Commit graph

24903 commits

Author SHA1 Message Date
Patrick Jennings
64824bb77f
Client type service account default type (#29037)
* Adding additional non-applicable client fields to the default service-account client type configuration.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Creating TypedClientAttribute which maps clientmodel fields to standard client type configurations.

Adding overrides for fields in TypeAwareClientModelDelegate required for
service-account client type.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Splitting client type attribute enum into 3 separate enums, representing
the top level ClientModel fields, the extended attributes through the
client_attributes table, and the composable fields on
ClientRepresentation.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Removing reflection use for client types.

Validation will be done in the RepresentationToModel methods that are responsible for the ClientRepresentation -> ClientModel create and update static methods.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

More updates

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Update client utilzes type aware client property update method.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* If user inputted representation object does not contain non-null value, try to get property value from the client. Type aware client model will return non-applicable or default value to keep fields consistent.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Cleaning up RepresentationToModel

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Fixing issue when updating client secret.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Fixing issue where created clients would not have fullscope allowed, because getter is a boolean and so cannot be null.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Need to be able to clear out client attributes on update as was allowed before and causing failures in integration tests.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Fixing issues with redirectUri and weborigins defaults in type aware clients.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Need to allow client attributes the ability to clear out values during update.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Renaming interface based on PR feedback.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Shall be able to override URI sets with an empty set.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

* Comments around fields that are primitive and may cause problems determining whether to set sane default on create.

Signed-off-by: Patrick Jennings <pajennin@redhat.com>

---------

Signed-off-by: Patrick Jennings <pajennin@redhat.com>
2024-05-02 12:22:02 +02:00
Ricardo Martin
65bdf1a604
Encode realm name in console URIs (#29102)
Before this fix console uris (including the client redirect uris) did not contain the url encoded realm name and therefore were invalid.

closes #25807

Signed-off-by: Philip Sanetra <code@psanetra.de>
Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: Philip Sanetra <code@psanetra.de>
Co-authored-by: rmartinc <rmartinc@redhat.com>
2024-05-02 10:30:06 +02:00
Erik Jan de Wit
879fe082dd
add login2 to start script (#29002)
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-04-30 13:34:36 -04:00
Michal Hajas
4c17c6107e Merge offline and online sessions transactions
Closes #29139
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-04-30 18:03:17 +02:00
Michal Hajas
7c427e8d38 Remove offline sessions timeouts adjusters as with persistent session we have bounded caches and it is no longer necessary to adjust time in caches
Closes #29140
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-04-30 18:03:17 +02:00
Douglas Palmer
8d4d5c1c54 Remove redundant servers from the testsuite
Closes #29089

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-30 17:39:32 +02:00
Stefan Guilhen
02e2ebf258 Add check to prevent deserialization issues when the context token is not an AccessTokenResponse.
- also adds a test for the refresh token on first login scenario.

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-04-30 12:02:10 -03:00
Geoffrey Fourmis
24d9a22f49 25815 do not remove previous refresh token for federated identity
Signed-off-by: Geoffrey Fourmis <geoffrey.fourmis@gmail.com>
2024-04-30 12:02:10 -03:00
Alexander Schwartz
d69872fa11
Batch writes originating from logins/logouts for persistent sessions
All writes for the sessions are handled by a background thread which batches them.

Closes #28862

Wait for persistent-store to contain update
instead of cache which has the change immediately since it is in memory + introduce new model-test profile

Closes #29141

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2024-04-30 14:07:35 +02:00
Mark Franceschelli
98a620e227
EventsSection icons with color props should be wrapped in Icon (#28826)
* icon fixes

Signed-off-by: mfrances <mfrances@redhat.com>

* rm autogenerated space

Signed-off-by: mfrances <mfrances@redhat.com>

---------

Signed-off-by: mfrances <mfrances@redhat.com>
2024-04-30 08:05:55 -04:00
Erik Jan de Wit
878be98122
added params to config giving users context (#28769)
fixes: #28616

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-04-30 08:05:29 -04:00
Hosted Weblate
db6f35696c Update translation files
Updated by "Remove blank strings" hook in Weblate.

Translation: Keycloak/Theme base/login
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baselogin/

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
2024-04-30 11:36:06 +02:00
Alexander Schwartz
1695af377c Translated using Weblate (German)
Translation: Keycloak/Theme base/login
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baselogin/de/

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2024-04-30 11:36:06 +02:00
Robin
c649ebdbac Translated using Weblate (German)
Translation: Keycloak/Account UI
Translate-URL: https://hosted.weblate.org/projects/keycloak/account-ui/de/

Translated using Weblate (German)

Translation: Keycloak/Account UI
Translate-URL: https://hosted.weblate.org/projects/keycloak/account-ui/de/

Translated using Weblate (German)

Translation: Keycloak/Account UI
Translate-URL: https://hosted.weblate.org/projects/keycloak/account-ui/de/

Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
2024-04-30 11:36:06 +02:00
Thomas Darimont
1e668da601 Translated using Weblate (German)
Translation: Keycloak/Theme base/email
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseemail/de/

Translated using Weblate (German)

Translation: Keycloak/Theme base/login
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baselogin/de/

Translated using Weblate (German)

Translation: Keycloak/Theme base/admin
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/de/

Translated using Weblate (German)

Translation: Keycloak/Theme base/account
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseaccount/de/

Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-04-30 11:36:06 +02:00
rmartinc
8042cd5d4f Set client in the context for docker protocol
Fix to execute again the docker test
Closes #28649

