keycloak-scim

Author	SHA1	Message	Date
Alexander Schwartz	27ecf7f00f	Use session level cache and avoid resolving by ID too often Closes #12381	2022-08-30 16:42:49 +02:00
Alexander Schwartz	bb6b5abfa1	Remove Infinispan workarounds after upgrading to 13.x Closes #13962	2022-08-30 07:32:19 -03:00
Tero Saarni	4f199c7245	Fix compilation errors with Eclipse Java compiler	2022-08-29 19:33:12 +02:00
Pedro Igor	2cc4b54404	Do not cache policies if they no longer exist (#12797 ) Closes #12657 Co-authored-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2022-08-25 13:52:30 +02:00
Michal Hajas	05b9e6d59e	Upgrade Infinispan to 13.0.10.Final (#13910 ) Closes #12306	2022-08-25 13:09:34 +02:00
Arnaud Martin	af0d97e534	Delete broker links for federated users when an identity provider is deleted Closes #13731	2022-08-25 08:24:09 +02:00
mposolda	254483bc5d	Use separate transactions for each bulk update of offline sessions in PersisterLastSessionRefreshStore to avoid deadlocks closes #13684	2022-08-23 13:52:11 +02:00
David Anderson	ce1331f550	Remove bouncycastle dependency from keycloak-services (#13489 ) Closes #12857 Co-authored-by: mposolda <mposolda@gmail.com>	2022-08-22 15:43:59 +02:00
Alexander Schwartz	bd926b8fd0	Remove warning from StoragePropertyMappers about the deployment state version seed It duplicates the logic in the provider and is incomplete. A follow-up issue will investigate how a provider can defer a configuration option. Closes #13807	2022-08-17 13:55:05 -03:00
Alexander Schwartz	801b20e037	Fix running clusteraware scheduled tasks in Wildfly after legacy migration As the parent class is in another module, the protected field "task" is not accessible from the lambda. Closes #13396	2022-08-17 13:54:34 -03:00
Sebastian Schuster	1445646e77	Fixed n+1 query retrieving user with brief user representation by allowing explicit eager caching of user attributese	2022-08-11 10:51:07 +02:00
Martin Kanis	57f2f4654a	Add limit for authSessions per rootAuthSession in map storage	2022-08-10 12:56:37 +02:00
Michal Hajas	ec808d28bb	Remove possibility to start embedded HotRod server in hotrod-map module Closes #13247	2022-08-05 21:08:38 +02:00
Alexander Schwartz	8470a30446	Introduce CLI parameter to set the deployment state version seed Closes #12710	2022-07-27 20:10:17 +02:00
Michal Hajas	8ed9ce29d1	Enable near-caching for HotRod store Closes #13303	2022-07-27 14:09:48 +02:00
Michal Hajas	3589778a10	Add possibility to configure HotRod storage in Quarkus distribution Closes #12617	2022-07-26 14:13:39 +02:00
Michal Hajas	eb1f31e9dd	Optimize user-client session relationship for HotRod storage Closes #12818	2022-07-26 09:00:13 +02:00
Douglas Palmer	c00514d659	Support for post_logout_redirect_uris in OIDC client registration (#12282 ) Closes #10135	2022-07-25 10:57:52 +02:00
Alexander Schwartz	a14501dd77	Remove concurrently removed elements from the result Closes #13245	2022-07-22 08:25:15 +02:00
Alexander Schwartz	cb81a17611	Disable Infinispan for map storage and avoid the component factory when creating a realm independent provider factory Provide startup time in UserSessionProvider independent of Infinispan, cleanup code that is not necessary for the map storage as it isn't using Clustering. Move classes to the legacy module. Closes #12972	2022-07-22 08:20:00 +02:00
Pedro Igor	98ac3829d6	Remove KeycloakIntegratorProvider Closes #13233	2022-07-21 09:05:59 -03:00
Stefan Guilhen	e9c55f45e5	Enable action token JPA provider in map-storage-jpa profile Closes #13139	2022-07-20 16:30:20 -03:00
Alexander Schwartz	4d19099c66	Workarounds to make Listeners and non-autocommit work on Quarkus Closes #13200	2022-07-20 12:06:06 +02:00
Alexander Schwartz	d30646b1f6	Refactor object locking for UserSessions Closes #12717	2022-07-19 17:47:33 -03:00
Martin Kanis	c8a6846ee0	Remove offline sessions when deleting a realm	2022-07-19 16:40:22 +02:00
Alexander Schwartz	f490638971	Fall back to standard Liquibase locking As DBLockProvider is "none" for the Map storage providers, there is no locking provided by DB Lock provider. Liquibase's classic lock provider has issues that need to be tackled in a follow-up issue, see https://github.com/liquibase/liquibase/issues/1311 Closes #13130	2022-07-19 10:45:31 +02:00
Alexander Schwartz	247cf0d09a	Assure that a second thread waits for the first thread to process the database changes Closes #13130	2022-07-19 10:45:31 +02:00
Alexander Schwartz	b959e5c32a	Prevent logging changeset on the console for Quarkus Closes #13126	2022-07-15 17:12:22 +02:00
Alexander Schwartz	30b41d02b4	Move non-map-storage related classes to new package Closes #13081	2022-07-15 09:46:29 -03:00
Pedro Igor	f6a2b334d1	Integrate the JPA map store (#13097 ) Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>	2022-07-14 17:47:51 -03:00
Vlasta Ramik	ec853a6b83	JPA map storage: User / client session no-downtime store (#12241 ) Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Closes #9666	2022-07-14 12:07:02 -03:00
Alexander Schwartz	d4c97bd3a9	Choose alternatives for CockroachDB for referenced computed columns (#12991 )	2022-07-13 15:31:21 -03:00
Pedro Igor	b80731decf	Remove any legacy provider from runtime when running the new store (#12963 )	2022-07-13 07:30:14 -03:00
Michal Hajas	34d8629477	Convert ClientSessionIdleTimeout from seconds to milliseconds before … (#13048 )	2022-07-13 07:29:52 -03:00
Pedro Igor	5b48d72730	Upgrade Resteasy v4 Closes #10916 Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2022-07-11 12:17:51 -03:00
Michal Hajas	0f86427dd0	Make user->client sessions relationship consistent Closes #12817	2022-07-11 08:42:28 -03:00
Michal Hajas	5f7f4ad850	Reflect SingleUseObject store objectKey changes to HotRod implementation Closes #12480	2022-07-08 10:34:31 -03:00
Michal Hajas	cbb88ed75d	Store enums as Integers in HotRod store Closes #12502	2022-07-08 10:34:17 -03:00
Alexander Schwartz	29a501552e	Disable the JpaUserFederatedStorageProvider when map storage is enabled Closes #12895	2022-07-07 10:47:42 -03:00
Alexander Schwartz	d91a5eb99f	Move methods from UserStorageUtil to LegacyRealmModel It is better suited to take methods removed from RealmModel earlier. Closes #12805	2022-07-07 09:57:17 -03:00
Stefan Guilhen	dc88dd5286	Users Map JPA implementation (#12871 )	2022-07-05 11:19:31 -03:00
Alexander Schwartz	098d4dda0e	Split PublicKeyStorageProvider (#12897 ) Split PublicKeyStorageProvider - Extract clearCache() method to separate interface and move it to the legacy module - Make PublicKeyProvider factories environment dependent - Simple map storage for public keys that just delegates Resolves #12763 Co-authored-by: Martin Kanis <mkanis@redhat.com>	2022-07-05 09:57:51 -03:00
Alexander Schwartz	63614b1240	Fixing broken build after merging conflicting PRs. This was introduced via #9852 when #11844 was merged. Closes #12898	2022-07-04 15:57:25 -03:00
Stefan Guilhen	007fa1f374	Single Use Objects Map JPA implementation Closes #9852	2022-07-04 10:05:51 -03:00
Alexander Schwartz	4b20e90292	Move session persistence package to legacy-private module Also, disabling the jpa session persister when map storage is enabled. Closes #12712	2022-07-04 10:05:26 -03:00
Alexander Schwartz	9143d8bd0e	Store composite roles within its own table for JPA Map storage. This keeps the JSON column small, enables searching by child, and allows modification of the role's children without loading all children. Closes #11844	2022-07-01 14:13:24 -03:00
Jon Koops	06d1b4faab	Restore enum variant of ResourceType This reverts commit `3b5a578934`.	2022-06-30 12:20:51 -03:00
Tero Saarni	3170efd3ad	Removed unused imports with double semicolons	2022-06-30 09:34:30 -03:00
Michal Hajas	9b889b44b4	Make HotRod schema no-downtime upgradable - Split one schema into schema per area - Check schema stored in the server and update it only when necessary Closes #9113	2022-06-29 20:57:19 +02:00
Alexander Schwartz	a191d7eb3c	Moving CachedObject to the legacy modules Closes #12656	2022-06-29 20:04:32 +02:00
Alexander Schwartz	b581c203e3	Moving ClientScopeStorageProviderModel to the legacy modules Closes #12656	2022-06-29 20:04:32 +02:00
Alexander Schwartz	ddeab744d0	Moving RoleStorageProviderModel to the legacy modules Closes #12656	2022-06-29 20:04:32 +02:00
Alexander Schwartz	05f8f3038f	Moving GroupStorageProviderModel to the legacy modules Closes #12656	2022-06-29 20:04:32 +02:00
Alexander Schwartz	692ce0cd91	Moving ClientStorageProvider to the legacy modules This prepares the move of CachedObject and CacheableStorageProviderModel Closes #12531 fixup! Moving ClientStorageProvider to the legacy modules	2022-06-29 20:04:32 +02:00
Alexander Schwartz	05dcc188bb	Move over caching related interfaces to the legacy module Closes #12531	2022-06-29 20:04:32 +02:00
vramik	3b5a578934	Change enum ResourceType to interface with String constants Closes #12485	2022-06-29 13:35:11 +02:00
vramik	91335ebaad	Change returning type to Set in MapClientEntity when obtaining protocol mappers Closes #11136	2022-06-28 21:47:56 +02:00
Alexander Schwartz	4b499c869c	Encapsulate MigrationModelManager in legacy module Closes #12214	2022-06-28 10:53:04 +02:00
Michal Hajas	e0efdcae22	Make sure HotRod store does not return empty delegate Closes #12304	2022-06-27 15:10:18 +02:00
Pedro Igor	c972ec4383	Allow to conditionally bootstrap the default persistence unit Closes #12662	2022-06-27 08:26:37 -03:00
vramik	c058983655	Enable optimistic locking feature on auth sessions Closes #12242	2022-06-27 09:29:27 +02:00
Patrick Jennings	d048bf22fb	Do not try to delete from related federated user tables when deleting a service account linked user.	2022-06-22 22:52:16 +02:00
Stefan Guilhen	cc65d5491d	Filter out expired entities in JpaMapKeycloakTransaction Closes #12623	2022-06-22 11:35:50 +02:00
Stefan Guilhen	7d96f3ad5a	Events Map JPA implementation Closes #9667	2022-06-21 13:53:48 +02:00
Alexander Schwartz	ae7c01b719	Moving the CacheRealmProvider interface to the legacy module	2022-06-21 08:53:06 +02:00
Alexander Schwartz	7855b93390	Moving the UserCache interface to the legacy module Co-Authored-By: hmlnarik@redhat.com	2022-06-21 08:53:06 +02:00
Alexander Schwartz	896afc4644	rename SingleEntityCredentialManager to SubjectCredentialManager, part 2	2022-06-21 08:53:06 +02:00
Alexander Schwartz	cb0c881821	rename SingleEntityCredentialManager to SubjectCredentialManager	2022-06-21 08:53:06 +02:00
Alexander Schwartz	84d21f0230	for all added files in the PR, update the copyright header or add it if it was missing	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	f1ca325b6b	Add map datastore provider	2022-06-21 08:53:06 +02:00
Alexander Schwartz	d41764b19b	Inline deprecated methods in legacy code	2022-06-21 08:53:06 +02:00
Alexander Schwartz	08bbb1fb92	Move LDAP REST Endpoints to LDAP package - Thus remove implicit dependency on services on the legacy modules - Disable tests for LDAP/Kerberos that won't work when map storage is enabled	2022-06-21 08:53:06 +02:00
Alexander Schwartz	1bc6133e4e	redirect calls to userLocalStorage from legacy modules (federation, ldap, sssd, kerberos)	2022-06-21 08:53:06 +02:00
Alexander Schwartz	a109e28be7	moving some functionality around imports	2022-06-21 08:53:06 +02:00
Alexander Schwartz	f89b8c356d	Moving logic to create a user from a representation to the legacy module	2022-06-21 08:53:06 +02:00
