving the workflow. Closes #44163 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-11-12 18:51:36 -03:00
Ingrid Kamga	ce05241c7f	[OID4VCI] Tolerate clock skew in SD-JWT time checks (#43506) ... Closes #43456 Signed-off-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>	2025-11-11 09:02:44 +01:00
Stian Thorgersen	d8275fe5df	Remove wildcard imports (#44060) ... Closes #44059 Signed-off-by: stianst <stianst@gmail.com>	2025-11-10 11:46:05 +01:00
Pedro Igor	33f1dda2cf	Processing workflow events asynchronously - Part 1 ... Closes #42386 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-11-07 10:57:05 -03:00
Stian Thorgersen	b278dbbb3d	Allow identity provider configuration without defaults for user authentication (#43963) ... Closes #43552 Signed-off-by: stianst <stianst@gmail.com>	2025-11-05 10:13:40 -03:00
Giuseppe Graziano	4b443f04ee	JWT Authorization grant idp config (#43841) ... Closes #43568 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-11-04 14:46:14 +01:00
vramik	4d912a9c21	Support for YAML payloads for Admin client for creation of workflows ... Closes #43666 Signed-off-by: vramik <vramik@redhat.com>	2025-11-03 13:09:17 -03:00
Ingrid Kamga	ea06651da5	[OID4VCI] Ensure openid_credential is one of authorization_details_types_supported on the Authorization Server metadata (#43599) ... Closes #43398 Signed-off-by: Ingrid Kamga <Ingrid.Kamga@adorsys.com>	2025-10-31 11:32:24 +01:00
Stian Thorgersen	be6a3814fb	Add CORS support to OIDC dynamic client registration endpoints (#43625) ... Closes #8863 Signed-off-by: stianst <stianst@gmail.com>	2025-10-30 12:12:08 +01:00
Tomáš Kyjovský	4c64b7189c	Deprecate org.keycloak.common.util.Base64 ... Closes #43370 Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com> Signed-off-by: 1867605+tkyjovsk@users.noreply.github.com Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com> Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>	2025-10-30 09:12:14 +01:00
Stefan Guilhen	3751bc050d	Workflows enhancements ... - Allow specifying a parameter in events to better tie workflows to more specific events (e.g. user-role-added(name-of-role)) - Make workflows 'if' and 'on' fields use expressions by default - Fix condition evaluation inconsistencies by having a single param for each condition - Remove need to use double quotes for condition parameters - Reference groups by path instead of id in conditions Closes #43137 Closes #43536 Closes #43537 Closes #43661 Closes #43715 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-10-27 07:20:59 -03:00
Giuseppe Graziano	a25a0268de	Experimental feature for JWT Authorization Grant (#43624) ... Closes #43444 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-10-22 15:34:33 +02:00
Stefan Guilhen	657105bb41	Improve WorkflowRepresentation.Builder, changing concurrency(true) to concurrency().cancelIfRunning() for better clarity ... Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-10-20 10:54:53 -03:00
vramik	4dc398354a	Restart workflow basen on concurrency/cancel-if-running option rather than reset-on option ... Closes #42911 Signed-off-by: vramik <vramik@redhat.com>	2025-10-17 10:06:43 -03:00
Stefan Guilhen	4985fa25c6	Add restart step provider, replacing the recurring config option ... Closes #42910 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-10-16 11:49:14 -03:00
stianst	aedd7fe5db	Remove unused imports as part of #43233 ... Signed-off-by: stianst <stianst@gmail.com>	2025-10-13 13:32:01 +02:00
Peter Zaoral	f67dd98dd4	Fix sdjwt tests: make all string-byte conversions explicit (UTF-8) (#43288) ... * this unifies behaviour prior to JDK18 on Windows platform Closes #43264 Signed-off-by: Peter Zaoral <pepo48@gmail.com>	2025-10-13 08:37:52 +02:00
rmartinc	5732946388	Add ECDSA as a valid key type that should return EC public key ... Closes #42588 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-10-07 19:41:27 +02:00
Stefan Guilhen	7f29c9bb88	Improve workflow logging messages ... - every execution gets its own id that can be used to track all activities related to that particular workflow execution Closes #42952 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-09-29 23:10:21 -03:00
Stefan Guilhen	ab7daf7fac	Add validation to workflow update so that only changes to the name and enabled flag are allowed for now ... Closes #42916 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-09-26 14:51:05 -03:00
vramik	80453bdbfb	Allow defining steps in a workflow that can run immediate or scheduled ... Closes #42888 Signed-off-by: vramik <vramik@redhat.com>	2025-09-25 14:37:22 -03:00