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-04-30 10:17:17 +02:00
Erik Jan de Wit
9e10cec665
only render when ui when feature is enabled (#29101)
fixes: #29057

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-04-30 08:58:45 +02:00
Alexander Schwartz
99cb437dc7 Fix product name usage for downstream documentation
Closes #29154

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-29 18:05:00 +02:00
Pedro Igor
51352622aa Allow adding realm users as an organization member
Closes #29023

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-04-29 08:37:47 -03:00
Alexander Schwartz
d55a8b0b17 Run validation of email addresses only for new and changed email addresses
Closes #29133

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-29 07:38:26 -03:00
Pedro Ruivo
17a700b6b9 Use cache.compute() method to improve the replace retry loop
Closes #29073

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-04-29 12:24:33 +02:00
mruzicka
ae1aaef96c
Avoid re-creating required action comparator (#29122)
closes #29130 

Signed-off-by: Michal Růžička <michal.ruza@gmail.com>
2024-04-29 09:18:50 +02:00
Jon Koops
a6e2ab5523 Remove jaxrs-oauth-client and OIDC servlet-filter adapters
Closes #28784

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-04-26 15:56:57 +02:00
Erik Jan de Wit
aeed5eee17
remove deprecated select (#29082)
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-04-26 09:51:22 +02:00
Douglas Palmer
cca660067a Remove JAAS login modules
Closes #28789

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
eae20c76bd Remove KeycloakInstalled
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>

Closes #28790
2024-04-26 09:30:35 +02:00
Douglas Palmer
b2f09feebf Remove servlet filter saml adapters
Closes #28786

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
a4a7d023a7 Remove Jetty OIDC adapter
Closes #28779

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
c5dbab2740 Remove Jetty SAML adapter
Closes #28782

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
3e13b40648 Remove Spring adapters
Closes #28780

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
bf2c97065f Remove SpringBoot adapters
Closes #28781

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
43aa10e091 Remove Tomcat OIDC adapter
Closes #28778

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-04-26 09:30:35 +02:00
Douglas Palmer
98faf6e6a0 Remove Tomcat SAML adapter
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>

Closes #28783
2024-04-26 09:30:35 +02:00
Alexander Schwartz
324da02732 Moving admin user creation to the Quarkus startup phase
Closes #29072

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-25 22:44:16 +02:00
Steven Hawkins
f42185b319
task: combine the kcreg and kcadmin modules (#28918)
closes #28904

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-25 18:08:45 +00:00
Stefan Guilhen
d34e700fef Update server-spi-private/src/main/java/org/keycloak/organization/OrganizationProvider.java
Co-authored-by: Vlasta Ramik <vramik@users.noreply.github.com>
2024-04-25 12:38:20 -03:00
Stefan Guilhen
bfabc291cc 28843 - Introduce filtered (and paginated) searches for organizations
Closes #28843

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-04-25 12:38:20 -03:00
Stefan Guilhen
8fa2890f68 28818 - Reintroduce search by name for subgroups
Closes #28818

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-04-25 12:06:07 -03:00
Steven Hawkins
a3d67a2b64
fix: add / clean labels on community images (#28760)
closes: #24414

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-25 11:48:13 +02:00
Peter Zaoral
86b280349b
Make PropertyMapper to use Keycloak options' default values (#29030)
* improved a condition in PropertyMapper.java




Related to: #28856

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-04-25 10:57:28 +02:00
Weblate (bot)
d6f453f0d6
Update translation files (#29070)
Updated by "Cleanup translation files" hook in Weblate.

Translation: Keycloak/Admin UI
Translate-URL: https://hosted.weblate.org/projects/keycloak/admin-ui/

Signed-off-by: Hosted Weblate <hosted@weblate.org>
2024-04-25 10:13:41 +02:00
Weblate (bot)
0f3ce238e4
Translations update from Hosted Weblate (#29056)
* Translated using Weblate (German)

Translation: Keycloak/Theme base/email
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseemail/de/

* Translated using Weblate (Dutch)

Translation: Keycloak/Account UI
Translate-URL: https://hosted.weblate.org/projects/keycloak/account-ui/nl/

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-24 22:31:03 +00:00
Thomas Darimont
59f12faebd
Improve german translation for user federation in admin ui (#28814) (#28816)
Fixes #28814

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-04-24 22:17:18 +02:00
agagancarczyk
b8cdd81718
Replaced tooltip for adding a translations to an attribute with Info Alert (#29051)
* replaced tooltip with info alert

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

* replaced tooltip with info alert

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

---------

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
Co-authored-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-04-24 19:50:11 +01:00
Stan Silvert
c4d82d4d41
Add help text for bruteForceModeHelpText (#29031)
* Add help text for bruteForceModeHelpText

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Add translations for notBefore and setToNow

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2024-04-24 14:19:05 -04:00
Jon Koops
b24d81c846
Upgrade dependencies to latest version (#29012)
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-04-24 15:36:20 +01:00
vramik
c56f062416 Typo in Organization table
Closes #29054

Signed-off-by: vramik <vramik@redhat.com>
2024-04-24 11:23:44 -03:00
Martin Bartoš
fd6bde4df7
NoClassDefFoundError for Apache XML and EAP8 (#28438)
Fixes #24878

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-04-24 12:07:12 +02:00
Erik Jan de Wit
f6a393252a
fix default value when stringyfy is on (#29042)
fixes: #28979

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-04-24 11:40:29 +02:00
Alexander Schwartz
82893df3b5 Fix duplicate admin message keys
Closes #29035

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-04-24 09:32:10 +02:00