Alexander Schwartz	a43321c720	Moving logic to create service accounts in local storage only to legacy module	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	e396d0daa1	Renaming SingleUserCredentialManager and UserModel.getUserCredentialManager(): - class SingleUserCredentialManager to SingleEntityCredentialManager - method UserModel.getUserCredentialManager() to credentialManager() Renaming of API without "get" prefix to make it consistent with other APIs like for example with KeycloakSession	2022-06-21 08:53:06 +02:00
Alexander Schwartz	14a369a8cc	Added LegacySessionSupport SPI While some methods around onCache() are still called from the legacy code, all other methods log a warning with a stacktrace.	2022-06-21 08:53:06 +02:00
Alexander Schwartz	6f287e7ded	Avoid using methods on UserCredentialStoreManager	2022-06-21 08:53:06 +02:00
Alexander Schwartz	bc8fd21dc6	SingleUserCredentialManager moving in - UserStorageManager now handles authentication for old Kerberos+LDAP style - new getUserByCredential method in MapUserProvider would eventually do the same.	2022-06-21 08:53:06 +02:00
Alexander Schwartz	82094d113e	Move User Storage SPI, introduce ExportImportManager	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	703e868a51	Preparation for moving User Storage SPI - Introduction of new AdminRealmResource SPI - Moving handler of /realm/{realm}/user-storage into model/legacy-service - session.users() and userStorageManager() moved refers legacy module IMPORTANT: Broken as UserStorageSyncManager is not yet moved	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	36f76a37ad	Move realms, clients, groups, roles, clientscopes into legacy module - Introduces Datastore SPI for isolating data store methods - Introduces implementation of the datastore for legacy storage - Updates DefaultKeycloakSession to leverage Datastore SPI instead of direct creating of area providers by the session	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	247ff52187	Introduce legacy datastore module and update dependencies	2022-06-21 08:53:06 +02:00
Michal Hajas	0719d3e49b	Remove EXPIRATION fields and add expired entities filtering to all queries automatically Closes #12563	2022-06-20 21:45:32 +02:00
Michal Hajas	22f9b0fee3	Unify expiration handling for SingleUseObjects Closes #12205	2022-06-20 21:45:32 +02:00
Michal Hajas	781183e551	Enable indexing for ResourceServerEntity Closes #12533	2022-06-20 10:17:19 +02:00
vramik	1b3a76d0af	Do not persist client sessions of transient user sessions Closes #12357	2022-06-15 10:54:23 +02:00
vramik	df41f233d5	Introduce unique index for enums stored by storages Closes #12277	2022-06-15 09:12:10 +02:00
Alexander Schwartz	361a813d81	Keep a list of model instances in the JPA map session. This allows removing them from the persistence context on bulk delete. Closes #12384	2022-06-09 12:39:04 -03:00
Martin Kanis	df72cf72f2	Hot Rod map storage: Single-use (action token) no-downtime store	2022-06-06 16:01:18 +02:00
rmartinc	5332a7d435	Issue #9194 : Client authentication fails when using signed JWT, if the JWA signing algorithm is not RS256	2022-06-06 12:07:09 +02:00
vramik	c31d37ddf1	Each JpaRootEntity should have its own current schema version Closes #12272	2022-06-02 17:16:34 +02:00
Michal Hajas	09c0a69a8f	Add HotRod no downtime store for events Closes #9676	2022-06-02 13:30:19 +02:00
Martin Kanis	75754eca6b	Extract timestamp from Expirable entity	2022-06-01 13:03:31 +02:00
vramik	be28e866b9	JPA map storage: Authorization services no-downtime store Closes #9669	2022-05-30 21:05:34 +02:00
Michal Hajas	9b36ea0269	Add cascade removal of client session on user session removal for HotRod Closes #12096	2022-05-30 09:58:54 +02:00
Michal Hajas	1a98765fb7	Fix cascade removal of client session on user session removal for CHM Closes #12146	2022-05-30 09:58:54 +02:00
Alexander Schwartz	063960aaa3	Deferred indexes are not available on CockroachDB, therefore, only use them on PostgreSQL Closes #12176	2022-05-27 08:51:20 -03:00
Marek Posolda	eed944292b	Make script providers working on JDK 17 (#11322 ) Closes #9945	2022-05-27 12:28:50 +02:00
Michal Hajas	bc59fad85b	Unify way how expirable entities are handled in the new store Closes #11947	2022-05-26 13:17:27 +02:00
Martin Kanis	0cb3c95ed5	Map storage: Single-use objects (action token)	2022-05-25 16:47:10 +02:00
Pedro Igor	26c87af9f4	Avoiding unnecessary roundtrips to the database when evaluating permissions Closes #12148 Co-authored-by: Vlasta Ramik <vramik@users.noreply.github.com>	2022-05-25 12:23:15 +02:00
vramik	ad3da7f5e4	JPA map storage: disable failing on unknown properties when deserializing the object Closes #12173	2022-05-25 09:31:40 +02:00
vramik	24171d2e47	Rename providers from jpa-map-storage to jpa Closes #12098	2022-05-23 16:47:51 +02:00
vramik	0c3aa597f9	JPA map storage: test failures after cache was disabled Closes #12118	2022-05-23 13:01:30 +02:00
Alexander Schwartz	d1a92680f5	Optimize querying sub-groups of groups Closes #12080	2022-05-19 14:46:53 +02:00
Martin Kanis	0e9f2badff	Make all fields in HotRod store optional	2022-05-18 20:50:47 +02:00
Alexander Schwartz	1a95a58893	Graceful handling if composite roles have been removed concurrently. Closes #12003	2022-05-17 13:29:15 +02:00
Michal Hajas	0bda7e6038	Introduce map event store with CHM implementation Closes #11189	2022-05-17 12:57:35 +02:00
vramik	e1eb9d6d64	Replace equals with == when comparing SearchableFields in JpaModelCriteriaBuilder and LdapModelCriteriaBuilder Closes #11843	2022-05-16 21:51:38 +02:00
Michal Hajas	b86f205cda	Make KeycloakServer runnable with external Infinispan server Closes #12011 Closes #12014	2022-05-16 21:50:35 +02:00
Martin Kanis	0d6bbd437f	Merge single-use token providers into one Fixes first part of: #11173 * Merge single-use token providers into one * Remove PushedAuthzRequestStoreProvider * Remove OAuth2DeviceTokenStoreProvider * Delete SamlArtifactSessionMappingStoreProvider * SingleUseTokenStoreProvider cleanup * Addressing Michal's comments * Add contains method * Add revoked suffix * Rename to SingleUseObjectProvider	2022-05-11 13:58:58 +02:00
Michal Hajas	d3b43a9f59	Make sure there is always Realm or ResourceServer when searching for authz entities Closes #11817	2022-05-11 07:20:01 -03:00
Alexander Schwartz	bfab03b837	Throw an IllegalArgumentException once a ClassCastException occurs. Closes #11775	2022-05-11 09:19:09 +02:00
Michal Hajas	6b5c417742	Add HotRod store for authorization services Closes #9679	2022-05-06 15:31:38 +02:00
Martin Kanis	00ccc78360	Add index to entityVersion for all HotRod entities	2022-05-05 17:42:13 +02:00
Michal Hajas	fc974fc019	Update composite roles on child role removal Closes #11769	2022-05-05 15:18:18 +02:00
Alexander Schwartz	e0d7ad1be5	Leverage the equal() method on the wrapped entity instead of creating a string. Closes #11764	2022-05-03 13:29:12 +02:00
vramik	0d83b51b20	Enhance Map authz entities with REALM_ID (ResourceServer with CLIENT_ID) searchable field Co-authored-by Michal Hajas <mhajas@redhat.com> Closes #10883	2022-05-03 12:56:27 +02:00
Sven-Torben Janus	0efa4afd49	Evaluate composite roles for hardcoded LDAP roles/groups Closes: 11771 see also KEYCLOAK-18308	2022-05-02 14:13:37 +02:00
Alexander Schwartz	cd20f45b8a	Ensure that values of attributes are unique in the database While this is already ensured on the Java level when using a Set, database inconsistencies as occurred with Hibernate could lead to follow-up problems that are hard to analyze (as seen in #11666). Closes #11671	2022-04-28 12:04:05 +02:00
vramik	2ecf250e37	Deletion of all objects when realm is being removed Closes #11076	2022-04-28 11:09:17 +02:00
vramik	5248815091	Disable infinispan realm and user cache for map storage tests Closes #11213	2022-04-25 09:38:49 +02:00
Stefan Guilhen	0f147ccdc0	Enlist JPA transaction in JpaMapStorageProvider.getStorage Closes #11230 Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2022-04-23 08:19:33 +02:00
Hynek Mlnarik	0ce5dfc09c	Remove dependency of map on services Fixes: 8903	2022-04-22 17:27:21 +02:00
Alexander Schwartz	90155862f3	LdapMapStorageProvider to use a full inline class for MapStorage Closes #11373	2022-04-22 17:25:33 +02:00
Stefan Guilhen	0c7a8c8684	Login Failures Map JPA implementation Closes #9664	2022-04-22 10:47:04 +02:00
vramik	3d1118223b	New Storage: Testsuite fails when JPA Map storage is enabled for groups Closes #11369	2022-04-21 11:14:35 +02:00
Stefan Guilhen	f48d468641	Increase column size for keys that refer to entities that can be stored in different storages (foreign keys) Closes #11329	2022-04-21 08:50:37 +02:00
Stefan Guilhen	b29b27d731	Ensure code does not rely on a particular format for the realm id or component id	2022-04-20 14:40:38 +02:00
Stefan Guilhen	ae90b232ff	Realms Map JPA implementation Closes #9661	2022-04-20 14:40:38 +02:00
Pedro Igor	c5e4dc8cec	Associated permissions should only add resource type permissions if the resource is an instance (#11220 ) Closes #11148	2022-04-19 09:10:14 +02:00
Pedro Igor	52d205ca91	Allow exposing some initial provider config options via web site (#10572 ) * Allow exposing some initial provider config options via web site Co-authored-by: Stian Thorgersen <stian@redhat.com> Closes #10571 * Include type to provider options, and hide build-icon column as it's not relevant Co-authored-by: stianst <stianst@gmail.com>	2022-04-19 08:01:42 +02:00
Bruno Oliveira da Silva	f9d4566723	Replace the cryptographic algorithm by SHA-2 The static code scanning analysis detected the usage of MD5 as part of [ MapDeploymentStateProviderFactory](`a6dd9dc0f1/model/map/src/main/java/org/keycloak/models/map/deploymentState/MapDeploymentStateProviderFactory.java (L58-L58)`). Even though we could not find any ways of exploiting the code, we should avoid its usage considering that MD5 is not collision-resistant. Resolves #11290	2022-04-18 07:10:04 -03:00
Martin Kanis	a2d7cd7a5c	Hot Rod map storage: User / client session no-downtime store	2022-04-14 15:34:22 +02:00
msvechla	820ab52dce	Add support for filtering by enabled attribute on users count endpoint (#9842 ) Resolves #10896	2022-04-13 13:57:22 -03:00
Alexander Schwartz	5c1a8d401d	Store time as seconds as a long in map store This avoids overflowing the value in 2038. Closes #10960	2022-04-12 14:22:44 +02:00
Alexander Schwartz	a6dd9dc0f1	Avoiding AvlPartitionFactory and using JdbmPartitionFactory for the embedded LDAP to work around unstable tests. Fix for #11171 didn't turn out to cover the root cause. Also improved transaction handling in LDAP Map storage. Closes #11211	2022-04-12 09:12:21 +02:00
Michal Hajas	6e181a51d5	Add test-jar dependency only if maven.test.skip property is false Closes #11192	2022-04-11 10:37:18 -03:00
Alexander Schwartz	5c810ad0e5	Avoid short-lived connections for ApacheDS to avoid messages around "ignoring the message MessageType UNBIND_REQUEST" The comment in LdapRequestHandler.java in ApacheDS notes just before discarding an unbind request: "in some cases the session is becoming null though the client is sending the UnbindRequest before closing". Also implementing a retry logic for all remaining errors regarding LDAP. Closes #11171	2022-04-11 10:03:15 +02:00
Pedro Igor	834a276767	NPE when caching policies based on scopes without a resource Closes #11180	2022-04-08 08:43:08 -03:00
