Pavel Drozd
|
070bb9bf6a
|
Merge pull request #4318 from mhajas/KEYCLOAK-3297
KEYCLOAK-3297 Add test for Access-Control-Expose-Headers
|
2017-07-31 12:59:32 +02:00 |
|
Bill Burke
|
6b991b850e
|
change role name
|
2017-07-28 16:20:23 -04:00 |
|
Bill Burke
|
852e9274d4
|
Merge remote-tracking branch 'upstream/master'
|
2017-07-28 16:15:53 -04:00 |
|
Bill Burke
|
db9b1bcb21
|
token exchange
|
2017-07-28 16:15:39 -04:00 |
|
Hynek Mlnarik
|
a955364f0e
|
KEYCLOAK-4189 Update ConcurrencyTest
|
2017-07-28 13:00:14 +02:00 |
|
mposolda
|
07e2136b3b
|
KEYCLOAK-4187 Added UserSession support for cross-dc
|
2017-07-27 22:32:58 +02:00 |
|
Marek Posolda
|
dd6a7b23c3
|
Merge pull request #4350 from hmlnarik/KEYCLOAK-4446-Failed-to-process-response-when-reject-consent-with-turned-on-encryption
KEYCLOAK-4446 Do not encrypt SAML status messages
|
2017-07-26 15:31:54 +02:00 |
|
Hynek Mlnarik
|
3c537f5f28
|
KEYCLOAK-4446 Do not encrypt SAML status messages
SAML status messages are not encryptable per Chapter 6 of
saml-core-2.0-os.pdf. Only assertions, attributes, base ID and name ID
can be encrypted.
|
2017-07-26 11:22:56 +02:00 |
|
Hynek Mlnarik
|
8d81a4a2e4
|
KEYCLOAK-5236
|
2017-07-26 11:22:05 +02:00 |
|
Hynek Mlnarik
|
c7046b6325
|
KEYCLOAK-4189 Preparation for cross-DC SAML testing
|
2017-07-25 09:44:36 +02:00 |
|
Bill Burke
|
11ff5a05e9
|
KEYCLOAK-5205
|
2017-07-18 11:03:01 -04:00 |
|
Bill Burke
|
7406a095b9
|
Merge remote-tracking branch 'upstream/master'
|
2017-07-17 17:56:09 -04:00 |
|
Bill Burke
|
876edc0186
|
...
|
2017-07-17 17:55:59 -04:00 |
|
Bill Burke
|
b10e7b8c31
|
Merge pull request #4323 from patriot1burke/master
KEYCLOAK-5152
|
2017-07-14 15:35:48 -04:00 |
|
Bill Burke
|
f68754290f
|
KEYCLOAK-5152
|
2017-07-14 14:14:38 -04:00 |
|
Stian Thorgersen
|
badba7adaf
|
KEYCLOAK-5143 Run auth-server-wildfly profile on Travis (#4317)
|
2017-07-14 07:01:54 +02:00 |
|
Bill Burke
|
b0a33c9765
|
KEYCLOAK-5155
|
2017-07-13 14:51:27 -04:00 |
|
mhajas
|
b86079c589
|
KEYCLOAK-3297 Add test for Access-Control-Expose-Headers
|
2017-07-13 14:40:43 +02:00 |
|
mposolda
|
3fca731395
|
KEYCLOAK-5136 Improve browser refresh button after switch to different flow
|
2017-07-11 13:03:18 +02:00 |
|
Marek Posolda
|
d2274fa49f
|
Merge pull request #4311 from mposolda/master
KEYCLOAK-5061 Process correct initial flow when action expired
|
2017-07-11 07:23:07 +02:00 |
|
Pedro Igor
|
7e7d67464e
|
Merge pull request #4308 from pedroigor/KEYCLOAK-5140
[KEYCLOAK-5140] - GroupPolicyManagementTest fails with mssql and oracle
|
2017-07-10 18:04:19 -03:00 |
|
mposolda
|
936efe872a
|
KEYCLOAK-5061 Process correct initial flow when action expired
|
2017-07-10 22:52:54 +02:00 |
|
mposolda
|
7be2c55f61
|
KEYCLOAK-5061 Better error messages when action expired
|
2017-07-10 19:50:28 +02:00 |
|
Pedro Igor
|
dac381058c
|
[KEYCLOAK-5140] - GroupPolicyManagementTest fails with mssql and oracle
|
2017-07-10 11:54:58 -03:00 |
|
Marek Posolda
|
48eaebf1c3
|
Merge pull request #4293 from TeliaSoneraNorge/KEYCLOAK-5139
KEYCLOAK-5139 refresh token does not work with pairwise subject ident…
|
2017-07-10 11:21:34 +02:00 |
|
Martin Hardselius
|
5b2e390f57
|
Update refresh token test for deleted user
Instead of disabling the user under test, the test will now correctly
delete the user under test.
