sma1212
e10f3b3672
[KEYCLOAK-17484] OIDC Conformance - Authorization response with Hybrid flow does not contain token_type ( #7872 )
...
* [KEYCLOAK-17484] fix oidc conformance for hybrid-flow
* [KEYCLOAK-17484] add TokenType & ExpiresIn to OAuth2Constants
* [KEYCLOAK-17484] add request validation for oidc-flows automated tests
2021-03-30 08:59:30 +02:00
Phillip Schichtel
f754b34c0c
KEYCLOAK-13633 Generalize GenericPrincipalFactory to PrincipleFactory
...
This allows to replace java.security.acl.Group usage only where necessary while keeping legacy adapter unchanged.
Signed-off-by: Phillip Schichtel <phillip@schich.tel>
2021-03-22 15:40:51 +01:00
Pascal Keßler
52db22925c
KEYCLOAK-13633 refactor(tomcat-adapter-spi): change to specific imports instead of star import
2021-03-22 15:40:51 +01:00
Pascal Keßler
b3ee471e11
KEYCLOAK-13633 refactor(tomcat-adapter-spi): remove usage of java.security.acl.Group to make jdk 15 possible
...
Signed-off-by: Phillip Schichtel <phillip@schich.tel>
2021-03-22 15:40:51 +01:00
Andrew Elwell
c76ca4ad13
Correct "doesn't exists" typos - fixes KEYCLOAK-14986 ( #7316 )
...
* Correct "doesn't exists" typos
* Revert changes to imported package
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2021-03-16 11:52:36 +01:00
Thomas Darimont
d2060913be
KEYCLOAK-14412 Fixed compiler error in JavascriptAdapterTests
2021-03-11 13:03:08 -03:00
Thomas Darimont
b926cd20f1
KEYCLOAK-14412 Keycloak.js should honor scopes configured in initOptions and loginOptions
2021-03-11 13:03:08 -03:00
Pedro Igor
40efbb0f9c
[KEYCLOAK-13942] - Invalidate pre-defined paths when paths are invalidated
2021-03-02 15:01:42 +01:00
Pedro Igor
1434695616
[KEYCLOAK-10752] - Passing id_token_hint when login out
2021-02-11 09:42:08 -03:00
Pedro Igor
f6c3ec5d9e
[KEYCLOAK-14366] - Missing check for iss claim in JWT validation on Client Authentication (Token Endpoint)
2021-02-09 13:54:06 +01:00
Katsiaryna Mikhalchanka
1c445cc4cc
KEYCLOAK-16798 Add guarding condition for multi-thread usage in KeycloakDeployment.java
2021-01-19 15:18:52 +01:00
Hynek Mlnarik
acfea8ecd2
KEYCLOAK-4250 Include certificates without name for validation
...
Nameless certificates are now included for signature validation
in the SAML adapter when the certificate is downloaded from
metadataUrl.
2021-01-15 22:03:16 +01:00
keycloak-bot
75be33ccad
Set version to 13.0.0-SNAPSHOT
2020-12-16 17:31:55 +01:00
Michal Hajas
a766a1dd16
KEYCLOAK-16074 Fix check3pCookiesSupported message callback
2020-11-13 16:01:50 -03:00
Miquel Simon
53dfa7c56b
KEYCLOAK-14109. Added profiles for Spring 2.3 version.
...
KEYCLOAK-14737. Updated Jetty version to 9.4.29, as required per Spring 2.3.
2020-11-13 12:09:22 -03:00
Martin Bartoš
da6c59f0c3
KEYCLOAK-15242 Error in application logs when refresh token is expired.
2020-11-05 14:40:53 +01:00
Pedro Igor
e70f702bc5
[KEYCLOAK-10790] - KeycloakInstalled adapter can not logoutDesktop more than once
2020-10-23 09:23:51 +02:00
Denis Richtárik
c8d0f2c59c
KEYCLOAK-15892 Can not install 7.4.3.CR1 Fuse adapter
2020-10-20 10:47:56 +02:00
mhajas
d266165f63
KEYCLOAK-14871 Whitelist RefreshableKeycloakSecurityContext for KeycloakPrincipal serialization
2020-10-14 16:00:39 +02:00
Hynek Mlnarik
4541a1b250
KEYCLOAK-15907 Fix new host in SAML adapter cannot restore session
2020-10-12 13:23:03 +02:00
testn
269a72d672
KEYCLOAK-15184: Use static inner class where possible
2020-10-09 23:37:08 +02:00
Thomas Darimont
152588ecc4
KEYCLOAK-13915 Update Jetty 9.4.x dependency to latest version
...
