keycloak-scim

Author	SHA1	Message	Date
Dominik	4090114398	KEYCLOAK-16246 Revert changes from workaround made in KEYCLOAK-16244 after upgrading to quarkus 2 Also fixed a small type in testclass. This reverts commit `9b2f2015f7`.	2021-09-16 15:42:48 -03:00
Sophie Tauchert	b5d477c421	[KEYCLOAK-18556] Check for federated credentials when resolving authenticators	2021-09-15 16:54:56 +02:00
Vlastimil Elias	2be5f528e4	KEYCLOAK-18700 - consistently record User profile attribute changes in UPDATE_PROFILE event	2021-09-15 08:26:01 -03:00
Marek Posolda	11e5f66c60	KEYCLOAK-19056 EDIT MODE field should not be leave empty (#8380 )	2021-09-14 20:27:09 +02:00
Luca Leonardo Scorcia	6d0708d263	KEYCLOAK-17368 Show forwarded errors when a default remote IdP is configured (#7838 )	2021-09-14 09:44:59 +02:00
Luca Leonardo Scorcia	af8354267b	KEYCLOAK-16462 X509 Auth: add option to revalidate certificate trust	2021-09-13 12:12:38 +02:00
David Hellwig	a6cd80c933	KEYCLOAK-16076 added new warining when cookies are disabled -with new branch- (#7632 ) * KEYCLOAK-16076 added new warining when cookies are disabled Co-authored-by: David Hellwig <david.hellwig@bosch.com> Co-authored-by: Christoph Leistert <christoph.leistert@bosch-si.com>	2021-09-13 11:30:11 +02:00
Pedro Igor	aa018295c4	[KEYCLOAK-17866] - Upgrade to Quarkus v2	2021-09-10 11:21:09 -03:00
Hynek Mlnarik	4518b3d3d1	KEYCLOAK-19143 Split note for broker and SP SAML request ID	2021-09-07 17:04:30 +02:00
Olivier Boudet	c7f8544b0c	KEYCLOAK-18454 Reset password : wrong email instructions when duplicates email is allowed	2021-09-02 14:44:18 +02:00
Martin Bartoš	a25a0d513e	KEYCLOAK-19159 KcSamlEncryptedIdTest failure for undertow	2021-09-02 11:22:53 +02:00
Martin Bartoš	7c243c8427	KEYCLOAK-18590 Save Button Enabled For Empty Attributes	2021-09-01 10:51:20 +02:00
vramik	5fe675b612	KEYCLOAK-18841 prevent deletion of default role using RoleContainerResource	2021-08-20 12:02:07 +02:00
Martin Bartos	18cef60bbd	KEYCLOAK-19037 Problems with validation of Email field that contains uppercase character	2021-08-19 11:13:42 +02:00
mposolda	418d1e3471	KEYCLOAK-19039 Sync UPDATE_PASSWORD required action to only to MSAD with WRITABLE edit mode. Add tests for MSAD mapper	2021-08-18 17:39:19 +02:00
Thomas Darimont	a7fd1bc3a9	KEYCLOAK-18954 Add test for user consent retrieval with offline access consents Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2021-08-18 10:39:44 +02:00
bal1imb	269b661b8a	KEYCLOAK-16633 Prevent deletion of internal clients.	2021-08-09 11:45:03 -03:00
Martin Kanis	b42f765c2a	KEYCLOAK-18982 Token OIDC introspection endpoint should not update any of the timestamps	2021-08-05 18:21:16 +02:00
Simen Heggestøyl	624a9a3ed7	KEYCLOAK-18509 Fix permission error when deleting client	2021-08-05 11:55:24 -03:00
Yoshiyuki Tabata	b31b60fffe	KEYCLOAK-18341 Support JWKS OAuth2 Client Metadata in the "by value" key loading method	2021-08-05 16:52:55 +02:00
Martin Bartoš	3c19fae88b	KEYCLOAK-18964 MetricsRestServiceTest contains wrong health check message	2021-08-05 16:01:01 +02:00
Hynek Mlnarik	2acb43a627	KEYCLOAK-18617 Fix index on client attributes	2021-08-05 15:35:55 +02:00
Sebastian Rose	5d9d749fbd	KEYCLOAK-18380 Fix Groups search by name returns unwanted groups Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com> Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2021-08-05 11:43:56 +02:00
Sebastian Rose	565251d5a6	KEYCLOAK-18380 Fix Groups search by name returns unwanted groups, cleanup test, skip tests on map storage provider feature	2021-08-05 11:43:56 +02:00
Thomas Darimont	17da3ee8d9	KEYCLOAK-18380 Fix Groups search by name returns unwanted groups Previously the group search did not apply a given search query as filter for groups along the group path. We now filter the found groups with the given group search query if present.	2021-08-05 11:43:56 +02:00
mposolda	b1d39aa136	KEYCLOAK-18949 DirectGrant login should fail if authenticationSession contains some required actions	2021-08-04 08:50:27 +02:00
Yang Xie	d8cb279bc4	KEYCLOAK-17693 add config for loading custom IdMapper class	2021-08-03 17:44:47 +02:00
carlChen	a0b01b6ef4	KEYCLOAK-16703 The username returned by token introspect endpoint is null when remove or modify username mapper	2021-08-03 17:38:37 +02:00
Sebastian Kanzow	4e8e4592ca	[KEYCLOAK-18419] Support SAML 2.0 Encrypted IDs in Assertion	2021-08-03 11:55:36 +02:00
keycloak-bot	262ec3d031	Set version to 16.0.0-SNAPSHOT	2021-07-30 14:56:10 +02:00
Pedro Igor	afb0b16e43	[KEYCLOAK-18922] - Ignore empty values for internal attributes not set to user	2021-07-30 12:30:43 +02:00
Martin Bartoš	56888911b0	KEYCLOAK-18691 CIBATest.testTokenRequestAfterIntervalButNotYetAuthenticated wrong expiration	2021-07-29 17:01:51 +02:00
Pedro Igor	ff70e2e04b	[KEYCLOAK-18916] - Do not consider empty values when checking read-only attributes	2021-07-29 08:46:16 +02:00
Vlastimil Elias	32f2f095fe	KEYCLOAK-7724 User Profile default validations	2021-07-29 08:42:37 +02:00
mposolda	4dacbb9e0b	KEYCLOAK-16996 User not able to revoke his offline token for directGrant clients	2021-07-29 08:04:16 +02:00
mposolda	9b0e1fff8d	KEYCLOAK-18903 More customizable OIDC WellKnown provider	2021-07-28 18:03:23 +02:00
mposolda	05dfed721a	KEYCLOAK-18636 The mtls_endpoint_aliases claim is not advertized in the discovery document	2021-07-28 13:32:31 +02:00
Pedro Igor	ef72343a6a	[KEYCLOAK-18882] - User Profile still tech preview	2021-07-28 08:45:35 +02:00
mposolda	4520cbd38c	KEYCLOAK-18904 Support cert-bound tokens when doing client credentials grant. Client policies support for client credentials grant	2021-07-28 07:24:30 +02:00
mposolda	ce80a3ba9b	KEYCLOAK-18901 Test for update clientNotificationEndpoint to 'http' URL should fail	2021-07-27 16:22:49 +02:00
mposolda	643b3c4c5a	KEYCLOAK-18594 CIBA Ping Mode	2021-07-27 08:33:17 +02:00
Takashi Norimatsu	9018fe9fad	KEYCLOAK-18863 Global client profile for FAPI CIBA	2021-07-23 14:30:26 +02:00
Joerg Matysiak	9dff21d0a7	KEYCLOAK-18552 * added group as attribute metadata * validation for groups and references to groups * adapted template to use show attribute groups * test and integration tests for attribute groups	2021-07-23 09:26:21 -03:00
Takashi Norimatsu	6436716514	KEYCLOAK-18834 Client Policies : ClientScopesCondition needs to be evaluated on CIBA backchannel authentication request and token request	2021-07-23 10:06:02 +02:00
Hynek Mlnarik	6b9040d18a	KEYCLOAK-18876 Fix intermittent LoginTest failures	2021-07-23 08:44:50 +02:00
Takashi Norimatsu	84e19f1c57	KEYCLOAK-18833 FAPI-CIBA-ID1 : need to only accept confidential client on Backchannel Authentication endpoint	2021-07-23 08:26:36 +02:00
Luca Leonardo Scorcia	6bd7420907	KEYCLOAK-17290 SAML Client - Generate AttributeConsumingService SP metadata section	2021-07-22 21:53:16 +02:00
Pedro Igor	8260c3c623	[KEYCLOAK-18860] - Fixing attributes returned from user api	2021-07-22 15:09:30 -03:00
Vlastimil Elias	fff27f8bd6	KEYCLOAK-18812 fixing Account REST API tests under User Profile enabled	2021-07-22 13:43:21 -03:00
Vlastimil Elias	f307c56fe1	KEYCLOAK-18812 UserProfile metadata in Account REST API	2021-07-22 08:46:30 -03:00
Pedro Igor	b4c940fe3f	[KEYCLOAK-18860] - Return attributes defined in user profile from user api	2021-07-22 08:32:47 -03:00
ruromero	464475caa0	[KEYCLOAK-17872] Add missing HTTPClient properties Signed-off-by: ruromero <rromerom@redhat.com>	2021-07-22 10:54:59 +02:00
mposolda	3993b73625	KEYCLOAK-18865 CIBATests failing for auth-server-remote	2021-07-21 14:14:01 +02:00
Pedro Igor	d29d945cc4	[KEYCLOAK-18857] - Do not force default to RS256 when verifying tokens sent by clients and JWK does not hold an algorithm	2021-07-21 11:09:02 +02:00
Takashi Norimatsu	2c019c9ce5	KEYCLOAK-18832 FAPI-CIBA-ID1 conformance test : need to return 401 error=invalid_client if client authentication is not successfully completed on Backchannel Authentication endpoint	2021-07-21 10:13:55 +02:00
Takashi Norimatsu	8df36fbf28	KEYCLOAK-18828 FAPI-CIBA-ID1 conformance test : Additional checks of signed authentication request	2021-07-21 08:19:19 +02:00
Takashi Norimatsu	61fcbb307b	KEYCLOAK-18830 FAPI-CIBA-ID1 conformance test : HolderOfKeyEnforcerExecutor needs to be executed on CIBA token request	2021-07-21 08:07:50 +02:00
Pedro Igor	54a0e84070	[KEYCLOAK-18741] - Review error messages when validating PAR requests	2021-07-20 14:08:49 -03:00
Pedro Igor	7f34af4016	Revert "[KEYCLOAK-18425] - Allow mapping user profile attributes" This reverts commit `3e07ca3c`	2021-07-20 14:08:09 -03:00
mposolda	db7e247f7b	KEYCLOAK-18848 KEYCLOAK-18850 Enable CIBA and PAR by default	2021-07-20 15:59:06 +02:00
Takashi Norimatsu	f154b0b209	KEYCLOAK-18831 FAPI-CIBA-ID1 conformance test : need to return 400 if user authentication is not successfully completed	2021-07-20 10:46:16 +02:00
Takashi Norimatsu	e2c5fa20a2	KEYCLOAK-18849 Client Policy - Condition : ClientRolesCondition needs to be evaluated on PAR endpoint	2021-07-20 09:41:48 +02:00
Pedro Igor	396a78bcc4	[KEYCLOAK-18723] - Configurable constraints for request object encryption	2021-07-20 09:28:09 +02:00
Pedro Igor	730d4e8ac9	[KEYCLOAK-18807] - Fixing claims in JARM responses	2021-07-20 08:23:33 +02:00
Pedro Igor	13a08362d4	[KEYCLOAK-18819] - SecureResponseType executor shall allow response_type=code when using JARM and response_mode=jwt	2021-07-20 08:16:19 +02:00
Takashi Norimatsu	f76c07476c	KEYCLOAK-18827 FAPI-CIBA-ID1 conformance test : Client JWT authentication should allow Backchannel Authentication endpoint as audience	2021-07-20 06:39:28 +02:00
Takashi Norimatsu	02a9eb442d	KEYCLOAK-18829 FAPI-CIBA-ID1 conformance test : ClientRolesCondition needs to be evaluated on CIBA backchannel authentication request and token request	2021-07-20 06:31:10 +02:00
Pedro Igor	fe4e089e81	[KEYCLOAK-18745] - Client JWT authentication should allow PAR endpoint as audience	2021-07-19 14:23:53 -03:00
Vlastimil Elias	61aa4e6a70	KEYCLOAK-18750 - Set "Email Verified" to false when email changed in UserProfile Provider	2021-07-19 11:19:29 -03:00
Takashi Norimatsu	f188f02d03	KEYCLOAK-18826 FAPI-CIBA-ID1 conformance test : ID Token needs to include auth_time claim	2021-07-19 15:11:23 +02:00
Takashi Norimatsu	63f04c1118	KEYCLOAK-18683 Client policy executor for check Backchannel signed request algorithms matching FAPI compliant algorithms	2021-07-19 14:48:31 +02:00
Pedro Igor	a79d28f115	[KEYCLOAK-18729] - Support JAR when using PAR	2021-07-19 11:42:20 +02:00
bal1imb	2c8d4ad9b4	KEYCLOAK-18590 Realm localizations of one realm must not affect themes displayed in context of other realms.	2021-07-16 16:12:58 +02:00
bal1imb	fbaeb18a5f	KEYCLOAK-18471 Added ID to admin event object.	2021-07-16 12:46:07 +02:00
Pedro Igor	f1face6973	[KEYCLOAK-18748] - Do not remove attributes when declarative provider is enabled	2021-07-15 12:00:39 -03:00
Daniel Fesenmeyer	a25c70784c	KEYCLOAK-18467 support unicode for realm localization texts	2021-07-15 10:30:42 +02:00
vramik	a07f3f9608	KEYCLOAK-18688 Add testing composite roles in RoleInvalidationClusterTest	2021-07-15 10:18:57 +02:00
Vlastimil Elias	7618e66136	[KEYCLOAK-18541] separate template for IDP review page	2021-07-13 21:43:52 -03:00
vramik	00017b44a3	KEYCLOAK-18311 fix creation of roles during client registration	2021-07-12 11:39:47 +02:00
Pedro Igor	1baab67f3b	[KEYCLOAK-18630] - Request object encryption support	2021-07-09 11:27:30 -03:00
Vlastimil Elias	6686482ba5	[KEYCLOAK-18591] - Support a dynamic IDP user review form	2021-07-09 10:05:26 -03:00
Martin Bartoš	f3a96b9da9	KEYCLOAK-18644 New Account Console Tests failures	2021-07-09 11:56:02 +02:00
Takashi Norimatsu	7cdcf0f93e	KEYCLOAK-18654 Client Policy - Endpoint : support Token Request by CIBA Backchannel Authentication	2021-07-09 11:24:12 +02:00
Takashi Norimatsu	43eb2b7c90	KEYCLOAK-18123 Client Policy - Executor : Enforce Backchannel Authentication Request satisfying high security level	2021-07-09 09:11:13 +02:00
Takashi Norimatsu	63b737545f	KEYCLOAK-18653 Client Policy - Endpoint : support Pushed Authorization Request Endpoint	2021-07-09 09:06:38 +02:00
Pedro Igor	4099833be8	[KEYCLOAK-18693] - Declarative profile validating read-only attribute if it exists	2021-07-08 15:22:02 -03:00
Takashi Norimatsu	dce163d3e2	KEYCLOAK-18587 CIBA signed request: Client must configure the algorithm	2021-07-08 10:16:22 +02:00
Benjamin Weimer	8c1ea60b04	* Add sid claim to ID Token * deprecate session state parameter in ID Token * remove charset=UTF-8 from backchannel logout post request Content-Type header	2021-07-06 15:30:53 -03:00
Takashi Norimatsu	2b1624390a	KEYCLOAK-17937 Client Policy - Endpoint : support CIBA Backchannel Authentication Endpoint	2021-07-03 08:57:20 +02:00
Hryhorii Hevorkian	2803685cd7	KEYCLOAK-18353 Implement Pushed Authorization Request inside the Keycloak Co-authored-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com> Co-authored-by: mposolda <mposolda@gmail.com>	2021-07-03 08:47:42 +02:00
lbortoli	e5ae113453	KEYCLOAK-18452 FAPI JARM: JWT Secured Authorization Response Mode for OAuth 2.0	2021-07-03 00:00:32 +02:00
Vlastimil Elias	04ff2c327b	[KEYCLOAK-18429] Support a dynamic update profile form	2021-07-02 10:22:47 -03:00
Vlastimil Elias	f32447bcc1	[KEYCLOAK-18424] GUI order for user profile attributes	2021-07-02 08:37:24 -03:00
Pedro Igor	b26b41332e	[KEYCLOAK-18626] - Avoid changing username when registration as email is enabled	2021-07-02 08:07:04 -03:00
Pedro Igor	3e07ca3c22	[KEYCLOAK-18425] - Allow mapping user profile attributes	2021-07-01 10:19:28 -03:00
vramik	2b9b50d50a	KEYCLOAK-18194 fix migration of default role when realm id contains apostrophe	2021-07-01 11:22:11 +02:00
lbortoli	164f3df080	KEYCLOAK-18502 - Support for additional parameters from the backchannel authentication request and backchannel authentication callback.	2021-07-01 00:31:26 +02:00
Luca Leonardo Scorcia	ae98d8ea28	KEYCLOAK-18315 SAML Client - Add parameter to request specific AttributeConsumingServiceIndex	2021-06-29 16:22:38 +02:00
Martin Bartoš	9dc7300178	KEYCLOAK-18391 CIBATest failures	2021-06-29 16:15:12 +02:00
Sebastian Rose	ca6b78b730	KEYCLOAK-18390 GroupProvider search implementation of JPA and Map delivers different results	2021-06-29 14:59:01 +02:00
