236 commits

Author	SHA1	Message	Date
Martin Kanis	5e891951f5	Update Infinispan version to 14.0.2.Final	2022-11-16 14:56:45 +01:00
Alexander Schwartz	80dab89468	Disabling unstable test until further analysis is complete ... Relates to #15487	2022-11-15 16:12:20 +01:00
Michal Hajas	9944a594eb	Use DELETE statement instead of deleting one by one for HotRod store ... Closes #9420	2022-11-11 13:51:03 +01:00
Michal Hajas	dc007eab6f	Ignore test until the intermittent failure from #14917 is resolved	2022-11-07 20:47:39 +01:00
Michal Hajas	d9dcb6c60a	Fix Infinispan adapter not checking updated value in getAttribute methods ... Closes #12819	2022-11-07 20:44:43 +01:00
stianst	1de9c201c6	Refactor Profile ... Closes #15206	2022-11-07 07:28:11 -03:00
vramik	6bbcdd44a5	Run map-jpa model tests profile in GHA ... Closes #13573	2022-11-02 15:30:08 +01:00
Stian Thorgersen	97ae90de88	Remove Red Hat Single Sign-On product profile from upstream (#14697) ... * Remove Red Hat Single Sign-On product profile from upstream Closes #14916 * review suggestions: Remove Red Hat Single Sign-On product profile from upstream Closes #14916 Co-authored-by: Peter Skopek <pskopek@redhat.com>	2022-10-18 14:43:04 +02:00
Alexander Schwartz	97c4495c4f	Updating H2 database to 2.x ... Closes #12607 Co-authored-by: Stian Thorgersen <stian@redhat.com>	2022-10-14 11:52:34 +02:00
vramik	f49582cf63	MapUserProvider in KC20 needs to store username compatible with KC19 to be no-downtime-upgradable ... Closes #14678	2022-10-14 09:32:38 +02:00
danielFesenmeyer	f80a8fbed0	Avoid login failures in case of non-existing group or role references and update references in case of renaming or moving ... - no longer throw an exception, when a role or group cannot be found, log a warning instead - update mapper references in case of the following events: - moving a group - renaming a group - renaming a role - renaming a client's Client ID (may affect role qualifiers) - in case a role or group is removed, the reference still will not be changed - extend and refactor integration tests in order to check the new behavior Closes #11236	2022-10-13 13:23:29 +02:00
Martin Kanis	761929d174	Merge ActionTokenStoreProvider and SingleUseObjectProvider (#13677) ... Closes #13334	2022-10-13 09:26:44 +02:00
Martin Kanis	42ad95af4d	Stabilize testPersistenceMultipleNodesClientSessionsAtRandomNode model test	2022-09-27 21:01:35 +02:00
Christoph Leistert	7e5b45f999	Issue #8749: Add an option to control the order of the event query and admin event query	2022-09-11 21:30:12 +02:00
vramik	869ccc82b2	Enable MapUserProvider storing username with the letter case significance ... Closes #10245 Closes #11602	2022-09-09 11:46:11 +02:00
Alexander Schwartz	bb6b5abfa1	Remove Infinispan workarounds after upgrading to 13.x ... Closes #13962	2022-08-30 07:32:19 -03:00
Alexander Schwartz	a364a05cfa	Disable unstable scenario for testOfflineSessionLazyLoadingPropagationBetweenNodes ... This only fails when CrossDC and preloadOfflineSessionsFromDatabase are enabled after the upgrade to Infinispan 13.x Relates to #14020	2022-08-29 13:01:41 +02:00
Pedro Igor	2cc4b54404	Do not cache policies if they no longer exist (#12797) ... Closes #12657 Co-authored-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2022-08-25 13:52:30 +02:00
Michal Hajas	05b9e6d59e	Upgrade Infinispan to 13.0.10.Final (#13910) ... Closes #12306	2022-08-25 13:09:34 +02:00
