Igor Petrov
8e872818c5
feat: eliminate client secret requirement
...
This commit eliminates neccessity for providing client secret when
constructing client via Admin Client API. The requirement for client
secret became obsolete when Keycloak onboarded a X509 certificate
authorizer.
closes #33755
Signed-off-by: Igor Petrov <igor.petrov-ext@camunda.com>
2024-10-18 16:35:15 +02:00
Pedro Igor
3a9bab35b6
Fixing action token lifespan information in the invitation email
...
Closes #34049
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-18 09:10:14 +02:00
Pedro Igor
d1dba15964
Do not show domain match message in the identity-first login when no login hint is provided
...
Closes #34069
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-18 09:05:27 +02:00
Pedro Igor
ee38d551ce
Respect the locale set to a user when redering verify email pages
...
Closes #34063
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-18 09:04:38 +02:00
Stefan Guilhen
7d8ff710c2
Invalidate user session when associated IdP is missing (previously removed)
...
Closes #31724
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2024-10-17 16:30:51 -03:00
Pascal Knüppel
41ee68611f
Allow to create EC certificates if new EC-key-provider is created ( #31843 )
...
Closes #31842
Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
2024-10-17 16:05:59 +02:00
Thomas Darimont
6a4ec24015
Users have to authenticate first before account-console is loaded
...
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-10-17 07:53:20 -03:00
Thomas Darimont
c400eff9b0
Account console backend should redirect to login on missing auth ( #31469 )
...
Adapted the login redirect logic from the old account console.
Fixes #31469
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-10-17 07:53:20 -03:00
rmartinc
13655007a6
Remove online session for offline access in direct access grants and client credentials
...
Closes #32650
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-17 10:49:05 +02:00
Martin Kanis
a8a5c96510
Fix unstable testPostBrokerLoginFlowWithOTP_bruteForceEnabled test
...
Closes #33549
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-10-15 15:36:05 -03:00
Martin Kanis
8fb5ecaa6c
Auth not possible for auth session where user was enabled in the meantime
...
Closes #33883
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-10-15 14:28:36 -03:00
Jon Koops
228c21a7a0
Allow Keycloak JS to be initialized without passing options ( #33950 )
...
Closes #8935
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-15 17:46:15 +02:00
Pedro Igor
b76f4f9c1b
Avoid iterating over user policies when removing users
...
Closes #19358
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-15 15:01:40 +02:00
Martin Kanis
0ebf862b63
LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and user already exists
...
Closes #32266
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-10-11 09:16:17 -03:00
rmartinc
7e5734fd48
Fix incorrect filter in docker protocol
...
Closes #33776
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-11 08:58:18 +02:00
Pedro Igor
9a3d81c23e
Only process organization selection when the user is identified
...
Closes #33699
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-10 16:24:25 +02:00
rmartinc
a74e60f4d7
Check email with ignorecase when setting basic attributes in IdP
...
Closes #31848
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-10 09:55:58 +02:00
Jon Koops
3930356c21
Treat unencrypted local origins as an insecure context in Safari ( #33700 )
...
Closes #33557
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-09 23:38:03 +02:00
Douglas Palmer
a276b3bb3d
Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton
...
Closes #32676
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-10-09 08:00:57 +02:00
rmartinc
467e881725
Use clickLink in delete credential page
...
Closes #33505
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-08 12:22:53 +02:00
mposolda
07cf71e818
Better logging when error happens during transaction commit
...
closes #33275
Signed-off-by: mposolda <mposolda@gmail.com>
2024-10-08 11:14:10 +02:00
Ricardo Martin
611e6d102e
Create session for the requester client in Token Exchange ( #31290 )
...
Closes #31180
Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2024-10-08 10:24:10 +02:00
Gilles Etchepareborde
593afbb4e0
This PR intends to always set the event type in order to prevent error when firing an error event.
...
Closes #30453
Signed-off-by: Gilles Etchepareborde <etchepar@yahoo.fr>
2024-10-08 10:15:53 +02:00
rmartinc
a475cbf009
Re-try login to account for firefox CI
...
Closes #30994
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-08 10:08:49 +02:00
rmartinc
44b1290917
Return next action if the current action is not supported in AIA
...
Closes #33513
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-08 09:54:53 +02:00
Douglas Palmer
26255f47f8
Upgrade Selenium ( #33600 )
...
Closes #33599
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
2024-10-08 09:18:54 +02:00
ikhomyn
6b96ee2b6d
Fix social login tests ( #33525 )
...