Martin Bartoš	8a82130579	KEYCLOAK-18505 ConfigMigrationTest failures	2021-06-29 10:15:04 +02:00
Takashi Norimatsu	57c80483bb	KEYCLOAK-17936 FAPI-CIBA : support Signed Authentication Request Co-authored-by: Pritish Joshi <pritish@banfico.com> Co-authored-by: mposolda <mposolda@gmail.com>	2021-06-29 08:07:40 +02:00
Pedro Igor	948f453e2d	[KEYCLOAK-18427] - Allowing switching to declarative provider	2021-06-28 15:50:04 -03:00
Vlastimil Elias	512bcd14f7	[KEYCLOAK-18428] - dynamic registration form	2021-06-25 17:11:15 -03:00
Pedro Igor	faadb896ea	[KEYCLOAK-18426] - Support required by role and scopes in Admin UI	2021-06-24 10:43:49 -03:00
Yoshiyuki Tabata	52ced98f92	KEYCLOAK-18503 Regex Policy for authorization service	2021-06-24 08:49:41 -03:00
Vlastimil Elias	b7a4fd8745	KEYCLOAK-18423 - Support a user-friendly name property for user profile attributes	2021-06-24 08:17:06 -03:00
Michal Hajas	ccf9456bdf	KEYCLOAK-18534 Fix js tests timeout failure	2021-06-23 14:12:02 -03:00
Luca Leonardo Scorcia	cdf9621257	KEYCLOAK-18450 Add basic tests for the Identity Provider Redirector Default IdP feature	2021-06-23 08:42:14 +02:00
Andy Fedotov	17b374f53a	[KEYCLOAK-16455][Adapter - JavaScript] Propagate 3rd party cookies check errors outside of JS adapter	2021-06-23 08:36:26 +02:00
Vlastimil Elias	458c841c39	[KEYCLOAK-18447] Dynamically select attributes based on requested scopes	2021-06-22 08:54:03 -03:00
Vlastimil Elias	b87d764137	[KEYCLOAK-17443] Username and email form fields kept in registration form when duplicate	2021-06-22 08:46:42 -03:00
rmartinc	b8452374d2	[KEYCLOAK-18473] Add max length to password policy	2021-06-22 10:15:48 +02:00
Luca Leonardo Scorcia	f5123cb51b	KEYCLOAK-17935 SAML Client - Validate InResponseTo attribute	2021-06-21 12:25:18 +02:00
keycloak-bot	13f7831a77	Set version to 15.0.0-SNAPSHOT	2021-06-18 10:42:27 +02:00
Pedro Igor	6bb7a8894d	[KEYCLOAK-18464] - Failures when running without tls and remote	2021-06-17 14:33:35 +02:00
Lukas Hanusovsky	b1f3e5554c	KEYCLOAK-18102 - set specific jpa schema.	2021-06-17 13:02:40 +02:00
Martin Bartoš	333d279d7a	KEYCLOAK-18406 SAMLServletAdapterTest failures	2021-06-17 11:30:39 +02:00
Tomas Kyjovsky	6db1c8204a	KEYCLOAK-18393 SAMLAdapterCrossDCTest failures	2021-06-16 18:46:38 +02:00
Martin Bartoš	78b6762326	KEYCLOAK-18442 LifespanAdapterTest - duplicate resources	2021-06-15 15:32:59 +02:00
Pedro Igor	ef3a0ee06c	[KEYCLOAK-17399] - Declarative User Profile and UI Co-authored-by: Vlastimil Elias <velias@redhat.com>	2021-06-14 11:28:32 +02:00
Václav Muzikář	9854f21ace	KEYCLOAK-18332 Client Scopes are reset to realm's default when Client is updated	2021-06-11 07:41:18 +02:00
mposolda	070c68e18a	KEYCLOAK-18069 Migration of client policies JSON from Keycloak 13	2021-06-10 10:40:14 +02:00
Douglas Palmer	aac0b6ec5f	[KEYCLOAK-17602] Email account verification link is wrongly encoded	2021-06-10 08:34:53 +02:00
Martin Bartoš	8ea2551d25	KEYCLOAK-18247 LifespanAdapterTest fails due to validation error on EAP	2021-06-10 07:07:35 +02:00
Martin Bartoš	07d57ca30f	KEYCLOAK-17179 IdP mappers with MultiValued property can't be saved	2021-06-10 07:02:21 +02:00
mposolda	91865fa93e	KEYCLOAK-18368 Invalidate client session after refresh token re-use	2021-06-09 14:43:29 +02:00
Benjamin Weimer	f66354a80e	KEYCLOAK-16947 add error parameters to access token response & improve logging	2021-06-07 17:53:30 +02:00
vramik	95bf912dc9	KEYCLOAK-18035 Fix update client with default default scope assigned as optional	2021-06-07 16:22:55 +02:00
Tomas Kyjovsky	b071be7799	KEYCLOAK-18260 ClientSearchTest.testQuerySearch failure on MSSQL2019 - removed Central European characters from the test	2021-06-07 16:20:53 +02:00
Tomas Kyjovsky	80eabcb7eb	KEYCLOAK-18249 WelcomePageTest fails on MSSQL 2019 - removed reference to `FK_P56CTINXXB9GSK57FO49F9TAC` from the `DropAllServlet`	2021-06-07 16:18:32 +02:00
vramik	5c007420ef	KEYCLOAK-18367 fix compilation failure	2021-06-07 12:50:23 +02:00
Martin Bartoš	4b009ebf5e	KEYCLOAK-14540 Determine project/product name	2021-06-07 11:24:29 +02:00
Václav Muzikář	6b365d7c12	KEYCLOAK-18044 Client Policy: UI tests (old Admin Console)	2021-06-07 06:43:35 +02:00
mposolda	3d16a1e8d3	KEYCLOAK-16811 Add executor for disable 'Full Scope Allowed' and add it to FAPI profiles	2021-06-04 15:46:33 +02:00
Tomas Kyjovsky	1033b272e8	KEYCLOAK-13757 fix for KEYCLOAK-18267_KEYCLOAK-17254	2021-06-03 13:52:25 +02:00
Tomas Kyjovsky	2802740101	KEYCLOAK-13757 update JDG version to 8.1 - testsuite updates	2021-06-03 13:52:25 +02:00
Jan Lieskovsky	cbd4288205	[KEYCLOAK-17254] Adaptively add the default modular JVM options to the "javaVmArguments" to start the cache server container with, if the JVM used to run the cache server is modular (JDK 9+) Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2021-06-03 10:36:53 +02:00
mposolda	12c47150e7	KEYCLOAK-18337 FAPI1Test fails in pipeline with auth-server-undertow-non-tls	2021-06-03 10:09:40 +02:00
Martin Bartoš	fc40e875b9	KEYCLOAK-14515 ModAuthMellonTest fails	2021-06-02 18:01:08 +02:00
vramik	0959475099	KEYCLOAK-18305 revisit tests - authz disabled	2021-06-02 14:26:22 +02:00
Douglas Palmer	986b69c03f	[KEYCLOAK-17405] Session auth time updated when user has not re-authenticated	2021-06-01 19:35:42 +02:00
Miquel Simon	ccad4653d8	KEYCLOAK-18324. Exclude FAPI tests for remote auth server.	2021-06-01 11:47:13 +02:00
Stian Thorgersen	c868e1b173	Update HOW-TO-RUN.md	2021-06-01 10:27:12 +02:00
mposolda	73a38997d8	KEYCLOAK-14208 Default client profiles for FAPI	2021-05-31 12:31:52 +02:00
mposolda	ab13e3e4fe	KEYCLOAK-17939 Enable Client policies feature by default	2021-05-31 12:31:52 +02:00
Michito Okai	bc6a746780	KEYCLOAK-18112 Token introspection of the revoked refresh token	2021-05-31 11:01:01 +02:00
vramik	2bf727d408	KEYCLOAK-17753 remove KeycloakModelUtils.isClientScopeUsed method	2021-05-28 21:07:14 +02:00
rmartinc	38101d01c2	[KEYCLOAK-18250] LDAPSyncTest.test09MembershipUsingDifferentAttributes fails on MySQL 8 and MariaDB 10.3	2021-05-28 00:01:57 +02:00
Michal Hajas	b216b9579c	KEYCLOAK-18264 Fix SamlLogoutTest with different consumer and provider url	2021-05-27 23:23:46 +02:00
Michal Hajas	4dcb69596b	KEYCLOAK-18146 Search for clients by client attribute when doing saml artifact resolution	2021-05-27 23:02:22 +02:00
Stian Thorgersen	2cb59e2503	KEYCLOAK-17844 Add option to disable authorization services to workaround issues with many clients	2021-05-27 22:28:56 +02:00
Martin Kanis	23aee6c210	KEYCLOAK-16616 Limit number of authSessios per rootAuthSession	2021-05-27 22:10:36 +02:00
Takashi Norimatsu	669556af71	KEYCLOAK-18296 RefreshTokenRequest returns incorrect error code during failed HoK request	2021-05-27 15:28:29 +02:00
Yoshiyuki Tabata	c52d0babce	KEYCLOAK-17491 Move the key settings to the new Keys tab	2021-05-27 15:26:40 +02:00
Martin Bartoš	2096a0f5cc	KEYCLOAK-18246 DemoFilterServletAdapterTest fails for app servers with TLS	2021-05-27 13:06:35 +02:00
vramik	3aa06c2721	KEYCLOAK-18073 avoid ModelDuplicateException during parallel starup of servers	2021-05-27 07:10:35 +02:00
Stefan Guilhen	eb631bf63b	[KEYCLOAK-8730] Ensure role mappers don't remove roles already granted by another mapper when updating a brokered user	2021-05-26 17:21:54 +02:00
Michal Hajas	5c71c3d97f	KEYCLOAK-17764 Remove all clients querying fallback (#8077 )	2021-05-26 13:18:58 +02:00
Martin Bartoš	77fe3e9bed	KEYCLOAK-18054 EAP6Fuse6HawtioAdapterTest fails due to wrong port without TLS	2021-05-26 08:58:03 +02:00
Pedro Igor	b7e5db6534	[KEYCLOAK-18007] - Configure resolved paths with the method config from configuration	2021-05-25 09:48:30 -03:00
Luca Leonardo Scorcia	478319348b	KEYCLOAK-16450 X509 Direct Grant Auth does not verify certificate timestamp validity	2021-05-25 10:32:17 +02:00
Takashi Norimatsu	6e7898039b	KEYCLOAK-18139 SecureResponseTypeExecutor: polishing for FAPI 1 final	2021-05-25 08:32:43 +02:00
mposolda	d4374f37ae	KEYCLOAK-18258 Not possible to login with public client, which was confidential with custom client authenticator set	2021-05-24 13:17:14 +02:00
Lukas Hanusovsky	afb8da7ff0	KEYCLOAK-18056 exclude test for remote testsuite.	2021-05-24 11:27:44 +02:00
Yoshiyuki Tabata	4c49d595cb	Fix HOW-TO-RUN.md	2021-05-24 09:28:38 +02:00
Takashi Norimatsu	6532baa9a7	KEYCLOAK-18127 Option for skip return user's claims in the ID Token for hybrid flow	2021-05-24 08:02:34 +02:00
Václav Muzikář	5d578f0c90	KEYCLOAK-17905 Quarkus: ClientPoliciesImportExportTest.testSingleFileRealmExportImport failed in GHA	2021-05-21 08:27:36 +02:00
Michito Okai	cc2d6f0741	KEYCLOAK-18235 Display of options about device grant when selecting "public" as the access type	2021-05-21 08:24:27 +02:00
Vlastimil Elias	4ad1687f2b	[KEYCLOAK-17399] UserProfile SPI - Validation SPI integration	2021-05-20 15:26:17 -03:00
Pedro Igor	9ebbc7673c	[KEYCLOAK-18111] - Error when processing path without associated resource	2021-05-20 11:15:11 -03:00
Thomas Darimont	c49dbd66fa	KEYCLOAK-15437 Ensure at_hash is generated for IDTokens on token-refresh	2021-05-20 16:05:11 +02:00
Pedro Igor	a0f8d2bc0e	[KEYCLOAK-17399] - Review User Profile SPI Co-Authored-By: Vlastimil Elias <vlastimil.elias@worldonline.cz>	2021-05-20 08:44:24 -03:00
rmartinc	b97f177f26	[KEYCLOAK-14696] Unable to fetch list of members from a group through keycloak admin console.	2021-05-20 11:32:23 +02:00
Michal Hajas	3bb5bff8e0	KEYCLOAK-17495 Do not include principal in the reference to broker sessionId	2021-05-20 11:32:11 +02:00
mposolda	d3e9e21abd	KEYCLOAK-17906 Use auto-configure instead of is-augment. Use default-client-authenticator option in SecureClientAuthenticatorExecutor	2021-05-19 12:18:11 +02:00
vramik	4d776cd780	KEYCLOAK-18137 Fix introduced SPI name	2021-05-18 20:30:21 +02:00
Martin Bartoš	8c299b417a	KEYCLOAK-17784: Remember me - fix test	2021-05-18 16:15:30 +02:00
Bastian Ike	5c3d7f186e	KEYCLOAK-17784: URL encode Keycloak's remember-me cookie to allow non-ascii usernames. International users using non-ascii symbols such as the german `äöü` will make Keycloak set the KEYCLOAK_REMEMBER_ME cookie without URL encoding. This will trigger an java.lang.IllegalArgumentException: UT000173 exception in undertow's cookie parser which does not allow non-ascii characters. Co-authored-by: Fabian Freyer <mail@fabianfreyer.de>	2021-05-18 16:15:30 +02:00
Mathieu CLAUDEL	df714506cc	KEYCLOAK-17655 - Can't impersonate	2021-05-18 14:16:01 +02:00
mposolda	71dcbec642	KEYCLOAK-18108 Refactoring retrieve of condition/executor providers. Make sure correct configuration of executor/condition is used for particular provider	2021-05-18 12:20:47 +02:00
mposolda	b8a7750000	KEYCLOAK-18113 Refactor some executor/condition provider IDs	2021-05-18 09:17:41 +02:00
Václav Muzikář	62e6883524	KEYCLOAK-17084 KEYCLOAK-17434 Support querying clients by client attributes	2021-05-14 13:58:53 +02:00
Pedro Igor	62e17f3be7	[KEYCLOAK-17588] - Authz confirmation popping out twice	2021-05-14 07:21:06 -03:00
Tomas Kyjovsky	1292135729	KEYCLOAK-17322 Align tested databases with EAP 7.4 support matrix	2021-05-14 09:27:00 +02:00
Peter Flintholm	919899b994	KEYCLOAK-18039: Optimise offline session load on startup Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-05-13 16:26:26 +02:00
Alfredo Boullosa	716afe9404	KEYCLOAK-18075 - Remove "role_list" from expected default client scopes	2021-05-13 10:30:12 +02:00
Marek Posolda	a6d4316084	KEYCLOAK-14209 Client policies admin console support. Changing of format of JSON for client policies and profiles. Remove support for default policies (#7969 ) * KEYCLOAK-14209 KEYCLOAK-17988 Client policies admin console support. Changing of format of JSON for client policies and profiles. Refactoring based on feedback and remove builtin policies	2021-05-12 16:19:55 +02:00
mhajas	f37a24dd91	KEYCLOAK-17348 Add manual pagination into UserStorageManager#query	2021-05-12 15:09:36 +02:00
Takashi Norimatsu	355a5d65fb	KEYCLOAK-18052 Client Policies : Revise SecureRequestObjectExecutor to have an option for checking nbf claim	2021-05-11 14:29:33 +02:00
rmartinc	2539bd9ed3	[KEYCLOAK-17903] idp metadata describing one entity MUST have EntityDescriptor root element	2021-05-11 13:02:13 +02:00
Takashi Norimatsu	5dced05591	KEYCLOAK-18050 Client Policies : Rename "secure-redirecturi-enforce-executor" to indicate what this executor does	2021-05-11 07:42:18 +02:00
Pedro Igor	6397671c88	[KEYCLOAK-17885] - Delete user-managed policies when removing groups	2021-05-10 16:33:23 -03:00
Takashi Norimatsu	b4e4e75743	KEYCLOAK-17928 Determine public client based on token_endpoint_auth_method during OIDC dynamic client registration	2021-05-10 08:24:18 +02:00
Takashi Norimatsu	624d300a55	KEYCLOAK-17938 Not possible to create client in the admin console when client policy with "secure-redirecturi-enforce-executor" condition is used	2021-05-07 17:52:09 +02:00
Takashi Norimatsu	b38b1eb782	KEYCLOAK-17895 SecureSigningAlgorithmEnforceExecutor: Ability to auto-configure default algorithm	2021-05-07 12:37:39 +02:00
Takashi Norimatsu	faab3183e0	KEYCLOAK-18034 Enforce SecureSigningAlgorithmForSignedJwtEnforceExecutor to private-key-jwt clients regardless their option	2021-05-07 12:26:46 +02:00
keycloak-bot	4b44f7d566	Set version to 14.0.0-SNAPSHOT	2021-05-06 14:55:01 +02:00
Bruno Oliveira da Silva	818dc40304	[KEYCLOAK-18001] Upgrade Apache Ant dependency	2021-05-06 08:55:57 -03:00
Michal Hajas	e7821bb67b	KEYCLOAK-17995 Add a warning to standalone migration scripts to perform a manual migration script if needed + fix test failures when migrating from 9.0.3	2021-05-06 11:40:01 +02:00
Hynek Mlnarik	98a88e3e8b	KEYCLOAK-17991 Introduce preview feature for map storage	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	6d97a573e6	KEYCLOAK-17696 Make MapStorageFactory amphibian	2021-05-06 11:38:41 +02:00
Takashi Norimatsu	0a4fdc64f3	KEYCLOAK-17929 SecureSigningAlgorithmForSignedJwtEnforceExecutor polishing for FAPI	2021-05-06 08:41:05 +02:00
Takashi Norimatsu	b78d151a23	KEYCLOAK-16808 Client Policy : Implement existing ConsentRequiredClientRegistrationPolicy as Client Policies' executor Co-authored-by: Andrii Murashkin <amu@adorsys.com.ua>	2021-05-06 08:36:34 +02:00