Tero Saarni	74b2541d10	Fix invalid method reference when compiling with JDK17 (#13621) ... Closes #13961	2022-08-25 08:11:15 +02:00
Michal Hajas	d55d110ff9	Run Infinispan using Testcontainers in base testsuite ... Closes #13620	2022-08-10 16:36:44 +02:00
Martin Kanis	57f2f4654a	Add limit for authSessions per rootAuthSession in map storage	2022-08-10 12:56:37 +02:00
Michal Hajas	ec808d28bb	Remove possibility to start embedded HotRod server in hotrod-map module ... Closes #13247	2022-08-05 21:08:38 +02:00
Martin Kanis	ff26698053	Stabilize testCreateUserSessionsParallel model test	2022-08-02 08:12:42 +02:00
Michal Hajas	eb1f31e9dd	Optimize user-client session relationship for HotRod storage ... Closes #12818	2022-07-26 09:00:13 +02:00
Alexander Schwartz	cb81a17611	Disable Infinispan for map storage and avoid the component factory when creating a realm independent provider factory ... Provide startup time in UserSessionProvider independent of Infinispan, cleanup code that is not necessary for the map storage as it isn't using Clustering. Move classes to the legacy module. Closes #12972	2022-07-22 08:20:00 +02:00
Martin Kanis	c2bd01bca0	Add model tests for Hot Rod starting multiple nodes	2022-07-21 12:15:25 +02:00
Martin Kanis	c8a6846ee0	Remove offline sessions when deleting a realm	2022-07-19 16:40:22 +02:00
Alexander Schwartz	43539cd3c0	Rework handling of Infinispan exceptions to stabilize the test ... Closes #13164	2022-07-18 16:00:38 -03:00
Vlasta Ramik	ec853a6b83	JPA map storage: User / client session no-downtime store (#12241) ... Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Closes #9666	2022-07-14 12:07:02 -03:00
Michal Hajas	34d8629477	Convert ClientSessionIdleTimeout from seconds to milliseconds before … (#13048)	2022-07-13 07:29:52 -03:00
Martin Kanis	4b43612806	Disable WARN logging for Hot Rod RemoteQuery class	2022-07-11 16:48:56 -03:00
Pedro Igor	5b48d72730	Upgrade Resteasy v4 ... Closes #10916 Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2022-07-11 12:17:51 -03:00
Michal Hajas	0f86427dd0	Make user->client sessions relationship consistent ... Closes #12817	2022-07-11 08:42:28 -03:00
Stefan Guilhen	5801ed27a0	Enable JPA store for ActionTokenStoreSpi in model tests ... Closes #12902	2022-07-06 12:08:49 -03:00
Stefan Guilhen	dc88dd5286	Users Map JPA implementation (#12871)	2022-07-05 11:19:31 -03:00
Alexander Schwartz	098d4dda0e	Split PublicKeyStorageProvider (#12897) ... Split PublicKeyStorageProvider - Extract clearCache() method to separate interface and move it to the legacy module - Make PublicKeyProvider factories environment dependent - Simple map storage for public keys that just delegates Resolves #12763 Co-authored-by: Martin Kanis <mkanis@redhat.com>	2022-07-05 09:57:51 -03:00
Stefan Guilhen	007fa1f374	Single Use Objects Map JPA implementation ... Closes #9852	2022-07-04 10:05:51 -03:00
vramik	6335090092	Use JpaMapStorageProviderFactory for authorization services in model tests ... Closes #12743	2022-06-28 15:01:49 +02:00
Stefan Guilhen	7d96f3ad5a	Events Map JPA implementation ... Closes #9667	2022-06-21 13:53:48 +02:00
Alexander Schwartz	84d21f0230	for all added files in the PR, update the copyright header or add it if it was missing	2022-06-21 08:53:06 +02:00
Alexander Schwartz	d41764b19b	Inline deprecated methods in legacy code	2022-06-21 08:53:06 +02:00
Alexander Schwartz	1bc6133e4e	redirect calls to userLocalStorage from legacy modules (federation, ldap, sssd, kerberos)	2022-06-21 08:53:06 +02:00
