Commit graph

12731 commits

Author SHA1 Message Date
Johannes Knutsen
23c575c236 KEYCLOAK-15399: Wrong token type in token response. bearer vs Bearer 2020-10-28 10:38:22 -03:00
Pedro Igor
24f90ca6cb [KEYCLOAK-15406] - Grant access when evaluating user-managed permission for the owner 2020-10-28 09:59:24 -03:00
Stian Thorgersen
ee3f9b71db Update README.md 2020-10-27 23:48:08 +01:00
Martin Bartos
a8df7d88a1 [KEYCLOAK-14139] Upgrade login screen to PF4 2020-10-27 20:24:07 +01:00
Pedro Igor
9081dbe83f Need to show messages thrown at runtime 2020-10-26 20:53:46 +01:00
Pedro Igor
3acfad98cf [KEYCLOAK-14255] - Avoid creating CLI during startup 2020-10-26 20:53:46 +01:00
rmartinc
561ba1541d [KEYCLOAK-15940] Tomcat SAML adapter lib missing dependencies 2020-10-26 11:47:48 +01:00
Pedro Igor
c929f81dd7 Minor changes to pom files and fixing exception handling 2020-10-26 10:17:31 +01:00
mposolda
c98048bf64 KEYCLOAK-16063 Messed output when running './kc.sh' 2020-10-23 16:46:06 -03:00
Michal Hajas
9058cc75d9 KEYCLOAK-15833 Look for end bracket only if current block is pattern 2020-10-23 18:11:52 +02:00
Hynek Mlnarik
267f1797d4 KEYCLOAK-15735 Fix LDAPSamlIdPInitiatedVaryingLetterCaseTest failures on few DBs 2020-10-23 15:15:03 +02:00
Hynek Mlnarik
e80538c60c KEYCLOAK-15921 Fix auth server URL 2020-10-23 15:14:01 +02:00
mposolda
4f93dc8376 KEYCLOAK-11693 Clean startup log output in Keycloak.X 2020-10-23 09:33:54 -03:00
mposolda
e0ea961599 KEYCLOAK-16049 Running './kc.sh --profile=prod' still uses dev profile 2020-10-23 09:33:54 -03:00
Grandys
c122e72178 [KEYCLOAK-15850] Removed references to unminimized versions of javascript libraries in base admin template 2020-10-23 10:57:32 +02:00
mevech
75a5452805 [KEYCLOAK-14339] demo-template readme with syntax error
change step 10 and 11 to have consistent syntax with the rest
2020-10-23 10:48:49 +02:00
Pedro Igor
b95ca30ec2 [KEYCLOAK-14255] - Minor fixes and improvements 2020-10-23 10:39:21 +02:00
Pedro Igor
e70f702bc5 [KEYCLOAK-10790] - KeycloakInstalled adapter can not logoutDesktop more than once 2020-10-23 09:23:51 +02:00
stianst
da6f7d697f KEYCLOAK-11786 Include Keycloak.X preview dist in distribution 2020-10-23 08:46:13 +02:00
Stian Thorgersen
dc4959a8f9
Create codeql-analysis.yml 2020-10-23 08:40:43 +02:00
Takaya Ide
0cc0bac01c Use code blocks to avoid layout collapse 2020-10-23 00:58:53 +02:00
nxadm
580f2b4977
KEYCLOAK-16040 Typo in comment: Authoirzation => Authorization 2020-10-22 16:26:24 +02:00
stianst
594365e603 Fix ZipException in unit tests on Travis 2020-10-22 16:08:46 +02:00
Martin Kanis
f5c52345fc KEYCLOAK-16033 Revert Jpa*EventQuery to getResultList 2020-10-22 13:33:30 +02:00
stianst
74b5143c5e KEYCLOAK-15498 Disable gzip encoding when themes are not cached 2020-10-22 09:07:37 +02:00
Daniel Fesenmeyer
de8d2eafa3 KEYCLOAK-14781 Extend Admin REST API with search by federated identity
- Add parameters idpAlias and idpUserId to the resource /{realm}/users and allow it to be combined with the other search parameters like username, email and so on
- Add attribute "federatedIdentities" to UserEntity to allow joining on this field
- extend integration test "UserTest"
2020-10-22 08:51:26 +02:00
Kacper Pieszyk
f917302ace KEYCLOAK-16018 Typo in javadoc of KeycloakSecurityContext 2020-10-22 08:40:58 +02:00
Sven-Torben Janus
850d3e7fef KEYCLOAK-15511 OTP registration during login with LDAP read-only
When LDAP user federation is configured in read-only mode, it is not
possible to set required actions for users from LDAP.
Keycloak credential model allows for registering OTP devices when LDAP
