678 Commits

Author SHA1 Message Date
stianst
fb2bd05840 Set version to 24.0.9 2024-11-27 10:32:04 +01:00
Steven Hawkins
0537659e91
fix: ensures that properties are runtime properties are filtered (#218)
closes: #CVE-2024-10451

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-18 11:33:15 +01:00
Steven Hawkins
d0eaed4d82
fix: returning addresses instead of hosts on the ClientConnection (#217)
also consolidates checks of whether a host or address is local

closes: #CVE-2024-9666

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-18 09:25:36 +01:00
mposolda
d38f0ec19f Better logging when error happens during transaction commit
closes #33275

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 07cf71e818e7feca1a36164c216a225f198d50f0)
2024-10-08 13:15:49 +02:00
Steven Hawkins
db2876c604
fix: backport of looking for separated --spi arguments for the config (#31576) (#31632)
closes: #31578

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit c0ed46a011c56d3e52c08b4017f86418d8d97104)
2024-07-25 17:05:38 +00:00
Pedro Ruivo
6378de9199 Add default stack in cache-ispn.xml
A bug in Infinispan prevents the metrics to be registered if the "stack"
is not specified.
Change the default configuration shipped with Keycloak to use the UDP
stack as default.
UDP is the default in previous Keycloak versions.

Fixes #31218

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-16 14:42:33 -03:00
Alexander Schwartz
b982fa49f6
Remove AUTO_SERVER H2 default JDBC property (#30561)
This avoids problems if the hostname can't be resolved by InetAddress.getLocalHost()

Closes #26042

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-06-20 17:02:25 +02:00
Peter Zaoral
cab3e51c96
Make sure configuration is loaded with mapped/transformed properties at first (#30101)
* edited Picocli and added a corresponding test for Windows

Closes: #29329

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Vaclav Muzikar <vmuzikar@redhat.com>
2024-06-06 17:47:28 +02:00
Alexander Schwartz
18e3a69a33 Defer initialization of JGroups after logging is set up by Quarkus
Closes #29129

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-05-14 17:58:13 +02:00
Pedro Ruivo
2b6c331097 Use cache.compute() method to improve the replace retry loop
This commit only adds the ReplaceFunction to it can be backwards
compatible.

Closes #29073

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-05-02 20:47:03 +02:00
Václav Muzikář
3f2951dcd5
Upgrade to Quarkus 3.8.4 (#28885)
* quarkus-next: java.util.NoSuchElementException: No value present causes quarkus-server build failure (#28857)

* resolveFileLogLocation transformer method now checks the location value presence

Closes: #28856

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
(cherry picked from commit f9e68cdc541a9f638ba16bab02bfdb2465d91af0)

* Upgrade to Quarkus 3.8.4

Closes #28880

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Make PropertyMapper to use Keycloak options' default values (#29030)

* improved a condition in PropertyMapper.java

Related to: #28856

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
(cherry picked from commit 86b280349b17aa401308c5a4ef21e726d795233f)

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
2024-05-02 09:36:03 +02:00
Alexander Schwartz
8ae7c8ff3a Moving admin user creation to the Quarkus startup phase
Closes #29072

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-26 00:23:10 +02:00
Steven Hawkins
e1349f4246
task: ensuring that keycloaksessions are closed (#27682) (#28000)
closes: #27681

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit a3be85b2cd7c0ddf904b5a7748c695cd804f9601)
2024-03-21 16:46:00 +01:00
Steven Hawkins
80991e6814
fix: allow the formbodyhandler to run tasks in the calling thread (#27642) (#27999)
closes: #25687

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit ffd42bfdfc6643fd16d157f32b08a103a9f85f95)
2024-03-21 14:20:07 +01:00
Martin Bartoš
641b2d4180
Multi datasource configuration does not work (#28051)
Fixes #27894

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2024-03-20 14:45:54 +00:00
Steven Hawkins
e9421235d7
enhance: add a note about checking the migration guide (#27998)
closes: #27597

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit ba7e27a1054f546f532befca101d9e038c35d75d)
2024-03-19 12:48:18 +01:00
Martin Bartoš
1ee0d28114
MySQL connector artifact should be ignored (#28005)
Fixes #28001

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-03-19 10:12:53 +01:00
Ryan Emerson
a27fd36a9b Upgrade to Infinispan 14.0.26.Final
Closes #27871

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-14 11:39:07 +01:00
Alexander Schwartz
ab3cbfbf6a MTLS Cache options should be runtime options, not build time options
Closes #27701

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-12 18:18:09 +01:00
Stu Tomlinson
a473ae5717 keycloak-model-legacy is deprecated, not removed
Closes #27529

Signed-off-by: Stu Tomlinson <stu@nosnilmot.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-06 14:58:42 +01:00
Alexander Schwartz
d3c5dbb3fe Apply remote store workaround also for configuration via CLI options
Closes #27409

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-01 10:29:56 +01:00
Steven Hawkins
8d9439913c
fix: removal of resteasy-core (#27032)
* fix: partial removal of resteasy-core

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* fix: fully removing resteasy-core

closes: #26315

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-29 11:43:13 +00:00
Václav Muzikář
3e3cb2222d
Deprecate GELF (#27367)
Closes #27364

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-29 12:07:28 +01:00
Peter Zaoral
b9d92075ae
Handle possible special characters in a path to kc.bat (#27363)
* enclose the DIRNAME variable in double quotes

Closes #19294

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-02-28 19:21:41 +01:00
Vlasta Ramik
ade3b31a91
Introduce new CLI config options for Infinispan remote store
Closes #25676