Alexander Schwartz	14a369a8cc	Added LegacySessionSupport SPI ... While some methods around onCache() are still called from the legacy code, all other methods log a warning with a stacktrace.	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	703e868a51	Preparation for moving User Storage SPI ... - Introduction of new AdminRealmResource SPI - Moving handler of /realm/{realm}/user-storage into model/legacy-service - session.users() and userStorageManager() moved refers legacy module IMPORTANT: Broken as UserStorageSyncManager is not yet moved	2022-06-21 08:53:06 +02:00
Hynek Mlnarik	36f76a37ad	Move realms, clients, groups, roles, clientscopes into legacy module ... - Introduces Datastore SPI for isolating data store methods - Introduces implementation of the datastore for legacy storage - Updates DefaultKeycloakSession to leverage Datastore SPI instead of direct creating of area providers by the session	2022-06-21 08:53:06 +02:00
Michal Hajas	781183e551	Enable indexing for ResourceServerEntity ... Closes #12533	2022-06-20 10:17:19 +02:00
Alexander Schwartz	71e7982a49	Adding central time offset reset in model tests as it was missing for AuthenticationSessionTest and UserSessionPersisterProviderTest ... Also adding try/finally in other places in the integration tests where it was missing. Closes #12530	2022-06-16 13:42:55 +02:00
vramik	1b3a76d0af	Do not persist client sessions of transient user sessions ... Closes #12357	2022-06-15 10:54:23 +02:00
Martin Kanis	df72cf72f2	Hot Rod map storage: Single-use (action token) no-downtime store	2022-06-06 16:01:18 +02:00
Michal Hajas	09c0a69a8f	Add HotRod no downtime store for events ... Closes #9676	2022-06-02 13:30:19 +02:00
Alexander Schwartz	6c3d25fd8f	Limit the number of clientSessionIds in the test ... Before it was 1500 client sessions, now its only 150 client sessions. This should help to keep the test within its time constraint of 60 + 30 seconds. Closes #12264	2022-05-31 17:10:49 +02:00
Michal Hajas	1a98765fb7	Fix cascade removal of client session on user session removal for CHM ... Closes #12146	2022-05-30 09:58:54 +02:00
Martin Kanis	0cb3c95ed5	Map storage: Single-use objects (action token)	2022-05-25 16:47:10 +02:00
vramik	2cbc167435	JPA map storage: model tests fails with NPE ... Closes #12165	2022-05-25 09:28:08 +02:00
vramik	f8ca25d4a4	Add a profiles testsuite for jpa-map storage ... Closes #12045	2022-05-20 09:17:33 +02:00
Michal Hajas	0bda7e6038	Introduce map event store with CHM implementation ... Closes #11189	2022-05-17 12:57:35 +02:00
Michal Hajas	6b5c417742	Add HotRod store for authorization services ... Closes #9679	2022-05-06 15:31:38 +02:00
Michal Hajas	fc974fc019	Update composite roles on child role removal ... Closes #11769	2022-05-05 15:18:18 +02:00
vramik	0d83b51b20	Enhance Map authz entities with REALM_ID (ResourceServer with CLIENT_ID) searchable field ... Co-authored-by Michal Hajas <mhajas@redhat.com> Closes #10883	2022-05-03 12:56:27 +02:00
Hynek Mlnarik	1b1cf266eb	Add support for async profiler to model testsuite ... Fixes: #11743	2022-05-03 12:53:10 +02:00
vramik	2ecf250e37	Deletion of all objects when realm is being removed ... Closes #11076	2022-04-28 11:09:17 +02:00
vramik	5248815091	Disable infinispan realm and user cache for map storage tests ... Closes #11213	2022-04-25 09:38:49 +02:00
Stefan Guilhen	b29b27d731	Ensure code does not rely on a particular format for the realm id or component id	2022-04-20 14:40:38 +02:00