Peter Skopek	b2ed99c70d	KEYCLOAK-16928 Fix typo in authenticatorFlow representation	2021-05-06 08:33:19 +02:00
mposolda	20fc430be0	KEYCLOAK-17874 Server cannot be started with oracle19cRAC	2021-05-05 13:12:07 +02:00
Václav Muzikář	57fca2a34f	KEYCLOAK-15170 Reset password link is not invalidated if email address is changed	2021-05-05 08:45:47 +02:00
Martin Bartoš	c2c1b482ea	KEYCLOAK-17734 LifespanAdapterTest fails due to header check	2021-05-04 12:36:33 +02:00
rmartinc	7de5e7d298	KEYCLOAK-17074 Infinite loop logging as an user or impersonating an user as admin (#7799 )	2021-05-03 21:05:12 -04:00
Christoph Leistert	61bdc92ad9	KEYCLOAK-17387: 403 response on localization endpoint for cross realm users - add ForbiddenPage class for the assertion at the selenium test - add assertion to selenium test - GET requests for localization texts require at least one role for the realm - Make GET requests for localization texts public, to display the admin UI correctly, even if the role view-realm is missing	2021-05-03 13:29:11 -03:00
Václav Muzikář	315b9e3c29	KEYCLOAK-17835 Account Permanent Lockout and login error messages	2021-05-03 09:39:34 +02:00
Takashi Norimatsu	65c48a4183	KEYCLOAK-12137 OpenID Connect Client Initiated Backchannel Authentication (CIBA) (#7679 ) * KEYCLOAK-12137 OpenID Connect Client Initiated Backchannel Authentication (CIBA) Co-authored-by: Andrii Murashkin <amu@adorsys.com.ua> Co-authored-by: Christophe Lannoy <c4r1570p4e@gmail.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com> Co-authored-by: mposolda <mposolda@gmail.com>	2021-04-29 15:56:39 +02:00
Jan Lieskovsky	9a76ccce86	[KEYCLOAK-17818] Upgrade Keycloak to Wildfly 23.0.1.Final / Wildfly Core 15.0.1.Final [KEYCLOAK-17227] Return the versions of Wildfly deprecated module in the Arquillian testsuite to those defined by Wildfly 21 Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2021-04-29 12:36:03 +02:00
Jan Lieskovsky	6df5ba0f1c	[KEYCLOAK-17227] Wildfly 23 upgrade Base fixes: * [KEYCLOAK-17228] Upgrade Keycloak to Wildfly 23.0.0.Final / Wildfly Core 15.0.0.Final Other (related) fixes: * [KEYCLOAK-17477] Update org.wildfly.common to 1.5.4.Final * [KEYCLOAK-17478] Update wildfly-galleon-maven-plugin to 5.1.0.Final * [KEYCLOAK-17479] Keycloak Galleon Feature Pack: Adapter fails to build on top of Wildfly 23 * [KEYCLOAK-17482] Sync Wildfly 23 model changes to Keycloak * [KEYCLOAK-17508] Apply workaround for WFCORE-5335 * [KEYCLOAK-17231] Update org.keycloak.testsuite.metrics.MetricsRestServiceTest to work with org.wildfly.extension.health * [KEYCLOAK-17585] Fix Quarkus startup failure post applying Wildfly 23 upgrade changes * [KEYCLOAK-17583] Fix ConfigMigrationTest post applying Wildfly 23 model changes * [KEYCLOAK-17584] Fix ActionTokenCrossDCTest#sendResetPasswordEmailSuccessWorksInCrossDc test failure post applying Wildfly 23 upgrade changes Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2021-04-29 12:36:03 +02:00
Jan Lieskovsky	16ba4c0104	[KEYCLOAK-16723] Upgrade to Wildfly 22 Base fixes: * [KEYCLOAK-16724] Upgrade Keycloak to Wildfly 22.0.0.Beta1 / Wildfly Core 14.0.0.Beta4 * [KEYCLOAK-16822] Upgrade Keycloak to Wildfly 22.0.0.Final / Wildfly Core 14.0.0.Final * [KEYCLOAK-17158] Upgrade Keycloak to Wildfly 22.0.1.Final / Wildfly Core 14.0.1.Final Other (related) fixes: * [KEYCLOAK-16174] Upgrade (RH-SSO adapters) to EAP CD 21 * [KEYCLOAK-16202] Don't upgrade versions of httpclient and httpcore in the Fuse adapter as part of the Wildfly upgrade script run * [KEYCLOAK-16737] Keycloak core depends on org.bouncycastle:bcprov-jdk15on:1.65, which suffers from CVE-2020-28052 * [KEYCLOAK-16907] ConfigMigrationTest fails after upgrade to Wildfly 22.0.0.Final * [KEYCLOAK-17156] org.keycloak.test.config.migration.ConfigMigrationTest fails with 'illegal reflective access to method com.sun.net.ssl.internal.ssl.Provider.isFIPS()' Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2021-04-29 12:36:03 +02:00
vramik	de79493294	KEYCLOAK-17896 Add maven profile for map storage	2021-04-28 21:05:42 +02:00
vramik	162043beec	KEYCLOAK-17615 Move database initialization from KeycloakApplication to JpaConnectionProviderFactory	2021-04-28 13:43:48 +02:00
Martin Kanis	515bfb5064	KEYCLOAK-16378 User / client session map store Co-authored-by: Martin Kanis <mkanis@redhat.com> Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-04-28 09:09:15 +02:00
Martin Bartoš	5c4753ef20	KEYCLOAK-17873 FuseUtils - No bundles found for Fuse 7.x	2021-04-28 08:44:54 +02:00
Yoshiyuki Tabata	45202bd49a	KEYCLOAK-17637 Client Scope Policy for authorization service	2021-04-26 08:58:33 -03:00
Ayat Bouchouareb	8255cba930	KEYCLOAK-17612- Invalid SAML Response : Invalid Destination	2021-04-26 11:15:28 +02:00
Pedro Igor	068a1811f2	[KEYCLOAK-17452] - Removing policies created from a user-managed policy	2021-04-21 11:30:57 -03:00
Pedro Igor	228de42859	[KEYCLOAK-17598] - Changing root path check when resolving resource by uri	2021-04-21 11:30:07 -03:00
Takashi Norimatsu	190b60c5cd	KEYCLOAK-17827 Client Policy - Condition : Client - Client Host : Removing Option	2021-04-21 15:16:00 +02:00
i7a7467	ada7f37430	KEYCLOAK-16918 Set custom user attribute to Name ID Format for a SAML client https://issues.redhat.com/browse/KEYCLOAK-16918 Co-authored-by: Michal Hajas <mhajas@redhat.com>	2021-04-20 10:29:17 +02:00
Martin Bartoš	ca019c36e8	KEYCLOAK-17457 Failed OfflineServletsAdapterTest	2021-04-19 16:58:38 -03:00
AlistairDoswald	8b3e77bf81	KEYCLOAK-9992 Support for ARTIFACT binding in server to client communication Co-authored-by: AlistairDoswald <alistair.doswald@elca.ch> Co-authored-by: harture <harture414@gmail.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2021-04-16 12:15:59 +02:00
Michal Hajas	64ccbda5d5	KEYCLOAK-17323 Compute token expiration using Time.currentTime() instead of userSession.getStarted()	2021-04-14 12:58:45 +02:00
Martin Bartoš	b237c503ba	KEYCLOAK-16913 Fix failed FuseAdapterTest	2021-04-14 09:51:02 +02:00
Martin Bartoš	5a9068e732	KEYCLOAK-16401 Deny/Allow access in a conditional context	2021-04-09 12:04:45 +02:00
Alfredo Boullosa	cd342ad571	KEYCLOAK-17620 - Fix ClientClientScopesTest	2021-04-08 15:56:51 +02:00
Alfredo Boullosa	2f0f99c204	KEYCLOAK-17619 - Fix DefaultRolesTest	2021-04-08 12:17:53 +02:00
Michito Okai	d9ebbe4958	KEYCLOAK-17202 Restrict Issuance of Refresh tokens to specific clients	2021-04-08 11:51:25 +02:00
Takashi Norimatsu	8b0b657a8f	KEYCLOAK-17682 Client Policy - Executor : remove inner config class for executor without any config	2021-04-08 09:22:16 +02:00
Takashi Norimatsu	3221708499	KEYCLOAK-17667 Client Policy - Executor : Only Accept Confidential Client	2021-04-08 09:17:10 +02:00
Takashi Norimatsu	e9035bb7b3	KEYCLOAK-17681 Client Policy - Executor : Limiting available period of Request Object with its configuration	2021-04-08 09:12:20 +02:00
Daniel Fesenmeyer	a48d04bfe0	KEYCLOAK-16082 save attributes when role is created (with REST POST request) - add missing mapping code to RoleContainerResource#createRole - extend ClientRolesTest and RealmRolesTest to check that now the attributes are saved when a role is created - remove no longer needed code which updated roles because attributes were not saved on creation	2021-04-07 14:08:49 -03:00
Lukas Hanusovsky	e0d660d815	KEYCLOAK-17311 - exclude for Remote testsuite	2021-04-07 13:37:38 +02:00
Lukas Hanusovsky	17b19b2e36	KEYCLOAK-17302 - exclude for Remote testsuite	2021-04-07 13:35:47 +02:00
Takashi Norimatsu	7b227ae47c	KEYCLOAK-17666 Client Policy - Executor : Limiting available period of Request Object	2021-04-07 08:36:26 +02:00
Takashi Norimatsu	42dec08f3c	KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation) (#7780 ) * KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation) * support tests using auth-server-quarkus * Configuration changes for ClientPolicyExecutorProvider * Change VALUE of table REALM_ATTRIBUTES to NCLOB * add author tag * incorporate all review comments Co-authored-by: mposolda <mposolda@gmail.com>	2021-04-06 16:31:10 +02:00
vramik	d1ad905407	KEYCLOAK-17640 fix MultiVersionClusterTest.verifyFailureOn* tests	2021-04-06 12:55:26 +02:00
Miquel Simon	5f551e018d	KEYCLOAK-17310. Disabled test in remote environment. (#7898 )	2021-04-06 09:03:04 +02:00
vramik	185075d373	KEYCLOAK-14552 Realm Map Store	2021-03-31 15:49:03 +02:00
Konstantinos Georgilakis	ec5c256562	KEYCLOAK-5657 Support for transient NameIDPolicy and AllowCreate in SAML IdP	2021-03-31 14:45:39 +02:00
rmartinc	0a0caa07d6	KEYCLOAK-17215 Slowness issue while hitting /auth/admin/realms/$REALM/clients?viewableOnly=true after DELETE a role	2021-03-31 12:57:17 +02:00
vramik	c3b9c66941	KEYCLOAK-17460 invalidate client when assigning scope	2021-03-30 10:58:16 +02:00
sma1212	e10f3b3672	[KEYCLOAK-17484] OIDC Conformance - Authorization response with Hybrid flow does not contain token_type (#7872 ) * [KEYCLOAK-17484] fix oidc conformance for hybrid-flow * [KEYCLOAK-17484] add TokenType & ExpiresIn to OAuth2Constants * [KEYCLOAK-17484] add request validation for oidc-flows automated tests	2021-03-30 08:59:30 +02:00
devopsix	590ee1b1a2	KEYCLOAK-15459 Fix serialization of locale in admin console's “whoami” (#7397 ) call.	2021-03-29 18:37:26 -04:00
Bodo Graumann	0033b7daf7	[KEYCLOAK-17166] Use radio buttons for otp select	2021-03-29 15:46:34 +02:00
Thomas Darimont	7ec6a54e22	KEYCLOAK-17581 Prevent empty group names Create / Update operations in `GroupResource ` and `GroupsResource#addTopLevelGroup` did not validate the given group name. This allowed the creation of groups with empty names. We now prevent the creation of groups with empty names.	2021-03-25 19:10:38 -03:00
Hynek Mlnarik	a36fafe04e	KEYCLOAK-17409 Support for amphibian (both component and standalone) provider	2021-03-25 13:28:20 +01:00
Jan Lieskovsky	5fac80b05e	[KEYCLOAK-17100] Testsuite Wildfly initialization error on Windows [KEYCLOAK-17392] Java CLASSPATH is wrongly parsed on Windows Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com> Co-Authored-By: Peter Zaoral <pzaoral@redhat.com>	2021-03-25 09:21:34 +01:00
Alfredo Boullosa	e126969f82	Add Retry	2021-03-24 15:15:02 +01:00
Pedro Igor	fca65ac644	Adding a test when custom policies are used	2021-03-24 08:24:43 -03:00
Xiangjiaox	ca81e6ae8c	KEYCLOAK-15015 Extend KeyWrapper to add whole certificate chain in x5c parameter (#7643 ) * [KEYCLOAK-15015] - Publishing the x5c for JWK Co-authored-by: Vetle Bergstad <vetle.bergstad@evry.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2021-03-23 08:37:50 -03:00
cgeorgilakis	18afdea392	KEYCLOAK-16048 SAML Client import - add md:RequestedAttribute as "User Attribute" ProtocolMapper	2021-03-22 21:55:32 +01:00
Stan Silvert	717d9515fa	KEYCLOAK-16890: Stored XSS attack on new acct console (#7867 )	2021-03-22 11:24:12 +01:00
Stan Silvert	3b80eee5bf	KEYCLOAK-17033: Reflected XSS attack with referrer in new account console	2021-03-22 11:22:23 +01:00
Clement Cureau	0b68f24a09	[KEYCLOAK-14046] Include groups in user creation via Admin Console (#7035 ) * [KEYCLOAK-14046] Include groups in user creation via Admin Console Since the POST /users API now supports providing groups membership, here is the UI part! - Added a field in the user creation UI to specify groups the newly created user will be joining - Added associated messages in english language * Added UI integration tests * Fixed UI tests * Flatten nested groups in user creation groups searchbox * Filtering out searched groups * Removed unused injection * Fixed UI tests Co-authored-by: Clement Cureau <clement.cureau@cdiscount.com>	2021-03-19 13:55:45 +01:00
mposolda	853a6d7327	KEYCLOAK-17000 Adding server tmp directory inside the auth-server home directory	2021-03-17 10:06:48 +01:00
Pascal Euhus	82fc401298	[KEYCLOAK-9841] use LDAPUser UUID as an identifier instead of username	2021-03-16 17:55:24 +01:00
Andrew Elwell	c76ca4ad13	Correct "doesn't exists" typos - fixes KEYCLOAK-14986 (#7316 ) * Correct "doesn't exists" typos * Revert changes to imported package Co-authored-by: Stian Thorgersen <stianst@gmail.com>	2021-03-16 11:52:36 +01:00
Yang Xie	db30b470c4	KEYCLOAK-17342 Make the default value of default signature algorithm show up in the admin console	2021-03-16 09:15:22 +01:00
Michito Okai	298ab0bc3e	KEYCLOAK-7675 Support for Device Authorization Grant	2021-03-15 10:09:20 -03:00
Łukasz Dywicki	319195236b	Fix failing test, cause oauth device flow is encoded using realm attributes.	2021-03-15 10:09:20 -03:00
Hiroyuki Wada	9d57b88dba	KEYCLOAK-7675 Prototype Implementation of Device Authorization Grant. Author: Hiroyuki Wada <h2-wada@nri.co.jp> Date: Thu May 2 00:22:24 2019 +0900 Signed-off-by: Łukasz Dywicki <luke@code-house.org>	2021-03-15 10:09:20 -03:00
Thomas Darimont	d2060913be	KEYCLOAK-14412 Fixed compiler error in JavascriptAdapterTests	2021-03-11 13:03:08 -03:00
Thomas Darimont	b926cd20f1	KEYCLOAK-14412 Keycloak.js should honor scopes configured in initOptions and loginOptions	2021-03-11 13:03:08 -03:00
Hynek Mlnarik	4946484cb6	KEYCLOAK-17377 Fix invalidation cluster tests (do not hide failures)	2021-03-11 16:14:59 +01:00
Miquel Simon	1d54dd5e8b	KEYCLOAK-16006. Fixed Spring Boot tests with new offset value.	2021-03-11 09:51:28 +01:00
Alfredo Boullosa	95d9cd2b38	KEYCLOAK-17376 - Fix DeviceActivityTest, SigningInTest and PermissionsTest	2021-03-10 09:00:30 +01:00
Lukas Hanusovsky	b3ea6f74be	KEYCLOAK-16212 - Exclude Remote execution for the LDAPVaultCredentialsTest, fixed broken exclude Remote execution for the LDAPUserLoginTest.	2021-03-10 07:27:43 +01:00
Yang Xie	2605eddbe7	KEYCLOAK-17300 Add a method to check if the token revocation request has duplicate parameters	2021-03-09 18:27:38 +01:00
Alfredo Boullosa	3d76e2b775	KEYCLOAK-17378 - Fix DisableAuthorizationSettingsTest	2021-03-09 16:09:53 +01:00
Lukas Hanusovsky	ef57714eaa	KEYCLOAK-17301 - fix -> added org.infinispan.commons module into jboss-deployment-structure.xml	2021-03-09 11:05:17 +01:00
vramik	6e501946b1	KEYCLOAK-17021 Client Scope map store	2021-03-08 21:59:28 +01:00
Michal Hajas	fc29a39e5a	KEYCLOAK-16592 Do not require destination with SOAP binding	2021-03-05 19:52:00 +01:00
mposolda	99c1ee7f5a	KEYCLOAK-16793 KEYCLOAK-16948 Cors on error responses for logoutEndpoint and tokenEndpoint	2021-03-05 14:14:53 +01:00
