Commit graph

25590 commits

Author SHA1 Message Date
Stefan Guilhen
2161e72872 Add migration for the useTruststoreSpi config property in LDAP user storage provider
- legacy `ldapsOnly` value now migrated to `always`.

Closes #25912

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-02-12 11:53:19 +01:00
Stefan Guilhen
eac43822c3 Avoid changing the config value for the useTruststoreSpi property
- prevents cached LDAPConfig entry from changing when retrieving this value

Closes #25912

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-02-12 11:53:19 +01:00
Pedro Igor
e50642ac32 Allow setting a default user profile configuration
Closes #26489

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-02-12 11:16:48 +01:00
Erik Jan de Wit
9f262da751
bigger column (#26740)
fixes: #25789

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-02-12 09:18:12 +00:00
mposolda
7af753e166 Documentation for AIA
closes #25569

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-02-12 09:42:34 +01:00
dependabot[bot]
2c17bbeee6 Bump rollup from 4.9.6 to 4.10.0 in /js
Bumps [rollup](https://github.com/rollup/rollup) from 4.9.6 to 4.10.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.9.6...v4.10.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 09:41:26 +01:00
Erik Jan de Wit
e2f42c5ac3
added new q param (#26739)
fixes: #26231

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-02-12 09:33:11 +01:00
Václav Muzikář
cdb1841828
Upgrade to Quarkus 3.7.2 (#26938)
Closes #26916

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-12 09:23:24 +01:00
Erik Jan de Wit
39bd59cada
fix flow status (#26685)
fixes: #26636

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-02-12 09:21:23 +01:00
dependabot[bot]
c34ff84d6e Bump rollup
Bumps [rollup](https://github.com/rollup/rollup) from 4.9.6 to 4.10.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.9.6...v4.10.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 08:54:56 +01:00
dependabot[bot]
8791568054 Bump tar-fs from 3.0.4 to 3.0.5 in /js
Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 3.0.4 to 3.0.5.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 08:53:30 +01:00
dependabot[bot]
4db60f329a Bump vite from 5.1.0 to 5.1.1 in /js
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.1.0 to 5.1.1.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.1.1/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 08:53:03 +01:00
Thomas Darimont
93fc6a6c54 Shorter lifespan for offline session cache entries in memory
Closes #26810

Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: Martin Kanis <mkanis@redhat.com>

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-02-09 19:44:04 +01:00
Stefan Guilhen
d3ae075a33 Fix MembershipType so that NPE is not thrown when an empty member is found within a group
Closes #25883

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-02-09 19:04:37 +01:00
Daniel Fesenmeyer
20e535a3f6
Add user profile tests for Checks that attribute with select annotation (#26899)
Closes #26898

Signed-off-by: Daniel Fesenmeyer <daniel.fesenmeyer@bosch.com>
2024-02-09 17:34:55 +01:00
Steven Hawkins
5f0ee7b0f7
fix: adds service-ca.crt to the trust stores (#26912)
closes: #26910

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-09 14:32:12 +01:00
Dipesh Singh
1a823e8733
modifying start-server.js to work on windows (#26892)
Signed-off-by: dipeshsingh253 <sinhdipesh@gmail.com>
2024-02-09 13:22:00 +01:00
stianst
d2f74dd83d Fix anchors in securing apps guide in prod profile
Closes #26853

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-09 12:31:30 +01:00
Martin Bartoš
b48a1f41fe
Use latest OLM version for Operator CI (#26922)
Closes #26921

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-09 12:08:02 +01:00
Alexander Schwartz
ebf31671e0
Upgrade Infinispan to the latest version (#26850)
Closes #26812

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-09 10:52:27 +01:00
dependabot[bot]
13fa851a9f Bump @types/node from 20.11.16 to 20.11.17 in /js
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.16 to 20.11.17.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-09 09:09:38 +01:00
dependabot[bot]
282a0e15c0 Bump @faker-js/faker from 8.4.0 to 8.4.1 in /js
Bumps [@faker-js/faker](https://github.com/faker-js/faker) from 8.4.0 to 8.4.1.
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](https://github.com/faker-js/faker/compare/v8.4.0...v8.4.1)

---
updated-dependencies:
- dependency-name: "@faker-js/faker"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-09 09:08:54 +01:00
Pedro Igor
b91ad23b20
Update theme documentation about the considerations when deploying custom themes (#26885)
Related #23907

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-02-09 04:21:54 +01:00
Réda Housni Alaoui
67718c653a UPDATE_EMAIL action token handling should allow the user to resume its navigation to the redirect uri
Signed-off-by: Réda Housni Alaoui <reda-alaoui@hey.com>
2024-02-08 18:32:38 -03:00
dependabot[bot]
b3321cb26e
Bump vite from 5.0.12 to 5.1.0 in /js (#26907)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.0.12 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@5.1.0/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-08 15:52:59 +00:00
dependabot[bot]
f345b1829f
Bump monaco-editor from 0.45.0 to 0.46.0 in /js (#26906)
Bumps [monaco-editor](https://github.com/microsoft/monaco-editor) from 0.45.0 to 0.46.0.
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/monaco-editor/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: monaco-editor
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-08 15:52:09 +00:00
dependabot[bot]
1ba10ab9de
Bump mocha from 10.2.0 to 10.3.0 in /js (#26905)
Bumps [mocha](https://github.com/mochajs/mocha) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v10.2.0...v10.3.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-08 15:50:20 +00:00
Steven Hawkins
77581d2527
fix: change from operator. to kc.operator. keys (#26414)
closes #12352