Part of #33524
Signed-off-by: Ivan Khomyn <ikhomyn@redhat.com>
2024-10-07 16:44:33 +02:00
mposolda
95c529104e
Remove retry in LoginPage.resetPassword due the more universal fix exists in UIUtils.clickLink
...
closes #33492
Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 88c94c28b0092df3f44277a5cc47e1d5026fe3af)
2024-10-04 14:25:58 +02:00
mposolda
cb5c510c49
Adding retry when clicking on rememberMe checkbox on the loginPage during tests
...
closes #32476
closes #32677
closes #32767
closes #33132
closes #32550
Signed-off-by: mposolda <mposolda@gmail.com>
2024-10-04 12:01:38 +02:00
mposolda
edb05421ac
Issue when running tests from IDE on embedded undertow - org.jboss.threads.EnhancedQueueExecutor.setKeepAliveTime(java.time.Duration)
...
closes #33517
Signed-off-by: mposolda <mposolda@gmail.com>
2024-10-03 18:44:41 +02:00
rmartinc
38e0568f9f
Use clickLink in LanguageComboboxAwarePage
...
Closes #32473
Closes #32939
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-03 18:26:10 +02:00
vramik
b7eaa9b0cb
Wildcard search not working for custom user attributes
...
Closes #32451
Signed-off-by: vramik <vramik@redhat.com>
2024-10-03 08:48:36 -03:00
Maksim Zvankovich
35eba8be8c
Add option to include the organization id in the organization claims
...
Closes #32746
Signed-off-by: Maksim Zvankovich <m.zvankovich@nexovagroup.eu>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
2024-10-03 08:11:36 -03:00
Stian Thorgersen
6092524d79
Fix theme resource loading on Windows, and enable additional test in jdk-integration-tests ( #33512 )
...
Closes #33508
Signed-off-by: stianst <stianst@gmail.com>
2024-10-03 11:37:49 +02:00
rmartinc
456878bb00
Use clickLink for logout in webauthn
...
Closes #32923
Closes #32606
Closes #32605
Closes #32503
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-03 08:23:48 +02:00
Martin Kanis
51fd133f05
[Keycloak CI] - User Federation Tests - fixing AD tests
...
Closes #33231
Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-10-02 16:02:55 -03:00
Pedro Aguiar
f60be4bf8e
update: fix typo "a email" ( #33482 )
...
- "a email" becomes "an email".
Signed-off-by: Pedro Aguiar <contact@codespearhead.com>
2024-10-02 19:34:33 +02:00
rmartinc
7a886aab64
Use sendKeys instead of click for the webauthn tests
...
Closes #33362
Closes #33037
Closes #32548
Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-10-02 18:18:56 +02:00
Pedro Igor
9bbe00e3e3
Wait for welcome page to load as it might take a bit more time to load/redirect.
...
Closes #28953
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-02 10:09:17 -03:00
vramik
c1653448f3
[Organizations] Allow orgs to define the redirect URL after user registers or accepts invitation link
...
Closes #33201
Signed-off-by: vramik <vramik@redhat.com>
2024-10-02 07:37:48 -03:00
Ricardo Martin
6e471a8477
Add the nonce attribute when the client session context is recreated ( #33422 )
...
Closes #33355
Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: Tomas Kralik <tomas.kralik@pbktechnology.cz>
2024-10-02 09:44:25 +02:00
Pedro Igor
ebfb42f9c5
Force tests to wait for brute force login event as they are fired in a separate thread
...
Closes #32942
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-02 08:43:17 +02:00
Pedro Igor
353392f6ac
Wait for the register page being loaded after clicking the registration link. Flaky tests are failing in a similar fashion after clicking the link.
...
Closes #32930
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-02 08:20:12 +02:00
Giuseppe Graziano
b46fab2308
Remove root auth session after backchannel logout
...
Closes #32197
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2024-10-01 11:56:57 +02:00
Jon Koops
67b6b4c942
Require Keycloak JS configuration to be passed explicitly ( #33399 )
...
Closes #32823
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-01 10:29:10 +02:00
mposolda
e582a17a7c
Fix client-attributes condition configuration
...
closes #33390
Signed-off-by: mposolda <mposolda@gmail.com>
2024-10-01 10:12:28 +02:00
Peter Zaoral
d5d6390b1c
Make Keycloak fail with an error when the persisted build options differs from those provided ( #33241 )
...
* PropertyException is now thrown instead of a warning
* Operator guides clarification around health and metrics options
Closes : #32717
Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-09-30 19:28:23 +02:00
Douglas Palmer
b5e282648f
org.keycloak.testsuite.forms.BruteForceTest#testRaceAttackPermanentLockout ( #32701 )
...
* org.keycloak.testsuite.forms.BruteForceTest#testRaceAttackPermanentLockout
Closes #32256
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2024-09-30 18:38:10 +02:00
Kyale
a35edeb488
Resolved errors during component import referencing groups
...
Whenever a component being imported contained a reference to a group also being imported, the group was not found because groups were being imported after components by DefaultImportExportManager
Closes #10730
Signed-off-by: Kyale <github@chalkyweb.com>
2024-09-30 11:46:19 -03:00
Steven Hawkins
5d99d91818
fix: allows for the detection of a master realm with --import-realms ( #32914 )
...
also moving initial bootstrapping after import
closes : #32689
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-09-30 14:40:16 +02:00