ist configured with "Import Users" flag enabled. Registering OTP devices
needs to be done via the account management console and works as
expecetd. However, it fails, if a user has to register aN OTP device
during login (i.e. within the authentication flow), because the OTP Form
Authenticator tries to enforce OTP registration via setting the
corresponding required action for the user. That fails, because the user
is read-only.
To work around this, the required action is set on the authentication
session instead.
2020-10-21 17:00:11 +02:00
Pedro Igor
a965025be8 [KEYCLOAK-11331] - MySQL support 2020-10-21 16:55:25 +02:00
Pedro Igor
ee82391bd2 Fixing passing system properties and adding http.host option 2020-10-21 08:53:31 +02:00
mposolda
7891daef73 KEYCLOAK-15998 Keycloak OIDC adapter broken when Keycloak server is on http 2020-10-21 08:36:08 +02:00
Denis Richtárik
c8d0f2c59c
KEYCLOAK-15892 Can not install 7.4.3.CR1 Fuse adapter 2020-10-20 10:47:56 +02:00
Pedro Igor
4b75c83112 Default key store file for enabling HTTPS 2020-10-19 14:45:21 +02:00
Roland Werner
d544b132f9 KEYCLOAK-15806:
Extension to SignatureAlgorithm to support more Algorithms (RSA_SHA256_MGF1, RSA_SHA512_MGF1).
    Also included in clients.js and realms.js so it can be chosen as signature algorithm when connecting as SAML client and when brokering through SAML.
2020-10-15 20:55:27 +02:00
mhajas
4556e858ad KEYCLOAK-15522 Use AbstractStorageManager in UserStorageManager 2020-10-15 20:41:13 +02:00
Jonathan Buzzetti
a2efb84e00
KEYCLOAK-15978 Update spanish email verification message
For it to be similar to its english counterpart
2020-10-15 16:46:24 +02:00
Sven-Torben Janus
eb002c7ecd KEYCLOAK-3365 Extend test case 2020-10-15 08:43:31 +02:00
Sven-Torben Janus
5918094840 KEYCLOAK-3365 Add test case 2020-10-15 08:43:31 +02:00
Sven-Torben Janus
79f0703d62 KEYCLOAK-3365 Configure required actions for LDAP in READ_ONLY mode 2020-10-15 08:43:31 +02:00
Pedro Igor
be19c6b806 Updating to Quarkus 1.9.0.Final 2020-10-15 08:41:21 +02:00
mposolda
2ab355f7a2 KEYCLOAK-15924 Use 'cluster' instead of 'clustered' option. Execute StartupTest on GH actions. 2020-10-15 08:38:08 +02:00
mhajas
d266165f63 KEYCLOAK-14871 Whitelist RefreshableKeycloakSecurityContext for KeycloakPrincipal serialization 2020-10-14 16:00:39 +02:00
Martin Kanis
086f7b4696 KEYCLOAK-15450 Complement methods for accessing realms with Stream variants 2020-10-14 08:16:49 +02:00
Luca Leonardo Scorcia
0621e4ceb9 KEYCLOAK-15697 Fix config entry tooltip 2020-10-14 07:39:49 +02:00
Hynek Mlnarik
ec39569970 KEYCLOAK-15928 Fix EAP 6 configuration directory 2020-10-13 17:12:29 +02:00
Hynek Mlnarik
4541a1b250 KEYCLOAK-15907 Fix new host in SAML adapter cannot restore session 2020-10-12 13:23:03 +02:00
Elisabeth Schulz
73564c5815 KEYCLOAK-13983 Include algorithm parameters
Lazy initialization of additional parameters
2020-10-12 10:12:01 +02:00
Elisabeth Schulz
4c4750f1d9 KEYCLOAK-13983 Include algorithm parameters
Restore accidental change
2020-10-12 10:12:01 +02:00
Elisabeth Schulz
9143bc748f KEYCLOAK-13983 Include algorithm parameters
Include suggestions made by @mposolda to enable more generic
usage
2020-10-12 10:12:01 +02:00
Elisabeth Schulz
396fec19a8 KEYCLOAK-13983 Include algorithm parameters
Adds the capacity to add both public and secret algorithm
specific data to a PasswordCredentialModel. The default
way to create the models in maintained to minimize the change
impact for the default hash infrastructure.

Publishes the PasswordCredentialModel constructor to
ease in building such extended credential models.
2020-10-12 10:12:01 +02:00