libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions
26208 commits 4 branches 5 tags 483 MiB
Commit graph

26208 commits

This branch
This branch
All branches
Author SHA1 Message Date
rmartinc
b258b459d7 Generate RESTART_AUTHENTICATION event on success 
Closes #29385

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-05-23 19:08:22 +02:00
Michal Hajas
9eb310e5e0 Add dependency on guava to keycloak-api-docs-dist 
Closes #29814

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-05-23 16:11:05 +02:00
vramik
0508d279f7 Filter empty domains from OrganizationsRepresentation before running validation 
Closes #29809

Signed-off-by: vramik <vramik@redhat.com>
 2024-05-23 09:53:51 -03:00
Alexander Schwartz
c6e071cf07
Clear entries in remote caches and force events on the remote site (#29597) 
Closes #29592

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-23 14:47:32 +02:00
Marek Posolda
2efc163b89
Entry 999.0.0 in MIGRATION_MODEL prevents future migrations of the database 
Closes #27941

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-05-23 12:00:18 +00:00
dependabot[bot]
4acf61dd00 Bump rollup from 4.17.2 to 4.18.0 
Bumps [rollup](https://github.com/rollup/rollup) from 4.17.2 to 4.18.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.17.2...v4.18.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-23 12:51:08 +02:00
dependabot[bot]
1a896edd22 Bump @vitejs/plugin-react-swc from 3.6.0 to 3.7.0 
Bumps [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react-swc/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react-swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react-swc/compare/v3.6.0...v3.7.0)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-23 12:50:40 +02:00
dependabot[bot]
ee5452ffc8 Bump react-i18next from 14.1.1 to 14.1.2 
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 14.1.1 to 14.1.2.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v14.1.1...v14.1.2)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-23 10:13:37 +02:00
dependabot[bot]
6bfd51ee56 Bump @rollup/plugin-commonjs from 25.0.7 to 25.0.8 
Bumps [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) from 25.0.7 to 25.0.8.
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v25.0.8/packages/commonjs)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-23 10:13:06 +02:00
Stan Silvert
5d1166b473
OAuth 2.0 Device Polling Interval - Realms settings/Token Tab +- to change value not working (#29767) 
* OAuth 2.0 Device Polling Interval - Setting in Realms settings/Token Plus-Minus to change value not working
>
> The input was taking a String type variable. Fixed it by converting it to a number so that numeric calculations can be done on it. Also, applied a condition for Minus button so that the count is never less than zero since the default value is 0.
>
> Closes #29551

Signed-off-by: Ahana Mallik <ahanamallik@gmail.com>

* Satisfy linter.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Ahana Mallik <ahanamallik@gmail.com>
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
Co-authored-by: Ahana Mallik <ahanamallik@gmail.com>
 2024-05-23 10:11:24 +02:00
Daniel Fesenmeyer
c08621fa63 Always order required actions by priority (regardless of context) 
- AuthenticationManager#actionRequired: make sure that the highest prioritized required action is performed first, possibly before the currently requested required action
- AuthenticationManager#nextRequiredAction: make sure that the next action is requested via URL, also based on highest priority (-> requested URL will match actually performed action, unless required actions for the user are changed by a parallel operation)
- add tests to RequiredActionPriorityTest, add helper method for priority setup to ApiUtil (for easier and more robust setup than up-to-now)
- fix test WebAuthnRegisterAndLoginTest - which failed because WebAuthnRegisterFactory (prio 70) is now executed before WebAuthnPasswordlessRegisterFactory (prio 80)

Closes #16873

Signed-off-by: Daniel Fesenmeyer <daniel.fesenmeyer@bosch.com>
 2024-05-23 09:07:56 +02:00
Thomas Darimont
ab376d9101 Make required actions configurable (#28400) 
- Add tests for crud operations on configurable required actions
- Add support exposing the required action configuration via RequiredActionContext
- Make configSaveError message reusable in other contexts
- Introduced admin-ui specific endpoint for retrieving required actions with config metadata

Fixes #28400

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-05-23 08:38:36 +02:00
Stefan Guilhen
37f85937a7 Move organization authenticator into conditional subflows in the default browser and first broker login flows 
Closes #29446

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-05-22 20:48:29 -03:00
Peter Zaoral
bb1284704d
Enhance StartDevCommandDistTest to detect problems with URI scheme on Windows (#29593) 
* added a test - a Windows drive letter within URI can cause issues

Related-to: #29329

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2024-05-22 17:19:57 +00:00
Alexander Schwartz
f103d595f6 Fix glob pattern in Codeowners for translations 
Closes #29729

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-22 15:14:03 +02:00
Mark Franceschelli
bc82e7eb3c
Fix deprecated wizards (#29453) 
* updated wizards

Signed-off-by: mfrances <mfrances@redhat.com>

* fix broken tests

Signed-off-by: mfrances <mfrances@redhat.com>

---------

Signed-off-by: mfrances <mfrances@redhat.com>
 2024-05-22 14:18:28 +02:00
Jean Francois Denise
e284972d7a Fix for Issue #29773, Community keycloak-saml-adapter-galleon-pack shouldn't require to be resolved from channel 
Signed-off-by: Jean Francois Denise <jdenise@redhat.com>
 2024-05-22 13:54:52 +02:00
Ryan Emerson
0f17f0abc5
Require external Infinispan be of version 15 or greater 
Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-22 11:26:26 +00:00
vramik
1e597cca3e Split OrganizationResource into OrganizationResource and OrganizationsResource 
Closes #29574

Signed-off-by: vramik <vramik@redhat.com>
 2024-05-22 07:58:26 -03:00
vramik
55bf4feebc Disable identity provider at the realm level when an organization is disabled 
Closes #29483