Martin Kanis	a2d7cd7a5c	Hot Rod map storage: User / client session no-downtime store	2022-04-14 15:34:22 +02:00
Alexander Schwartz	a6dd9dc0f1	Avoiding AvlPartitionFactory and using JdbmPartitionFactory for the embedded LDAP to work around unstable tests. ... Fix for #11171 didn't turn out to cover the root cause. Also improved transaction handling in LDAP Map storage. Closes #11211	2022-04-12 09:12:21 +02:00
Alexander Schwartz	5c810ad0e5	Avoid short-lived connections for ApacheDS to avoid messages around "ignoring the message MessageType UNBIND_REQUEST" ... The comment in LdapRequestHandler.java in ApacheDS notes just before discarding an unbind request: "in some cases the session is becoming null though the client is sending the UnbindRequest before closing". Also implementing a retry logic for all remaining errors regarding LDAP. Closes #11171	2022-04-11 10:03:15 +02:00
Michal Hajas	1f2ebf4cba	Add HotRod no downtime store for Realms ... Closes #9670	2022-04-08 09:36:01 +02:00
Martin Kanis	395bd447f2	Hot Rod map storage: Login failure no-downtime store	2022-04-01 20:43:18 +02:00
Alexander Schwartz	3ebfc91b75	Reduce logging of errors due to the bounded queue ... Closes #10588	2022-03-23 15:42:06 +01:00
Alexander Schwartz	78549fe024	Avoid duplicating parsing logic in ModelVersion ... This now allows handling of the 999-SNAPSHOT version. Closes #10879	2022-03-23 10:34:43 +01:00
Martin Kanis	e493b08fa7	Add expiration field to root authentication session	2022-03-23 07:47:47 +01:00
keycloak-bot	c71aa8b711	Set version to 999-SNAPSHOT (#10784)	2022-03-22 09:22:48 +01:00
Martin Kanis	0faf3987f6	Hot Rod map storage: Authentication session no-downtime store	2022-03-22 09:05:52 +01:00
Alexander Schwartz	18f391d8c4	Fix spelling error in field and classname ... It's always a converter, unless electricity is involved. Closes #10573	2022-03-09 08:28:52 -03:00
Alexander Schwartz	3c3f003a38	LDAP Map storage support to support read/write for roles ... Closes #9929	2022-03-08 12:03:10 +01:00
Alexander Schwartz	ebfc24d6c1	Ensure that Infinispan shutdowns correctly at the end of the tests. Report any exceptions within another thread as a test failure. ... Adding additional information like a thread dump when it doesn't shutdown as expected. Closes #10016	2022-03-04 10:47:01 +01:00
Alexander Schwartz	74581b5c10	Workaround for deadlock when shutting down Infinispan in 12.1.7.Final. ... This is tracked in upstream issue https://issues.redhat.com/browse/ISPN-13664 Closes #10016	2022-03-04 10:47:01 +01:00
Martin Kanis	6249e34177	Hot Rod map storage: Client scope no-downtime store	2022-02-24 13:30:27 +01:00
Michal Hajas	b4281468d0	Convert Map Realm Entities into interfaces ... Closes #9736	2022-02-24 13:23:19 +01:00
Luca Graf	febb447919	KEYCLOAK-19297 Use real 'external' client object id to store AuthenticatedClientSession in UserSession object, so that the client session can be looked by the client object id in further requests.	2022-02-18 12:42:59 +01:00
Alexander Schwartz	50c783f4a9	Refactor test for readability and structure ... Closes #9869	2022-02-15 20:13:43 +01:00
keycloak-bot	d9f1a9b207	Set version to 18.0.0-SNAPSHOT (#10165)	2022-02-11 21:28:06 +01:00
Martin Kanis	26ac142b99	Hot Rod map storage: Roles no-downtime store	2022-02-11 14:31:34 +01:00
Michal Hajas	b50b8f883b	Implement HotRod storage for Users ... Closes #9671	2022-02-11 10:20:36 +01:00