Stefan Guilhen	d952669f69	Add clearUpdatedFlag so the flag in associated protocol mappers can be cleared as well Closes #11118	2022-04-08 09:36:55 +02:00
Michal Hajas	1f2ebf4cba	Add HotRod no downtime store for Realms Closes #9670	2022-04-08 09:36:01 +02:00
Martin Kanis	3bb4081bd1	Convert user / client session entities into interface	2022-04-08 09:34:01 +02:00
Michal Hajas	f4f5928727	Add type to filters in MapResourceStore Closes #11154	2022-04-07 15:10:20 -03:00
Joerg Matysiak	235f0f3963	Add index to admin events table to improve performance of admin event view Closes #10625	2022-04-06 09:12:35 +02:00
Martin Kanis	395bd447f2	Hot Rod map storage: Login failure no-downtime store	2022-04-01 20:43:18 +02:00
vramik	8ff768b33b	JPA map storage: Authentication session no-downtime store Closes #9665	2022-03-30 13:43:35 +02:00
Martin Kanis	3356e8b098	Convert login failure entities into interface	2022-03-29 18:40:53 +02:00
Stefan Guilhen	d8bee26ec8	Implement AbstractClientEntity.isUpdated to account for changes in associated protocol mappers. Closes #10927	2022-03-29 18:35:28 +02:00
Martin Kanis	e493b08fa7	Add expiration field to root authentication session	2022-03-23 07:47:47 +01:00
Michal Hajas	99c06d1102	Authorization services refactoring Closes: #10447 * Prepare logical layer to distinguish between ResourceServer id and client.id * Reorder Authz methods: For entities outside of Authz we use RealmModel as first parameter for each method, to be consistent with this we move ResourceServer to the first place for each method in authz * Prepare Logical (Models/Adapters) layer for returning other models instead of ids * Replace resourceServerId with resourceServer model in PermissionTicketStore * Replace resourceServerId with resourceServer model in PolicyStore * Replace resourceServerId with resourceServer model in ScopeStore * Replace resourceServerId with resourceServer model in ResourceStore * Fix PermissionTicketStore bug * Fix NPEs in caching layer * Replace primitive int with Integer for pagination parameters	2022-03-22 20:49:40 +01:00
keycloak-bot	c71aa8b711	Set version to 999-SNAPSHOT (#10784 )	2022-03-22 09:22:48 +01:00
Martin Kanis	0faf3987f6	Hot Rod map storage: Authentication session no-downtime store	2022-03-22 09:05:52 +01:00
Martin Kanis	2394855f48	Add merge tasks optimization to ConcurrentHashMapKeycloakTransaction.delete	2022-03-21 16:45:48 +01:00
Michal Hajas	c18a682f50	Do not store undefined values in store Closes #10744	2022-03-17 16:44:33 +01:00
Bruno Oliveira da Silva	8aa394ca6b	Update to Liquibase 4.8.0 Closes #10678 Co-authored-by: Stefan Guilhen <sguilhen@redhat.com> Co-authored-by: Martin Kanis <mkanis@redhat.com>	2022-03-16 13:46:31 -03:00
Alexander Schwartz	8d1a47f768	adding missing log4j configuration to prevent errors in the log Closes #10613	2022-03-14 10:12:49 -03:00
Pedro Igor	ad865e75c1	Change the flush mode to auto and fixing how entities are checked if they are loaded in the EM Closes #10411	2022-03-11 12:21:52 -03:00
Martin Kanis	1a4d7c297a	Change authentication sessions map to set (#10596 )	2022-03-10 08:45:24 +01:00
Alexander Schwartz	18f391d8c4	Fix spelling error in field and classname It's always a converter, unless electricity is involved. Closes #10573	2022-03-09 08:28:52 -03:00
Alexander Schwartz	3c3f003a38	LDAP Map storage support to support read/write for roles Closes #9929	2022-03-08 12:03:10 +01:00
Michal Hajas	f77ce315bb	Disable Authz caching for new storage tests Closes #10500	2022-03-07 10:22:55 -03:00
Michael Parlee	722ce950bf	Improve user search performance Removes bulder.lower() from user search queries on email and username. Closes #8893	2022-03-04 14:15:14 +01:00
Martin Kanis	6c64d465ea	Convert authentication session entities into interface	2022-03-04 10:50:18 +01:00
Alexander Schwartz	ebfc24d6c1	Ensure that Infinispan shutdowns correctly at the end of the tests. Report any exceptions within another thread as a test failure. Adding additional information like a thread dump when it doesn't shutdown as expected. Closes #10016	2022-03-04 10:47:01 +01:00
giacomo.altiero	91d37b5686	Single offlineSession imported in Infinispan with correctly calculated lifespan and maxIdle parameters Close #8776	2022-03-01 14:51:29 +01:00
Stefan Guilhen	af7a040d54	Ensure Liquibase validation is performed once per area Closes #10132	2022-02-25 08:48:34 +01:00
Martin Kanis	6249e34177	Hot Rod map storage: Client scope no-downtime store	2022-02-24 13:30:27 +01:00
Michal Hajas	b4281468d0	Convert Map Realm Entities into interfaces Closes #9736	2022-02-24 13:23:19 +01:00
Vlasta Ramik	aa6a131b73	Change String client.id to ClientModel client in ResourceServerStore Closes #10442	2022-02-24 12:46:26 +01:00
Luca Graf	febb447919	KEYCLOAK-19297 Use real 'external' client object id to store AuthenticatedClientSession in UserSession object, so that the client session can be looked by the client object id in further requests.	2022-02-18 12:42:59 +01:00
vramik	589606b1c1	JPA map storage: Groups no-downtime store Closes #9660	2022-02-15 08:54:41 +01:00
keycloak-bot	d9f1a9b207	Set version to 18.0.0-SNAPSHOT (#10165 )	2022-02-11 21:28:06 +01:00
Stefan Guilhen	442d9bae2e	Add CockroachDB support in the new JPA storage Closes #10039	2022-02-11 18:04:02 +01:00
Martin Kanis	26ac142b99	Hot Rod map storage: Roles no-downtime store	2022-02-11 14:31:34 +01:00
Michal Hajas	b50b8f883b	Implement HotRod storage for Users Closes #9671	2022-02-11 10:20:36 +01:00
vramik	8a8d59a124	Add prefix "kc_" to all existing tables Closes #10101	2022-02-11 08:59:23 +01:00
Alexander Schwartz	de7be3d65d	Handling JPA Map storage case when parent has been deleted Closes #10033	2022-02-09 14:43:50 +01:00
Stefan Guilhen	7c1d6eae43	Upgrade to Liquibase 4.6.2 * Upgrade to Liquibase 4.6.2 * Add valid checksums to changesets to allow migration to newest liquibase * Update liquibase licenses Co-authored-by: Martin Kanis <mkanis@redhat.com>	2022-02-09 12:56:46 +01:00
vramik	5701c6c85a	JPA delegates can throw NoResultException when entity doesn't have any attributes Closes #10067	2022-02-09 09:18:54 +01:00
vramik	844c210d86	Create common parent for Jpa*AttributeEntity Closes #10071	2022-02-08 22:09:21 +01:00
Alexander Schwartz	45df1adba9	Update generics in JPA Map storage to avoid casting and compiler warnings Closes #10060	2022-02-08 17:38:53 +01:00
Alexander Schwartz	de2c1fbb45	Update the entityVersion also for downgrades, as it needs to match the JSON and auxiliary tables. Will trigger also when changes to a child occur, like for example when attributes change. Closes #9716	2022-02-07 12:14:05 +01:00
Martin Kanis	0471ec4941	Cross-site validation for lazy loading of offline sessions & Switch default offline sessions to lazy loaded	2022-02-03 21:43:47 +01:00
vramik	7bd0dbb3ce	Client Scopes: Added ModelIllegalStateException to handle lazy loading exception. Closes #9645	2022-02-02 21:49:40 +01:00
vramik	165791b1d7	Client Scopes: Ensure that parent's version ID is incremented when an attribute changes Closes #9874	2022-02-02 21:49:22 +01:00
Alexander Schwartz	9d46b45a9c	Ensure that parent's version ID is incremented when an attribute changes. This is necessary to allow the optimistic locking functionality to work as expected when changing only attributes on an entity. Closes #9874	2022-02-01 20:33:10 +01:00
vramik	13e02d5f09	JPA map storage: Client scope no-downtime store Closes #9663	2022-02-01 20:26:00 +01:00
Michal Hajas	c648e121ed	Convert authz entities into interfaces Closes #9740	2022-01-31 13:51:56 +01:00
Alexander Schwartz	df7ddbf9b3	Added ModelIllegalStateException to handle lazy loading exception. Closes #9645	2022-01-31 10:10:41 +01:00
Alexander Schwartz	2b81e62b6b	Adding workaround for deadlock in tests for Infinispan 12.1.7 Closes #9648	2022-01-28 15:29:50 +01:00
bal1imb	9621d513b5	KEYCLOAK-18727 Improve user search query	2022-01-26 17:03:05 +01:00
Alexander Schwartz	9e257d4a01	Added warning when storage contains multi-valued attributes and Keycloak model doesn't support them. Closes #9714	2022-01-26 15:40:00 +01:00
Michal Hajas	de161d02b9	Store updated flag in the entity, not in the delegate Closes #9774	2022-01-26 15:24:42 +01:00
Alexander Schwartz	e2ac7b38f4	Adding missing database constraints for clients in JPA map storage. This should ensure consistency for the store even in the event of concurrent creation of clients by multiple callers. Closes #9610	2022-01-23 20:34:28 +01:00
vramik	873a44459a	Convert MapClientScopeEntity to interface Closes #9657	2022-01-23 16:56:25 +01:00
Martin Kanis	ddcabe61b2	KEYCLOAK-19571 Add indices to HotRodClientEntity fields	2022-01-20 17:46:47 +01:00
vramik	7b89d151c1	KEYCLOAK-18565 JPA roles no-downtime store	2022-01-20 12:02:35 +01:00
Guus der Kinderen	213b1f5042	Closes #9562 : Add DB index for UserEntity getRealmUserByServiceAccount	2022-01-20 09:52:54 +01:00
vramik	61fbb2fb2e	JPA-Map storage might loose writes due to missing locking mechanism Closes #9411	2022-01-20 09:06:14 +01:00
vramik	22bcdcb630	MapRoleProvider could return also client roles when searching for realm roles Closes #9587	2022-01-19 16:39:59 +01:00
Konstantinos Georgilakis	db0b36460f	KEYCLOAK-19148 correct getGroupsCountByNameContaining of MapGroupProvider	2022-01-15 20:15:27 +01:00
Stefan Guilhen	2fd1593abf	Set order of LiquibaseDBLockProviderFactory to 1 - makes it the default provider when no provider is explicitly configured - avoid NPE at server startup when other providers are present and none is set as default	2022-01-13 08:30:25 +01:00
Dominik DS	93419a1797	KEYCLOAK-19289 check if values to set is not null (#8426 ) Closes #9529	2022-01-12 09:22:01 +01:00
Michal Hajas	ab9413b48c	Store user nested entities in Set instead of Map	2022-01-10 15:57:45 +01:00
Michal Hajas	9849df3757	Convert MapUserEntity to interface	2022-01-10 15:57:45 +01:00
Alexander Schwartz	9b18688ce2	fixes #9427 regex pattern is now pre-compiled	2022-01-08 17:30:54 +01:00
Martin Kanis	9d5355b7ad	Upgrade Infinispan to 12.1.7.Final	2022-01-08 17:29:09 +01:00
Hynek Mlnařík	d39eb95705	Introduce per-field delegation of entities	2022-01-05 14:06:45 +01:00
vramik	dd3d7be2b4	Make JpaClientMapStorage generic Closes #9244	2022-01-05 07:04:05 +01:00
andreaTP	4817e152e3	[ref: 8889] Annotation processor support for Java > 11	2022-01-04 21:26:07 +01:00
Stefan Guilhen	b12830ae4f	8947 - Add liquibase extension to handle JSON operations	2022-01-04 20:58:32 +01:00
Michal Hajas	96b2669a00	Refactoring of constructors for generated entities	2021-12-22 16:00:10 +01:00
vramik	009ca27a38	Make JsonbType generic Closes #9165	2021-12-20 17:40:23 +01:00
keycloak-bot	9f3d4a7d42	Set version to 17.0.0-SNAPSHOT	2021-12-20 10:50:39 +01:00
vramik	44184ab0cb	MapRoleProvider uses ILIKE operator when EQ operator should be used Closes #9130	2021-12-16 10:31:43 +01:00
vramik	b4d720d615	Fix DB Migration Script to 13.0.0 Closes #9138	2021-12-15 14:00:29 +01:00
vramik	c6312e3308	KEYCLOAK-18717 KEYCLOAK-18716 KEYCLOAK-18715 KEYCLOAK-18713 KEYCLOAK-18712 KEYCLOAK-18711 JPA clients no-downtime store	2021-12-15 13:32:49 +01:00
vramik	848b170a96	Use DeepCloner.Builder().constructorDC in cases when possible Closes #9141	2021-12-15 10:28:08 +01:00
vramik	e61da278ba	When ternary conditional operator uses primitive type it could throw NPE in some cases Closes #9137	2021-12-15 10:25:54 +01:00
Michal Hajas	5aa9a09b20	Closes #8969 - Add Groups HotRod storage	2021-12-13 18:12:19 +01:00
