49ca81cda3
Provide SCIM2 client capabilities behing an experimental Feature Profile
...
Keycloak CI / Test PoC (push) Blocked by required conditions
CodeQL / CodeQL JavaScript (push) Blocked by required conditions
CodeQL / CodeQL TypeScript (push) Blocked by required conditions
CodeQL / Status Check - CodeQL (push) Blocked by required conditions
Keycloak Documentation / Check conditional workflows and jobs (push) Waiting to run
Keycloak Documentation / Build (push) Blocked by required conditions
Keycloak Documentation / External links check (push) Blocked by required conditions
Keycloak Guides / Check conditional workflows and jobs (push) Waiting to run
Keycloak Operator CI / Status Check - Keycloak Operator CI (push) Blocked by required conditions
Keycloak CI / Status Check - Keycloak CI (push) Blocked by required conditions
CodeQL / Check conditional workflows and jobs (push) Waiting to run
CodeQL / CodeQL Java (push) Blocked by required conditions
Keycloak Documentation / Status Check - Keycloak Documentation (push) Blocked by required conditions
Keycloak Guides / Build (push) Blocked by required conditions
Keycloak Guides / Status Check - Keycloak Guides (push) Blocked by required conditions
Keycloak JavaScript CI / Check conditional workflows and jobs (push) Waiting to run
Keycloak JavaScript CI / Build Keycloak (push) Blocked by required conditions
Keycloak JavaScript CI / Admin Client (push) Blocked by required conditions
Keycloak JavaScript CI / UI Shared (push) Blocked by required conditions
Keycloak JavaScript CI / Account UI (push) Blocked by required conditions
Keycloak JavaScript CI / Admin UI (push) Blocked by required conditions
Keycloak JavaScript CI / Account UI E2E (push) Blocked by required conditions
Keycloak JavaScript CI / Generate Test Seed (push) Blocked by required conditions
Keycloak JavaScript CI / Admin UI E2E (push) Blocked by required conditions
Keycloak JavaScript CI / Status Check - Keycloak JavaScript CI (push) Blocked by required conditions
Keycloak Operator CI / Build distribution (push) Blocked by required conditions
Keycloak Operator CI / Check conditional workflows and jobs (push) Waiting to run
Keycloak Operator CI / Test local (push) Blocked by required conditions
Keycloak Operator CI / Test remote (push) Blocked by required conditions
Keycloak Operator CI / Test OLM installation (push) Blocked by required conditions
Closes #1234
Signed-off-by: Alex Morel <amorel@codelutin.com>
2024-11-05 10:15:21 +01:00
AndyMunro
4984900bae
Make organizations chapter available in downstream
...
Closes #34382
Signed-off-by: AndyMunro <amunro@redhat.com>
2024-10-28 10:28:24 +01:00
Andy
f994cc54d5
Remove robots.txt entirely
...
* remove robots.txt entirely, as blocking page-
crawling prevents the `X-Robots-Tag` headers
(and similar meta tags) from working as intended.
Closes #17433
Signed-off-by: Andy <andy@slice.is>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-25 12:09:50 +00:00
Dave Meyer
883b0a3378
doc: Replaced dead link ( #34239 )
...
Replaced dead link to quickstart template with a (similar) template.
Signed-off-by: Dave Meyer <7davidmeyer@gmail.com>
2024-10-24 15:28:42 +02:00
Ryan Emerson
902abfdae4
JDBC_PING as default discovery protocol
...
Closes #29399
- Add ProviderFactory#dependsOn to allow dependencies between
ProviderFactories to be explicitly defined
- Disable Infinispan default shutdownhook disabled to ensure lifecycle
is managed exclusively by Keycloak
- Remove Infinispan shutdown hook in KeycloakRecorder and manage
EmbeddedCacheManager lifecycle only in DefaultInfinispanConnectionProviderFactory#close
Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-22 20:19:19 +00:00
Gilvan Filho
e6cd1a05c1
Update docs/documentation/server_admin/topics/threat/brute-force.adoc
...
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
2024-10-22 10:33:22 -03:00
Gilvan Filho
c4005d29f0
add linear strategy to brute force
...
closes #25917
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
2024-10-22 10:33:22 -03:00
Pedro Ruivo
fffa9aa72e
Enable virtual threads in Infinispan and JGroups by default
...