Martin Kanis	0471ec4941	Cross-site validation for lazy loading of offline sessions & Switch default offline sessions to lazy loaded	2022-02-03 21:43:47 +01:00
Alexander Schwartz	64cbbde7cf	Adding workaround unstable tests due to Infinispan 12.1.7 ... Closes #9867	2022-01-30 20:58:51 +01:00
Martin Kanis	ddcabe61b2	KEYCLOAK-19571 Add indices to HotRodClientEntity fields	2022-01-20 17:46:47 +01:00
Hynek Mlnařík	2877482e40	Limit time for running model tests ... Workaround for #9648	2022-01-20 12:30:49 +01:00
Hynek Mlnařík	d39eb95705	Introduce per-field delegation of entities	2022-01-05 14:06:45 +01:00
keycloak-bot	9f3d4a7d42	Set version to 17.0.0-SNAPSHOT	2021-12-20 10:50:39 +01:00
Michal Hajas	5aa9a09b20	Closes #8969 - Add Groups HotRod storage	2021-12-13 18:12:19 +01:00
Hynek Mlnarik	3c7e5c8440	Create delegates and empty instances in DeepCloner ... Fixes: #9030	2021-12-13 18:04:48 +01:00
Michal Hajas	158640d1f3	Closes #8954 - move Hot Rod classes to hotRod package	2021-11-30 11:52:16 +01:00
Martin Bartoš	1e1a6779be	Issue 8814: Replace deprecated hamcrest-all dependencies	2021-11-23 13:56:28 +01:00
Michal Hajas	2f9a5aae0f	KEYCLOAK-19028 Add HotRod Map storage implementation	2021-11-11 14:10:00 +01:00
Martin Kanis	af97849feb	KEYCLOAK-19030 Implement HotRodConnectionProvider	2021-10-27 14:07:19 +02:00
Michal Hajas	cfbb7f5553	KEYCLOAK-19593 Remove CRUD operations from MapStorage interface ... Signed-off-by: Michal Hajas <mhajas@redhat.com>	2021-10-21 17:01:33 +02:00
Hynek Mlnarik	8ee992e638	KEYCLOAK-19482 Generate map entity cloners	2021-10-18 13:14:14 +02:00
Hynek Mlnarik	3abf9283a8	KEYCLOAK-19374 Create implementation based on annotation processor ... Use of boxed types as started in 009d4ca445 is finalized here to enable storing data in a map. MapClientEntity methods are reordered for the sake of grouping the collection-based properties together and understanding the connections between those.	2021-10-07 10:54:25 +02:00
Martin Kanis	30b3caee9f	KEYCLOAK-18445 Add support for cross-site model tests	2021-10-06 14:37:06 +02:00
Michal Hajas	da0c945475	KEYCLOAK-18940 Add support for searching composite roles	2021-10-01 12:41:19 +02:00
Martin Kanis	6886bd6651	KEYCLOAK-18941 ExecutionException when computed future - InfinispanCacheInitializer	2021-08-05 18:28:27 +02:00
keycloak-bot	262ec3d031	Set version to 16.0.0-SNAPSHOT	2021-07-30 14:56:10 +02:00
Hynek Mlnarik	8889122dc1	KEYCLOAK-18845 Remove key type in map storage (simplify generics)	2021-07-23 17:04:20 +02:00
Hynek Mlnarik	07402d9aac	KEYCLOAK-18845 Remove key type in map storage (move StringKeyConvertor to CHM)	2021-07-23 17:04:20 +02:00
Hynek Mlnarik	44cd6cd5fb	KEYCLOAK-18824 Simplify MapStorageTransaction and move registerEntityForChanges to CHM transaction	2021-07-21 20:58:26 +02:00
Hynek Mlnarik	009d4ca445	KEYCLOAK-18747 Turn MapClientEntity into interface + introduce delegates ... Given that the Map*Entity is turned into an interface, it makes more sense to use non-primitive types to allow for null values. This enables signalizing that an entity does not define a particular value, and builds a base for definition of instances with defaults: If a value is not present in the queried instance (i.e. is `null`), the value would be obtained from a delegate containing the defaults.	2021-07-17 15:45:46 +02:00
Hynek Mlnarik	0523dad4d5	KEYCLOAK-18414 Remove unnecessary id parameter from create operation	2021-07-01 11:18:53 +02:00