Hynek Mlnarik	8e03942e87	Enhance available tree operations Fixes #9022	2021-12-13 18:05:45 +01:00
Hynek Mlnarik	3c7e5c8440	Create delegates and empty instances in DeepCloner Fixes: #9030	2021-12-13 18:04:48 +01:00
Michal Hajas	fc237a8b63	Introduce ancestor interface for entities with attributes	2021-12-10 10:54:44 +01:00
Michal Hajas	7aaa33739b	KEYCLOAK-19570 Add annotation processing for HotRod clients	2021-12-08 10:00:00 +01:00
Hynek Mlnarik	3602873df2	Introduce model-entity util methods Fixes: #9025	2021-12-07 16:51:56 +01:00
vramik	783eecf612	Closes #8808 - Convert MapRoleEntity to interface	2021-12-01 15:50:26 +01:00
Kashif Saadat	d9bf511406	KEYCLOAK-19052: Optimised (split) the clearExpiredEvents query to reduce execution time	2021-11-30 22:25:55 +01:00
Michal Hajas	a5c3b83443	Closes #8807 - Make MapGroupEntity generated	2021-11-30 21:44:18 +01:00
Michal Hajas	158640d1f3	Closes #8954 - move Hot Rod classes to hotRod package	2021-11-30 11:52:16 +01:00
vramik	1adce39e1d	8886 Add alwaysDisplayInConsole searchable client field	2021-11-24 13:15:17 +01:00
vramik	6b8890f5dd	KEYCLOAK-19525 Inconsistent creation of default-roles-<realm>	2021-11-23 21:30:12 +01:00
Martin Bartoš	1e1a6779be	Issue 8814: Replace deprecated hamcrest-all dependencies	2021-11-23 13:56:28 +01:00
Michal Hajas	4291caff3c	Fix Delegate bug	2021-11-16 19:47:59 +01:00
Michal Hajas	2f9a5aae0f	KEYCLOAK-19028 Add HotRod Map storage implementation	2021-11-11 14:10:00 +01:00
Alec Henninger	cec6a8a884	KEYCLOAK-19700: Attempt to reuse denied device authorization code results in server error	2021-11-08 11:37:51 +01:00
Hynek Mlnarik	58d403cf24	KEYCLOAK-19726 Fix return types of ModelCriteriaBuilder methods	2021-11-05 16:39:40 +01:00
vramik	439e2e4288	KEYCLOAK-19763 fix MapClientProvider.getClientByClientId	2021-11-04 11:48:07 +01:00
Martin Kanis	9c287aff1f	KEYCLOAK-19709 Remove MapStorage.createCriteriaBuilder	2021-11-03 20:05:29 +01:00
Hynek Mlnarik	6966e0cfe9	KEYCLOAK-19749 Optimize DefaultModelCriteria creation	2021-11-03 17:42:26 +01:00
Hynek Mlnarik	877ae96590	KEYCLOAK-18854 Introduce storage-independent ModelCriteriaBuilder	2021-10-29 19:21:45 +02:00
Martin Kanis	af97849feb	KEYCLOAK-19030 Implement HotRodConnectionProvider	2021-10-27 14:07:19 +02:00
Hynek Mlnarik	53f02a50f6	KEYCLOAK-19562 Introduce generic trees	2021-10-25 13:28:48 +02:00
Michal Hajas	cfbb7f5553	KEYCLOAK-19593 Remove CRUD operations from MapStorage interface Signed-off-by: Michal Hajas <mhajas@redhat.com>	2021-10-21 17:01:33 +02:00
Hynek Mlnarik	8ee992e638	KEYCLOAK-19482 Generate map entity cloners	2021-10-18 13:14:14 +02:00
Martin Kanis	d069ec7949	KEYCLOAK-18737 Show sessions functionality does not work consistently Co-authored-by: Pavel Bezdienezhnykh Co-authored-by: Martin Kanis <mkanis@redhat.com>	2021-10-13 14:04:14 +02:00
vramik	dacf28af84	KEYCLOAK-19536 Removal of client creates new instance of provider for each client role	2021-10-13 13:05:18 +02:00
Hynek Mlnarik	675e1b0941	KEYCLOAK-19505 Generate map entity delegates	2021-10-12 14:04:21 +02:00
Bart Monhemius	5b0986e490	[KEYCLOAK-18891] Add support for searching users by custom user attributes Users can now be searched by custom attributes using 'q' in the query parameters. The implementation is roughly the same as search clients by custom attributes.	2021-10-12 13:08:47 +02:00
Hynek Mlnarik	576292a662	KEYCLOAK-19480 Introduce MapProtocolMapperEntity	2021-10-11 14:05:32 +02:00
Michal Hajas	6e591305f9	KEYCLOAK-19481 Make Id and RealmId mutable fields	2021-10-08 20:18:58 +02:00
Hynek Mlnarik	3abf9283a8	KEYCLOAK-19374 Create implementation based on annotation processor Use of boxed types as started in `009d4ca445` is finalized here to enable storing data in a map. MapClientEntity methods are reordered for the sake of grouping the collection-based properties together and understanding the connections between those.	2021-10-07 10:54:25 +02:00
Martin Kanis	30b3caee9f	KEYCLOAK-18445 Add support for cross-site model tests	2021-10-06 14:37:06 +02:00
Michal Hajas	da0c945475	KEYCLOAK-18940 Add support for searching composite roles	2021-10-01 12:41:19 +02:00
Daniel Fesenmeyer	0a2f8f5b63	KEYCLOAK-17887 fix endpoint for creating or updating realm localization texts for a given locale (UnsupportedOperation was thrown because RealmAdapter tried to change unmodifiable map): - fix RealmAdapter to create a new map instead of trying to change unmodifiable map - only provide POST endpoints for creating or updating the texts (to have the endpoints consistent with other Admin API endpoints) - add tests	2021-09-30 15:07:56 +02:00
stianst	f471a110cd	KEYCLOAK-19408 Better client secrets	2021-09-29 18:19:43 +02:00
Martin Kanis	d606da9065	KEYCLOAK-18981 Infinispan: prevent fetching all sessions from remotes	2021-09-29 14:53:07 +02:00
Sven-Torben Janus	7c0d10130e	KEYCLOAK-18981 Infinispan: prevent fetching all sessions from remotes	2021-09-24 17:34:01 +02:00
Pedro Igor	10e425315f	[KEYCLOAK-19274] - Avoid loading queries from properties at runtime for Dist.X	2021-09-24 09:26:43 +02:00
Daniel Fesenmeyer	339224578e	KEYCLOAK-10603 adjust assignments to roles (user-role and group-role assignments, client-scope and client "scope mappings"): allow assignments of roles which are already indirectly assigned (e.g. by composite role) - extend RoleMapperModel with method hasDirectRole(RoleModel), which only checks for direct assignment in contrast to the existing method hasRole(RoleModel) - extend ScopeContainerModel with method hasDirectScope(RoleModel), which only checks for direct scope mapping in contrast to the existing method hasScope(RoleModel) - use the new hasDirectRole and hasDirectScope methods to check whether a role is in the "available" list and whether it can be assigned (previously, the hasRole method was used for this purpose) - add hint to UI that available roles contain effectively assigned roles which are not directly assigned - adjust and extend tests	2021-09-22 13:56:29 +02:00
Luca Graf	2c22ccbf97	KEYCLOAK-19286 Use client storage provider id to construct client StorageId, so that a valid 'external' client id will be generated.	2021-09-20 19:43:20 +02:00
Dominik	4090114398	KEYCLOAK-16246 Revert changes from workaround made in KEYCLOAK-16244 after upgrading to quarkus 2 Also fixed a small type in testclass. This reverts commit `9b2f2015f7`.	2021-09-16 15:42:48 -03:00
rmartinc	47484c1aed	KEYCLOAK-18842: deleteExpiredClientSessions very slow on MariaDB	2021-09-10 08:25:33 +02:00
vramik	d216f8f748	KEYCLOAK-19104 Add custom ForeignKeySnapshotGenerator	2021-09-02 09:59:26 +02:00
Martin Kanis	6886bd6651	KEYCLOAK-18941 ExecutionException when computed future - InfinispanCacheInitializer	2021-08-05 18:28:27 +02:00
Hynek Mlnarik	2acb43a627	KEYCLOAK-18617 Fix index on client attributes	2021-08-05 15:35:55 +02:00
keycloak-bot	262ec3d031	Set version to 16.0.0-SNAPSHOT	2021-07-30 14:56:10 +02:00
Hynek Mlnarik	0cdce1340d	KEYCLOAK-18680 Always close result stream	2021-07-30 09:40:39 +02:00
Hynek Mlnarik	8889122dc1	KEYCLOAK-18845 Remove key type in map storage (simplify generics)	2021-07-23 17:04:20 +02:00
Hynek Mlnarik	07402d9aac	KEYCLOAK-18845 Remove key type in map storage (move StringKeyConvertor to CHM)	2021-07-23 17:04:20 +02:00
Hynek Mlnarik	44cd6cd5fb	KEYCLOAK-18824 Simplify MapStorageTransaction and move registerEntityForChanges to CHM transaction	2021-07-21 20:58:26 +02:00
Pedro Igor	d29d945cc4	[KEYCLOAK-18857] - Do not force default to RS256 when verifying tokens sent by clients and JWK does not hold an algorithm	2021-07-21 11:09:02 +02:00
Hynek Mlnarik	1f3650dcd9	KEYCLOAK-18815 Update MapKeycloakTransaction return types to match MapStorage	2021-07-20 21:48:27 +02:00
Hynek Mlnarik	009d4ca445	KEYCLOAK-18747 Turn MapClientEntity into interface + introduce delegates Given that the Map*Entity is turned into an interface, it makes more sense to use non-primitive types to allow for null values. This enables signalizing that an entity does not define a particular value, and builds a base for definition of instances with defaults: If a value is not present in the queried instance (i.e. is `null`), the value would be obtained from a delegate containing the defaults.	2021-07-17 15:45:46 +02:00
bal1imb	fbaeb18a5f	KEYCLOAK-18471 Added ID to admin event object.	2021-07-16 12:46:07 +02:00
mhajas	dc1c9b944f	KEYCLOAK-18370 Introduce QueryParameters	2021-07-15 13:25:31 +02:00
Daniel Fesenmeyer	a25c70784c	KEYCLOAK-18467 support unicode for realm localization texts	2021-07-15 10:30:42 +02:00
vramik	a8fdd79d1b	KEYCLOAK-17763 Inefficient call to ClientProvider.getClientsStream()	2021-07-12 11:51:15 +02:00
Hryhorii Hevorkian	2803685cd7	KEYCLOAK-18353 Implement Pushed Authorization Request inside the Keycloak Co-authored-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com> Co-authored-by: mposolda <mposolda@gmail.com>	2021-07-03 08:47:42 +02:00
Hynek Mlnarik	f15536a88c	KEYCLOAK-18635 Move classes specific to ConcurrentHashMap to chm package	2021-07-02 06:55:19 +02:00
vramik	4db2c3f570	KEYCLOAK-15572 make attributes multi-valued for map storage entities	2021-07-01 12:21:33 +02:00
vramik	2b9b50d50a	KEYCLOAK-18194 fix migration of default role when realm id contains apostrophe	2021-07-01 11:22:11 +02:00
Hynek Mlnarik	f0e777c592	KEYCLOAK-18414 Remove unnecessary id parameter from update operation	2021-07-01 11:18:53 +02:00
Hynek Mlnarik	0523dad4d5	KEYCLOAK-18414 Remove unnecessary id parameter from create operation	2021-07-01 11:18:53 +02:00
lbortoli	164f3df080	KEYCLOAK-18502 - Support for additional parameters from the backchannel authentication request and backchannel authentication callback.	2021-07-01 00:31:26 +02:00
Hynek Mlnarik	8a83ec83ac	KEYCLOAK-18589 map-storage profile for KeycloakServer	2021-06-30 20:47:17 +02:00
mhajas	b8565408ca	KEYCLOAK-17781 Make exists and notExists collection aware	2021-06-30 10:48:39 +02:00
Sebastian Rose	ca6b78b730	KEYCLOAK-18390 GroupProvider search implementation of JPA and Map delivers different results	2021-06-29 14:59:01 +02:00
Hynek Mlnarik	bfb134a6ce	KEYCLOAK-18091 Fail session loading when interrupted	2021-06-22 08:50:08 +02:00
keycloak-bot	13f7831a77	Set version to 15.0.0-SNAPSHOT	2021-06-18 10:42:27 +02:00
vramik	e3c76035b2	KEYCLOAK-18359 Default role migration is not performed correctly when empty realm id	2021-06-14 20:54:37 +02:00
Michal Hajas	d2a8a95d79	KEYCLOAK-18369 Create MapKeycloakTransaction interface	2021-06-14 08:31:59 +02:00
Václav Muzikář	9854f21ace	KEYCLOAK-18332 Client Scopes are reset to realm's default when Client is updated	2021-06-11 07:41:18 +02:00
mposolda	91865fa93e	KEYCLOAK-18368 Invalidate client session after refresh token re-use	2021-06-09 14:43:29 +02:00
vramik	95bf912dc9	KEYCLOAK-18035 Fix update client with default default scope assigned as optional	2021-06-07 16:22:55 +02:00
vramik	2bf727d408	KEYCLOAK-17753 remove KeycloakModelUtils.isClientScopeUsed method	2021-05-28 21:07:14 +02:00
Michal Hajas	4dcb69596b	KEYCLOAK-18146 Search for clients by client attribute when doing saml artifact resolution	2021-05-27 23:02:22 +02:00
Hynek Mlnarik	3d8f152787	KEYCLOAK-17747 KEYCLOAK-17754 Optimize getClients() calls	2021-05-27 22:12:56 +02:00
Martin Kanis	23aee6c210	KEYCLOAK-16616 Limit number of authSessios per rootAuthSession	2021-05-27 22:10:36 +02:00