Signed-off-by: vramik <vramik@redhat.com>
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-28 15:49:19 +00:00
Alexander Schwartz
25f2b52afd Remove the preview note from Keycloak's HA guide
Closes #27084

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-21 19:59:15 +01:00
Václav Muzikář
33425dacd9
Add proxy-headers option to the Keycloak CR (#27092)
Closes #25179

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 12:19:37 +01:00
Martin Bartoš
c501a7ed20
Disable Groovy Closures when bootstrapping Picocli (#27050)
Closes #19285

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-19 11:01:25 +01:00
Steven Hawkins
b94277fd53
fix: increasing the default max-form-attribute-size (#27035)
closes: #26330

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-15 14:21:03 +01:00
Martin Bartoš
59007844d9
Supported option to specify resource management for pods in Keycloak CR (#26661)
Closes #26456

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-15 13:38:41 +01:00
Pedro Igor
e50642ac32 Allow setting a default user profile configuration
Closes #26489

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-02-12 11:16:48 +01:00
Steven Hawkins
402c7d9b18
Removing version overrides and further aligning with quarkus versions (#26788)
* elevating wildfly-elytron-http-oidc version management

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing testing dependency overrides

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* further version aligment with quarkus

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a resteay-core-spi that can be overriden

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing hamcrest override

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* aligning with 3.7.1

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 17:57:23 +01:00
Dmitry Telegin
b0403e2268 CORS SPI
Closes #25446

Signed-off-by: Dmitry Telegin <demetrio@carretti.pro>
2024-02-06 15:27:53 -03:00
Stian Thorgersen
c4b1fd092a
Use code from RestEasy to create and set cookies (#26558)
Closes #26557

Signed-off-by: stianst <stianst@gmail.com>
2024-02-06 15:14:04 +01:00
Pedro Igor
ec2fcb4333 Upgrade arquilliam bom to match org.apache.maven dependency versions from Quarkus
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-02-05 18:08:33 -03:00
Peter Zaoral
d1764dbcb2
Supported option to specify maximum threads used to handle HTTP requests (#26659)
* added a mapper for the thread-pool.max-threads raw quarkus option

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-02-02 16:22:22 +00:00
Václav Muzikář
8833b9d2ac
Upgrade to Quarkus 3.7.1 (#26736)
Closes #26701
Closes #23854

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-02 15:57:23 +00:00
Steven Hawkins
37acb2fd09
task: upgrading to quarkus 3.7.0.CR1 (#26203)
there are several downgrades from the quarkus versions, and some
additional logic needed to handle changes with re-creating the
configuration

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 18:23:07 +00:00
Václav Muzikář
4096a2657e
Supported option to specify site name for multi-site deployments
Closes #26460

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-01-31 11:52:19 +00:00
Steven Hawkins
b41e2f82c4
fix: completely removing problematic assertion (#26613)
closes: #26529

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 10:19:14 +01:00
Steven Hawkins
2480fab6f9
fix: accounting for a null container (#26605)
closes: #26604

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-30 18:02:00 +00:00
Steven Hawkins
00ea73d6ba
fix: increases another timeout to accomodate for the transaction timeout (#26566)
closes: #26529

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-30 09:16:34 +01:00
Steven Hawkins
ed96b13312
fix: preservation of the command line in the --optimized suggestion (#26163)
closes #26140

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-29 13:48:53 +01:00
Martin Kanis
7797f778d1 Map Store Removal: Rename legacy modules
Closes #24107

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-01-25 16:29:16 +01:00
Erik Jan de Wit
28c9f98930
moved login screen to patternfly 5 (#25340)
* moved login screen to patternfly 5

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added Feature flag to enable login v2

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* removed the old css and only include logo and background styles

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* changed to experimental

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added login2

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* added windows help texts

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-01-25 13:45:53 +01:00
Ricardo Martin
b58f35fb47
Revert "Enable verify profile required action by default for new realms" (#26495)
This reverts commit 7f195acc149a32d5a4168648b41cf3dcdda0d46a.

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-01-25 12:28:16 +01:00
Stefan Wiedemann
efa6ddc41e
Create SPI and Provider for Verifiable Credentials Signing #25937 (#26263)
* implement oid4vci service interfaces

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* add oid4vc to the disabled features test

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* fix test and add doc

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* add the new preview feature

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* add class-level doc

remove wildcard imports

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* add license headers

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* fix year

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* fix teste

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* two additional test fixes

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* make the feature experimental

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* remove clock

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* remove usage of var

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

* fix tests

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>

---------

Signed-off-by: Stefan Wiedemann <wistefan@googlemail.com>
2024-01-25 07:36:28 +01:00
rmartinc
7f195acc14 Enable verify profile required action by default for new realms
Closes #25985

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-01-24 20:28:06 +01:00
Peter Zaoral
d23383e79c Stabilizing the FipsDistTest
* increased the timeout to let Keycloak stop

Closes #26374

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-01-24 16:54:56 +01:00
vickeybrown
86098242a5
Added Client Type feature flag to begin client type work (#26389)
* Added Client Type feature flag to begin client type work

Closes #26346

Signed-off-by: vibrown <vibrown@redhat.com>

* Fixed formatting issue

Signed-off-by: vibrown <vibrown@redhat.com>

* Updated HelpCommandDistTest messages

Signed-off-by: vibrown <vibrown@redhat.com>

* Fixed formatting on HelpCommandDistTest messages

Signed-off-by: vibrown <vibrown@redhat.com>

---------

Signed-off-by: vibrown <vibrown@redhat.com>
2024-01-24 12:07:07 +00:00