Martin Bartoš	d452041d7d	KEYCLOAK-17304 ClientPoliciesTest - exclude mTLS tests for non-required SSL	2021-03-05 12:24:37 +01:00
Martin Bartoš	da6a017e86	KEYCLOAK-17307 ResetPasswordTest - wrong redirect URIs	2021-03-05 08:49:34 +01:00
Pavel Drozd	8203c4451e	KEYCLOAK-14766 - Removed setting default password for LDAPRule configuration	2021-03-04 12:56:45 +01:00
Denis	23bfaef4bb	KEYCLOAK-15535 Account Log of user login with realm not available details when update profile	2021-03-04 08:06:36 +01:00
Yang Xie	78754d1127	KEYCLOAK-17259 Add a method to check if the introspection request has duplicate parameters	2021-03-03 16:23:27 +01:00
Pedro Igor	0f30b3118a	[KEYCLOAK-16676] - Client attributes should not be stored if null or empty	2021-03-03 15:37:05 +01:00
Pedro Igor	40efbb0f9c	[KEYCLOAK-13942] - Invalidate pre-defined paths when paths are invalidated	2021-03-02 15:01:42 +01:00
Takashi Norimatsu	882f5ffea4	KEYCLOAK-15533 Client Policy : Extends Policy Interface to Migrate Client Registration Policies Co-authored-by: Hryhorii Hevorkian <hhe@adorsys.com.ua> Co-authored-by: Andrii Murashkin <amu@adorsys.com.ua>	2021-03-02 09:26:04 +01:00
i7a7467	b83064b142	KEYCLOAK-16679 Add algorithm settings for client assertion signature in OIDC identity broker	2021-03-01 18:11:25 +01:00
Takashi Norimatsu	c4bf8ecdf0	KEYCLOAK-16880 Client Policy - Condition : Negative Logic Support	2021-03-01 14:27:39 +01:00
mposolda	41dc94fead	KEYCLOAK-14483 Broker state param fix	2021-02-24 19:07:58 -03:00
Alfredo Boullosa	52a939f61a	KEYCLOAK-17125 Update Arquillian drone version to 2.5.2	2021-02-24 08:51:47 +01:00
mposolda	6f409d088a	KEYCLOAK-15239 Reset Password Success Message not shown when Kerberos is Enabled	2021-02-23 16:15:50 -03:00
Pedro Igor	dbc6514bfc	[KEYCLOAK-17206] - Avoid removing attributes when updating user and profile	2021-02-23 08:41:41 +01:00
Juan Manuel Rodriguez Alvarado	6255ebe6b5	[KEYCLOAK-16536] Implement Audit Events for Authorization Services requests	2021-02-22 17:28:59 -03:00
mposolda	ed8d5a257f	KEYCLOAK-16517 Make sure that just real clients with standardFlow or implicitFlow enabled are considered for redirectUri during logout	2021-02-22 14:30:32 +01:00
mposolda	0058011265	KEYCLOAK-16006 User should not be required to re-authenticate after revoking consent to an application	2021-02-22 14:29:42 +01:00
Pedro Igor	1dc0b005fe	[KEYCLOAK-17087] - X509 OCSP Validation Not Checking Intermediate CAs	2021-02-22 13:50:19 +01:00
Lukas Hanusovsky	4a2830bc2e	KEYCLOAK-15849 : auth-remote-server exclude -> removed duplicated annotation, fixed @Test(timeout) bug -> replaced by lambda expression.	2021-02-22 13:40:47 +01:00
Pedro Igor	9356843c6c	[KEYCLOAK-16521] - Fixing secret for non-confidential clients	2021-02-19 08:38:49 +01:00
Torsten Roemer	750f5fdb0a	KEYCLOAK-14577 OIDCIdentityProvider incorrectly sets firstName and lastName in BrokeredIdentityContext	2021-02-18 19:50:27 +01:00
Torsten Roemer	00ee6bb9fa	KEYCLOAK-14577 OIDCIdentityProvider incorrectly sets firstName and lastName in BrokeredIdentityContext	2021-02-18 19:50:27 +01:00
rmartinc	056b52fbbe	KEYCLOAK-16800 userinfo fails with 500 Internal Server Error for service account token	2021-02-18 19:37:52 +01:00
Pedro Igor	431f137c37	[KEYCLOAK-17123] - Avoid validation and updates for read-only attributes during updates	2021-02-17 17:57:46 +01:00
stefvdwel	b97f5eb128	Added PermissionTicket count test.	2021-02-17 09:40:19 -03:00
Pedro Igor	2593c3dbc4	[KEYCLOAK-15893] - Incorrect resource match is returned for some cases when using wildcard in uri	2021-02-17 12:51:26 +01:00
mposolda	80bf0b6bad	KEYCLOAK-16708 Unexpected exceptions during client authentication	2021-02-12 18:27:54 +01:00
Pedro Igor	ca2a761d4b	[KEYCLOAK-16886] - Updating user account removes attributes	2021-02-12 12:01:50 -03:00
Michito Okai	33bb1fda38	KEYCLOAK-16931 Authorization Server Metadata of introspection_endpoint_auth_methods_supported and introspection_endpoint_auth_signing_alg_values_supported	2021-02-11 14:53:49 +01:00
Pedro Igor	7a4733acc9	[KEYCLOAK-14034] - Adding tests for matching uris once updated	2021-02-11 09:44:43 -03:00
mposolda	456cdc51f2	KEYCLOAK-15719 CORS headers missing on userinfo error response	2021-02-11 13:37:42 +01:00
diodfr	cb12fed96e	KEYCLOAK-4544 Detect existing user before granting user autolink	2021-02-11 11:06:49 +01:00
Lukas Hanusovsky	223d0ea456	KEYCLOAK-16625 : Testsuite -> auth.server.remote: adding keystore file to a build directory.	2021-02-09 15:22:43 +01:00
Pedro Igor	f6c3ec5d9e	[KEYCLOAK-14366] - Missing check for iss claim in JWT validation on Client Authentication (Token Endpoint)	2021-02-09 13:54:06 +01:00
Pedro Igor	ab9a38ec27	[KEYCLOAK-13115] - Unable to add a role to a user if username query matches multiple acounts	2021-02-09 13:49:25 +01:00
Pedro Igor	eb37a1ed69	[KEYCLOAK-17031] - ClientInvalidationClusterTest failing on Quarkus due to unreliable comparison	2021-02-05 16:09:27 +01:00
mposolda	f4b5942c6c	KEYCLOAK-16755 ClearExpiredUserSessions optimization. Rely on infinispan expiration rather than Keycloak own background task.	2021-02-04 08:49:42 +01:00
Yang Xie	cffe24f815	KECLOAK-16009 Add a method to check if the token request has duplicate parameters	2021-02-03 16:10:41 +01:00
Florian Apolloner	eeec82dea3	KEYCLOAK-16656 Only set execution authenticator for form flows.	2021-01-29 17:19:15 +01:00
Martin Kanis	8432513daa	KEYCLOAK-16908 Refactor UserSessionPersisterProvider	2021-01-29 09:29:00 +01:00
Pedro Igor	922d7da3ae	[KEYCLOAK-16497] - AuthzClient.create() fails when env variables are used in auth-server-url	2021-01-28 12:07:58 -03:00
Hynek Mlnarik	60e4bd622f	KEYCLOAK-16828 Fix HttpClient failures and close HttpResponses	2021-01-28 08:38:34 +01:00
rmartinc	f3a4991b6a	KEYCLOAK-15975 NPE in DefaultThemeManager.loadTheme() if theme directory is absent	2021-01-27 22:05:19 +01:00
Pedro Igor	0c501f8302	[KEYCLOAK-16837] - Authz client still relying on refresh tokens when doing client credentials	2021-01-27 12:23:32 -03:00
mposolda	99a70267d9	KEYCLOAK-16801 Improve performance of ClearExpiredEvents background task	2021-01-27 09:57:46 +01:00
Takashi Norimatsu	b89edabcfc	KEYCLOAK-16889 Client Policy : Refactor Test Class	2021-01-27 09:06:08 +01:00
Martin Kanis	9f580e3ed8	KEYCLOAK-15695 Streamification cleanup	2021-01-20 14:39:53 +01:00
Thomas Darimont	6315fe5d22	KEYCLOAK-16464 Test mapping of enabled and emailVerified user model attribute to LDAP attributes	2021-01-20 09:24:06 +01:00
Takashi Norimatsu	bcf313f321	KEYCLOAK-16858 Client Policy - Improper retainAll operation in Client Scope Condition and other minor bugs	2021-01-20 09:10:21 +01:00
Martin Bartoš	9df7fdbc55	KEYCLOAK-14718 Adding test case for User Client Role Mapper	2021-01-19 17:49:36 +01:00
Michal Hajas	ba8e2fef6b	KEYCLOAK-15524 Cleanup user related interfaces	2021-01-18 16:56:10 +01:00
mposolda	dae4a3eaf2	KEYCLOAK-16468 Support for deny list of metadata attributes not updateable by account REST and admin REST (cherry picked from commit 79db549c9d561b8d5efe3596370190c4da47e4e1) (cherry picked from commit bf4401cddd5d3b0033820b1cb4904bd1c8b56db9)	2021-01-18 13:17:51 +01:00
mposolda	eac3329d22	KEYCLOAK-14019 Improvements for request_uri parameter (cherry picked from commit da38b36297a5bd9890f7df031696b516268d6cff)	2021-01-18 13:05:09 +01:00
Pedro Igor	c631013031	[KEYCLOAK-16515] - Scope permissions not added to result if previous permission is granted	2021-01-14 17:08:05 +01:00
Takashi Norimatsu	5f445ec18e	KEYCLOAK-14200 Client Policy - Executor : Enforce Holder-of-Key Token Co-authored-by: Hryhorii Hevorkian <hhe@adorsys.com.ua>	2021-01-12 11:21:41 +01:00
Takashi Norimatsu	f423c0dc51	KEYCLOAK-16249 Client Policy - Condition : Client - Any Client	2021-01-08 17:29:50 +01:00
vramik	1402d021de	KEYCLOAK-14846 Default roles processing	2021-01-08 13:55:48 +01:00
Takashi Norimatsu	05dfac75ca	KEYCLOAK-14202 Client Policy - Executor : Enforce secure signature algorithm for Signed JWT client authentication Co-authored-by: Andrii Murashkin <amu@adorsys.com.ua>	2021-01-06 08:58:20 +01:00
Thomas Darimont	1a7600e356	KEYCLOAK-13923 Support PKCE for OIDC based Identity Providers (#7381 ) * KEYCLOAK-13923 - Support PKCE for Identity Provider We now support usage of PKCE for OIDC based Identity Providers. * KEYCLOAK-13923 Warn if PKCE information cannot be found code-to-token request in OIDCIdentityProvider * KEYCLOAK-13923 Pull up PKCE handling from OIDC to OAuth IdentityProvider infrastructure * KEYCLOAK-13923 Adding test for PKCE support for OAuth Identity providers * KEYCLOAK-13923 Use URI from KeycloakContext instead of HttpRequest Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2021-01-05 10:59:59 -03:00
mposolda	d4a36d0d9c	KEYCLOAK-16350 invalid_scope error response should be displayed for openid-connect/auth	2021-01-05 12:55:53 +01:00
vramik	dfa27b9f0f	KEYCLOAK-14856 fix migration, add ssl for migration server	2021-01-05 11:05:18 +01:00
keycloak-bot	75be33ccad	Set version to 13.0.0-SNAPSHOT	2020-12-16 17:31:55 +01:00
vramik	2ed8ed2543	KEYCLOAK-15390 fix ClientMappersOIDCTest	2020-12-16 15:14:35 +01:00
Stefan Guilhen	d6422e415c	[KEYCLOAK-16508] Complement methods for accessing user sessions with Stream variants	2020-12-15 19:52:31 +01:00
Takashi Norimatsu	edabbc9449	KEYCLOAK-14203 Client Policy - Executor : Enforce HTTPS URIs	2020-12-15 09:31:20 +01:00
Martin Bartoš	24f1a9c5c4	KEYCLOAK-16583 Ignore tests which directly use WebAuthn Chrome testing feature	2020-12-14 16:39:32 +01:00
Martin Bartoš	cfc035ee42	KEYCLOAK-15066 Internal Server error when calling random idp endpoint	2020-12-14 16:37:53 +01:00
Cédric Couralet	f4abc86a66	KEYCLOAK-16112 don't remove username attribute	2020-12-14 15:46:25 +01:00
Takashi Norimatsu	200b53ed1e	KEYCLOAK-14192 Client Policy - Condition : Author of a client - User Role	2020-12-14 15:37:05 +01:00
Michal Hajas	8e376aef51	KEYCLOAK-15847 Add MapUserProvider	2020-12-10 08:57:53 +01:00
Martin Kanis	3ddedc49f5	KEYCLOAK-11417 Internal server error on front channel logout with expired session	2020-12-09 14:45:04 +01:00
Martin Bartoš	873a69305f	KEYCLOAK-15264 Import realm using directory provider twice with IGNORE_EXISTING will cause NPE for clientId	2020-12-08 11:28:07 +01:00
Hynek Mlnarik	8c0c542f09	KEYCLOAK-16489 Add ability to run model tests with LDAP	2020-12-07 20:54:06 +01:00
Martin Kanis	f6be378eca	KEYCLOAK-14556 Authentication session map store	2020-12-07 20:48:59 +01:00
Lukas Hanusovsky	7f916ad20c	KEYCLOAK-14231 - validate supported locales	2020-12-07 19:56:32 +01:00
Stefan Guilhen	edef93cd49	[KEYCLOAK-16232] Streamify the UserCredentialStore and UserCredentialManager interfaces	2020-12-07 19:48:35 +01:00
Stefan Guilhen	73d0bb34c4	[KEYCLOAK-16232] Replace usages of deprecated collection-based methods with the respective stream variants	2020-12-07 19:48:35 +01:00
Joaquim Fellmann	87cedeaac6	KEYCLOAK 15634: Add ldap test	2020-12-07 17:44:18 +01:00
Takashi Norimatsu	7da5a71314	KEYCLOAK-14191 Client Policy - Condition : Author of a client - User Group	2020-12-03 17:52:06 +01:00
Ian	be4c99dfe5	KEYCLOAK-15287 Ability to add custom claims to the AccessTokenResponse	2020-12-03 17:28:03 +01:00
Peter Zaoral	c8a2f82a50	KEYCLOAK-14138 Upgrade OTP login screen * edited related css and ftl theme resources * added tile component * fixed IE11 compatibility * fixed affected tests Signed-off-by: Peter Zaoral <pzaoral@redhat.com>	2020-12-03 16:00:36 +01:00
Takashi Norimatsu	a51e0cc484	KEYCLOAK-14197 Client Policy - Condition : Client - Client Host	2020-12-02 09:05:42 +01:00
vramik	cd9e01af90	KEYCLOAK-16502 Migration of DELETE_ACCOUNT role	2020-12-01 13:10:20 +01:00
Joaquim Fellmann	6a6dba5d6e	KEYCLOAK-15634: Prevent federated user removal with new account console	2020-11-27 13:44:36 +01:00
Peter Zaoral	ad940a861a	KEYCLOAK-14137 Upgrade Authentication selector screen * edited related css and ftl theme resources * added IE11 compatibility support * fixed affected tests Signed-off-by: Peter Zaoral <pzaoral@redhat.com>	2020-11-27 08:40:06 +01:00
Jan Lieskovsky	833bf98643	[KEYCLOAK-15692] Upgrade to Wildfly "21.0.1.Final" Base fixes: * [KEYCLOAK-15780] Upgrade Keycloak to Wildfly 21.0.0.Beta1 / Wildfly Core 13.0.0.Beta6 * [KEYCLOAK-16031] Upgrade Keycloak to Wildfly 21.0.0.Final / Wildfly Core 13.0.1.Final * [KEYCLOAK-16442] Upgrade Keycloak to Wildfly 21.0.1.Final / Wildfly Core 13.0.3.Final Other (dependent) fixes: * [KEYCLOAK-15408] Deprecate former Wildfly and Wildfly Core versions in Arquillian's testsuite pom.xml file as part of the upgrade script * [KEYCLOAK-15442] Update the version of 'jboss-parent' as part of the Wildfly upgrade script if necessary * [KEYCLOAK-15474] Add --verbose and --force options to the Wildfly upgrade automated script * [KEYCLOAK-15649] Update "urn:jboss:domain:infinispan:10.0" version as part of the Wildfly upgrade automated script * [KEYCLOAK-15652] Wildfly upgrade automated script - Align Python artifact version comparsion algorithm with the Maven / Java one Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2020-11-26 09:25:29 +01:00
Hynek Mlnarik	5c2122d36f	KEYCLOAK-16444 Initialize JAXP components consistently	2020-11-25 14:20:19 +01:00
Hynek Mlnarik	363df6cab4	KEYCLOAK-16405 Tests for storage logical layer	2020-11-25 12:16:48 +01:00
zak905	4f330f4a57	KEYCLOAK-953: add allowing user to delete his own account feature	2020-11-24 15:50:07 +01:00
Stan Silvert	0afd55f32c	KEYCLOAK-14547: Make New Account Console the default.	2020-11-23 20:56:05 +01:00
Takashi Norimatsu	5dd5b5bedf	KEYCLOAK-16392 Client Policy - Condition : NPE without any initial configuration	2020-11-23 12:07:28 +01:00
st	a7666d4ccf	KEYCLOAK-11699 add support for 127.0.0.1 for native app	2020-11-20 11:03:29 +01:00
Stefan Guilhen	84df008bc2	[KEYCLOAK-16341] Make the new stream-based methods in server-spi user interfaces default instead of the collection-based versions. - this ensures that providing implementation for the collection-based methods is enough, which preserves backwards compatibility with older custom implementations. - alternative interfaces now allow new implementations to focus on the stream variants of the query methods.	2020-11-18 21:07:51 +01:00