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-08 15:03:20 +01:00
Grzegorz Grzybek
a95894dbad
Do not verify nonce in access and refresh tokens (only id tokens) (#26891)
Closes #26651

Signed-off-by: Grzegorz Grzybek <gr.grzybek@gmail.com>
2024-02-08 13:19:32 +01:00
Dominik Topp
edd68d12fb
Fix for freemarker template URL sanitization in template.ftl (#26838)
closes #26826

Signed-off-by: Dominik Topp <19268966+dominiktopp@users.noreply.github.com>
2024-02-08 11:50:49 +01:00
Michal Hajas
de598577b1 Fix confusing SAML NameId mapper format tooltip
Closes #26051
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>
2024-02-08 11:21:11 +01:00
dependabot[bot]
7558bb8dce Bump @types/react-dom from 18.2.18 to 18.2.19 in /js
Bumps [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) from 18.2.18 to 18.2.19.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/react-dom"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-08 10:41:08 +01:00
Stian Thorgersen
cd1e483134
Remove section on adding custom attributes with account v1 and custom themes (#26858)
Closes #26856

Signed-off-by: stianst <stianst@gmail.com>
2024-02-08 07:28:32 +01:00
Douglas Palmer
66f0d2ff1d blah
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-02-07 15:55:06 -03:00
Douglas Palmer
d9d41b1a09 Brute Force Detection is disabled when updating frontenUrl via admin client
Closes #21409

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-02-07 15:55:06 -03:00
Steven Hawkins
402c7d9b18
Removing version overrides and further aligning with quarkus versions (#26788)
* elevating wildfly-elytron-http-oidc version management

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing testing dependency overrides

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* further version aligment with quarkus

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a resteay-core-spi that can be overriden

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing hamcrest override

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* aligning with 3.7.1

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 17:57:23 +01:00
Steven Hawkins
54a55bf1a6 Update pom.xml
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-02-07 13:47:57 -03:00
Steve Hawkins
a9f746380a task: upgrade to osgi 6.0.0
closes #26823

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 13:47:57 -03:00
Alexander Schwartz
786023fd06
Update HA guide about non-blocking probes (#26783)
Closes #26781

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-07 16:16:50 +01:00
Steven Hawkins
d03b25b4b5
task: adds event diagnostics for failed tests (#26864)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 10:11:03 -05:00
Michael Schnitzler
fdfe41bdda fix documentation for resetting OTP in "reset credentials" flow (#26834)
The former version stated that the "Reset OTP" step had to be disabled in the "reset credentials" authentication flow in order to keep the OTP unchanged. This leads to an error. More precisely, the "Reset - Conditional OTP" sub-flow has to be disabled.

Fixex #26834

Signed-off-by: Michael Schnitzler <schnitzler.michael+github@gmail.com>
2024-02-07 11:57:58 -03:00
Tero Saarni
ac1780a54f
Added event for temporary lockout for brute force protector (#26630)
This change adds event for brute force protector when user account is
temporarily disabled.

It also lowers the priority of free-text log for failed login attempts.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-07 14:13:33 +00:00
zak905
bcd423b270 rephrase sentence in changes-22_0_0.adoc for more clarity
Signed-off-by: zak905 <zakaria.amine88@gmail.com>
2024-02-07 09:32:43 -03:00
Zakaria Amine
ff39a15221 Update examples/providers/rest/README.md
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: zak905 <zakaria.amine88@gmail.com>
2024-02-07 09:32:43 -03:00
zak905
c7db7bd528 Update custom rest endpoint documentation and example
Add a mention about beans.xml and @Provider in the extending server documentation

Add beans.xml in the rest provider example

Add a mention about @Provider in the upgrading guides

Closes #25882

Signed-off-by: zak905 <zakaria.amine88@gmail.com>

Address suggested change for docs/documentation/server_development/topics/extensions.adoc

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>

Address suggested change for docs/documentation/server_development/topics/extensions.adoc

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: zak905 <zakaria.amine88@gmail.com>

Address suggested change for docs/documentation/upgrading/topics/keycloak/changes-22_0_0.adoc

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: zak905 <zakaria.amine88@gmail.com>
2024-02-07 09:32:43 -03:00
Stian Thorgersen
4d9f33efe3
Add cookie type builder (#26848)
Closes #26847

Signed-off-by: stianst <stianst@gmail.com>
2024-02-07 13:16:04 +01:00
agagancarczyk
2a8b54114f
Removed duplicate refresh buttons (#26857)
* fixed refresh btn for events

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

* cleanup

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>

---------

Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
Co-authored-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2024-02-07 11:24:52 +00:00
dependabot[bot]
1430b8b6cd Bump react-i18next from 14.0.3 to 14.0.5 in /js
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 14.0.3 to 14.0.5.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v14.0.3...v14.0.5)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-07 11:29:52 +01:00
Dallas
17abda5160
chore: clarify default creds in readme, add .vscode to gitignore (#26840)
Signed-off-by: gitdallas <5322142+gitdallas@users.noreply.github.com>
2024-02-07 10:45:48 +01:00
dependabot[bot]
a561587f6d Bump react-hook-form from 7.50.0 to 7.50.1 in /js
Bumps [react-hook-form](https://github.com/react-hook-form/react-hook-form) from 7.50.0 to 7.50.1.
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.50.0...v7.50.1)

---
updated-dependencies:
- dependency-name: react-hook-form
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-07 10:31:41 +01:00