|
2017-07-10 10:20:41 +02:00 |
|
Pavel Drozd
|
50424b2ad3
|
Merge pull request #4284 from vramik/KEYCLOAK-5133
KEYCLOAK-5133 Fix FineGrainAdminUnitTest when impersonation is disabled
|
2017-07-10 08:04:23 +02:00 |
|
Pedro Igor
|
65251748c7
|
[KEYCLOAK-5148] - Create authorization settings when creating a new client using a config file
|
2017-07-05 18:19:00 -03:00 |
|
Pedro Igor
|
4b7c61111c
|
Merge pull request #4288 from pedroigor/KEYCLOAK-5135
[KEYCLOAK-5135] - Wrong comparison when checking for duplicate resources during creation
|
2017-07-05 08:22:23 -03:00 |
|
Martin Hardselius
|
8cb8678525
|
KEYCLOAK-5139 refresh token does not work with pairwise subject identifiers
|
2017-07-05 12:32:43 +02:00 |
|
Stian Thorgersen
|
c95aace6e0
|
KEYCLOAK-5141 Return '*' in Cors requests when '*' is in list of permitted origins. Stop caching well-known information as it can change. (#4290)
|
2017-07-05 09:25:21 +02:00 |
|
Stian Thorgersen
|
eba8dac47d
|
KEYCLOAK-4536 Add test to check behavior with file redirect URI (#4291)
|
2017-07-05 09:08:13 +02:00 |
|
Pedro Igor
|
e1622006c3
|
[KEYCLOAK-5135] - More tests for resource mgmt
|
2017-07-04 16:45:06 -03:00 |
|
Stian Thorgersen
|
9a9f4137e5
|
KEYCLOAK-4556 KEYCLOAK-5022 Only cache keycloak.js and iframe if specific version is requested (#4289)
|
2017-07-04 21:18:34 +02:00 |
|
Stan Silvert
|
32b16717a7
|
KEYCLOAK-4234: Link to app in acct mgt doesn't use root url (#4285)
* KEYCLOAK-4234: Link to app in acct mgt not use root url
* Add tests.
