libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions
25649 commits 4 branches 9 tags 483 MiB
Commit graph

25649 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pascal Knüppel
94784182df
Implement DPoP for all grantTypes (#29967) 
fixes #30179
fixes #30181


Signed-off-by: Pascal Knüppel <captain.p.goldfish@gmx.de>
Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2024-07-29 16:30:54 +02:00
Stefan Guilhen
17c01c9380 Enable new IDP Storage SPI in JPA model tests 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
f45529de8c Deprecate IDP related methods in RealmModel 
- delegate to the new provider

Closes #31253

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
c16e88bcee Make the IDPProvider via session.identityProviders() 
Closes #31252

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
4c5f54ce0b Add JPA implementation for the IDPProvider 
Closes #31250

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Steven Hawkins
6a91436746
enhance: add bootstrap admin handling to the operator (#31646) 
switching to manual invocation of statefulset reconciliation

closes: #30004



* Update docs/guides/operator/advanced-configuration.adoc




* enhance: add bootstrap admin handling to the operator

closes: #30004



---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2024-07-29 14:08:31 +02:00
Erik Jan de Wit
afec4401fc
initial version of the kc-create tool (#31314) 
* initial version of the kc-create tool

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Update js/apps/kc-create/package.json

Co-authored-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

* renamed and addressed review

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
 2024-07-29 13:47:32 +02:00
Alexander Schwartz
557cf1e60e Add a tombstone operation to optimize multiple deletes 
Closes #31699

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 13:23:06 +02:00
dependabot[bot]
5895faddaa
Bump @eslint/js from 9.7.0 to 9.8.0 (#31691) 
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.7.0 to 9.8.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.8.0/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:58 +02:00
dependabot[bot]
abeff00148
Bump rollup from 4.19.0 to 4.19.1 (#31692) 
Bumps [rollup](https://github.com/rollup/rollup) from 4.19.0 to 4.19.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.19.0...v4.19.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:29 +02:00
dependabot[bot]
e28b624974
Bump husky from 9.1.2 to 9.1.3 (#31693) 
Bumps [husky](https://github.com/typicode/husky) from 9.1.2 to 9.1.3.
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](https://github.com/typicode/husky/compare/v9.1.2...v9.1.3)

---
updated-dependencies:
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:12 +02:00
Steven Hawkins
22f8e5cdf0
Added field to the RealmImport spec to replace environment variables within the realm import (#31232) 
* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* testing refinement for placeholder handling

closes: #26470

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* changing from placeholdersecret to placeholder

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/realm-import.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_0_0.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: stustison <scott.tustison@gmail.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: stustison <scott.tustison@gmail.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-07-29 11:16:09 +02:00
Alexander Schwartz
28a27c9148 Improving the error messages in the Operator Test 
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 10:37:42 +02:00
Alexander Schwartz
6d404b86c9 Trigger clearing the user cache when the duplicate email allowed flag changes 
Closes #31045

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 10:37:42 +02:00
Erik Jan de Wit
0b5f42f95d
Use TextControl in StringComponent (#31442) 
* Use TextControl in StringComponent

This makes that the field is required and partially fixes:

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
#26963

* enable test-id override

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-07-29 09:29:56 +01:00
Weblate (bot)
9b4b72e8f9
Translations update from Hosted Weblate 
* Updated translation for German

Language: de

Signed-off-by: Florian Maurer <fmaurer@disroot.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Florian Maurer <fmaurer@disroot.org>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2024-07-29 08:21:52 +00:00
agagancarczyk
0cd0a91a68
removed needless aria-label (#31652) 
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
 2024-07-29 09:40:29 +02:00
Francis Pouatcha
cc78fd7ca0
Provided keycloak with a protocol mapper, that can allow to optionally add iat and nbf claims to VCs (#31620) 
closes #31581 


Signed-off-by: Francis Pouatcha <francis.pouatcha@adorsys.com>
 2024-07-29 09:32:48 +02:00
Pedro Igor
87c279d645 Respect the username value format when processing federated users 
Closes #31240

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:28:43 +02:00
Pascal Knüppel
b20123dcdc Add x5c and jwk as optional params to JWSBuilder and JWSHeader 
Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2024-07-29 09:25:02 +02:00
Pedro Igor
4d8c525644
Make sure changes to user profile metadata is not stored when calling decorators (#31549) 
Closes #30476

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:03:21 +02:00
Pedro Igor
04bd6653ec Invalidating domain cache and introducing cache for more query methods 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:02:36 +02:00
Pedro Igor
1f8280c71a Allow members joining multiple organizations 
Closes #30747

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:02:36 +02:00
Giuseppe Graziano
12732333c8 Client scope assignment for client registration 
Closes #31062