Closes #33939
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-21 16:02:28 +00:00
Simon Levermann
dcf1d83199
Enable enforcement of a minimum ACR at the client level ( #16884 ) ( #33205 )
...
closes #16884
Signed-off-by: Simon Levermann <github@simon.slevermann.de>
2024-10-21 13:54:02 +02:00
mposolda
dbcb3151a9
Align admin console for client for backchannel and frontchannel logout
...
closes #10138
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-10-21 11:32:03 +02:00
Jon Koops
7657e71be1
Automatically retrieve configuration for authorization
...
Closes #14562
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-18 14:03:36 +02:00
Jake
946798aa01
Small grammatical error in documentation
...
Closes #34009
Signed-off-by: Jake <156826184+jlanning-gl@users.noreply.github.com>
2024-10-16 18:49:49 +02:00
Marek Posolda
94b5f05c64
Re-add links to policy-enforcer to the authorization services documen… ( #33905 )
...
closes #32644
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-10-15 08:34:56 +02:00
Stefan Guilhen
a832381a37
Add section to clarify the impact of having imported LDAP users when performing searches
...
Closes #16451
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-10-11 11:01:14 -03:00
kennhhhhh
dbfd059b21
fix: available SPIs should be found in Provider info ( #33805 )
...
Signed-off-by: kennhhhhh <164991693+kennhhhhh@users.noreply.github.com>
2024-10-11 06:47:24 +00:00
Pedro Ruivo
464fc90519
Fail to start if work cache is not replicated
...
Keycloak will now fail to start if the work cache is replicated.
Listeners require the data to be local.
Closes #33702
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-09 19:40:24 +00:00
Pedro Ruivo
0e3554934e
Read cache-ispn.xml from conf/ by default
...
Fixed #31492
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-09 16:40:17 +00:00
Jon Koops
05e8b932c3
Add dark mode support to welcome theme and unify approach ( #32495 )
...
Closes #26178
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-10-04 08:27:37 -04:00
Alexander Schwartz
d8c8c6a0be
Fixing broken links after KC26 docs changes ( #33577 )
...
Closes #33576
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-04 13:59:47 +02:00
Stian Thorgersen
64e096d89c
Update 26_0_0.adoc
...
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
2024-10-04 10:54:19 +02:00
Stian Thorgersen
81f1974f7a
Re-order items in release notes for 26 ( #33551 )
...
Signed-off-by: stianst <stianst@gmail.com>
2024-10-04 06:47:08 +02:00
Jon Koops
b475f936d5
Use crypto.randomUUID() to generate UUIDs for Keycloak JS ( #33518 )
...
Closes #33515
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-03 12:07:57 -03:00
Stian Thorgersen
2be2b2ffe5
Upgrade guide updates for renaming account, admin, and login features ( #33521 )
...
* Upgrade guide updates for renaming account, admin, and login features
Signed-off-by: stianst <stianst@gmail.com>
* Update docs/documentation/upgrading/topics/changes/changes-26_0_0.adoc
Signed-off-by: Stian Thorgersen <stian@redhat.com>
---------
Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
2024-10-03 15:05:48 +02:00
vramik
b7eaa9b0cb
Wildcard search not working for custom user attributes
...
Closes #32451
Signed-off-by: vramik <vramik@redhat.com>
2024-10-03 08:48:36 -03:00
Maksim Zvankovich
35eba8be8c
Add option to include the organization id in the organization claims
...
Closes #32746
Signed-off-by: Maksim Zvankovich <m.zvankovich@nexovagroup.eu>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
2024-10-03 08:11:36 -03:00
Jon Koops
aacdf80664
Add shim for Web Crypto API to admin and account console ( #33480 )
...
Closes #33330
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-03 10:51:23 +00:00
mposolda
41c72d46d2
Document users hashed passwords with argon2 does not work in FIPS environment
...
closes #33296
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-10-03 08:47:45 +02:00
Pedro Aguiar
f60be4bf8e
update: fix typo "a email" ( #33482 )
...
- "a email" becomes "an email".
Signed-off-by: Pedro Aguiar <contact@codespearhead.com>
2024-10-02 19:34:33 +02:00
Alexander Schwartz
cb12f03003
Rework AWS Lambda doc to show it is required ( #33462 )
...