keycloak-bot	13f7831a77	Set version to 15.0.0-SNAPSHOT	2021-06-18 10:42:27 +02:00
Martin Kanis	23aee6c210	KEYCLOAK-16616 Limit number of authSessios per rootAuthSession	2021-05-27 22:10:36 +02:00
vramik	3aa06c2721	KEYCLOAK-18073 avoid ModelDuplicateException during parallel starup of servers	2021-05-27 07:10:35 +02:00
Martin Kanis	1ab0d585a9	KEYCLOAK-11019 Initial support for lazy offline user-session loading ... Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com> Co-authored-by: Thomas Darimont <thomas.darimont@gmail.com>	2021-05-26 09:54:28 +02:00
mhajas	e609949264	KEYCLOAK-17267 Add index to user attribute name and value to support user sync from ldap	2021-05-19 13:38:11 +02:00
vramik	4d776cd780	KEYCLOAK-18137 Fix introduced SPI name	2021-05-18 20:30:21 +02:00
Peter Flintholm	919899b994	KEYCLOAK-18039: Optimise offline session load on startup ... Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-05-13 16:26:26 +02:00
mhajas	f37a24dd91	KEYCLOAK-17348 Add manual pagination into UserStorageManager#query	2021-05-12 15:09:36 +02:00
Hynek Mlnarik	f25de94ae1	KEYCLOAK-18070 Report test coverage for model tests	2021-05-11 14:28:17 +02:00
keycloak-bot	4b44f7d566	Set version to 14.0.0-SNAPSHOT	2021-05-06 14:55:01 +02:00
Hynek Mlnarik	98a88e3e8b	KEYCLOAK-17991 Introduce preview feature for map storage	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	6d97a573e6	KEYCLOAK-17696 Make MapStorageFactory amphibian	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	e46a5484c5	KEYCLOAK-17695 Split MapStorage provider and provider factory	2021-05-06 11:38:41 +02:00
Hynek Mlnarik	32fb45eb5b	KEYCLOAK-17774 Implement equals method for work cache events ... Co-Authored-By: stianst <stianst@gmail.com> Co-Authored-By: Michal Hajas <mhajas@redhat.com>	2021-05-03 10:47:15 +02:00
Hynek Mlnarik	7d4255b2a1	KEYCLOAK-17871 Add support for running parallel model tests	2021-04-30 16:13:57 +02:00
vramik	162043beec	KEYCLOAK-17615 Move database initialization from KeycloakApplication to JpaConnectionProviderFactory	2021-04-28 13:43:48 +02:00
Martin Kanis	515bfb5064	KEYCLOAK-16378 User / client session map store ... Co-authored-by: Martin Kanis <mkanis@redhat.com> Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2021-04-28 09:09:15 +02:00
rmartinc	0a0caa07d6	KEYCLOAK-17215 Slowness issue while hitting /auth/admin/realms/$REALM/clients?viewableOnly=true after DELETE a role	2021-03-31 12:57:17 +02:00
Hynek Mlnarik	17d41c472b	KEYCLOAK-17412 Improve control of model tests	2021-03-22 21:56:59 +01:00
vramik	6e501946b1	KEYCLOAK-17021 Client Scope map store	2021-03-08 21:59:28 +01:00
Hynek Mlnarik	6c07679446	KEYCLOAK-16584 Rename map to CRUD operations ... * rename putIfAbsent() to create(), get() to read(), put() to update(), remove() to delete() * move ConcurrentHashMapStorage to org.keycloak.models.map.storage.chm package * Add javadoc to MapStorage	2021-01-20 16:20:56 +01:00
Michal Hajas	ba8e2fef6b	KEYCLOAK-15524 Cleanup user related interfaces	2021-01-18 16:56:10 +01:00
vramik	1402d021de	KEYCLOAK-14846 Default roles processing	2021-01-08 13:55:48 +01:00
keycloak-bot	75be33ccad	Set version to 13.0.0-SNAPSHOT	2020-12-16 17:31:55 +01:00
Michal Hajas	8e376aef51	KEYCLOAK-15847 Add MapUserProvider	2020-12-10 08:57:53 +01:00
Hynek Mlnarik	8c0c542f09	KEYCLOAK-16489 Add ability to run model tests with LDAP	2020-12-07 20:54:06 +01:00
Hynek Mlnarik	363df6cab4	KEYCLOAK-16405 Tests for storage logical layer	2020-11-25 12:16:48 +01:00