Pedro Igor	fe8fce859d	Improve the Workflow JSON schema ... Closes #42697 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-09-24 04:04:44 -03:00
rmartinc	f560ea8f29	Allow EdDSA keys in JWTClientCredentialsProvider ... Closes #42751 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-09-22 13:53:19 +02:00
rmartinc	6ae2c4ae30	Place EdECUtilsImpl.java in the normal source folder ... Closes #42716 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-09-22 08:08:19 +02:00
mposolda	f5c71e3e55	Incorrect scheme in the WWW-Authenticate when Authorization: DPoP used ... closes #42706 Signed-off-by: mposolda <mposolda@gmail.com>	2025-09-18 12:22:00 +02:00
Giuseppe Graziano	fd7f5351ad	Client Authenticator configurable per client ... Closes #42044 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2025-09-16 16:54:39 +02:00
vramik	d0e83cc05e	Rename RLM to Workflows ... Closes #42512 Signed-off-by: vramik <vramik@redhat.com>	2025-09-16 08:52:50 -03:00
Ricardo Martin	a2acdda535	Automatic download and cache of the SAML client public keys (#41947) ... Closes #17028 Signed-off-by: rmartinc <rmartinc@redhat.com>	2025-09-16 13:07:33 +02:00
forkimenjeckayang	64e0b450aa	[OID4VCI]: Add support for parsing and understanding authorization_details at the Token Endpoint (#40751) ... Closes #39278 Closes #39279 Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com> Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: mposolda <mposolda@gmail.com>	2025-09-15 14:02:45 +02:00
Vlasta Ramik	4382072d89	[RLM] Disable policy when the origin or selection criteria is removed ... Closes keycloak#42123 Signed-off-by: vramik <vramik@redhat.com>	2025-09-09 16:46:43 -03:00
Pedro Igor	58990a5544	Add a policy condition based on user attributes ... Closes #42118 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-09-09 12:07:59 -03:00
Pedro Igor	a42550d2e5	Add support for aggregated actions ... Closes #42119 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-09-05 10:29:18 -03:00
Stefan Guilhen	3d88846732	Add support for immediate policies ... Closes #42311 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2025-09-05 08:50:15 -03:00
Marek Posolda	6a27a4c336	EdDSA support for DPoP (#42362) ... closes #42286 Signed-off-by: mposolda <mposolda@gmail.com>	2025-09-05 12:54:43 +02:00
Awambeng	f9cb8dfe3d	[OID4VCI]: Add DPoP nonce header support to OID4VCI nonce endpoint (#41999) ... Closes #41580 Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com>	2025-09-04 14:52:10 +02:00
Stian Thorgersen	320ea5a9a7	Experimental SPIFFE identity provider (#42314) ... Closes #42313 Signed-off-by: stianst <stianst@gmail.com>	2025-09-04 14:48:18 +02:00
Martin Kanis	fc3914c439	[RLM] Provide a action to notify users by email based on a configurable time ... Closes #41788 Signed-off-by: Martin Kanis <mkanis@redhat.com>	2025-09-03 16:38:41 -03:00
Pedro Igor	17a053b2af	Add support for generic event-based policies and conditions ... Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-09-02 17:45:59 -03:00
mposolda	624d236ced	DPoP verification support for admin/account REST API endpoints. Java admin-client DPoP support ... closes #33942 Signed-off-by: mposolda <mposolda@gmail.com>	2025-09-02 14:29:30 +02:00
Pedro Igor	a64c5c0d70	Adding RLM Admin API and basic endpoints ... Closes #40346 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2025-08-28 14:49:21 -03:00
Marek Posolda	dd7ad5b866	Ability to display 'authenticator provider' of the WebAuthn credential (#41615) ... closes #41613 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: Jon Koops <jonkoops@gmail.com> Signed-off-by: Marek Posolda <mposolda@gmail.com>	2025-08-20 11:42:24 +02:00
Peter Skopek	651d651c30	Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822) ... Signed-off-by: Peter Skopek <pskopek@redhat.com>	2025-08-12 16:50:17 +02:00
huyenvu2101	5436f9781c	Allow setting default value for userprofile attribute ... Closes #36160 Signed-off-by: huyenvu2101 <vhuyen2101@gmail.com>	2025-08-06 13:59:54 -03:00
Steven Hawkins	11924e6473	enhance: adding the ability to get the root config from a Scope ... closes: #36268 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2025-08-05 18:51:33 +02:00
Steven Hawkins	d3d217e074	fix: showing only the canonical oauth2 property name (#41652) ... closes: #41624 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2025-08-05 11:03:27 -04:00
forkimenjeckayang	43610cfa67	[OID4VCI] Update SD-JWT VCs Format Identifier to dc+sd-jwt (#41233) ... Closes #39293 Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>	2025-08-01 09:13:35 +02:00