Hynek Mlnarik	94f676cb95	KEYCLOAK-18286 Add index to client_attributes	2021-05-27 13:31:33 +02:00
Martin Kanis	1ab0d585a9	KEYCLOAK-11019 Initial support for lazy offline user-session loading Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com> Co-authored-by: Thomas Darimont <thomas.darimont@gmail.com>	2021-05-26 09:54:28 +02:00
Hynek Mlnarik	860fc4c06c	KEYCLOAK-17756 KEYCLOAK-17757 Optimize IdP-first lookup	2021-05-20 14:44:55 +02:00
Pedro Igor	a0f8d2bc0e	[KEYCLOAK-17399] - Review User Profile SPI Co-Authored-By: Vlastimil Elias <vlastimil.elias@worldonline.cz>	2021-05-20 08:44:24 -03:00
vramik	1c283cdebc	KEYCLOAK-14301 OTP secrets migrated incorrectly	2021-05-20 13:19:27 +02:00
vramik	3913526934	KEYCLOAK-18031 Update to 13.0.0 fails due to liquibase error	2021-05-20 11:29:02 +02:00
mhajas	e609949264	KEYCLOAK-17267 Add index to user attribute name and value to support user sync from ldap	2021-05-19 13:38:11 +02:00
Hynek Mlnarik	c02a706a86	KEYCLOAK-17748 Optimize validation of redirect URIs in logout endpoint Reimplementation of KEYCLOAK-17718	2021-05-18 20:31:21 +02:00
vramik	4d776cd780	KEYCLOAK-18137 Fix introduced SPI name	2021-05-18 20:30:21 +02:00
Václav Muzikář	62e6883524	KEYCLOAK-17084 KEYCLOAK-17434 Support querying clients by client attributes	2021-05-14 13:58:53 +02:00
Peter Flintholm	919899b994	KEYCLOAK-18039: Optimise offline session load on startup Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-05-13 16:26:26 +02:00
Hynek Mlnarik	8feefe94ac	KEYCLOAK-18074 Ignore server version for MySQL in ChangeLogHistoryService	2021-05-12 15:01:30 +02:00
Pedro Igor	6397671c88	[KEYCLOAK-17885] - Delete user-managed policies when removing groups	2021-05-10 16:33:23 -03:00
keycloak-bot	4b44f7d566	Set version to 14.0.0-SNAPSHOT	2021-05-06 14:55:01 +02:00
Hynek Mlnarik	98a88e3e8b	KEYCLOAK-17991 Introduce preview feature for map storage	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	253dee077e	KEYCLOAK-17830 Fix realm Map*Entity to/fromModel	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	93feae104b	KEYCLOAK-16127 Unify registerEntityForChanges	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	6d97a573e6	KEYCLOAK-17696 Make MapStorageFactory amphibian	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	e46a5484c5	KEYCLOAK-17695 Split MapStorage provider and provider factory	2021-05-06 11:38:41 +02:00
vramik	020dd530b9	KEYCLOAK-18009 Invalid role creation with oracle database	2021-05-06 09:01:42 +02:00
mposolda	20fc430be0	KEYCLOAK-17874 Server cannot be started with oracle19cRAC	2021-05-05 13:12:07 +02:00
vramik	0cecd0f33f	KEYCLOAK-17992 MSSQL not updatable	2021-05-05 13:12:07 +02:00
Hynek Mlnarik	96501760e0	KEYCLOAK-17501 Add support for map storage in WildFly	2021-05-03 16:00:30 +02:00
Joerg Matysiak	ee315ecab1	KEYCLOAK-17934 * fixed cache inconsistency when cache limit is exceeded	2021-05-03 15:50:23 +02:00
Hynek Mlnarik	32fb45eb5b	KEYCLOAK-17774 Implement equals method for work cache events Co-Authored-By: stianst <stianst@gmail.com> Co-Authored-By: Michal Hajas <mhajas@redhat.com>	2021-05-03 10:47:15 +02:00
Hynek Mlnarik	7d4255b2a1	KEYCLOAK-17871 Add support for running parallel model tests	2021-04-30 16:13:57 +02:00
Hynek Mlnarik	3e91e6f966	KEYCLOAK-17870 Fix ConcurrentModificationException upon liquibase initialization	2021-04-30 16:13:57 +02:00
Hynek Mlnarik	df4f88a0c8	KEYCLOAK-17869 Fix non-existent work cache configuration	2021-04-30 16:13:57 +02:00
Takashi Norimatsu	65c48a4183	KEYCLOAK-12137 OpenID Connect Client Initiated Backchannel Authentication (CIBA) (#7679 ) * KEYCLOAK-12137 OpenID Connect Client Initiated Backchannel Authentication (CIBA) Co-authored-by: Andrii Murashkin <amu@adorsys.com.ua> Co-authored-by: Christophe Lannoy <c4r1570p4e@gmail.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com> Co-authored-by: mposolda <mposolda@gmail.com>	2021-04-29 15:56:39 +02:00
Pedro Igor	60fac7c3c4	forcing cache encoding to avoid unnecessary byte[] conversions	2021-04-29 12:36:03 +02:00
vramik	162043beec	KEYCLOAK-17615 Move database initialization from KeycloakApplication to JpaConnectionProviderFactory	2021-04-28 13:43:48 +02:00
Martin Kanis	515bfb5064	KEYCLOAK-16378 User / client session map store Co-authored-by: Martin Kanis <mkanis@redhat.com> Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-04-28 09:09:15 +02:00
Yoshiyuki Tabata	45202bd49a	KEYCLOAK-17637 Client Scope Policy for authorization service	2021-04-26 08:58:33 -03:00
Hynek Mlnarik	ff4c0e4412	KEYCLOAK-16935 Fix liquibase to work with MySQL 8.0.23+	2021-04-21 20:20:33 +02:00
Michal Hajas	1e2db74d86	KEYCLOAK-16932 Authorization map storage	2021-04-16 17:26:16 +02:00
AlistairDoswald	8b3e77bf81	KEYCLOAK-9992 Support for ARTIFACT binding in server to client communication Co-authored-by: AlistairDoswald <alistair.doswald@elca.ch> Co-authored-by: harture <harture414@gmail.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2021-04-16 12:15:59 +02:00
Takashi Norimatsu	42dec08f3c	KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation) (#7780 ) * KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation) * support tests using auth-server-quarkus * Configuration changes for ClientPolicyExecutorProvider * Change VALUE of table REALM_ATTRIBUTES to NCLOB * add author tag * incorporate all review comments Co-authored-by: mposolda <mposolda@gmail.com>	2021-04-06 16:31:10 +02:00
vramik	185075d373	KEYCLOAK-14552 Realm Map Store	2021-03-31 15:49:03 +02:00
rmartinc	0a0caa07d6	KEYCLOAK-17215 Slowness issue while hitting /auth/admin/realms/$REALM/clients?viewableOnly=true after DELETE a role	2021-03-31 12:57:17 +02:00
vramik	c3b9c66941	KEYCLOAK-17460 invalidate client when assigning scope	2021-03-30 10:58:16 +02:00
Hynek Mlnarik	a36fafe04e	KEYCLOAK-17409 Support for amphibian (both component and standalone) provider	2021-03-25 13:28:20 +01:00
Michito Okai	298ab0bc3e	KEYCLOAK-7675 Support for Device Authorization Grant	2021-03-15 10:09:20 -03:00
Hiroyuki Wada	9d57b88dba	KEYCLOAK-7675 Prototype Implementation of Device Authorization Grant. Author: Hiroyuki Wada <h2-wada@nri.co.jp> Date: Thu May 2 00:22:24 2019 +0900 Signed-off-by: Łukasz Dywicki <luke@code-house.org>	2021-03-15 10:09:20 -03:00
Hynek Mlnarik	4946484cb6	KEYCLOAK-17377 Fix invalidation cluster tests (do not hide failures)	2021-03-11 16:14:59 +01:00
vramik	6e501946b1	KEYCLOAK-17021 Client Scope map store	2021-03-08 21:59:28 +01:00
vramik	2c64a56072	KEYCLOAK-17325 Use KeycloakMarshallUtil for writing collection for LockEntryPredicate	2021-03-06 08:39:00 +01:00
Pedro Igor	0f30b3118a	[KEYCLOAK-16676] - Client attributes should not be stored if null or empty	2021-03-03 15:37:05 +01:00
stefvdwel	11b0c23937	Reduced code duplication	2021-02-17 09:40:19 -03:00
stefvdwel	b97f5eb128	Added PermissionTicket count test.	2021-02-17 09:40:19 -03:00
stefvdwel	5a500055f6	Added permission ticket /count endpoint. Todo: testing	2021-02-17 09:40:19 -03:00
mposolda	f4b5942c6c	KEYCLOAK-16755 ClearExpiredUserSessions optimization. Rely on infinispan expiration rather than Keycloak own background task.	2021-02-04 08:49:42 +01:00
Pedro Igor	cdf0ead957	[KEYCLOAK-16780] - Allow batching writes to storage when running migration (#7717 ) Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com> Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>	2021-01-29 09:35:19 -03:00
Martin Kanis	8432513daa	KEYCLOAK-16908 Refactor UserSessionPersisterProvider	2021-01-29 09:29:00 +01:00
mposolda	99a70267d9	KEYCLOAK-16801 Improve performance of ClearExpiredEvents background task	2021-01-27 09:57:46 +01:00
Michito Okai	7f421fb20a	KEYCLOAK-16844 Create an index to support offline sessions loading	2021-01-21 22:48:54 +01:00
Hynek Mlnarik	78c05d2da2	KEYCLOAK-16118 Replace MapStorage.entrySet() with search by criteria * Add model class parameter to MapStorage * Add shortcut read(id) method to MapKeycloakTransaction	2021-01-20 16:20:56 +01:00
Hynek Mlnarik	6c07679446	KEYCLOAK-16584 Rename map to CRUD operations * rename putIfAbsent() to create(), get() to read(), put() to update(), remove() to delete() * move ConcurrentHashMapStorage to org.keycloak.models.map.storage.chm package * Add javadoc to MapStorage	2021-01-20 16:20:56 +01:00
Martin Kanis	9f580e3ed8	KEYCLOAK-15695 Streamification cleanup	2021-01-20 14:39:53 +01:00
Michal Hajas	ba8e2fef6b	KEYCLOAK-15524 Cleanup user related interfaces	2021-01-18 16:56:10 +01:00
Yoshiyuki Tabata	ab1dba5fa6	KEYCLOAK-11908 Support for conditional creating indices based on number of records	2021-01-12 09:06:27 +01:00
vramik	1402d021de	KEYCLOAK-14846 Default roles processing	2021-01-08 13:55:48 +01:00
keycloak-bot	75be33ccad	Set version to 13.0.0-SNAPSHOT	2020-12-16 17:31:55 +01:00
Stefan Guilhen	d6422e415c	[KEYCLOAK-16508] Complement methods for accessing user sessions with Stream variants	2020-12-15 19:52:31 +01:00
Michal Hajas	8e376aef51	KEYCLOAK-15847 Add MapUserProvider	2020-12-10 08:57:53 +01:00
Martin Kanis	f6be378eca	KEYCLOAK-14556 Authentication session map store	2020-12-07 20:48:59 +01:00
Stefan Guilhen	edef93cd49	[KEYCLOAK-16232] Streamify the UserCredentialStore and UserCredentialManager interfaces	2020-12-07 19:48:35 +01:00
Stefan Guilhen	73d0bb34c4	[KEYCLOAK-16232] Replace usages of deprecated collection-based methods with the respective stream variants	2020-12-07 19:48:35 +01:00
Jan Lieskovsky	833bf98643	[KEYCLOAK-15692] Upgrade to Wildfly "21.0.1.Final" Base fixes: * [KEYCLOAK-15780] Upgrade Keycloak to Wildfly 21.0.0.Beta1 / Wildfly Core 13.0.0.Beta6 * [KEYCLOAK-16031] Upgrade Keycloak to Wildfly 21.0.0.Final / Wildfly Core 13.0.1.Final * [KEYCLOAK-16442] Upgrade Keycloak to Wildfly 21.0.1.Final / Wildfly Core 13.0.3.Final Other (dependent) fixes: * [KEYCLOAK-15408] Deprecate former Wildfly and Wildfly Core versions in Arquillian's testsuite pom.xml file as part of the upgrade script * [KEYCLOAK-15442] Update the version of 'jboss-parent' as part of the Wildfly upgrade script if necessary * [KEYCLOAK-15474] Add --verbose and --force options to the Wildfly upgrade automated script * [KEYCLOAK-15649] Update "urn:jboss:domain:infinispan:10.0" version as part of the Wildfly upgrade automated script * [KEYCLOAK-15652] Wildfly upgrade automated script - Align Python artifact version comparsion algorithm with the Maven / Java one Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2020-11-26 09:25:29 +01:00
Hynek Mlnarik	363df6cab4	KEYCLOAK-16405 Tests for storage logical layer	2020-11-25 12:16:48 +01:00
Stefan Guilhen	84df008bc2	[KEYCLOAK-16341] Make the new stream-based methods in server-spi user interfaces default instead of the collection-based versions. - this ensures that providing implementation for the collection-based methods is enough, which preserves backwards compatibility with older custom implementations. - alternative interfaces now allow new implementations to focus on the stream variants of the query methods.	2020-11-18 21:07:51 +01:00
mposolda	9b2f2015f7	KEYCLOAK-16244 RealmRealmLocalizationResourceTest fails on auth-server-quarkus	2020-11-11 14:56:31 +01:00
Pedro Igor	852c4a57ff	[KEYCLOAK-14468] - Scope permission sometimes not removed when removing scopes	2020-11-11 08:44:28 +01:00
Martin Kanis	d9029b06b9	KEYCLOAK-15889 Streamification of ProtocolMappers	2020-11-10 16:40:34 +01:00
Stefan Guilhen	aa46735173	[KEYCLOAK-15200] Complement methods for accessing users with Stream variants	2020-11-10 15:13:11 +01:00