Douglas Palmer	43e075afa5	[KEYCLOAK-14352] JavaScript injection vulnerability of Realm registration REST API	2020-11-18 10:48:11 -03:00
Martin Bartos	ab347df5ee	KEYCLOAK-14915 Upgrade registration screen to PF4	2020-11-18 10:54:17 +01:00
Takashi Norimatsu	9ce2e9b1f7	KEYCLOAK-14193 Client Policy - Condition : Client - Client Access Type	2020-11-18 09:49:22 +01:00
Hynek Mlnarik	29e3d89f3a	KEYCLOAK-16297 Fix HttpClient stale connections	2020-11-16 14:59:00 +01:00
Martin Bartoš	59aa31084e	KEYCLOAK-16143 Login form expected, but registraion form is displayed	2020-11-13 21:36:51 +01:00
Michal Hajas	a766a1dd16	KEYCLOAK-16074 Fix check3pCookiesSupported message callback	2020-11-13 16:01:50 -03:00
Miquel Simon	53dfa7c56b	KEYCLOAK-14109. Added profiles for Spring 2.3 version. KEYCLOAK-14737. Updated Jetty version to 9.4.29, as required per Spring 2.3.	2020-11-13 12:09:22 -03:00
Pedro Igor	56574afbeb	[KEYCLOAK-11330] - Fixing client and realm tests	2020-11-13 13:53:31 +01:00
Takashi Norimatsu	21c7af1c53	KEYCLOAK-14207 Client Policy - Executor : Enforce more secure client signature algorithm when client registration	2020-11-13 09:24:59 +01:00
Pedro Igor	7ad1c350a3	[KEYCLOAK-16245] - Update Quarkus 1.10.0.CR1	2020-11-12 13:21:08 -03:00
Takashi Norimatsu	244a1b2382	KEYCLOAK-14196 Client Policy - Condition : Client - Client Scope	2020-11-12 08:40:28 +01:00
vmuzikar	01be601dbd	KEYCLOAK-14306 OIDC redirect_uri allows dangerous schemes resulting in potential XSS (cherry picked from commit e86bec81744707f270230b5da40e02a7aba17830) Conflicts: testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/client/ClientRegistrationTest.java testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/admin/ClientTest.java services/src/main/java/org/keycloak/validation/DefaultClientValidationProvider.java	2020-11-12 08:21:54 +01:00
Takashi Norimatsu	e35a4bcefc	KEYCLOAK-14206 Client Policy - Executor : Enforce more secure state and nonce treatment for preventing CSRF	2020-11-11 21:11:34 +01:00
Hynek Mlnarik	030a077e99	KEYCLOAK-16157 Fix Unexpected I/O error message	2020-11-11 11:12:52 +01:00
Pedro Igor	852c4a57ff	[KEYCLOAK-14468] - Scope permission sometimes not removed when removing scopes	2020-11-11 08:44:28 +01:00
niwde	c69f92831b	[KEYCLOAK-16215] Typo in EventConfigTest	2020-11-10 13:54:39 -03:00
Martin Kanis	d9029b06b9	KEYCLOAK-15889 Streamification of ProtocolMappers	2020-11-10 16:40:34 +01:00
Takashi Norimatsu	a0b1710735	KEYCLOAK-14198 Client Policy - Condition : Client - Client IP	2020-11-10 15:37:26 +01:00
Stefan Guilhen	aa46735173	[KEYCLOAK-15200] Complement methods for accessing users with Stream variants	2020-11-10 15:13:11 +01:00
Takashi Norimatsu	a63814da67	KEYCLOAK-14201 Client Policy - Executor : Enforce Proof Key for Code Exchange (PKCE)	2020-11-09 08:18:05 +01:00
Thomas Darimont	de20830412	KEYCLOAK-9551 KEYCLOAK-16159 Make refresh_token generation for client_credentials optional. Support for revocation of access tokens. Co-authored-by: mposolda <mposolda@gmail.com>	2020-11-06 09:15:34 +01:00
vmuzikar	2df62369c3	KEYCLOAK-15295 User can manage resources with just "view-profile" role using new Account Console (cherry picked from commit 1b063825755d9f5aa13e612757e8ef7299430761)	2020-11-06 08:55:57 +01:00
stianst	6b2e1cbc5f	KEYCLOAK-16167 Enable Account REST API by default	2020-11-06 08:06:03 +01:00
Takashi Norimatsu	6dc136dfc0	KEYCLOAK-14199 Client Policy - Executor : Enforce more secure client authentication method when client registration	2020-11-05 20:42:49 +01:00
Martin Bartos	7522d5ac74	KEYCLOAK-15841 Upgrade rest of the minor forms to PF4	2020-11-05 17:58:41 +01:00
Hynek Mlnarik	7b8575fa1a	KEYCLOAK-16090 Work around LDAPUserLoginTest false failures	2020-11-03 08:38:54 +01:00
Pedro Igor	2b9ee02adc	[KEYCLOAK-11698] - Change context path of Keycloak to / for Keycloak.X	2020-11-02 15:25:11 -03:00
Christoph Leistert	e131de9574	KEYCLOAK-14855 Added realm-specific localization texts which affect texts in every part of the UI (admin console / login page / personal info page / email templates). Also new API endpoints and a new UI screen to manage the realm-specific localization texts were introduced. Co-authored-by: Daniel Fesenmeyer <daniel.fesenmeyer@bosch.io>	2020-10-30 08:02:43 -03:00
vramik	785f2e78bc	KEYCLOAK-14977 create MapRoleProvider	2020-10-30 08:15:22 +01:00
Johannes Knutsen	23c575c236	KEYCLOAK-15399: Wrong token type in token response. bearer vs Bearer	2020-10-28 10:38:22 -03:00
Pedro Igor	24f90ca6cb	[KEYCLOAK-15406] - Grant access when evaluating user-managed permission for the owner	2020-10-28 09:59:24 -03:00
Martin Bartos	a8df7d88a1	[KEYCLOAK-14139] Upgrade login screen to PF4	2020-10-27 20:24:07 +01:00
rmartinc	561ba1541d	[KEYCLOAK-15940] Tomcat SAML adapter lib missing dependencies	2020-10-26 11:47:48 +01:00
Hynek Mlnarik	267f1797d4	KEYCLOAK-15735 Fix LDAPSamlIdPInitiatedVaryingLetterCaseTest failures on few DBs	2020-10-23 15:15:03 +02:00
Hynek Mlnarik	e80538c60c	KEYCLOAK-15921 Fix auth server URL	2020-10-23 15:14:01 +02:00
Pedro Igor	b95ca30ec2	[KEYCLOAK-14255] - Minor fixes and improvements	2020-10-23 10:39:21 +02:00
stianst	da6f7d697f	KEYCLOAK-11786 Include Keycloak.X preview dist in distribution	2020-10-23 08:46:13 +02:00
Daniel Fesenmeyer	de8d2eafa3	KEYCLOAK-14781 Extend Admin REST API with search by federated identity - Add parameters idpAlias and idpUserId to the resource /{realm}/users and allow it to be combined with the other search parameters like username, email and so on - Add attribute "federatedIdentities" to UserEntity to allow joining on this field - extend integration test "UserTest"	2020-10-22 08:51:26 +02:00
Sven-Torben Janus	850d3e7fef	KEYCLOAK-15511 OTP registration during login with LDAP read-only When LDAP user federation is configured in read-only mode, it is not possible to set required actions for users from LDAP. Keycloak credential model allows for registering OTP devices when LDAP ist configured with "Import Users" flag enabled. Registering OTP devices needs to be done via the account management console and works as expecetd. However, it fails, if a user has to register aN OTP device during login (i.e. within the authentication flow), because the OTP Form Authenticator tries to enforce OTP registration via setting the corresponding required action for the user. That fails, because the user is read-only. To work around this, the required action is set on the authentication session instead.	2020-10-21 17:00:11 +02:00
mposolda	7891daef73	KEYCLOAK-15998 Keycloak OIDC adapter broken when Keycloak server is on http	2020-10-21 08:36:08 +02:00
Denis Richtárik	c8d0f2c59c	KEYCLOAK-15892 Can not install 7.4.3.CR1 Fuse adapter	2020-10-20 10:47:56 +02:00
mhajas	4556e858ad	KEYCLOAK-15522 Use AbstractStorageManager in UserStorageManager	2020-10-15 20:41:13 +02:00
Sven-Torben Janus	eb002c7ecd	KEYCLOAK-3365 Extend test case	2020-10-15 08:43:31 +02:00
Sven-Torben Janus	5918094840	KEYCLOAK-3365 Add test case	2020-10-15 08:43:31 +02:00
mhajas	d266165f63	KEYCLOAK-14871 Whitelist RefreshableKeycloakSecurityContext for KeycloakPrincipal serialization	2020-10-14 16:00:39 +02:00
Martin Kanis	086f7b4696	KEYCLOAK-15450 Complement methods for accessing realms with Stream variants	2020-10-14 08:16:49 +02:00
Hynek Mlnarik	ec39569970	KEYCLOAK-15928 Fix EAP 6 configuration directory	2020-10-13 17:12:29 +02:00
Hynek Mlnarik	4541a1b250	KEYCLOAK-15907 Fix new host in SAML adapter cannot restore session	2020-10-12 13:23:03 +02:00
testn	269a72d672	KEYCLOAK-15184: Use static inner class where possible	2020-10-09 23:37:08 +02:00
Luca Leonardo Scorcia	f274ec447b	KEYCLOAK-15697 Make the Service Provider Entity ID user configurable	2020-10-09 22:04:02 +02:00
mposolda	ff05072c16	KEYCLOAK-15770 Skip creating session for docker protocol authentication	2020-10-09 07:53:26 +02:00
mposolda	d269af1b70	KEYCLOAK-15830 Remove authentication session after failed directGrant authentication	2020-10-07 18:13:21 +02:00
vmuzikar	bb7ce62cd5	KEYCLOAK-15332 Missing CORS headers in some endpoints in Account REST API	2020-10-07 09:07:55 -03:00
mhajas	540516c6a9	KEYCLOAK-15734 Exclude tests with testingClient in remote environment	2020-10-06 20:26:24 +02:00
dashaylan	65ecfc960a	Combine UserInfo KcOidcBrokerConfiguration with OidcUserInfoClaimToRoleMapperTest	2020-10-06 08:44:02 +02:00
dashaylan	787d44be78	Reduce code duplication and test count	2020-10-06 08:44:02 +02:00
dashaylan	0d6da99844	Add UserInfo check fix and associated tests.	2020-10-06 08:44:02 +02:00
Markus Till	72f73f153a	UserProfile M1	2020-10-05 09:59:44 -03:00
Michito Okai	eac3341241	KEYCLOAK-15779 Authorization Server Metadata for the URL of the authorization server's JWK Set [JWK] document	2020-10-02 11:18:31 +02:00
Thomas Darimont	12576e339d	KEYCLOAK-15146 Add support for searching users by emailVerified status We now allow to search for users by their emailVerified status. This enables users to easily find users and deal with incomplete user accounts.	2020-09-29 08:28:59 -03:00
vmuzikar	fbe18e67c3	KEYCLOAK-15721 KeycloakPromise sometimes doesn't work	2020-09-28 15:57:46 -03:00
Takashi Norimatsu	6596811d5d	KEYCLOAK-14204 FAPI-RW Client Policy - Executor : Enforce Request Object satisfying high security level	2020-09-25 08:31:14 +02:00
mhajas	e4078933f8	KEYCLOAK-14828 Disable DTD for SAML XML parser (cherry picked from commit 37de7de78b2ae0eebee97fe917642bb849325f86)	2020-09-24 13:35:21 +02:00
Pedro Igor	76dede0f1e	[KEYCLOAK-14221] - Allow to map subject to userinfo response	2020-09-23 14:33:14 +02:00
vmuzikar	bca73fd04a	KEYCLOAK-15158 Javascript adapter init() is throwing a promise error after upgrade to 11	2020-09-22 10:56:46 -03:00
Frode Ingebrigtsen	0a0b7da53e	KEYCLOAK-15429 Add CORS origin on permission request with invalid access token	2020-09-22 08:56:21 -03:00
Denis	50210c4d9b	KEYCLOAK-14161 Regression on custom registration process	2020-09-21 20:23:39 +02:00
mhajas	12bc84322a	KEYCLOAK-14974 Map group storage provider	2020-09-21 15:56:32 +02:00
testn	2cd03569d6	KEYCLOAK-15238: Fix potential resource leak from not closing Stream/Reader	2020-09-21 13:05:03 +02:00
vmuzikar	790b549cf9	KEYCLOAK-15262 Logout all sessions after password change	2020-09-18 20:09:40 -03:00
mhajas	b75ad2fbd8	KEYCLOAK-15259 Avoid using "null" Origin header as a valid value	2020-09-17 23:21:49 -07:00
mhajas	f7e0af438d	KEYCLOAK-14232 Add Referrer-Policy: no-referrer to each response from Keycloak (cherry picked from commit 0b49640231abc6e465542bd2608e1c908c079ced)	2020-09-17 23:21:49 -07:00
Pedro Igor	0978d78a48	[KEYCLOAK-14255] - Initial changes to configuration	2020-09-16 20:03:52 +02:00
Luca Leonardo Scorcia	10077b1efe	KEYCLOAK-15485 Add option to enable SAML SP metadata signature	2020-09-16 16:40:45 +02:00
Martin Kanis	5d5e56dde3	KEYCLOAK-15199 Complement methods for accessing roles with Stream variants	2020-09-16 16:29:51 +02:00
Benjamin Weimer	f874e9a43c	KEYCLOAK-9874 include realm and client roles in user info response	2020-09-16 10:01:02 +02:00
Takashi Norimatsu	b670734eec	KEYCLOAK-14205 FAPI-RW Client Policy - Executor : Enforce Response Type of OIDC Hybrid Flow	2020-09-14 20:58:25 +02:00
Hynek Mlnarik	a05066d567	KEYCLOAK-15477 Fix permission evaluation logic	2020-09-14 20:53:46 +02:00
vmuzikar	a9a719b88c	KEYCLOAK-15270 Account REST API doesn't verify audience	2020-09-14 08:43:09 -03:00
vmuzikar	cb5c893d87	Add tests for KEYCLOAK-15481	2020-09-11 07:03:24 -04:00
Miquel Simon	2572b1464b	KEYCLOAK-15395. Removed totp/remove (DELETE) and credentials/password (GET, POST) endpoints.	2020-09-10 18:03:03 -03:00
Takashi Norimatsu	af2f18449b	KEYCLOAK-14195 FAPI-RW Client Policy - Condition : Client - Client Role	2020-09-10 18:34:19 +02:00
Clement Cureau	b19fe5c01b	Finegrain admin as fallback and added some tests	2020-09-10 12:26:55 -03:00
Sebastian Laskawiec	e01159a943	KEYCLOAK-14767 OpenShift Review Endpoint audience fix	2020-09-09 11:57:24 -03:00
Takashi Norimatsu	cbb79f0430	KEYCLOAK-15448 FAPI-RW : Error Response on OIDC private_key_jwt Client Authentication Error (400 error=invalid_client)	2020-09-09 11:14:21 +02:00
Benjamin Weimer	b2934e8dd0	KEYCLOAK-15327 backchannel logout invalidate offline session even if there is no corresponding active session found	2020-09-08 11:17:20 -03:00
Martin Kanis	4e9bdd44f3	KEYCLOAK-14901 Replace deprecated ClientProvider related methods across Keycloak	2020-09-07 13:11:55 +02:00
stianst	76f7fbb984	KEYCLOAK-14548 Add support for cached gzip encoding of resources	2020-09-07 00:58:47 -07:00
Martin Bartos	e34ff6cd9c	[KEYCLOAK-14326] Identity Provider force sync is not working	2020-09-07 09:42:40 +02:00
Takashi Norimatsu	1d8230d438	KEYCLOAK-14190 Client Policy - Condition : The way of creating/updating a client	2020-09-04 09:54:55 +02:00
Luca Leonardo Scorcia	67b2d5ffdd	KEYCLOAK-14961 SAML Client: Add ability to request specific AuthnContexts to remote IdPs	2020-09-03 21:25:36 +02:00
Hynek Mlnarik	1c4a2db8e1	KEYCLOAK-14510 Properly close Response object	2020-09-03 11:23:05 +02:00
Konstantinos Georgilakis	1fa93db1b4	KEYCLOAK-14304 Enhance SAML Identity Provider Metadata processing	2020-09-02 20:43:09 +02:00
Takashi Norimatsu	b93a6ed19f	KEYCLOAK-14919 Dynamic registration - Scope ignored	2020-09-02 13:59:22 +02:00
Takashi Norimatsu	107a429238	KEYCLOAK-15236 FAPI-RW : Error Response on OAuth 2.0 Mutual TLS Client Authentication Error (400 error=invalid_client)	2020-09-02 09:31:20 +02:00
mhajas	3928a49c77	KEYCLOAK-14816 Reset brute-force-detection data for the user after a successful password grant type flow	2020-09-01 21:45:17 +02:00
Hynek Mlnarik	583fa07bc4	KEYCLOAK-11029 Support modification of broker username / ID for identity provider linking	2020-09-01 20:40:38 +02:00
testn	0362d3a430	KEYCLOAK-15113: Move away from deprecated Promise.success()/error()	2020-09-01 14:26:44 -04:00
mhajas	bdccfef513	KEYCLOAK-14973 Create GroupStorageManager	2020-09-01 10:21:39 +02:00
Martin Bartos	9c847ab176	[KEYCLOAK-14432] Unhandled NPE in identity broker auth response	2020-08-31 14:14:42 +02:00
Martin Kanis	d59a74c364	KEYCLOAK-15102 Complement methods for accessing groups with Stream variants	2020-08-28 20:56:10 +02:00