|
2017-07-04 07:01:58 +02:00 |
|
vramik
|
41011a95e1
|
KEYCLOAK-5133 Fix FineGrainAdminUnitTest when impersonation is disabled
|
2017-07-03 11:49:46 +02:00 |
|
Bill Burke
|
999dff353c
|
Merge remote-tracking branch 'upstream/master'
|
2017-06-29 17:37:45 -04:00 |
|
Bill Burke
|
f5389b0e17
|
don't clean up properly
|
2017-06-29 17:36:45 -04:00 |
|
vramik
|
6ba3687b76
|
KEYCLOAK-5114 Fix UsersTest on auth-server-wildfly (#4271)
|
2017-06-29 14:39:59 +02:00 |
|
Stian Thorgersen
|
620bea3553
|
Merge pull request #4270 from stianst/KEYCLOAK-5107
KEYCLOAK-5107 Fix FineGrainAdminUnitTest and IllegalAdminUpgradeTest …
|
2017-06-29 08:54:59 +02:00 |
|
Stian Thorgersen
|
c9bc321d2a
|
Merge pull request #4269 from stianst/dockerdockerdocker
KEYCLOAK-3592 Docker auth implementation
|
2017-06-29 07:23:47 +02:00 |
|
Stian Thorgersen
|
74fe9249d5
|
Merge pull request #4216 from machielg/master
KEYCLOAK-5026 Store credentials
|
2017-06-29 06:52:16 +02:00 |
|
Stian Thorgersen
|
9f814c6cf1
|
KEYCLOAK-5107 Fix FineGrainAdminUnitTest and IllegalAdminUpgradeTest on auth-server-wildfly
|
2017-06-29 06:46:21 +02:00 |
|
Josh Cain
|
89fcddd605
|
KEYCLOAK-3592 Docker auth implementation
|
2017-06-29 06:37:34 +02:00 |
|
Hynek Mlnarik
|
5e16a32f86
|
KEYCLOAK-5106 Fix BasicSamlTest on auth-server-wildfly
|
2017-06-28 20:47:43 +02:00 |
|
Stian Thorgersen
|
e964b156cc
|
Merge pull request #4264 from stianst/KEYCLOAK-5074
KEYCLOAK-5074 Allow updating client secret through client registratio…
|
2017-06-28 11:40:04 +02:00 |
|
Stian Thorgersen
|
ce4506f367
|
Merge pull request #4261 from hmlnarik/KEYCLOAK-4377-null
KEYCLOAK-4377
|
2017-06-28 08:21:20 +02:00 |
|
Stian Thorgersen
|
1220d7f898
|
KEYCLOAK-5074 Allow updating client secret through client registration service
|
2017-06-28 08:11:51 +02:00 |
|
Hynek Mlnarik
|
a3ccac2012
|
KEYCLOAK-4377
|
2017-06-27 14:34:47 +02:00 |
|
Stian Thorgersen
|
4be0e36306
|
Merge pull request #4208 from ASzc/KEYCLOAK-4758
KEYCLOAK-4758
|
2017-06-27 11:35:43 +02:00 |
|
Stian Thorgersen
|
56c5996aff
|
Merge pull request #4259 from stianst/abstractj-KEYCLOAK-4444
KEYCLOAK-4444
|
2017-06-27 10:44:30 +02:00 |
|
Machiel Groeneveld
|
7849191ec7
|
Merge branch 'master' into master
|
2017-06-27 10:27:07 +02:00 |
|
Bruno Oliveira
|
361ab1c988
|
[KEYCLOAK-4444] Allow sending test email
|
2017-06-27 08:38:36 +02:00 |
|
Stian Thorgersen
|
b4d39ca061
|
KEYCLOAK-4984 Don't update client registration access token on read
|
2017-06-27 08:29:03 +02:00 |
|
Bill Burke
|
b771960e21
|
fix log file
|
2017-06-26 12:36:43 -04:00 |
|
Bill Burke
|
bc05560d4d
|
Merge remote-tracking branch 'upstream/master'
|
2017-06-26 11:41:12 -04:00 |
|
Bill Burke
|
3855b5c0a3
|
admin console work
|
2017-06-26 11:40:56 -04:00 |
|
Bill Burke
|
28b3ef9aa9
|
admin console work
|
2017-06-26 11:40:32 -04:00 |
|
Bill Burke
|
22987bb90b
|
Merge pull request #4250 from mposolda/RHSSO-1027