Thomas Darimont	de20830412	KEYCLOAK-9551 KEYCLOAK-16159 Make refresh_token generation for client_credentials optional. Support for revocation of access tokens. Co-authored-by: mposolda <mposolda@gmail.com>	2020-11-06 09:15:34 +01:00
Hynek Mlnarik	8060e3b3ac	KEYCLOAK-16115 Remove need for MapStorage.keySet() and values()	2020-11-03 08:46:42 +01:00
Hynek Mlnarik	f0bdcdd204	KEYCLOAK-16113 Add JPA event test	2020-10-30 21:08:27 +01:00
Christoph Leistert	e131de9574	KEYCLOAK-14855 Added realm-specific localization texts which affect texts in every part of the UI (admin console / login page / personal info page / email templates). Also new API endpoints and a new UI screen to manage the realm-specific localization texts were introduced. Co-authored-by: Daniel Fesenmeyer <daniel.fesenmeyer@bosch.io>	2020-10-30 08:02:43 -03:00
vramik	785f2e78bc	KEYCLOAK-14977 create MapRoleProvider	2020-10-30 08:15:22 +01:00
Martin Kanis	b494b8bb44	KEYCLOAK-16034 Not scroll-able event queries for postgres and mssql	2020-10-30 08:10:00 +01:00
Hynek Mlnarik	925f089d62	KEYCLOAK-16077 Remove need for MapStorage.replace	2020-10-29 15:40:47 +01:00
mposolda	4f93dc8376	KEYCLOAK-11693 Clean startup log output in Keycloak.X	2020-10-23 09:33:54 -03:00
Martin Kanis	f5c52345fc	KEYCLOAK-16033 Revert Jpa*EventQuery to getResultList	2020-10-22 13:33:30 +02:00
Daniel Fesenmeyer	de8d2eafa3	KEYCLOAK-14781 Extend Admin REST API with search by federated identity - Add parameters idpAlias and idpUserId to the resource /{realm}/users and allow it to be combined with the other search parameters like username, email and so on - Add attribute "federatedIdentities" to UserEntity to allow joining on this field - extend integration test "UserTest"	2020-10-22 08:51:26 +02:00
mhajas	4556e858ad	KEYCLOAK-15522 Use AbstractStorageManager in UserStorageManager	2020-10-15 20:41:13 +02:00
Martin Kanis	086f7b4696	KEYCLOAK-15450 Complement methods for accessing realms with Stream variants	2020-10-14 08:16:49 +02:00
testn	269a72d672	KEYCLOAK-15184: Use static inner class where possible	2020-10-09 23:37:08 +02:00
mposolda	ff05072c16	KEYCLOAK-15770 Skip creating session for docker protocol authentication	2020-10-09 07:53:26 +02:00
Markus Till	72f73f153a	UserProfile M1	2020-10-05 09:59:44 -03:00
Achim Hügen	66dfa32cd5	KEYCLOAK-14302 Fix the setting of the lifespan for cache entries. This bug caused that jobs were no longer executed after temporary network partition in multinode setup, because the cluster based locks used for the coordination were never released.	2020-10-02 11:34:44 +02:00
Thomas Darimont	12576e339d	KEYCLOAK-15146 Add support for searching users by emailVerified status We now allow to search for users by their emailVerified status. This enables users to easily find users and deal with incomplete user accounts.	2020-09-29 08:28:59 -03:00
mhajas	12bc84322a	KEYCLOAK-14974 Map group storage provider	2020-09-21 15:56:32 +02:00
Martin Kanis	f037dabdc1	KEYCLOAK-15199 Use stream variant method in jpa/RoleAdapter.getFirstAttribute	2020-09-17 13:18:21 +02:00
Martin Kanis	5d5e56dde3	KEYCLOAK-15199 Complement methods for accessing roles with Stream variants	2020-09-16 16:29:51 +02:00
testn	706299557e	KEYCLOAK-15174: ResourceServerAdapter.toEntity checks the wrong type	2020-09-10 12:19:25 -03:00
testn	c288175c03	KEYCLOAK-15208: PermissionTicketAdapter checks for the wrong type	2020-09-10 12:16:48 -03:00
mhajas	df52c12ebb	KEYCLOAK-15479 Replace enlistAfterCompletion with enlist in MapClientProvider	2020-09-09 08:27:38 +02:00
Benjamin Weimer	b2934e8dd0	KEYCLOAK-15327 backchannel logout invalidate offline session even if there is no corresponding active session found	2020-09-08 11:17:20 -03:00
Martin Kanis	4e9bdd44f3	KEYCLOAK-14901 Replace deprecated ClientProvider related methods across Keycloak	2020-09-07 13:11:55 +02:00
mhajas	bdccfef513	KEYCLOAK-14973 Create GroupStorageManager	2020-09-01 10:21:39 +02:00
Martin Kanis	d59a74c364	KEYCLOAK-15102 Complement methods for accessing groups with Stream variants	2020-08-28 20:56:10 +02:00
Martin Kanis	4be99772d8	KEYCLOAK-14967 Closing streams obtained from JPA layer	2020-08-25 21:47:24 +02:00
Pedro Igor	cb57c58b4b	[KEYCLOAK-14730] - Consent not working when using federation storage and client is displayed on consent screen	2020-08-19 10:08:21 +02:00
mhajas	ae39760a62	KEYCLOAK-14972 Add independent GroupProvider interface	2020-08-13 21:13:12 +02:00
vramik	6b00633c47	KEYCLOAK-14812 Create RoleStorageManager	2020-07-31 15:11:25 -03:00
vramik	bfa21c912c	KEYCLOAK-14811 Create RoleProvider and make it independent of ClientProvider and RealmProvider	2020-07-31 15:11:25 -03:00
Martin Idel	97400827d2	KEYCLOAK-14870: Fix bug where user is incorrectly imported Bug: SerializedBrokeredIdentityContext was changed to mirror UserModel changes. However, when creating the user in LDAP, the username must be provided first (everything else can be handled via attributes).	2020-07-29 11:33:41 +02:00
Martin Idel	bf411d7567	KEYCLOAK-14869: Fix nullpointer exception in FullNameLDAPStorageMapper Setting an attribute should be possible with a list containing no elements or a null list This can happen e.g. when creating users via idps using a UserAttributeStatementMapper. Fix this unprotected access in other classes too	2020-07-28 09:54:37 +02:00
Martin Kanis	feef5b4db2	KEYCLOAK-14220 Complement methods for accessing clients with Stream variants	2020-07-27 10:38:39 +02:00
keycloak-bot	afff0a5109	Set version to 12.0.0-SNAPSHOT	2020-07-22 14:36:15 +02:00
Hynek Mlnarik	8fae2997c9	KEYCLOAK-14553 Improve logging	2020-07-22 00:08:15 +02:00
Hynek Mlnarik	c566b46e8f	KEYCLOAK-14549 Make ClientProvider independent of RealmProvider Co-Authored-By: vramik <vramik@redhat.com>	2020-07-22 00:08:15 +02:00
Hynek Mlnarik	ac0011ab6f	KEYCLOAK-14553 Client map store Co-Authored-By: vramik <vramik@redhat.com>	2020-07-22 00:08:15 +02:00
Hynek Mlnarik	2c29c58af1	KEYCLOAK-14551 Map transaction	2020-07-22 00:08:15 +02:00
Pedro Igor	3631618b24	[KEYCLOAK-14646] - Changing cacheQuery	2020-07-21 14:22:09 +02:00
Pedro Igor	7501e42969	[KEYCLOAK-14646] - Improving permission resolution and evaluation	2020-07-21 14:22:09 +02:00
Jan Lieskovsky	969b09f530	[KEYCLOAK-13692] Upgrade to Wildfly "20.0.1.Final" and Infinispan "10.1.8.Final" Co-authored-by: Jan Lieskovsky <jlieskov@redhat.com> Co-authored-by: Marek Posolda <mposolda@redhat.com>	2020-07-20 22:15:08 +02:00
Yao	ec61c45da5	KEYCLOAK-4593: Moved NamedQuery to entity attribute to improve performance	2020-07-16 08:32:51 +02:00
vramik	71dca9e1b9	KEYCLOAK-14474 ConsentsTest fails intermittently on auth-server-undertow	2020-07-07 14:25:00 +02:00
Plamen Kostov	914b226d11	[KEYCLOAK-14282] Create additional filtering for GET /users endpoint for enabled/disabled users	2020-07-03 09:07:42 -03:00
Martin Idel	05b6ef8327	KEYCLOAK-14536 Migrate UserModel fields to attributes - In order to make lastName/firstName/email/username field configurable in profile we need to store it as an attribute - Keep database as is for now (no impact on performance, schema) - Keep field names and getters and setters (no impact on FTL files) Fix tests with logic changes - PolicyEvaluationTest: We need to take new user attributes into account - UserTest: We need to take into account new user attributes Potential impact on users: - When subclassing UserModel, consistency issues may occur since one can now set e.g. username via setSingleAttribute also - When using PolicyEvaluations, the number of attributes has changed	2020-06-25 14:50:57 +02:00
Hynek Mlnarik	8d8fae5def	KEYCLOAK-14533 Cleanup auth sessions immediately	2020-06-22 20:38:03 +02:00
Pedro Igor	d331091c5e	[KEYCLOAK-11330] - Quarkus tests	2020-06-17 17:20:55 +02:00
kurisumakise2011	bfde3ac080	When any liquibase exception is thrown and it catches in LiquibaseJpaUpdaterProvider update method inside try\catch block, an exception will be retrown like RuntimeException, but it will not be logged anywhere. It reaches platform.exit(t) and then only message of wrapped RuntimeException is propagated. But real caused can be noticed only via debug mode.	2020-06-15 14:01:07 +02:00
Pedro Igor	e16f30d31f	[KEYCLOAK-2343] - Allow exact user search by user attributes Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>	2020-06-10 12:02:50 -03:00
Yoshiyuki Tabata	f03ee2ec98	KEYCLOAK-14145 OIDC support for Client "offline" session lifespan	2020-06-04 14:24:52 +02:00
Pedro Igor	0870041b0b	[KEYCLOAK-14335] - Not initializing entity associations and removing bi-directional ones Co-authored-by: Stian Thorgersen <stian@redhat.com> Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2020-06-02 11:31:10 -03:00
Pedro Igor	bae802bcfa	[KEYCLOAK-11784] - Using Hibernate Extension	2020-05-14 11:10:46 +02:00
stianst	b04932ede5	KEYCLOAK-12414 Remove the need to specify defaults in config file	2020-05-13 09:02:29 -03:00
Álvaro Gómez Giménez	666832d1be	KEYCLOAK-13066 Include resourceType in ScopePermissionRepresentation	2020-05-12 17:11:35 -03:00
Michael Cooney	3291161954	KEYCLOAK-13818: Addressing performance issues with adding client scopes during realm creation. Removing redundant lookups by passing all scopes that need to be created at once.	2020-05-12 15:59:42 +02:00
Pedro Igor	19ab9ba53d	[KEYCLOAK-13829] - DML for DELETE is executed even though attribute does not exist	2020-05-06 14:04:06 +02:00
keycloak-bot	ae20b7d3cd	Set version to 11.0.0-SNAPSHOT	2020-04-29 12:57:55 +02:00
Pedro Igor	601bf8d63e	[KEYCLOAK-12735] - Improving queries and cache for authz	2020-04-29 03:58:03 +02:00
Yoshiyuki Tabata	874642fe9e	KEYCLOAK-12406 Add "Client Session Max" and "Client Session Idle" for OIDC	2020-04-28 15:34:25 +02:00
stianst	5b017e930d	KEYCLOAK-13128 Security Headers SPI and response filter	2020-04-28 15:28:24 +02:00
keycloak-bot	33314ae3ca	Set version to 10.0.0-SNAPSHOT	2020-04-21 09:19:32 +02:00
mposolda	b29810c923	KEYCLOAK-13306 Model fixes for check realm when lookup by ID (cherry picked from commit e40a62de31f6f5d326234314a9e285010665f707)	2020-04-21 08:19:50 +02:00
mposolda	6f62c0ed98	KEYCLOAK-13442 Backwards compatibility in users searching. searchForUser(String, RealmModel, int, int) is no longer called when searching users from the admin console	2020-03-27 13:29:55 +01:00
Pedro Igor	b812159193	[KEYCLOAK-10675] - Deleting an Identity Provider doesn't remove the associated IdP Mapper for that user	2020-03-26 11:41:17 +01:00
keycloak-bot	f6a592b15a	Set version to 9.0.4-SNAPSHOT	2020-03-24 08:31:18 +01:00
mposolda	5ddd605ee9	KEYCLOAK-13259	2020-03-24 05:32:41 +01:00
mposolda	3e82473a90	KEYCLOAK-13369 Not possible to move groups in admin console	2020-03-23 10:17:23 +01:00
vramik	86089d40b8	KEYCLOAK-13249 jpa-changelog-8.0.0.xml contains whitespace character	2020-03-18 09:36:23 +01:00
stianst	aece5d1b4c	KEYCLOAK-5162 Add index to even table	2020-03-17 17:05:21 +01:00
rmartinc	ad3b9fc389	KEYCLOAK-12579: LDAP groups duplicated during UI listing of user groups	2020-03-11 06:14:29 +01:00
Sebastian Schuster	99aba33980	KEYCLOAK-13163 Fixed searching for user with fine-grained permissions	2020-03-09 09:56:13 -03:00
vramik	701fb06de1	KEYCLOAK-12968 fix ClientTest.getAllClientsSearchAndPagination for postgresql	2020-03-05 06:40:03 +01:00
Dmitry Telegin	08319db242	KEYCLOAK-13167 - JDBC resource leak in custom migrations	2020-03-02 21:19:07 +01:00