Thomas Darimont	df94cefbc1	KEYCLOAK-12729 Revise password policy not-email tests - Added missing cleanup to RegisterTest - Revised test-setup for AccountFormServiceTest	2020-08-21 14:55:07 +02:00
Thomas Darimont	0f967b7acb	KEYCLOAK-12729 Add password policy not-email Added test cases and initial translations	2020-08-21 14:55:07 +02:00
mposolda	95d4feedfd	KEYCLOAK-14945 Improve the instructions for running the tests	2020-08-20 14:05:58 +02:00
mposolda	bd48d7914d	KEYCLOAK-15139 Backwards compatibility for LDAP Read-only mode with IMPORT_USERS enabled	2020-08-20 14:05:21 +02:00
Hynek Mlnarik	6231b7c904	KEYCLOAK-15207 Fix map storage test failures	2020-08-20 07:53:54 +02:00
Pedro Igor	cb57c58b4b	[KEYCLOAK-14730] - Consent not working when using federation storage and client is displayed on consent screen	2020-08-19 10:08:21 +02:00
mhajas	ae39760a62	KEYCLOAK-14972 Add independent GroupProvider interface	2020-08-13 21:13:12 +02:00
Benjamin Weimer	fdcfa6e13e	KEYCLOAK-15156 backchannel logout offline session handling	2020-08-13 08:09:59 -03:00
David Hellwig	ddc2c25951	KEYCLOAK-2940 - draft - Backchannel Logout (#7272 ) * KEYCLOAK-2940 Backchannel Logout Co-authored-by: Benjamin Weimer <external.Benjamin.Weimer@bosch-si.com> Co-authored-by: David Hellwig <hed4be@bosch.com>	2020-08-12 09:07:58 -03:00
Sebastian Paetzold	4ff34c1be9	KEYCLOAK-14890 Improve null handling in case of missing NameId	2020-08-06 10:45:22 -03:00
vmuzikar	b68d06f91c	KEYCLOAK-13127 Update Account Console to Account REST API v1	2020-08-04 18:43:23 -03:00
vramik	6b00633c47	KEYCLOAK-14812 Create RoleStorageManager	2020-07-31 15:11:25 -03:00
vramik	bfa21c912c	KEYCLOAK-14811 Create RoleProvider and make it independent of ClientProvider and RealmProvider	2020-07-31 15:11:25 -03:00
rmartinc	32bf50e037	KEYCLOAK-14336: LDAP group membership is not visible under "Users in Role" tab for users imported from LDAP	2020-07-30 16:19:22 +02:00
Dillon Sellars	25bb2e3ba2	KEYCLOAK-14529 Signed and Encrypted ID Token Support : RSA-OAEP-256 Key Management Algorithm	2020-07-30 15:20:51 +02:00
vramik	7f979ffbcf	KEYCLOAK-14889 Create test for clientStorageProviderTimeout	2020-07-30 08:42:51 -03:00
Yoshiyuki Tabata	cd76ed0d74	KEYCLOAK-14289 OAuth Authorization Server Metadata for Token Revocation	2020-07-29 11:41:56 +02:00
Martin Idel	97400827d2	KEYCLOAK-14870: Fix bug where user is incorrectly imported Bug: SerializedBrokeredIdentityContext was changed to mirror UserModel changes. However, when creating the user in LDAP, the username must be provided first (everything else can be handled via attributes).	2020-07-29 11:33:41 +02:00
Takashi Norimatsu	0191f91850	KEYCLOAK-14380 Support Requesting Claims using the claims Request Parameter	2020-07-29 09:53:28 +02:00
mposolda	c4fca5895f	KEYCLOAK-14892 NullPointerException when group mappings for LDAP users are accessed	2020-07-28 14:45:06 +02:00
Martin Idel	330a3d8ff5	KEYCLOAK-14904 Fix AccountRestService - custom attributes in UserModel are removed during update - this can break caching (doesn't break if user is written to database) - also ensure that we don't accidentally change username and/or firstName/lastName through attributes	2020-07-28 10:03:14 +02:00
Martin Idel	bf411d7567	KEYCLOAK-14869: Fix nullpointer exception in FullNameLDAPStorageMapper Setting an attribute should be possible with a list containing no elements or a null list This can happen e.g. when creating users via idps using a UserAttributeStatementMapper. Fix this unprotected access in other classes too	2020-07-28 09:54:37 +02:00
Martin Kanis	feef5b4db2	KEYCLOAK-14220 Complement methods for accessing clients with Stream variants	2020-07-27 10:38:39 +02:00
Lorent Lempereur	e82fe7d9e3	KEYCLOAK-13950 SAML2 Identity Provider - Send Subject in SAML requests	2020-07-24 21:41:57 +02:00
Pedro Igor	d5348066cb	[KEYCLOAK-14639] - Update ISPN schemas and how to run guide	2020-07-23 14:53:05 -03:00
mhajas	74988a3f21	KEYCLOAK-14826 Fix non-ssl auth-server tests failures	2020-07-23 14:20:19 +02:00
keycloak-bot	afff0a5109	Set version to 12.0.0-SNAPSHOT	2020-07-22 14:36:15 +02:00
Hynek Mlnarik	8fae2997c9	KEYCLOAK-14553 Improve logging	2020-07-22 00:08:15 +02:00
Hynek Mlnarik	c566b46e8f	KEYCLOAK-14549 Make ClientProvider independent of RealmProvider Co-Authored-By: vramik <vramik@redhat.com>	2020-07-22 00:08:15 +02:00
Hynek Mlnarik	ac0011ab6f	KEYCLOAK-14553 Client map store Co-Authored-By: vramik <vramik@redhat.com>	2020-07-22 00:08:15 +02:00
Martin Kanis	c5d5423cd3	KEYCLOAK-12265 Move KerberosEmbeddedServer to testsuite	2020-07-21 18:27:09 +02:00
vmuzikar	316f9f46e2	KEYCLOAK-14825 Make adapter tests running with FF to test cookies	2020-07-21 10:25:19 -03:00
Luca Leonardo Scorcia	9204402514	KEYCLOAK-14820 Import the NameIDPolicyFormat attribute from SAML IDP metadata descriptors	2020-07-21 12:23:25 +02:00
Takashi Norimatsu	e0fbfa722e	KEYCLOAK-14189 Client Policy : Basics	2020-07-21 07:50:08 +02:00
Douglas Palmer	6d5495141d	[KEYCLOAK-14611] Incorrect error message shown on duplicated email registration	2020-07-20 18:17:54 -03:00
Jan Lieskovsky	969b09f530	[KEYCLOAK-13692] Upgrade to Wildfly "20.0.1.Final" and Infinispan "10.1.8.Final" Co-authored-by: Jan Lieskovsky <jlieskov@redhat.com> Co-authored-by: Marek Posolda <mposolda@redhat.com>	2020-07-20 22:15:08 +02:00
Luca Leonardo Scorcia	46bf139cb4	KEYCLOAK-14741 Minor SAML specs compliance improvements	2020-07-20 21:08:12 +02:00
mhajas	93149d6b47	KEYCLOAK-14234 Adjust Adapter testsuite to work with app/auth.server.host including TLS configured	2020-07-20 11:22:16 +02:00
Thomas Vitale	4cd5ace800	KEYCLOAK-9321 Remove invalid token_introspection_endpoint The discovery document is advertizing both token_introspection_endpoint and introspection_endpoint. The former has been removed as it is not defined by OAuth2/OIDC.	2020-07-17 11:41:28 +02:00
vmuzikar	0802323916	KEYCLOAK-14778 Springboot tests fails with compilation error	2020-07-16 09:21:28 -03:00
Erik Jan de Wit	ace64c1f0c	KEYCLOAK-12249 added test to test that time is localized	2020-07-15 14:57:38 -04:00
Pedro Igor	582046bbfe	[KEYCLOAK-13141] - Fixing filter	2020-07-15 11:00:55 -03:00
Luca Leonardo Scorcia	f8a4f66d6c	KEYCLOAK-13698 - SAML Client - Add certificate info to signature Adds the X509Data tag to the XML Document signature in AuthnRequests	2020-07-10 23:06:37 +02:00
vmuzikar	7087c081f0	KEYCLOAK-14023 Instagram User Endpoint change Co-authored-by: Jean-Baptiste PIN <jibet.pin@gmail.com>	2020-07-10 17:36:51 -03:00
Pedro Igor	1db1deb066	[KEYCLOAK-13141] - Supporting re-augmentation	2020-07-10 11:04:46 -03:00
Pavel Drozd	48e4432e9d	KEYCLOAK-14508 - Exclude SessionNotOnOrAfterTest from remote tests	2020-07-10 14:22:11 +02:00
Luca Leonardo Scorcia	d6934c64fd	Refactor SAML metadata generation to use the SAMLMetadataWriter class	2020-07-09 09:39:35 +02:00
Pedro Igor	9c4da9b3ce	[KEYCLOAK-14147] - Request filter refactoring Co-authored-by: Stian Thorgersen <stian@redhat.com> Co-authored-by: Martin Kanis <mkanis@redhat.com>	2020-07-07 11:26:12 -03:00
kurisumakise2011	738f24aa38	[KEYCLOAK-14570] Resolve nullpointer issue in controller Some ProviderFactory returns null as properties instead of Collections.emptyList() and it leads to NPE. Fix it with using Optional.ofNullable(...).orElse(Collections.emptyList())	2020-07-07 07:46:26 +02:00
Douglas Palmer	7247734a0f	[KEYCLOAK-14379] Fix maven build order for app-server-eap6 profile	2020-07-03 22:47:27 +02:00
Douglas Palmer	9369c7cf4d	Add filter by name to applications endpoint	2020-07-03 15:35:38 -03:00
Martin Idel	8fe25948f7	KEYCLOAK-13959 Add AdvancedAttribute mapper for SAML to allow regexes	2020-07-03 18:19:35 +02:00
Plamen Kostov	914b226d11	[KEYCLOAK-14282] Create additional filtering for GET /users endpoint for enabled/disabled users	2020-07-03 09:07:42 -03:00
Axel Messinese	f30395d535	KEYCLOAK-12687 Add briefRepresentation queryParams to get roles 'composite' endpoints	2020-07-03 09:41:53 +02:00
Bartosz Siemieńczuk	e2040f5d13	KEYCLOAK-14006 Allow administrator to add additional fields to be fetched with Facebook profile request	2020-07-01 18:27:04 -03:00
Eric Rodrigues Pires	de9a0a0a4a	[KEYCLOAK-13044] Fix owner name representations of UMA tickets for client-owned resources	2020-07-01 18:15:22 -03:00
vmuzikar	dc6f7d0547	KEYCLOAK-14635 Saml tests are failing with invalid redirect urls	2020-07-01 13:46:43 +02:00
vmuzikar	001fe9eb11	KEYCLOAK-13206 Session Status iframe cannot access cookies when 3rd party cookies are blocked Co-authored-by: mhajas <mhajas@redhat.com>	2020-06-30 17:11:20 -03:00
Douglas Palmer	5e44bb781b	[KEYCLOAK-14344] Cannot revoke offline access for an app if the app doesn't require consent	2020-06-26 14:56:08 -04:00
vramik	c163fce46e	KEYCLOAK-14546 Springboot tests fails with compilation error	2020-06-26 15:18:17 -03:00
Martin Idel	05b6ef8327	KEYCLOAK-14536 Migrate UserModel fields to attributes - In order to make lastName/firstName/email/username field configurable in profile we need to store it as an attribute - Keep database as is for now (no impact on performance, schema) - Keep field names and getters and setters (no impact on FTL files) Fix tests with logic changes - PolicyEvaluationTest: We need to take new user attributes into account - UserTest: We need to take into account new user attributes Potential impact on users: - When subclassing UserModel, consistency issues may occur since one can now set e.g. username via setSingleAttribute also - When using PolicyEvaluations, the number of attributes has changed	2020-06-25 14:50:57 +02:00
Erik Jan de Wit	8a31c331f5	KEYCLOAK-14566 dynamic hidden on WelcomeScreen	2020-06-24 11:40:16 -04:00
Pedro Igor	337a751aaa	[KEYCLOAK-11330] - Clustering tests for GA	2020-06-24 17:23:45 +02:00
Douglas Palmer	1434f14663	[KEYCLOAK-14346] Base URL for applications is broken	2020-06-23 15:26:07 -03:00
vramik	753c21e9ef	KEYCLOAK-14129 0 downtime upgrade test - eap	2020-06-23 19:37:45 +02:00
Erik Jan de Wit	55291bad76	KEYCLOAK-14531 Welcome cards should be driven by content.json `content.js` is now `content.json` it's used in freemarker to create the cards	2020-06-22 11:29:20 -04:00
vramik	1b988cc12e	KEYCLOAK-14516 app-server-eap6 tests fails due to compilation error	2020-06-22 13:43:11 +02:00
Hiroyuki Wada	f73b51818b	KEYCLOAK-14113 Support for exchanging to SAML 2.0 token	2020-06-19 22:08:42 +02:00
Dirk Weinhardt	08dca9e89f	KEYCLOAK-13205 Apply locale resolution strategy to admin console.	2020-06-19 10:27:13 -04:00
Peter Skopek	5f78a09db1	KEYCLOAK-13029 kcadm composite role creation fails	2020-06-18 16:37:02 +02:00
vmuzikar	662f7fbccd	KEYCLOAK-14497 Compilation error in UsernameTemplateMapperTest	2020-06-18 09:15:07 -03:00
Martin Bartos	ec9bf6206e	[KEYCLOAK-13202] Reset password redirects to account client	2020-06-18 13:08:36 +02:00
Erik Jan de Wit	c20766f2d7	KEYCLOAK-14140 added more test cases Co-authored-by: vmuzikar <vmuzikar@redhat.com>	2020-06-17 13:56:11 -04:00
Thomas Darimont	92ab9c08ae	KEYCLOAK-8100 Expose sub claim in OIDC IdentityBroker Mappers We now expose the claims "sub" for use in Identity Broker mappers. Previously claims directly mapped to `JsonWebToken` fields were not accessible for mappings.	2020-06-17 12:56:08 -03:00
Pedro Igor	d331091c5e	[KEYCLOAK-11330] - Quarkus tests	2020-06-17 17:20:55 +02:00
vmuzikar	d71e81ed5e	KEYCLOAK-14235 Support for running broker tests with different hostnames for auth server and IdP	2020-06-17 14:13:00 +02:00
Pedro Igor	a8bad5b9bb	[KEYCLOAK-11330] - Quarkus clustering tests	2020-06-16 10:07:24 -03:00
vramik	c403aa49f7	KEYCLOAK-14087 migration from 9.0.3	2020-06-15 14:47:13 +02:00
mhajas	5d1d75db40	KEYCLOAK-14103 Add Warn message for possibly missing SameSite configuration	2020-06-15 14:45:57 +02:00
mhajas	5c2385d081	KEYCLOAK-14105 Update mod-auth-mellon tests to work with TLS	2020-06-15 12:56:49 +02:00
Jan Lieskovsky	df7d85b38d	[KEYCLOAK-14358] Enable StartTLS LDAP tests Thanks to KEYCLOAK-14343 Use Truststore SPI StartTLS bug fix they will work with Truststore SPI used by auth server Wildfly too Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2020-06-11 18:07:53 +02:00
Tero Saarni	3c82f523ff	[KEYCLOAK-14343] Truststore SPI support for LDAP with StartTLS Signed-off-by: Tero Saarni <tero.saarni@est.tech> Co-authored-by: Jan Lieskovsky <jlieskov@redhat.com>	2020-06-11 18:07:53 +02:00
Pedro Igor	e16f30d31f	[KEYCLOAK-2343] - Allow exact user search by user attributes Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>	2020-06-10 12:02:50 -03:00
Pedro Igor	8142b9ad7f	[KEYCLOAK-11330] - Fixing build when using empty repository	2020-06-10 08:03:18 -03:00
vramik	d63b3ceca4	KEYCLOAK-14141 0 downtime upgrade test	2020-06-10 12:45:34 +02:00
Pedro Igor	6ccde288a3	[KEYCLOAK-11330] - SSL Support	2020-06-09 08:43:52 +02:00
vmuzikar	b192ac4ea7	KEYCLOAK-14233 Support for generating SSL keystore before running testsuite Move profile for app server to base	2020-06-08 10:51:54 -03:00
Erik Jan de Wit	8b0760a6d1	KEYCLOAK-14158 Polished the My Resource page empty state change case added dropdown menu instead of buttons now on edit you can add and remove permissions changed how the actions work updated success messages use live region alerts toast alerts username or email search labels for the buttons margin between accecpt and deny button fixed test and types changed to bigger distance with split component changed to use seperate empty state component	2020-06-08 09:05:30 -04:00
Douglas Palmer	33863ba161	KEYCLOAK-10162 Usage of ObjectInputStream without checking the object types Co-authored-by: mposolda <mposolda@gmail.com>	2020-06-08 13:12:08 +02:00
Stan Silvert	4c7f4a8d9e	KEYCLOAK-11268: Change project layout	2020-06-07 12:42:44 -04:00
Yoshiyuki Tabata	f03ee2ec98	KEYCLOAK-14145 OIDC support for Client "offline" session lifespan	2020-06-04 14:24:52 +02:00
Denis	8d6f8d0465	EYCLOAK-12741 Add name and description edit functionality to Authentication and Execution Flows	2020-06-04 08:08:52 +02:00
Alfredo Boullosa	2ddfc94495	KEYCLOAK-14115 Add a refresh to avoid failure	2020-06-03 20:13:08 -04:00
Pedro Igor	357982adf6	[KEYCLOAK-11330] - Initial changes to get testsuite working for Quarkus	2020-06-03 09:57:24 -03:00