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2024-07-26 17:33:49 +02:00
Ryan Emerson
69a8509f6c Remove outdated test code from model/infinispan module 
Closes #31661

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-07-26 17:14:49 +02:00
Martin Bartoš
4d60c91cb8
Improve Quarkus configuration tests execution (#31668) 
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-07-26 14:47:51 +00:00
Stefan Guilhen
c9f5a0aa32 Testsuite: ensure realm is set in session context 
Closes #31636

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-26 11:11:44 -03:00
Lex Cao
3818f8f575 Prevent removing flow that used by client flow overrides 
Closes #30707

Signed-off-by: Lex Cao <lexcao@foxmail.com>
 2024-07-26 16:05:29 +02:00
rmartinc
e97ffe7a32 Convert chapter docker registry from securing apps into guides 
Closes #31331

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-07-26 15:39:51 +02:00
Stian Thorgersen
34f4eeedd8
Testsuite PoC - Prototype OAuth client (#31663) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 15:01:36 +02:00
Stian Thorgersen
4d66f3886b
Testsuite PoC - Added initial config builders (#31659) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 13:54:59 +02:00
Stian Thorgersen
30cd88fefe
Change default bootstrap admin service account client-id (#31649) 
Closes #31648

Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 10:45:26 +00:00
Alexander Schwartz
6c8aa65346
All CURL commands should check the HTTP response code (#31602) 
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-26 12:38:06 +02:00
Stian Thorgersen
63c9fc52e9
Testsuite PoC - Allow inner classes for config to be non-public (#31656) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 12:02:41 +02:00
Alexander Schwartz
227c71f7f0
Persisting revoked access tokens 
Closes #31296

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-26 11:46:14 +02:00
dependabot[bot]
90ff35bcd2
Bump vite from 5.3.4 to 5.3.5 (#31644) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.3.4 to 5.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-26 11:35:17 +02:00
dependabot[bot]
02489db9f2
Bump husky from 9.1.1 to 9.1.2 (#31645) 
Bumps [husky](https://github.com/typicode/husky) from 9.1.1 to 9.1.2.
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](https://github.com/typicode/husky/compare/v9.1.1...v9.1.2)

---
updated-dependencies:
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-26 11:34:58 +02:00
Václav Muzikář
6f62e6768c Revert "operator bootstrap admin handling (#30711)" 
This reverts commit 3139b82e3c.
 2024-07-26 10:02:13 +02:00
Stian Thorgersen
bcbff87336
Add ManagedRealm (#31621) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 09:09:34 +02:00
dependabot[bot]
6ab3e95ec5
Bump eslint-plugin-cypress from 3.3.0 to 3.4.0 (#31594) 
Bumps [eslint-plugin-cypress](https://github.com/cypress-io/eslint-plugin-cypress) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/cypress-io/eslint-plugin-cypress/releases)
- [Commits](https://github.com/cypress-io/eslint-plugin-cypress/compare/v3.3.0...v3.4.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-25 17:39:52 +02:00
Stian Thorgersen
140e953d3f
Testsuite PoC - Add support for browsers with and without headless (#31611) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-25 13:41:50 +02:00
Jon Koops
c92c642fec
TestSuite PoC - Rename Test prefix to Inject (#31570) 
* TestSuite PoC - Rename `Test` prefix to `Inject`

Closes #31522

Signed-off-by: Jon Koops <jonkoops@gmail.com>

* Rename test database annotation

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: stianst <stianst@gmail.com>
 2024-07-25 13:13:53 +02:00
Erik Jan de Wit
eea1d10e23
keep default value a string when stringify (#31597) 
fixes: #31480

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-07-25 11:20:37 +01:00
vramik
01f5747eed If the user is federated before the broker is associated with an organization this user is not a managed user 
Closes #30744

Signed-off-by: vramik <vramik@redhat.com>
 2024-07-25 04:30:13 -03:00
vramik
649b35929e Make sure users created through a registration link are managed members 
Closes #30743

Signed-off-by: vramik <vramik@redhat.com>
 2024-07-25 04:30:13 -03:00
Erik Jan de Wit
83f8622d15
Fixed feedback discussions (#31409) 
see: #24805

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-07-25 07:16:23 +02:00
Pedro Igor
6ce89670b5 Flaky test: org.keycloak.testsuite.model.user.UserModelTest#testAddRemoveUserConcurrent 
Closes #30236

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-24 22:40:32 +02:00
rmartinc
e30230488e Convert chapter mod_auth_mellon from securing apps into guides 
Closes #31569

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-07-24 21:16:49 +02:00
Pedro Igor
f4b1a5ca88 Updating docs 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-24 15:12:16 -03:00
Maciej Mierzwa
97e89e2071 feature: password age in days policy 
Closes #30210

Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>
 2024-07-24 15:12:16 -03:00