Hynek Mlnarik	93f05f9291	KEYCLOAK-12450 Revert em.clear() call	2020-03-02 11:22:29 +01:00
Erik Jan de Wit	93a1374558	KEYCLOAK-11129 coalesce possible null values	2020-02-27 09:11:29 +01:00
keycloak-bot	d352d3fa8e	Set version to 9.0.1-SNAPSHOT	2020-02-17 20:38:54 +01:00
stianst	32fccfa99e	KEYCLOAK-10391 Fix lower-case column names in IdentityProviderMapperEntity, while they are upper-case in Liquibase scripts	2020-02-06 13:31:12 +01:00
Pedro Igor	199e5dfa3e	[KEYCLOAK-12909] - Keycloak uses embedded cache manager instead of container-managed one	2020-02-06 13:14:36 +01:00
Axel Messinese	b73553e305	Keycloak-11526 search and pagination for roles	2020-02-05 15:28:25 +01:00
Leon Graser	01a42f417f	Search and Filter for the count endpoint	2020-02-03 09:36:30 +01:00
Pedro Igor	658a083a0c	[KEYCLOAK-9600] - Find by name in authz client returning wrong resource	2020-02-03 08:57:20 +01:00
vramik	a83467047b	KEYCLOAK-9053 KEYCLOAK-9818 Increase column size for federated foreign keys	2020-01-31 21:24:55 +01:00
Marek Posolda	d46620569a	KEYCLOAK-12174 WebAuthn: create authenticator, requiredAction and policy for passwordless (#6649 )	2020-01-29 09:33:45 +01:00
Denis Richtárik	24c6e2ba08	KEYCLOAK-12742 Authentication -> WebAuthn Policy: Unable to delete the Acceptable AAGUIDS via the provided minus (-) button, once set (#6695 )	2020-01-24 11:55:20 +01:00
vramik	47d6d65bbb	KEYCLOAK-12724 - workaround hibernate bug - set explicitly dialect for oracle version greater than 12	2020-01-22 18:34:11 +01:00
Denis Richtárik	8d312d748b	KEYCLOAK-12163 Old account console: UI not updated after removing of TOTP (#6688 )	2020-01-22 12:26:28 +01:00
Tomas Kyjovsky	36eba64f07	KEYCLOAK-12674 Performance degradation after upgrade to Keycloak 8 (#6685 )	2020-01-21 19:43:25 +01:00
Marek Posolda	8d49409de1	KEYCLOAK-12183 Refactor login screens. Introduce try-another-way link. Not show many credentials of same type in credential selector (#6591 )	2020-01-14 21:54:45 +01:00
vramik	a2b3747d0e	KEYCLOAK-7014 - Correctly handle null-values in UserAttributes	2020-01-10 12:44:52 +01:00
Pedro Igor	dae212c035	[KEYCLOAK-12312] - Partial import of realm breaking access to client's service account roles	2020-01-09 10:06:32 +01:00
Douglas Palmer	106e6e15a9	[KEYCLOAK-11859] Added option to always display a client in the accounts console	2019-12-17 17:12:49 -03:00
vramik	c3d80651bf	KEYCLOAK-12473 Add possibility to specify length of event detail when storing to database	2019-12-17 17:15:50 +01:00
Cristian Schuszter	5c7ce775cf	KEYCLOAK-11472 Pagination support for clients Co-authored-by: stianst <stianst@gmail.com>	2019-12-05 08:17:17 +01:00
Pedro Igor	53f156ec83	[KEYCLOAK-11328] - Initial Server.x Clustering Configuration	2019-11-29 08:38:41 +01:00
Martin Kanis	685d49c693	KEYCLOAK-11967 Violation of UNIQUE KEY constraint SIBLING_NAMES (#6485 )	2019-11-26 16:00:50 +01:00
Andrei Arlou	f0ac2ad3ce	KEYCLOAK-12088 Use diamond operator for collections in module "model/infinispan"	2019-11-22 11:08:42 +01:00
Andrei Arlou	3acee944ea	KEYCLOAK-12090 Simplify conditions in module "model/infinispan" (#6497 )	2019-11-18 20:51:12 +01:00
Andrei Arlou	80f4bd3822	KEYCLOAK-12089 Remove unused imports from module "model/infinispan" (#6496 )	2019-11-18 20:48:34 +01:00
keycloak-bot	76aa199fee	Set version to 9.0.0-SNAPSHOT	2019-11-15 20:43:21 +01:00
vramik	af5df1e535	KEYCLOAK-11808 Add support for MySQL8, update supported database versions	2019-11-15 08:43:48 +01:00
stianst	3a36569e20	KEYCLOAK-9129 Don't expose Keycloak version in resource paths	2019-11-15 08:21:28 +01:00
AlistairDoswald	4553234f64	KEYCLOAK-11745 Multi-factor authentication (#6459 ) Co-authored-by: Christophe Frattino <christophe.frattino@elca.ch> Co-authored-by: Francis PEROT <francis.perot@elca.ch> Co-authored-by: rpo <harture414@gmail.com> Co-authored-by: mposolda <mposolda@gmail.com> Co-authored-by: Jan Lieskovsky <jlieskov@redhat.com> Co-authored-by: Denis <drichtar@redhat.com> Co-authored-by: Tomas Kyjovsky <tkyjovsk@redhat.com>	2019-11-14 14:45:05 +01:00
Patrick Teubner	b3d87b52c2	KEYCLOAK-11888 Fix inconsistent pagination of groups by ordering the results of 'getTopLevelGroupIds' query	2019-11-11 09:22:51 +01:00
Wim Vandenhaute	b6ee342713	KEYCLOAK-4593 Flush and clear when fetching multiple realms for performance improvement with large number of realms	2019-11-04 21:11:26 +01:00
Hynek Mlnarik	f0685cc246	KEYCLOAK-11739 Ensure unique / PK constraint in JPA is on par with Liquibase	2019-10-23 14:53:17 +02:00
Martin Kanis	37304fdd7d	KEYCLOAK-10728 Upgrade to WildFly 18 Final	2019-10-21 14:06:44 +02:00
Pedro Igor	6acb87bd7a	[KEYCLOAK-10822] - Prevent access to users from another realm	2019-10-21 10:32:50 +02:00
Pedro Igor	17785dac08	[KEYCLOAK-10714] - Add filtering support in My Resources endpoint by name	2019-10-16 16:26:55 +02:00
Hynek Mlnarik	9d685a2c47	KEYCLOAK-11558 Fix unique constraint violation in PartialImportTest (cherry picked from commit 672703cbc1320466d37761c4cb0d46c5dd0ce0f1)	2019-10-14 14:40:20 +02:00
Takashi Norimatsu	7c75546eac	KEYCLOAK-9360 Two factor authentication with W3C Web Authentication - 1st impl phase * KEYCLOAK-9360 Two factor authentication with W3C Web Authentication - 1st impl phase	2019-10-01 15:17:38 +02:00
Kohei Tamura	c68afdab83	KEYCLOAK-7547 Change log level of a message when deleting user When deleting a user (who has not failed to log in yet if Brute Force Detection is not enabled), the following message is always recorded: {noformat} 10:34:15,101 WARN [org.keycloak.models.sessions.infinispan.changes.InfinispanChangelogBasedTransaction] (default task-7) Not present cache item for key LoginFailureKey [ realmId=568c76c7-9308-4d84-bfc1-ec3542deaf02. userId=4c011785-a39a-43bf-b0c1-43c63decf2f1 ] {noformat} This is noisy and should not be logged at warning level.	2019-09-20 11:37:30 +02:00
Jan Lieskovsky	cfb225b499	[KEYCLOAK-8253] Improve the time complexity of LDAP groups synchronization (in the direction from LDAP provider to Keycloak) from exponential to linear time in the case of syncing flat LDAP groups structure Add a corresponding test (intentionally configured as to be ignored by CI/CD due to higher demand on time, required fo the test completion) Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>	2019-09-12 09:54:13 +02:00
Hynek Mlnarik	9eb2e1d845	KEYCLOAK-11028 Use pessimistic locks to prevent DB deadlock when deleting objects	2019-09-09 10:57:49 +02:00
Pedro Igor	a1d8850373	[KEYCLOAK-7416] - Device Activity	2019-09-05 11:43:27 -03:00
Takashi Norimatsu	8225157a1c	KEYCLOAK-6768 Signed and Encrypted ID Token Support	2019-08-15 15:57:35 +02:00
Vlastimil Elias	4571f65d1e	KEYCLOAK-10209 - AuthenticationSessionModel made available through KeycloakContext in KeycloakSession	2019-07-30 12:36:57 +02:00
Pedro Igor	967d21dbb5	[KEYCLOAK-10713] - Pagination to resources rest api	2019-07-29 16:19:22 -03:00
keycloak-bot	17e9832dc6	Set version to 8.0.0-SNAPSHOT	2019-07-19 19:05:03 +02:00
Hynek Mlnarik	04f266d381	KEYCLOAK-10744 Fix MariaDB cannot create database	2019-07-18 13:59:49 +02:00
Martin Kanis	efdf0f1bd8	KEYCLOAK-6839 You took too long to login after SSO idle	2019-07-10 10:15:26 +02:00
rmartinc	bd5dec1830	KEYCLOAK-10112: Issues in loading offline session in a cluster environment during startup	2019-07-03 13:17:45 +02:00
Pedro Igor	0cdd23763c	[KEYCLOAK-10443] - Define a global decision strategy for resource servers	2019-07-02 09:14:37 -03:00
Sebastian Loesch	c9fbed7eb8	KEYCLOAK-10545 Fix formatting error in log message Fixes the formatting error java.util.IllegalFormatConversionException: d != java.util.UUID	2019-06-26 10:22:15 +02:00
mposolda	c124aec586	KEYCLOAK-10262 DBLockTest.testLockConcurrently fails with MariaDB Galera 10.1	2019-06-24 11:23:18 +02:00
Pedro Igor	fdc0943a92	[KEYCLOAK-8060] - My Resources REST API	2019-06-11 14:23:26 -03:00
Pedro Igor	61eb94c674	[KEYCLOAK-8915] - Support resource type in authorization requests	2019-06-04 21:02:54 -03:00
skyfalke	0007bad6f3	KEYCLOAK-10393 Fix permission ticket pagination in Authz Client KEYCLOAK-10393 Ensure idempotency of find method of permission ticket store	2019-05-29 09:43:54 -03:00
mduchrow	c80531dfa7	KEYCLOAK-9847 Checking user cache for being not null before using it	2019-05-15 15:47:03 +02:00
Hynek Mlnarik	835b2cf9c2	KEYCLOAK-9944 Add Primary Key Constraint into RESOURCE_URIS table	2019-05-13 12:43:23 +02:00
Sebastian Loesch	96250c9685	[KEYCLOAK-9573] Allow AdminEvents for custom resource types	2019-04-26 09:57:28 +01:00
mposolda	7a671052a3	KEYCLOAK-9988 Fix unstable UserSessionPersisterOfflineTest.testExpired. Adding ResetTimeOffsetEvent	2019-04-23 20:58:37 +02:00
keycloak-bot	49d4e935cb	Set version to 7.0.0-SNAPSHOT	2019-04-17 09:48:07 +01:00
mposolda	a8af51c7bb	KEYCLOAK-9988 Fix unstable UserSessionProviderOfflineTest.testExpired	2019-04-12 17:16:53 +02:00
Bekh-Ivanov George	ebcfeb20a3	[KEYCLOAK-10020] - Add ability to request user-managed (ticket) permissions by name	2019-04-12 08:44:57 -03:00
Axel Messinese	e18fb56389	KEYCLOAK-4978 Add endpoint to get groups by role	2019-03-15 06:00:17 +01:00
keycloak-bot	e843d84f6e	Set version to 6.0.0-SNAPSHOT	2019-03-06 15:54:08 +01:00
stianst	7ad02e7318	Fixes for releasing	2019-03-06 11:38:09 +01:00
Stefan Guilhen	9c34cc7365	[KEYCLOAK-9371] Fix premature termination of sessions when remember-me is in use	2019-02-27 15:08:50 +01:00
Hynek Mlnarik	37ef47d6ab	KEYCLOAK-9509 Upgrade to Wildfly 15 KEYCLOAK-9584 Update Wildfly Arquillian version KEYCLOAK-9581: Fix CookiePathTests KEYCLOAK-9607 CLI sripts and configuration files update KEYCLOAK-9580 Fix component registration error KEYCLOAK-9590 Update JDG to newest version * Infinispan is using whatever version is set in root pom.xml. KEYCLOAK-9509 Fix Undertow tests Co-Authored-By: vramik <vramik@redhat.com> Co-Authored-By: sebastienblanc <scm.blanc@gmail.com>	2019-02-25 08:56:46 +01:00
Gideon Caranzo	4cd617bc42	KEYCLOAK-8977 Added method to return KeycloakSession from RealmCreationEvent	2019-02-21 11:21:54 +01:00
stianst	e06c705ca8	Set version 5.0.0	2019-02-21 09:35:14 +01:00
Hynek Mlnarik	52840533c9	KEYCLOAK-9111 Fix for unhandled exception	2019-02-13 15:49:49 +01:00
Hynek Mlnarik	a74d6ab932	KEYCLOAK-9107 Fix NPE	2019-02-13 15:49:49 +01:00
Pedro Igor	885eec5ef2	[KEYCLOAK-8348] - Containerize database tests	2019-01-30 16:29:03 -02:00
vramik	c4a46a5591	KEYCLOAK-7677 KEYCLOAK-7723 fix version collision of httpclient Co-authored-by: Pedro Igor <psilva@redhat.com>	2019-01-10 17:45:41 -02:00
stianst	7c9f15778a	Set version to 4.8.3.Final	2019-01-09 20:39:30 +01:00
stianst	7c4890152c	Set version to 4.8.2	2019-01-03 14:43:22 +01:00
mposolda	04445c8a23	KEYCLOAK-8904 Backpressure in RemoteCacheSessionsLoader	2018-12-10 22:49:43 +01:00
Stefan Guilhen	3462be857b	[KEYCLOAK-8835] Add missing not-null constraint to the new remember-me columns in the realm table	2018-12-07 11:32:30 +01:00
Pedro Igor	0c39eda8d2	[KECLOAK-8237] - Openshift Client Storage	2018-12-06 10:57:53 -02:00
stianst	b674c0d4d9	Prepare for 4.8.0.Final	2018-12-04 13:54:25 +01:00
Hynek Mlnarik	d395043fc7	KEYCLOAK-8707 Fix client template to scope migration	2018-11-22 15:07:47 +01:00
mposolda	6e93ca36af	KEYCLOAK-8519 OIDCScopeTest.testClientDisplayedOnConsentScreenWithEmptyConsentText failing on Oracle	2018-11-22 09:30:01 +01:00
mposolda	6db1f60e27	KEYCLOAK-7774 KEYCLOAK-8438 Errors when SSO authenticating to same client multiple times concurrently in more browser tabs	2018-11-21 21:51:32 +01:00