Signed-off-by: vramik <vramik@redhat.com>
 2024-05-22 07:58:26 -03:00
vramik
278341aff9 Add organizations enabled/disabled capability 
Closes #28804

Signed-off-by: vramik <vramik@redhat.com>
 2024-05-22 07:58:26 -03:00
Alexander Schwartz
80de3a0a71
Allow migration of non-persistent sessions to persistent sessions 
Closes #29375

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-22 10:30:46 +02:00
Francis Pouatcha
542fc65923
Issue 29627: Expose Authorization Server Metadata Endpoint under /.well-known/oauth-authorization-server to comply with rfc8414 (#29628) 
closes #29627 

Signed-off-by: Francis Pouatcha <francis.pouatcha@adorsys.com>
Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>


Co-authored-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
 2024-05-22 10:30:34 +02:00
rmartinc
f7044ba5c2 Use SessionExpirationUtils for validate user and client sessions 
Check client session is valid in TokenManager
Closes #24936

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-05-22 10:12:20 +02:00
Case Walker
f32cd91792 Upgrade owasp-java-html-sanitizer, address all fallout 
Signed-off-by: Case Walker <case.b.walker@gmail.com>
 2024-05-22 09:15:25 +02:00
Raffaele Lucca
a5a55dc66e
Protocol now is mandatory during client scope creation. (#29544) 
closes #29027

Signed-off-by: raff897 <85362193+raff897@users.noreply.github.com>
 2024-05-22 09:10:46 +02:00
Patrick Jennings
84acc953dd
Client type OIDC base read only defaults (#29706) 
closes #29742
closes #29422

Signed-off-by: Patrick Jennings <pajennin@redhat.com>
 2024-05-22 09:07:19 +02:00
dependabot[bot]
68b2e40b38 --- 
updated-dependencies:
- dependency-name: alpinejs
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-22 09:05:36 +02:00
dependabot[bot]
cb8526e48c --- 
updated-dependencies:
- dependency-name: react-hook-form
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-22 09:04:45 +02:00
dependabot[bot]
ee0b55d25a --- 
updated-dependencies:
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-22 09:04:05 +02:00
dependabot[bot]
70bdf29f38 --- 
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-22 09:03:29 +02:00
rmartinc
9dfaab6d82 Invalid default/options in JavaKeystoreKeyProviderFactory algorithm property 
Closes #29426

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-05-22 08:49:45 +02:00
Stian Thorgersen
ceb70778e4
Update governance model around changes in maintainership (#29292) 
* Update governance model around changes in maintainership

Signed-off-by: stianst <stianst@gmail.com>

* Update GOVERNANCE.md

* Update GOVERNANCE.md

Co-authored-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Stan Silvert <ssilvert@redhat.com>
 2024-05-22 08:24:10 +02:00
Pedro Igor
b019cf6129 Support unmanaged attributes for service accounts and make sure they are only managed through the admin api 
Closes #29362

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-05-21 16:56:18 -03:00
Marek Posolda
6dc28bc7b5
Clarify the documentation about step-up authentication (#29735) 
closes #28341

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
 2024-05-21 19:46:27 +02:00
Steven Hawkins
a74b084d9d
diagnostic: add a thread dump on failure (#29749) 
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2024-05-21 16:22:11 +00:00
Martin Kanis
97cd5f3b8d Provide an additional endpoint to allow sending both invitation and registration links depending on the email being associated with an user or not 
Closes #29482

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-05-21 12:29:10 -03:00
Pedro Ruivo
7182bc2125 Infinispan 15.0.4.Final 
Closes #29743

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-05-21 16:47:26 +02:00
Bruno Oliveira da Silva
4a21b44b5f Add documentation about how to handle CVEs on third-party libraries reported by Snyk 
Closes #29707

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
 2024-05-21 09:08:18 -03:00
秉虎
82ae047231
Update KeysListTab.tsx (#29337) 
* Update KeysListTab.tsx

Signed-off-by: 秉虎 <s96016641@gmail.com>

* added missing singular key

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-05-21 13:56:57 +02:00
Hynek Mlnarik
65fcd44fe1 Use admin console correctly in KeycloakIdentity 
Fixes: #29688

Signed-off-by: Hynek Mlnarik <hmlnarik@redhat.com>
 2024-05-21 13:35:44 +02:00
mposolda
bb5f308e1d Translations for loa-condition-level and loa-max-age 
closes #29738

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-05-21 13:28:35 +02:00
dependabot[bot]
9d16f0e7c0 --- 
updated-dependencies:
- dependency-name: i18next
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-21 13:25:46 +02:00
himanshi1099
95d883c76f
Enable user when removing temporary lock (#29618) 
Closes #29336

Signed-off-by: Himanshi Gupta <higupta@redhat.com>
 2024-05-21 11:21:24 +02:00
Ryan Emerson
5d0cb7959e
Execute Aurora DB cleanup in a separate workflow to prevent timeout on cancel (#29689) 
Closes keycloak/keycloak-benchmark#803

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-05-21 09:17:15 +00:00
dependabot[bot]
5f2b9dc016 --- 
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-21 11:10:40 +02:00
Erik Jan de Wit
1a4b6090d3
add value of unmanagedAttributePolicy to the form (#29645) 
fixes: #29644

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-05-21 10:55:16 +02:00
mposolda
bbd4b60163 Update documentation after adapters removal 
closes #28792

Signed-off-by: mposolda <mposolda@gmail.com>
 2024-05-21 09:34:48 +02:00
Stan Silvert
7a0eec5e19 Skip failing test for now. 
Signed-off-by: Stan Silvert <ssilvert@redhat.com>
 2024-05-21 09:32:12 +02:00
Stian Thorgersen
ae034fd65f
Fix release labels (#29726) 2024-05-21 07:46:10 +02:00