Jan Lieskovsky	a121f77ea4	[KEYCLOAK-12305] [Testsuite] Check LDAP federated user (in)valid login(s) using various authentication methods, bind credential types, and connection encryption mechanisms The tests cover various possible combinations of the following: * Authentication method: Anonymous or Simple (default), * Bind credential: Secret (default) or Vault, * Connection encryption: Plaintext (default), SSL, or startTLS Also, ignore the StartTLS LDAP tests for now till KEYCLOAK-14343 & KEYCLOAK-14354 are corrected (due these issues they aren't working with auth server Wildfly). They will be re-enabled later via KEYCLOAK-14358 once possible Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2020-06-02 14:44:17 +02:00
Pedro Igor	e8dc10b4a1	[KEYCLOAK-11330] - Properly handling POST formdata and UriInfo	2020-06-02 09:36:40 +02:00
stianst	90b29b0e31	KEYCLOAK-14107 Admin page content blocked on v10.0.0 due to content security policy	2020-05-29 13:57:38 +02:00
Benjamin Weimer	4265fdcab2	KEYCLOAK-14318 Client Empty Root URL and relative Base URL is valid	2020-05-29 11:21:28 +02:00
vmuzikar	f8dce7fc3e	KEYCLOAK-13819 SAML brokering with POST binding is broken by new SameSite policies	2020-05-28 13:37:56 +02:00
Thomas Darimont	e825ec24cb	KEYCLOAK-9635 Add AccessTokenHash to IDToken for OIDC Auth Code flow Revised tests	2020-05-27 07:34:05 +02:00
Thomas Darimont	5a337d0376	KEYCLOAK-9635 Add AccessTokenHash to IDToken for OIDC Auth Code flow Added missing test	2020-05-27 07:34:05 +02:00
Torsten Juergeleit	6005503a3d	Namespace support to group-ldap-mapper Previously, Keycloak did only support syncing groups from LDAP federation provider as top-level KC groups. This approach has some limitations: - If using multiple group mappers then there’s no way to isolate the KC groups synched by each group mapper. - If the option "Drop non-existing groups during sync” is activated then all KC groups (including the manually created ones) are deleted. - There’s no way to inherit roles from a parent KC group. This patch introduces support to specify a prefix for the resulting group path, which effectively serves as a namespace for a group. A path prefix can be specified via the newly introduced `Groups Path` config option on the mapper. This groups path defaults to `/` for top-level groups. This also enables to have multiple `group-ldap-mapper`'s which can manage groups within their own namespace. An `group-ldap-mapper` with a `Group Path` configured as `/Applications/App1` will only manage groups under that path. Other groups, either manually created or managed by other `group-ldap-mapper` are not affected.	2020-05-26 17:37:29 +02:00
Hynek Mlnarik	7deb89caab	KEYCLOAK-10729 Do not serialize SAML signature	2020-05-25 15:38:17 +02:00
vmuzikar	e873c70374	KEYCLOAK-14236 Support for custom Firefox preferences	2020-05-22 09:24:41 -03:00
cachescrubber	3382682115	KEYCLOAK-10927 - Implement LDAPv3 Password Modify Extended Operation … (#6962 ) * KEYCLOAK-10927 - Implement LDAPv3 Password Modify Extended Operation (RFC-3062). * KEYCLOAK-10927 - Introduce getLDAPSupportedExtensions(). Use result instead of configuration. Co-authored-by: Lars Uffmann <lars.uffmann@vitroconnect.de> Co-authored-by: Kevin Kappen <kevin.kappen@vitroconnect.de> Co-authored-by: mposolda <mposolda@gmail.com>	2020-05-20 21:04:45 +02:00
Denis	8c7b69fc9e	KEYCLOAK-13748 Create automated test for scenario with alternative subflow for credential reset	2020-05-20 14:06:53 +02:00
Stan Silvert	13d0491ff3	KEYCLOAK-14038: Re-allow special characters for Roles only	2020-05-20 07:53:23 -04:00
Takashi Norimatsu	c057b994e7	KEYCLOAK-13104 Signed and Encrypted ID Token Support : AES 192bit and 256bit key support	2020-05-20 09:01:59 +02:00
mhajas	4b8c7dd7d7	KEYCLOAK-14048 Allow clock skew when testing refresh token actual expiration time	2020-05-20 08:12:54 +02:00
Takashi Norimatsu	be0ba79daa	KEYCLOAK-7997 Implement Client Registration Metadata based on Mutual TLS	2020-05-19 17:00:41 +02:00
mposolda	12d965abf3	KEYCLOAK-13047 LDAP no-import fixes. Avoid lost updates - dont allow update attributes, which are not mapped to LDAP	2020-05-19 16:58:25 +02:00
Martin Kanis	6f43b58ccf	KEYCLOAK-14074 filterIdentityProviders compares providerId instead of alias	2020-05-19 09:46:21 +02:00
Thomas Darimont	6211fa90e0	KEYCLOAK-10932 Honor given_name and family_name in OIDC brokering Previously firstname and lastname were derived from the name claim. We now use direct mappings to extract firstname and lastname from given_name and family_name claims. Added test to KcOidcFirstBrokerLoginTest Marked org.keycloak.broker.provider.BrokeredIdentityContext#setName as deprecated to avoid breaking existing integrations.	2020-05-19 09:10:43 +02:00
vramik	37e23cb0a2	KEYCLOAK-14062 Add postgres10	2020-05-18 13:36:18 +02:00
Stan Silvert	a827d20a90	KEYCLOAK-11201: Use snowpack instead of SystemJs. Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>	2020-05-15 08:58:26 +02:00
Pedro Igor	35f622f48e	[KEYCLOAK-11719] - Remove need for servlets/undertow from Quarkus dist Co-authored-by: MatthewC <matthewc@backbase.com>	2020-05-13 09:28:58 +02:00
Álvaro Gómez Giménez	666832d1be	KEYCLOAK-13066 Include resourceType in ScopePermissionRepresentation	2020-05-12 17:11:35 -03:00
Sven-Torben Janus	82d3251ab4	Remove *-imports	2020-05-12 20:50:18 +02:00
Sven-Torben Janus	fcb0e450a0	KEYCLOAK-13817 Return local user from LDAPStorageProvider	2020-05-12 20:50:18 +02:00
Yoshiyuki Tabata	f7d00fc2e9	KEYCLOAK-13844 "exp" claim should not be "0" when using offline token	2020-05-12 16:14:37 +02:00
stianst	49db2c13a5	KEYCLOAK-8141 Fix issue where attribute values are duplicated if updates to user are done in parallell	2020-05-12 09:06:44 +02:00
Pedro Igor	44c49d69a7	[KEYCLOAK-13071] - AuthorizationTokenService swallows Exceptions thrown by KeycloakIdentity	2020-05-08 09:21:37 +02:00
Takashi Norimatsu	3716bd96ad	KEYCLOAK-14093 Specify Signature Algorithm in Signed JWT with Client Secret	2020-05-07 11:28:39 +02:00
vramik	4a70494285	KEYCLOAK-14086 Outdated wildfly deprecated version	2020-05-07 08:39:18 +02:00
Stan Silvert	deead471a9	KEYCLOAK-12852: Internal query params not removed after AIA	2020-05-06 16:07:21 -03:00
Takashi Norimatsu	0d0617d44a	KEYCLOAK-13720 Specify Signature Algorithm in Signed JWT Client Authentication	2020-05-05 17:43:00 +02:00
rmartinc	f0852fd362	KEYCLOAK-13823: "Dir" Full export/import: On import, service account roles and authorization info are not imported	2020-05-05 17:05:56 +02:00
Vanrar68	85feda3beb	KEYCLOAK-13998 ConditionalRoleAuthenticator doesn't work with composite roles	2020-05-05 08:39:04 +02:00
Erik Jan de Wit	1f462a2ae2	KEYCLOAK-12916 add name or username in toolbar Update testsuite/integration-arquillian/tests/other/base-ui/src/test/java/org/keycloak/testsuite/ui/account2/page/fragment/LoggedInPageHeader.java Co-Authored-By: Václav Muzikář <vaclav@muzikari.cz> Moved concatenation to messages_en.properties fix: renamed loggedInUser to landingLoggedInUser for the welcome page moved `loggedInUserName` to WelcomePageScrips	2020-05-04 14:58:27 -04:00
Martin Bartos	7ebdca48d3	[KEYCLOAK-13572] Doesn't observe After events due to assume check	2020-05-04 17:31:44 +02:00
Michael Riedmann	66c7ec6b08	[KEYCLOAK-13995] added test for clientUpdate with ProtocolMappers	2020-05-04 17:13:57 +02:00
Erik Jan de Wit	435815249b	KEYCLOAK-12783 changed to base account url for new console	2020-05-04 07:16:15 -04:00
Hynek Mlnarik	32f13016fa	KEYCLOAK-12874 Align Destination field existence check with spec	2020-05-04 09:19:44 +02:00
Erik Jan de Wit	b19b3a40ad	KEYCLOAK-14004 fixed the test	2020-04-30 12:47:18 -04:00
Martin Kanis	aa309b96a8	KEYCLOAK-13682 NPE when refreshing token after enabling consent	2020-04-30 08:46:21 +02:00
keycloak-bot	ae20b7d3cd	Set version to 11.0.0-SNAPSHOT	2020-04-29 12:57:55 +02:00
Yoshiyuki Tabata	874642fe9e	KEYCLOAK-12406 Add "Client Session Max" and "Client Session Idle" for OIDC	2020-04-28 15:34:25 +02:00
stianst	5b017e930d	KEYCLOAK-13128 Security Headers SPI and response filter	2020-04-28 15:28:24 +02:00
Yoshiyuki Tabata	b40c12c712	KEYCLOAK-5325 Provide OAuth token revocation capability	2020-04-28 15:25:22 +02:00
Martin Kanis	be28bfee1d	KEYCLOAK-13636 Missing wildfly-dist in EAP 7.4.0.CD19 build	2020-04-28 08:55:42 -03:00
Stan Silvert	09b54a9473	KEYCLOAK-12776: Make it easier to change the logo and logo link.	2020-04-27 12:29:38 -04:00
Erik Jan de Wit	ab2d1546b4	fix merge errors	2020-04-27 09:09:31 -04:00
Erik Jan de Wit	e093fa218d	Fixed console for test	2020-04-27 09:09:31 -04:00
Erik Jan de Wit	7580be8708	KEYCLOAK-13121 added the basic functionality	2020-04-27 09:09:31 -04:00
Stefan Guilhen	da1138a8d2	[KEYCLOAK-13005] Make sure the master URL is used if the consumer POST or REDIRECT URL is an empty string - Fixes issue where admin console sets an empty string when the consumer POST or REDIRECT URL is deleted	2020-04-27 14:25:03 +02:00
Erik Jan de Wit	db8cb63565	KEYCLOAK-12936 only change the locale in the AccountPage.	2020-04-27 07:04:06 -04:00
Pedro Igor	44b489b571	[KEYCLOAK-13656] - Deny request if requested scope is not associated to resource or any typed resources	2020-04-27 08:39:38 +02:00
Pedro Igor	dacbe22d53	[KEYCLOAK-9896] - Authorization Scope modified improperly when updating Resource	2020-04-27 08:38:55 +02:00
Martin Idel	7e8018c7ca	KEYCLOAK-11862 Add Sync mode option - Store in config map in database and model - Expose the field in the OIDC-IDP - Write logic for import, force and legacy mode - Show how mappers can be updated keeping correct legacy mode - Show how mappers that work correctly don't have to be modified - Log an error if sync mode is not supported Fix updateBrokeredUser method for all mappers - Allow updating of username (UsernameTemplateMapper) - Delete UserAttributeStatementMapper: mapper isn't even registered Was actually rejected but never cleaned up: https://github.com/keycloak/keycloak/pull/4513 The mapper won't work as specified and it's not easy to tests here - Fixup json mapper - Fix ExternalKeycloakRoleToRoleMapper: Bug: delete cannot work - just delete it. Don't fix it in legacy mode Rework mapper tests - Fix old tests for Identity Broker: Old tests did not work at all: They tested that if you take a realm and assign the role, this role is then assigned to the user in that realm, which has nothing to do with identity brokering Simplify logic in OidcClaimToRoleMapperTests - Add SyncMode tests to most mappers Added tests for UsernameTemplateMapper Added tests to all RoleMappers Add test for json attribute mapper (Github as example) - Extract common test setup(s) - Extend admin console tests for sync mode Signed-off-by: Martin Idel <external.Martin.Idel@bosch.io>	2020-04-24 15:54:32 +02:00
Pedro Igor	8f5e58234e	[KEYCLOAK-11317] - IDP review profile allows empty username	2020-04-24 10:52:59 -03:00
Douglas Palmer	d4eeed306b	[KEYCLOAK-11764] Upgrade to Wildfly 19	2020-04-24 08:19:43 -03:00
Erik Jan de Wit	3cdfb422ad	KEYCLOAK-12173 removed escaping of '&'	2020-04-23 16:10:57 -04:00
Bart Monhemius	9389332675	[KEYCLOAK-13927] Accept only ticketId instead of the PermissionTicketRepresentation for delete in PermissionResource	2020-04-23 15:59:43 -03:00
Bart Monhemius	acc5ab9e44	[KEYCLOAK-13927] Allow deleting permission tickets with the Authz client	2020-04-23 15:59:43 -03:00
Martin Kanis	a04c70531a	KEYCLOAK-9623 Disabling logged in user will not allow other user to login after he is thrown out of his session	2020-04-23 14:40:25 +02:00
Takashi Norimatsu	8513760e25	KEYCLOAK-12176 WebAuthn: show the attestation statement format in the admin console	2020-04-23 10:01:19 +02:00
mhajas	1db87acc98	KEYCLOAK-13852 reset time at the end of testTokenConcurrentRefresh test	2020-04-22 15:06:28 +02:00
mposolda	83255e1b08	KEYCLOAK-13922 MigrationModelTest failing in latest master	2020-04-22 14:05:34 +02:00
Thomas Darimont	12e53e6f11	KEYCLOAK-11003 Remove UPDATE_PASSWORD RequiredAction on non-temporary password reset We now remove a potentially existing UPDATE_PASSWORD action when explicitly assigning a non-temporary password. Adapted tests to use a temporary password when UpdatePassword required actions were used.	2020-04-22 10:59:49 +02:00
Thomas Darimont	f9f71039ae	KEYCLOAK-13566 ValidateUsername should raise USER_NOT_FOUND event if the user lookup fails	2020-04-21 21:11:11 +02:00
Pedro Igor	cbab159aa8	[KEYCLOAK-8071] - Properly validating requested scopes	2020-04-21 12:23:59 +02:00
mposolda	38195ca789	KEYCLOAK-12842 Not possible to update user with multivalued LDAP RDN	2020-04-21 11:35:41 +02:00
aboullos	2945eb63b7	KEYCLOAK-8836 Add test to check product name on welcome page Modify import KEYCLOAK-8836 Add test to check product name on welcome page	2020-04-21 11:30:20 +02:00
keycloak-bot	33314ae3ca	Set version to 10.0.0-SNAPSHOT	2020-04-21 09:19:32 +02:00
mposolda	b29810c923	KEYCLOAK-13306 Model fixes for check realm when lookup by ID (cherry picked from commit e40a62de31f6f5d326234314a9e285010665f707)	2020-04-21 08:19:50 +02:00
mposolda	821405e175	KEYCLOAK-10852 Inconsistency when using 'forgot password' after changing email directly in LDAP	2020-04-16 12:28:41 +02:00
Pedro Igor	acfbdf6b0e	[KEYCLOAK-13187] - Concurrency issue when refreshing tokens and updating security context state	2020-04-16 12:25:42 +02:00
Pedro Igor	21597b1ff2	[KEYCLOAK-13581] - Fixing client pagination when permission is enabled	2020-04-14 16:57:27 -03:00
mposolda	4f1985826c	KEYCLOAK-12934 LOAD_ROLES_BY_MEMBER_ATTRIBUTE_RECURSIVELY user roles retrieve strategy role-ldap-mapper option should only be displayed if LDAP provider vendor is Active Directory	2020-04-14 20:01:55 +02:00
Pedro Igor	9eeeb10587	[KEYCLOAK-13589] - Can't add user in admin console when 'Email as username' is enabled	2020-04-14 19:29:48 +02:00
stianst	1f02f87a6e	KEYCLOAK-13565 Add support for kc_action to keycloak.js Co-authored-by mhajas <mhajas@redhat.com>	2020-04-14 19:23:56 +02:00
stianst	97b5654690	KEYCLOAK-13285 Enable check identity for email	2020-04-14 19:22:57 +02:00
mhajas	845195780e	KEYCLOAK-13758 Exclude some tests for remote runs	2020-04-08 16:38:58 +02:00
Pedro Igor	b60b85ab65	[KEYCLOAK-7450] - Match subject when validating id_token returned from external OP	2020-04-06 13:43:19 +02:00