Takashi Norimatsu	0793234c19	KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 (#5603 ) * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 also support client signed signature verification by refactored token verification mechanism * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 incorporate feedbacks and refactor client public key loading mechanism * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 unsigned request object not allowed * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 revert to re-support "none"	2018-11-19 14:28:32 +01:00
Stefan Guilhen	a3d4612edd	KEYCLOAK-8854 Updated UserSessionPredicate.ExternalizerImpl to include the remember-me properties	2018-11-19 12:17:03 +01:00
mposolda	0533782d90	KEYCLOAK-7275 KEYCLOAK-5479 Faster offline sessions preloading at startup. Track lastSessionRefresh timestamps more properly by support bulk update to DB	2018-11-16 14:23:28 +01:00
Michael Gottlieb	3bdbbf41af	KEYCLOAK-8702:Fix Offline Sessions requires column Prevent RemoveDuplicateOfflineSessions from running when migration to 3.2.0 has been run. This prevents running when the database has already dropped CLIENT_SESSION_ID from OFFLINE_CLIENT_SESSION table. This change unblocks migrating from 3.2.0 to 4.4.0 and later.	2018-11-16 12:03:57 +01:00
Leon Graser	85f11873c3	KEYCLOAK-8613 Group Membership Pagination	2018-11-15 17:54:07 +01:00
Thomas Darimont	cf57a1bc4b	KEYCLOAK-1267 Add dedicated SSO timeouts for Remember-Me Previously remember-me sessions where tied to the SSO max session timeout which could lead to unexpected early session timeouts. We now allow SSO timeouts to be configured separately for sessions with enabled remember-me. This enables users to opt-in for longer session timeouts. SSO session timeouts for remember-me can now be configured in the tokens tab in the realm admin console. This new configuration is optional and will tipically host values larger than the regular max SSO timeouts. If no value is specified for remember-me timeouts then the regular max SSO timeouts will be used. Work based on PR https://github.com/keycloak/keycloak/pull/3161 by Thomas Darimont <thomas.darimont@gmail.com>	2018-11-15 06:11:22 +01:00
stianst	ecd476fb10	Prepare for 4.7.0.Final	2018-11-14 20:10:59 +01:00
mposolda	1b5a83c4f1	KEYCLOAK-6980 Check if client_assertion was already used during signed JWT client authentication	2018-11-14 20:09:22 +01:00
Graser Leon	9ef4c7fffd	KEYCLOAK-8377 Role Attributes	2018-10-24 22:04:28 +02:00
Gideon Caranzo	7d85ce93bb	KEYCLOAK-8555 queried only realms with user storage provider to speed up user storage sync bootstrap	2018-10-19 09:53:58 +02:00
vramik	7a96911a83	KEYCLOAK-8300 KEYCLOAK-8301 Wildfly 14 upgrade Co-authored-by: Marek Posolda <mposolda@redhat.com>	2018-10-17 20:01:07 +02:00
Pedro Igor	79ca722b49	[KEYCLOAK-7605] - Make sure Evaluation API is read-only	2018-10-09 08:09:29 -03:00
Hynek Mlnarik	7f1c03a122	KEYCLOAK-8462 Close delegates properly	2018-10-08 14:45:48 +02:00
Pedro Igor	b4b3527df7	[KEYCLOAK-7950] - Fixes user pagination when using filtering users members of groups	2018-10-02 15:44:23 -03:00
stianst	c3fc9e9815	Set version to 4.6.0.Final-SNAPSHOT	2018-09-26 20:58:41 +02:00
Pedro Igor	609c521c17	[KEYCLOAK-8281] - Deletion of client with token exchange policy leads to breaking errors	2018-09-18 18:58:45 -03:00
stianst	24e60747b6	KEYCLOAK-7560 Refactor token signature SPI PR Also incorporates: KEYCLOAK-6770 ES256/384/512 providers KEYCLOAK-4622 Use HS256 for refresh tokens KEYCLOAK-4623 Use HS256 for client reg tokens	2018-09-11 08:14:10 +02:00
Leon Graser	df22c4d613	changed user and resource entity to fetch mode select with batch size 20	2018-09-10 20:31:04 +02:00
stianst	1fb4ca4525	Set version to 4.5.0.Final	2018-09-06 20:08:02 +02:00
Hynek Mlnarik	5fe1905e4b	KEYCLOAK-6803 Prevent duplicating required actions in JPA user storage	2018-09-03 19:42:18 +02:00
Hynek Mlnarik	54b5ec206e	KEYCLOAK-8183 Improve authz caching for negative cases	2018-08-31 18:31:55 +02:00
Hynek Mlnarik	8a7a545628	KEYCLOAK-7944 Remove duplicate offline client sessions	2018-08-29 10:55:38 +02:00
Hynek Mlnarik	2077975b1c	KEYCLOAK-6411 Fix list of keywords on MySQL/MariaDB	2018-08-28 09:51:58 +02:00
mposolda	6fc99cd749	KEYCLOAK-7594 Upgrade to Wildfly 13. Cross-DC: Upgrade to infinispan server 9.2.4 and JDG 7.2 Co-authored-by: Douglas Palmer <dpalmer@redhat.com> Co-authored-by: stianst <stianst@gmail.com> Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2018-08-27 12:52:53 +02:00
Stefan Guilhen	f36e45cb10	[KEYCLOAK-4902] - Using streams to process scopes and cache improvements	2018-08-14 06:29:10 -03:00
Stefan Guilhen	060b3b8d0f	[KEYCLOAK-4902] - Using streams when fetching resources	2018-08-09 16:28:31 -03:00
Pedro Igor	905fd3ae00	[KEYCLOAK-8003] - Migration to 4.2.1 extracting RESOURCE_URIs fails with fine-grained admin permissions	2018-08-08 11:00:25 +02:00
Pedro Igor	80e5227bcd	[KEYCLOAK-4902] - Refactoring and improvements to processing of authz requests	2018-08-07 10:53:40 -03:00
Hiroyuki Wada	263792a4ab	KEYCLOAK-7984 Fix migration issue	2018-08-02 14:58:20 +02:00
alva.huang	3380fdc119	[KEYCLOAK-7985] fix the table name error, from RESOURCE_URI to RESOURCE_URIS Signed-off-by: alva.huang <alva@izhiju.cn>	2018-08-02 08:31:44 -03:00
mposolda	959cd035ba	Set version to 4.3.0.Final-SNAPSHOT	2018-08-01 22:40:05 +02:00
Hiroyuki Wada	7c0ca9aad2	KEYCLOAK-6313 Add required action's priority for customizing the execution order	2018-07-23 22:21:04 +02:00
mhajas	1308a3231d	KEYCLOAK-7931 Correct wrong JPA changelog filenames	2018-07-23 11:49:54 +02:00
mhajas	5aebc74f8c	KEYCLOAK-7269 Setting more uris for Authorization Resource	2018-07-11 17:48:34 -03:00
mposolda	d0a824dde4	Updating version to 4.2.0.Final-SNAPSHOT	2018-07-05 07:42:48 -04:00
mposolda	40d129cf54	KEYCLOAK-7489 Replace failed for entity repeats infinitely	2018-07-04 10:22:49 +02:00
mposolda	8c66f520af	KEYCLOAK-7745 JTA error if offline sessions can't be preloaded at startup within 5 minutes	2018-07-04 10:22:13 +02:00
Martin Kanis	0e2e867e4a	KEYCLOAK-5023 database migration fails if mysql schema name has hyphen	2018-06-27 10:11:09 +02:00
Takashi Norimatsu	2fb022e501	KEYCLOAK-7688 Offline Session Max for Offline Token	2018-06-26 08:25:06 +02:00
Martin Kanis	998227ac53	KEYCLOAK-5461 Upgrade to Liquibase 3.5.5	2018-06-22 13:20:10 +02:00
stianst	e1a0e581b9	Update to 4.1.0.Final-SNAPSHOT	2018-06-14 14:22:28 +02:00
Marek Posolda	49407c2e4f	KEYCLOAK-6630 Client scopes initial support (#5076 ) * KEYCLOAK-6630 KEYCLOAK-349 Client Scopes Co-authored-by: vramik <vramik@redhat.com> * KEYCLOAK-6630 Change some clientTemplate occurences to clientScope	2018-06-08 15:38:38 +02:00
Federico M. Facca	5a9bfea419	[KEYCLOAK-7353] Support Policy Management in Protection API See https://issues.jboss.org/browse/KEYCLOAK-7353	2018-06-06 19:36:42 -03:00
Pedro Igor	f8919f8baa	Merge pull request #5211 from pedroigor/KEYCLOAK-7367 [KEYCLOAK-7367] - User-Managed Policy Provider	2018-06-04 09:35:13 -03:00
Martin Kanis	f429469fc8	KEYCLOAK-5270 Realm cookie path for IE<=11 users (#5106 )	2018-05-31 08:44:34 +02:00
Johannes Knutsen	c64ecb1ab8	Remove expired objects from cache cluster instead of local only	2018-05-29 10:27:43 +02:00
Pedro Igor	2b6597e9f1	[KEYCLOAK-7367] - User-Managed Policy Provider	2018-05-25 16:18:15 -03:00
Stian Thorgersen	dbf5c395b0	Bump version to 4.0.0.Final (#5224 )	2018-05-24 19:02:30 +02:00
Stian Thorgersen	90e5c7f3eb	Bump version to 4.0.0.Beta3-SNAPSHOT (#5185 )	2018-05-02 14:32:20 +02:00
Pedro Igor	5cae1bb134	Merge pull request #5093 from pedroigor/KEYCLOAK-4102 [KEYCLOAK-4102] - Support lazy load paths	2018-03-29 09:16:34 -03:00
pedroigor	4a425c2674	[KEYCLOAK-4102] - Support lazy loading of paths via policy enforcer config	2018-03-28 09:23:59 -03:00
dongay	707b80f436	KEYCLOAK-3210 Apply @Nationalized attribute to entity fields that should support unicode character sets	2018-03-27 20:55:59 +02:00
Pedro Igor	ffeb0420bf	Merge pull request #5079 from pedroigor/KEYCLOAK-6529 [KEYCLOAK-6529] - Resource Attributes	2018-03-27 09:30:38 -03:00
stianst	07fea02146	Bump versions to 4.0.0.Beta2-SNAPSHOT	2018-03-26 18:17:38 +02:00
pedroigor	758ae41999	[KEYCLOAK-6529] - Constraint name too long	2018-03-22 07:05:03 -03:00
Hynek Mlnarik	bb3c76a9d9	KEYCLOAK-6929 Externalizers for AuthenticationSessionEntity	2018-03-21 12:46:50 +01:00
pedroigor	08896ee9c9	[KEYCLOAK-6529] - Resource Attributes	2018-03-19 13:21:39 -03:00
Johannes Knutsen	9de8e79577	KEYCLOAK-6824: Remove negation of isEmpty list check	2018-03-15 18:43:22 +01:00
Pedro Igor	2aa71d1737	Merge pull request #5051 from pedroigor/KEYCLOAK-6787 [KEYCLOAK-6787] - Wrong validation of resources with same name and different owners	2018-03-12 11:41:49 -03:00
Hynek Mlnarik	05dcc6e3af	KEYCLOAK-6783 JDG-auth optimizations	2018-03-09 15:08:55 +01:00
mposolda	6f7200868b	Secured RemoteCache availability	2018-03-09 15:08:55 +01:00
Bill Burke	4b6b45cf43	KEYCLOAK-6026	2018-03-05 11:57:05 -05:00
vramik	9bd2e70376	KEYCLOAK-6790 Identifier for RESOURCE_SERVER_PERMISSION_TICKET table is too long for Oracle databases	2018-03-02 12:46:19 +01:00
Bill Burke	7f21cdd1f4	KEYCLOAK-6551	2018-03-02 10:41:05 +01:00
pedroigor	1e1de85685	[KEYCLOAK-6787] - Wrong validation of resources with same name and different owners	2018-03-01 16:50:05 -03:00
pedroigor	cb531056a6	[KEYCLOAK-6621] - Fixing cache and queries of policies with type scope	2018-02-28 16:33:45 -03:00
Pedro Igor	91bdc4bde2	[KEYCLOAK-3169] - UMA 2.0 (#4368 ) * [KEYCLOAK-3169] - UMA 2.0 Support * [KEYCLOAK-3169] - Changes to account service and more tests * [KEYCLOAK-3169] - Code cleanup and tests * [KEYCLOAK-3169] - Changes to account service and tests * [KEYCLOAK-3169] - Changes to account service and tests * [KEYCLOAK-3169] - More tests * [KEYCLOAK-3169] - Changes to adapter configuration * [KEYCLOAK-3169] - Reviewing UMA specs and more tests * [KEYCLOAK-3169] - Reviewing UMA specs and more tests * [KEYCLOAK-3169] - Changes to UMA Grant Type and refactoring * [KEYCLOAK-3169] - Refresh tokens for RPT responses and tests * [KEYCLOAK-3169] - Changes to account my resources and policy enforcers * [KEYCLOAK-3169] - Realm settings flag to enable/disable user-managed access in account mgmt console * [KEYCLOAK-3169] - More changes to my resource pages in account mgmt console * [KEYCLOAK-3169] - Need to enable user-managed on realm to run tests * [KEYCLOAK-3169] - Removing more UMA 1.0 related code * [KEYCLOAK-3169] - Only submit requests if ticket exists * [KEYCLOAK-3169] - Returning UMA 401 response when not authenticated * [KEYCLOAK-3169] - Removing unused code * [KEYCLOAK-3169] - Removing unused code * [KEYCLOAK-3169] - 403 response in case ticket is not created * [KEYCLOAK-3169] - Fixing AbstractPhotozExampleAdapterTest#testClientRoleRepresentingUserConsent * [KEYCLOAK-3169] - 403 status code only returned for non-bearer clients	2018-02-28 08:53:10 +01:00
gonzalad	898347366d	KEYCLOAK-6589: Optimize jpql in User search API This commit removes the 6 n+1 select that are issued when calling GET /users api. We now have 4 select queries.	2018-02-22 14:21:42 +01:00
pedroigor	d590600c12	[KEYCLOAK-6321] - NPE when deleting a resource with admin events enabled	2018-02-21 19:41:44 +01:00

... 10 11 12 13 14 ...

2496 commits