KEYCLOAK-5085 Easy fix to just handle the exception
|
2017-06-26 10:04:02 -04:00 |
|
Hynek Mlnarik
|
955cbc76d7
|
KEYCLOAK-5030 Change action tokens cache type to distributed
|
2017-06-26 10:11:53 +02:00 |
|
Bill Burke
|
f1807aead4
|
impersonate
|
2017-06-25 11:28:37 -04:00 |
|
mposolda
|
756d996a4a
|
KEYCLOAK-5085 RHSSO-1027 Fix to handle the exception thrown from alternative flow
|
2017-06-23 19:13:43 +02:00 |
|
Bill Burke
|
3ee86fedc7
|
Merge remote-tracking branch 'upstream/master'
|
2017-06-23 09:57:35 -04:00 |
|
Bill Burke
|
39dea4b078
|
restricting admin role mapping
|
2017-06-22 16:51:46 -04:00 |
|
Pavel Drozd
|
58e5f41415
|
Merge pull request #4210 from vramik/KEYCLOAK-4983
KEYCLOAK-4983 export authorization test with multiple roles
|
2017-06-22 09:36:26 +02:00 |
|
Pavel Drozd
|
a7fbcaaef4
|
Merge pull request #4211 from vramik/KEYCLOAK-5027
KEYCLOAK-5027 Add possibility to attach debugger to jboss based servers
|
2017-06-22 09:34:58 +02:00 |
|
Stian Thorgersen
|
6f731dfee9
|
Merge pull request #4118 from skjolber/feature/KEYCLOAK-3056-verify-signature-2
Some adjustments for KEYCLOAK-3056 / PR #3893
|
2017-06-22 08:44:32 +02:00 |
|
Marek Posolda
|
ab7a0c2252
|
Merge pull request #4248 from mposolda/client-initial-access-db
KEYCLOAK-4631 Move ClientInitialAccessModel from userSession model to…
|
2017-06-22 06:27:25 +02:00 |
|
Bill Burke
|
d08ddade2e
|
merge
|
2017-06-21 17:43:54 -04:00 |
|
Bill Burke
|
52e40922bc
|
removal
|
2017-06-21 17:42:57 -04:00 |
|
Bill Burke
|
f1132ffabe
|
Merge pull request #4175 from mrezai/fix-pkce-s256-code-challenge
KEYCLOAK-4956: Fix incorrect PKCE S256 code challenge generation
|
2017-06-21 17:04:31 -04:00 |
|
Bill Burke
|
8c82201add
|
Merge pull request #4224 from pedroigor/KEYCLOAK-3168
[KEYCLOAK-3168] - Group-Based Access Control
|
2017-06-21 17:03:34 -04:00 |
|
mposolda
|
fc61a4e89f
|
KEYCLOAK-4631 Move ClientInitialAccessModel from userSession model to realm model
|
2017-06-21 22:14:20 +02:00 |
|
Hynek Mlnarik
|
bf43ccf6c1
|
KEYCLOAK-4993 Fix intermittent failures in ComponentsTest testConcurrencyWithChildren
... and seems that the KEYCLOAK-5020 as well
|
2017-06-21 15:19:23 +02:00 |
|
Marek Posolda
|
be5291f710
|
Merge pull request #4242 from mposolda/master
KEYCLOAK-4438 Disable kerberos flow when provider removed
|
2017-06-21 11:54:50 +02:00 |
|
Marek Posolda
|
3fd6fc250d
|
Merge pull request #4240 from hmlnarik/KEYCLOAK-4189-Cross-DC-testing
KEYCLOAK-4189 Infinispan cache and channel statistics for Cross-DC testing
|
2017-06-21 10:22:43 +02:00 |
|
mposolda
|
e91dd011c5
|
KEYCLOAK-4438 Disable kerberos flow when provider removed
|
2017-06-21 09:38:20 +02:00 |
|
mposolda
|
32cf8b7cad
|
KEYCLOAK-3316 Fixes for OAuth2 requests without 'scope=openid'
|
2017-06-20 17:17:43 +02:00 |
|
Hynek Mlnarik
|
2e2d15be9f
|
KEYCLOAK-4189 Infinispan cache and channel statistics for Cross-DC-testing