Closes #33461
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-02 12:42:11 +02:00
vramik
c1653448f3
[Organizations] Allow orgs to define the redirect URL after user registers or accepts invitation link
...
Closes #33201
Signed-off-by: vramik <vramik@redhat.com>
2024-10-02 07:37:48 -03:00
Jon Koops
21704a70c1
Update documentation and release notes for Keycloak JS ( #33409 )
...
Closes #32843
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-01 10:29:23 +02:00
vramik
412f1f85a9
Update Organization documentation
...
Closes #33410
Signed-off-by: vramik <vramik@redhat.com>
2024-10-01 09:29:49 +02:00
Peter Zaoral
d5d6390b1c
Make Keycloak fail with an error when the persisted build options differs from those provided ( #33241 )
...
* PropertyException is now thrown instead of a warning
* Operator guides clarification around health and metrics options
Closes : #32717
Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-09-30 19:28:23 +02:00
Stan Silvert
b4a200d333
Fixes release notes section on new login theme, keycloak.v2 ( #33359 )
...
* Fixes #33351
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
* Fixes #33351
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
* Ignore saml.xml.org because of expired cert.
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
---------
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2024-09-30 15:38:29 +02:00
Steven Hawkins
5d99d91818
fix: allows for the detection of a master realm with --import-realms ( #32914 )
...
also moving initial bootstrapping after import
closes : #32689
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-09-30 14:40:16 +02:00
Steven Hawkins
53102521d2
fix: correcting the recovery upgrade note ( #33356 )
...
closes : #33307
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-09-30 08:22:29 -04:00
Steven Hawkins
cf2ecf87f6
fix: add the proxy-protocol option ( #33276 )
...
* fix: add the proxy-protocol-enabled option
closes : #10492
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Update docs/guides/server/reverseproxy.adoc
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-09-27 23:44:59 +02:00
Václav Muzikář
fc76bad1fd
Undeprecate https-trust-store-* options and enhance mTLS docs
...
Closes #33172
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-09-27 18:07:57 +02:00
Stefan Guilhen
b717810061
Update organizations documentation in the server admin guide
...
Closes #33199
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-09-27 16:27:54 +02:00
Stefan Guilhen
e2810b788e
Fix duplicated screenshot in Authorization Services Guide
...
Closes #23028
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-09-27 09:05:06 +02:00
Stefan Guilhen
d87f67b4e6
Fix duplicated screenshots in the Fine grain admin permissions section of the Server Admin Guide
...
Closes #31083
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-09-27 09:04:01 +02:00
Marek Posolda
061e74267f
Release notes update with the core-clients contributions ( #33279 )
...
closes #32990
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-09-26 06:53:33 +02:00
mposolda
8f038f19dd
Upgrade BCFIPS to 2.0
...
closes #30415
Signed-off-by: mposolda <mposolda@gmail.com>
2024-09-26 06:52:21 +02:00
Jon Koops
021a2af2fd
Compute SHA-256 digest for PKCE using the Web Crypto API ( #33251 )
...
Closes #33250
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-09-25 16:19:16 +02:00
Ryan Emerson
adb8d989f5
Allow Embedded Cache sizes to be configured via the CLI
...
Closes #31514
Signed-off-by: Ryan Emerson <remerson@redhat.com>
2024-09-24 14:35:24 +02:00
mposolda
a79d95d1bc
Documentation note about Java 8 support for client libraries
...
closes #33186
Signed-off-by: mposolda <mposolda@gmail.com>
2024-09-23 11:54:39 +02:00
Martin Bartoš
84564f080a
Redirect to relative-path from the root path ( #32868 )
...
Closes #32863
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-09-18 16:37:28 +02:00
mposolda
f1ec0a9bb6
Release notes and upgrading guide for the client libraries
...
closes #30815
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-09-18 14:52:11 +02:00
Vlasta Ramik
4ce40be1af
Make the ORGANIZATION a default feature ( #32404 )
...
Closes #32395
Signed-off-by: vramik <vramik@redhat.com>
2024-09-18 12:19:28 +02:00
Jon Koops
8bb3598129
Remove deprecated setOrCreateChild() method from Admin Client ( #33022 )
...
Closes #33021
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-09-18 09:33:54 +02:00