vramik	52b67f6172	KEYCLOAK-13660 Patch installation is not performed with -Dauth.server.patch.zips	2020-04-02 10:35:07 +02:00
mposolda	6f62c0ed98	KEYCLOAK-13442 Backwards compatibility in users searching. searchForUser(String, RealmModel, int, int) is no longer called when searching users from the admin console	2020-03-27 13:29:55 +01:00
aboullos	4b6e46d1a9	KEYCLOAK-13445 Modify SigningInTest for changes in credential type	2020-03-27 13:29:44 +01:00
mposolda	bf92bd16b0	KEYCLOAK-13383 WebAuthnRegisterAndLoginTest fails with -Dproduct with auth-server-eap	2020-03-26 16:27:23 +01:00
vramik	330d5b2c25	KEYCLOAK-13384 exclude IdentityProviderTest.failCreateInvalidUrl from remote-tests	2020-03-26 14:04:38 +01:00
vramik	780d11e790	KEYCLOAK-13571 KcinitTest fails with -Dproduct due to skipped maven plugin exacution	2020-03-26 14:03:11 +01:00
Pedro Igor	b812159193	[KEYCLOAK-10675] - Deleting an Identity Provider doesn't remove the associated IdP Mapper for that user	2020-03-26 11:41:17 +01:00
Pedro Igor	1b8369c7d5	[KEYCLOAK-13385] - Better message when saving a provider with invalid URLs	2020-03-26 08:46:44 +01:00
mhajas	b2b790cd1d	KEYCLOAK-10797 Unignore hawtio on eap6 test	2020-03-24 15:10:40 +01:00
mhajas	8b96882a1c	KEYCLOAK-12972 Fix fuse tests	2020-03-24 14:50:54 +01:00
keycloak-bot	f6a592b15a	Set version to 9.0.4-SNAPSHOT	2020-03-24 08:31:18 +01:00
mposolda	5ddd605ee9	KEYCLOAK-13259	2020-03-24 05:32:41 +01:00
mposolda	9474dd6208	KEYCLOAK-12986 BruteForceProtector does not log failures when login failure in PostBroker flow	2020-03-24 05:32:10 +01:00
Martin Kanis	e6e0e6945d	KEYCLOAK-12156 LogoutEndpoint does not verify token type of id_token_hint Co-authored-by: Martin Kanis <mkanis@redhat.com> Co-authored-by: Marek Posolda <mposolda@redhat.com>	2020-03-24 05:31:36 +01:00
Pedro Igor	ec63245ac8	[KEYCLOAK-13386] - SslRequired.EXTERNAL doesn't work for identity broker validations	2020-03-23 12:16:43 -03:00
mposolda	3e82473a90	KEYCLOAK-13369 Not possible to move groups in admin console	2020-03-23 10:17:23 +01:00
mposolda	61fd66e107	KEYCLOAK-13368 TestClassProvider undertow server not stopped after testsuite	2020-03-23 07:10:17 +01:00
Pavel Drozd	6cc897e319	KEYCLOAK-8372 - User Federation tests - fixing for different vendors (#6909 )	2020-03-20 11:36:35 +01:00
Dmitry Telegin	3b24465141	KEYCLOAK-12870 - Allow to pick arbitrary user for IdP linking (#6828 ) * KEYCLOAK-12870 - Allow to pick arbitrary user for IdP linking * KEYCLOAK-12870: always allow to choose user if password reset is called from first broker login flow * KEYCLOAK-12870: remove "already authenticated as different user" check and message * KEYCLOAK-12870: translations * KEYCLOAK-12870: fix tests	2020-03-20 07:41:35 +01:00
Pedro Igor	2eab44d3f3	[KEYCLOAK-13273] - Remove group policy when group is removed	2020-03-20 07:40:18 +01:00
rmartinc	a8e74196d1	KEYCLOAK-4923: Client Service Account Roles are not exported	2020-03-19 11:38:33 -03:00
Aboullos	f8dc7c0329	KEYCLOAK-13007 Add LDAPAccountTest	2020-03-18 10:11:59 -03:00
Stan Silvert	fff8571cfd	KEYCLOAK-12768: Prevent reserved characters in URLs	2020-03-18 07:40:24 +01:00
vmuzikar	89f483d578	KEYCLOAK-13257 Fix WelcomeScreenTest.accountSecurityTest	2020-03-17 15:31:05 -03:00
vmuzikar	e4f7eb78b5	KEYCLOAK-13256 Fix WebAuthn in new Account Console tests	2020-03-17 15:31:05 -03:00
Stefan Guilhen	8c627fdb20	[KEYCLOAK-13036] Fix KeycloakElytronCSVaultTest failures on IBM JDK - credential store is generated on the fly for the test, avoiding incompatibilities between implementations of keystores	2020-03-17 17:07:55 +01:00
mposolda	56d1ab19a8	KEYCLOAK-11412 Display more nice error message when creating top level group with same name	2020-03-16 21:03:46 +01:00
mposolda	d7688f6b12	KEYCLOAK-12869 REST sends credential type when no credential exists and credential disabled	2020-03-16 21:02:40 +01:00
Stan Silvert	1f1ed36b71	KEYCLOAK-9782: Do not allow duplicate group name when updating	2020-03-13 10:13:45 -04:00
Sebastian Laskawiec	8774a0f4ba	KEYCLOAK-12881 KEYCLOAK-13099 Update FederatedIdentities and Groups on POST	2020-03-12 14:57:02 +01:00
mposolda	72e4690248	KEYCLOAK-13174 Not possible to delegate creating or deleting OTP credential to userStorage	2020-03-11 12:51:56 +01:00
mposolda	803f398dba	KEYCLOAK-12876 KEYCLOAK-13148 KEYCLOAK-13149 KEYCLOAK-13151 Re-introduce some changes to preserve UserStorage SPI backwards compatibility. Added test for backwards compatibility of user storage	2020-03-11 12:51:56 +01:00
Thomas Darimont	cd51ff3474	KEYCLOAK-13186 Remove role information from RefreshTokens We now no longer expose role assignment information into the RefreshToken. Previously RefreshTokens contained information about the realm and client specific roles which are assigned to a user. Since the role information is usually either taken from the AccessToken, IDToken or the User-Info endpoint and the RefreshToken is an internal format which is opaque to the client, it would be a waste of space to keep that information in the RefreshToken. See: https://lists.jboss.org/pipermail/keycloak-dev/2019-April/011936.html	2020-03-11 06:28:22 +01:00
rmartinc	ad3b9fc389	KEYCLOAK-12579: LDAP groups duplicated during UI listing of user groups	2020-03-11 06:14:29 +01:00
mposolda	bc1146ac2f	KEYCLOAK-10029 Offline token migration fix. Always test offline-token migration when run MigrationTest	2020-03-10 20:38:16 +01:00
Pedro Igor	b7a395a3ef	[KEYCLOAK-11345] - Test basic features of Keycloak.X with current tetsuite	2020-03-10 15:59:35 +01:00
vramik	83461d033b	KEYCLOAK-11808 update testsuite to use current jdbc driver version for migration testing	2020-03-09 15:05:12 +01:00
Sebastian Schuster	99aba33980	KEYCLOAK-13163 Fixed searching for user with fine-grained permissions	2020-03-09 09:56:13 -03:00
vmuzikar	8cfd4d60e6	KEYCLOAK-13069 Fix failing RH-SSO base tests	2020-03-09 13:50:40 +01:00
Phy	8aa5019efe	KEYCLOAK-13074 Don't return LDAP group members if under IMPORT mode If GroupLDAPStorageMapper is running under IMPORT mode, getGroupMembers should not return users in LDAP, which, according to how UserStorageManager.query works (getting both user federation and Keycloak storage), will cause duplicate users in the list. A test has been added as well, which will fail before the fix in the mapper.	2020-03-06 11:44:36 +01:00
stianst	ed97d40939	KEYCLOAK-9851 Removed properties from realm json attributes that are included as fields	2020-03-05 17:59:50 +01:00
mabartos	a1bbab9eb2	KEYCLOAK-12799 Missing Cancel button on The WebAuthn setup screen when using AIA	2020-03-05 15:04:38 +01:00
Pedro Igor	23b4aee445	[KEYCLOAK-13056] - Searching clients with reduced permissions results in 403	2020-03-05 13:39:25 +01:00
Pedro Igor	30b07a1ff5	[KEYCLOAK-13175] - Setting the enforcement mode when fetching lazily fetching resources	2020-03-05 13:31:21 +01:00
stianst	75a772f52b	KEYCLOAK-10967 Add JSON body methods for test ldap and smtp connections. Deprecate old form based methods.	2020-03-05 10:07:58 +01:00
Pedro Igor	2f489a41eb	[KEYCLOAK-12192] - Missing Input Validation in IDP Authorization URLs	2020-03-05 06:32:35 +01:00
Hynek Mlnarik	0cf0955318	KEYCLOAK-13181 Fix NPE in EAP 6 adapter	2020-03-04 10:19:43 +01:00
Jon Koops	c1bf183998	KEYCLOAK-9346 Add new KeycloakPromise to support native promises Co-authored-by: mhajas <mhajas@redhat.com>	2020-03-04 08:53:35 +01:00
Douglas Palmer	dfb67c3aa4	[KEYCLOAK-12980] Username not updated when "Email as username" is enabled	2020-03-03 10:26:35 +01:00
Pedro Igor	49b1dbba68	[KEYCLOAK-11804] - Block service accounts to authenticate or manage credentials	2020-03-03 06:48:02 +01:00
Hynek Mlnarik	f45f882f0c	KEYCLOAK-11903 Test for XSW attacks	2020-03-02 21:26:13 +01:00
mhajas	df11a8a864	KEYCLOAK-12606 Add test	2020-03-02 20:07:52 +01:00
vramik	7c91e36e43	KEYCLOAK-10898 WildFly Adapter CLI based installation scripts	2020-03-02 10:08:45 +01:00
mhajas	d3bebb4746	KEYCLOAK-12884 Add more tests for SameSite	2020-02-28 16:19:44 +01:00
mhajas	9b81c42525	KEYCLOAK-13113 Exclude tests for Tomcat	2020-02-28 13:35:33 +01:00
mabartos	695fb92241	KEYCLOAK-13070 UserConsentWithUserStorageModelTest failing with ModelDuplicateException	2020-02-27 21:25:49 +01:00
Hynek Mlnarik	aecfe251e4	KEYCLOAK-12816 Fix representation to model conversion	2020-02-27 21:11:24 +01:00
Douglas Palmer	85d7216228	[KEYCLOAK-12640] Client authorizationSettings.decisionStrategy value lost on realm import	2020-02-27 09:45:48 -03:00
vramik	f1e54455e7	KEYCLOAK-13111 Move execution of db-allocator-plugin to jpa profile	2020-02-27 11:51:05 +01:00
mhajas	9f3a6de453	KEYCLOAK-13096 Add compile scope hamcrest dependency to springboot tests	2020-02-27 11:18:54 +01:00
mhajas	3db55727ca	KEYCLOAK-12979 Fix group-attribute parsing	2020-02-27 10:48:03 +01:00
vramik	e2bd99e9e4	KEYCLOAK-13097 fix UserStorageTest - add cleanup after test	2020-02-27 10:46:38 +01:00
Pedro Igor	a830818a84	[KEYCLOAK-12794] - Missing id token checks in oidc broker	2020-02-27 09:13:29 +01:00
Erik Jan de Wit	8297c0c878	KEYCLOAK-11155 split on first '=' instead of all	2020-02-27 09:12:51 +01:00
Erik Jan de Wit	93a1374558	KEYCLOAK-11129 coalesce possible null values	2020-02-27 09:11:29 +01:00
Pedro Igor	1c71eb93db	[KEYCLOAK-11576] - Properly handling redirect_uri parser errors	2020-02-27 08:29:06 +01:00
stianst	950eae090f	KEYCLOAK-13054 Unblock temporarily disabled user on password reset, and remove invalid error message	2020-02-27 08:05:46 +01:00
vmuzikar	de8ba75399	KEYCLOAK-12635 KEYCLOAK-12935 KEYCLOAK-13023 UI test fixes	2020-02-26 15:54:44 -03:00
Martin Bartoš	eaaff6e555	KEYCLOAK-12958 Preview feature profile for WebAuthn (#6780 ) * KEYCLOAK-12958 Preview feature profile for WebAuthn * KEYCLOAK-12958 Ability to enable features having EnvironmentDependent providers without restart server * KEYCLOAK-12958 WebAuthn profile product/project Co-authored-by: Marek Posolda <mposolda@gmail.com>	2020-02-26 08:45:26 +01:00
mhajas	8436a88075	KEYCLOAK-12962 Enforce 3.6.0 maven version for deploy phase	2020-02-25 16:36:26 +01:00
stianst	9e47022116	KEYCLOAK-8044 Clear theme caches on hot-deploy	2020-02-20 08:50:10 +01:00
stianst	d8d81ee162	KEYCLOAK-12268 Show page not found for /account/log if events are disabled for the realm	2020-02-20 08:49:30 +01:00
stianst	9a3a358b96	KEYCLOAK-11700 Lower-case passwords before checking with password blacklist	2020-02-20 08:33:46 +01:00
stianst	536824beb6	KEYCLOAK-12960 Use Long for time based values in JsonWebToken	2020-02-19 15:46:05 +01:00
mhajas	167f73f54e	KEYCLOAK-12969 Don't use GenericFilter in server-authz test application	2020-02-19 11:06:28 -03:00
Stefan Guilhen	7a3998870c	[KEYCLOAK-12612][KEYCLOAK-12944] Fix validation of SAML destination URLs - no longer compare them to the server absolutePath; instead use the base URI to build the validation URL	2020-02-18 16:38:19 -03:00
mposolda	eeeaafb5e7	KEYCLOAK-12858 Authenticator is sometimes required even when configured as alternative	2020-02-18 09:05:59 +01:00
Thomas Darimont	67ddd3b0eb	KEYCLOAK-12926 Improve Locale based message lookup We now consider intermediate Locales when performing a Locale based ResourceBundle lookup, before using an Locale.ENGLISH fallback. Co-authored-by: stianst <stianst@gmail.com>	2020-02-18 08:43:46 +01:00
keycloak-bot	d352d3fa8e	Set version to 9.0.1-SNAPSHOT	2020-02-17 20:38:54 +01:00
Adamczyk Błażej	497787d2cd	[KEYCLOAK-10696] - fixed missing client role attributes after import	2020-02-17 10:01:19 +01:00
mposolda	a76c496c23	KEYCLOAK-12860 KEYCLOAK-12875 Fix for Account REST Credentials to work with LDAP and social users	2020-02-14 20:24:42 +01:00
Douglas Palmer	876086c846	[KEYCLOAK-12161] "Back to Application" link is shown with link to current page	2020-02-14 10:37:32 -03:00
stianst	f0e3122792	KEYCLOAK-12953 Ignore empty realm frontendUrl	2020-02-14 11:33:07 +01:00
stianst	42773592ca	KEYCLOAK-9632 Improve handling of user locale	2020-02-14 08:32:20 +01:00
Pedro Igor	7efaf9869a	[KEYCLOAK-12864] - OIDCIdentityProvider with Reverse Proxy	2020-02-13 15:01:10 +01:00
Pedro Igor	421ec34557	[KEYCLOAK-8049] - Prevent users from not choosing a group	2020-02-13 10:10:46 +01:00
mabartos	90b35cc13d	KEYCLOAK-10420 Broker tests don't work with RH-SSO	2020-02-12 18:33:55 +01:00
mabartos	1bdf77f409	KEYCLOAK-12065 UserSessionInitializerTest is failing	2020-02-12 17:39:28 +01:00
mhajas	c3f0b342bf	KEYCLOAK-12964 Fix adapter remote tests execution deciding	2020-02-12 16:04:44 +01:00
mhajas	1bb238d20f	KEYCLOAK-12950 Use maven-plugin to configure shrinkwrap resolver	2020-02-12 16:04:44 +01:00
mhajas	f28ca30e6d	KEYCLOAK-12963 Exclude testNoPortInDestination test for remote container	2020-02-12 13:18:51 +01:00
Peter Zaoral	b0ffea699e	KEYCLOAK-12186 Improve the OTP login form -created and implemented login form design, where OTP device can be selected -implemented selectable-card-view logic in jQuery -edited related css and ftl theme resources -fixed affected BrowserFlow tests Signed-off-by: Peter Zaoral <pzaoral@redhat.com>	2020-02-12 11:25:02 +01:00
vramik	3d22644bbe	KEYCLOAK-12237 Fix WelcomePageTest on Postgresql	2020-02-12 10:43:29 +01:00
Peter Skopek	622a97bd1c	KEYCLOAK-12228 Sensitive Data Exposure from patch of hiba haddad haddadhiba0@gmail.com	2020-02-12 09:57:31 +01:00
stianst	3c0cf8463a	KEYCLOAK-12821 Check if action is disabled in realm before executing	2020-02-12 09:04:43 +01:00
stianst	6676b9bba0	Fix	2020-02-12 08:23:25 +01:00
stianst	0b8adc7874	KEYCLOAK-12921 Fix NPE in client validation on startup	2020-02-12 08:23:25 +01:00
stianst	dda829710e	KEYCLOAK-12829 Require PKCE for admin and account console	2020-02-12 08:22:20 +01:00
Thomas Darimont	7969aed8e0	KEYCLOAK-10931 Trigger UPDATE_PASSWORD event on password update via AccountCredentialResource	2020-02-11 19:51:58 +01:00
Martin Kanis	1d54f2ade3	KEYCLOAK-9563 Improve access token checks for userinfo endpoint	2020-02-11 15:09:21 +01:00
Erik Jan de Wit	41bf0b78be	KEYCLOAK-11631 reset to default befor loading new	2020-02-10 12:55:14 -05:00
mhajas	e5935d8069	KEYCLOAK-12764 Fix shrinkwrap issue by updating arquillian bom version	2020-02-08 10:51:48 +01:00
stianst	ecec20ad59	KEYCLOAK-12193 Internal error message returned in error response	2020-02-07 18:10:41 +01:00

... 13 14 15 16 17 ...

4279 commits