|
2017-06-20 12:48:08 +02:00 |
|
mposolda
|
f363dbcad0
|
KEYCLOAK-4327 Switching language on User consent gives error
|
2017-06-20 09:21:41 +02:00 |
|
Bill Burke
|
57cb46148f
|
tests
|
2017-06-19 11:21:59 -04:00 |
|
Bill Burke
|
a994af9010
|
remove scope
|
2017-06-16 11:26:43 -04:00 |
|
Pedro Igor
|
5028c05cc2
|
[KEYCLOAK-3168] - Export and import tests
|
2017-06-14 09:33:59 -03:00 |
|
Martin Hardselius
|
60942346f3
|
KEYCLOAK-4924: pairwise clients get duplicate subs in tokens
|
2017-06-14 10:47:40 +02:00 |
|
vramik
|
97509ebf89
|
KEYCLOAK-4983 export authorization test with multiple roles
|
2017-06-14 10:38:47 +02:00 |
|
Pedro Igor
|
169280b6a1
|
[KEYCLOAK-3168] - Group-Based Access Control
|
2017-06-13 19:05:44 -03:00 |
|
Hynek Mlnarik
|
a0f3a6469f
|
KEYCLOAK-4189 - Cross DC testing
|
2017-06-12 11:14:28 +02:00 |
|
Pedro Igor
|
fd8a3dccaf
|
Merge pull request #4214 from pedroigor/KEYCLOAK-4904
[KEYCLOAK-4904] - Authorization Audit - Part 1
|
2017-06-09 17:17:30 -03:00 |
|
Pedro Igor
|
f12cef2c86
|
[KEYCLOAK-4904] - Authorization Audit - Part 1
|
2017-06-09 13:31:06 -03:00 |
|
Machiel Keizer-Groeneveld
|
80f8815b9a
|
KEYCLOAK-5026 Store credentials
Credentials are stored with user creation if they are present in the UserRepresentation.
|
2017-06-09 09:32:33 +02:00 |
|
Stian Thorgersen
|
6cccd66162
|
Merge pull request #4192 from hokuda/KEYCLOAK-4980
KEYCLOAK-4980 SAML adapter should return 403 when unauthenticated Aja…
|
2017-06-09 04:40:26 +02:00 |
|
Hisanobu Okuda
|
9135ba7c40
|
KEYCLOAK-4980 SAML adapter should return 401 when unauthenticated Ajax client accesses
|
2017-06-08 23:36:25 +09:00 |
|
Bill Burke
|
94528976d4
|
console work
|
2017-06-07 16:29:43 -04:00 |
|
vramik
|
7381ec456a
|
KEYCLOAK-5027 Add possibility to attach debugger to jboss based servers
|
2017-06-07 14:35:33 +02:00 |
|
Bill Burke
|
536a57a514
|
ui for permission reference
|
2017-06-05 19:52:51 -04:00 |
|
Alex Szczuczko
|
5d88c2b8be
|
KEYCLOAK-4758 Update Encode class using latest resteasy. Use encodeQueryParamAsIs instead of encodeQueryParam when encoding key=value pairs for URI query sections. Also fix a few callers who were relying on the bad behaviour of queryParam.
|
2017-06-05 16:24:38 -06:00 |
|
Pedro Igor
|
9be9e30ad6
|
Merge pull request #4206 from pedroigor/KEYCLOAK-4983
[KEYCLOAK-4983] - Authz settings export of role base policy generates json where are just role-names
|
2017-06-05 16:19:58 -03:00 |
|
Pedro Igor
|
23887f4031
|
Fixing tests and more client policy tests
|
2017-06-05 11:26:33 -03:00 |
|
Pedro Igor
|
3760f2753b
|
[KEYCLOAK-4983] - Authz settings export of role base policy generates json where are just role-names
|
2017-06-02 20:09:33 -03:00 |
|
Pedro Igor
|
d0f505455d
|
[KEYCLOAK-4991] - Allow clients to limit the number of permission in a RPT when using entitlements
|
2017-06-02 19:06:40 -03:00 |
|