Adapted Jetty94SessionManager to workaround Jetty 9.4 API changes.
The Method org.eclipse.jetty.server.session.SessionHandler#getHttpSession
was changed from public to protected which makes it no longer accessible.
As a workaround the method contents were inlined.
2020-10-07 11:40:18 -03:00
vmuzikar
fbe18e67c3
KEYCLOAK-15721 KeycloakPromise sometimes doesn't work
2020-09-28 15:57:46 -03:00
vmuzikar
bca73fd04a
KEYCLOAK-15158 Javascript adapter init() is throwing a promise error after upgrade to 11
2020-09-22 10:56:46 -03:00
testn
2cd03569d6
KEYCLOAK-15238: Fix potential resource leak from not closing Stream/Reader
2020-09-21 13:05:03 +02:00
JF Denise
6a5c1defe1
[KEYCLOAK-14953] keycloak oidc/elytron adapter galleon-pack prototype
2020-09-17 23:27:25 -07:00
mhajas
b75ad2fbd8
KEYCLOAK-15259 Avoid using "null" Origin header as a valid value
2020-09-17 23:21:49 -07:00
testn
0362d3a430
KEYCLOAK-15113: Move away from deprecated Promise.success()/error()
2020-09-01 14:26:44 -04:00
Helder Alves
541063f2ce
KEYCLOAK-14940 refresh expired idtoken
2020-08-03 16:08:21 -03:00
Thomas Darimont
6806dfa4d3
KEYCLOAK-13721 Allow to configure host and port of callbackserver in KeycloakInstalled adapter
2020-07-29 10:00:36 +02:00
Gregor Tudan
5255336be2
Keycloak-14726 - release connections after fetching the OIDC-Config
2020-07-28 12:58:27 -03:00
Dan Manastireanu
1441e5d6f8
fix: Fix regex replacement for underscore and minus in parseToken. Closes #KEYCLOAK-14917
2020-07-28 10:39:45 -03:00
Alex Szczuczko
c7867c4c0d
KEYCLOAK-14875 Enable path cache when maxAge is -1, or greater than 0
2020-07-28 10:13:12 -03:00
Luca Leonardo Scorcia
da6530471b
KEYCLOAK-14742 SAML2NameIDPolicyBuilder: add AllowCreate and SPNameQualifier properties
2020-07-25 10:16:57 +02:00
keycloak-bot
afff0a5109
Set version to 12.0.0-SNAPSHOT
2020-07-22 14:36:15 +02:00
Jan Lieskovsky
969b09f530
[KEYCLOAK-13692] Upgrade to Wildfly "20.0.1.Final" and Infinispan "10.1.8.Final"
...
Co-authored-by: Jan Lieskovsky <jlieskov@redhat.com>
Co-authored-by: Marek Posolda <mposolda@redhat.com>
2020-07-20 22:15:08 +02:00
Jon Koops
098446b070
KEYCLOAK-14652 Align custom adapter example with documentation
2020-07-08 09:32:16 -03:00
Thoralf Rickert-Wendt
541bc5124f
switching to required=false
2020-07-06 11:47:41 -03:00
Thoralf Rickert-Wendt
0dd196e02a
Fixing issue https://issues.redhat.com/browse/KEYCLOAK-14520
2020-07-06 11:47:41 -03:00
Christian Lutz
6abae8bccc
KEYCLOAK-13807 Fix switch parameter order of mapping and url in registerConstraintMapping
2020-07-03 11:35:24 +02:00
vmuzikar
001fe9eb11
KEYCLOAK-13206 Session Status iframe cannot access cookies when 3rd party cookies are blocked
...
Co-authored-by: mhajas <mhajas@redhat.com>
2020-06-30 17:11:20 -03:00
Stefan Guilhen
76717134ba
[KEYCLOAK-12998] Prevent duplicate resources from being added to the keycloak-saml subsystem
...
- Fixes an issue in parser where the closing tag of the IDP element was in the wrong place, which could break the server configuration
- Parser now checks for duplicates of elements described with maxOccurs=1 in the schema
- Add handler for SP and IDP now check for existing SPs or IDPs in the config, preventing addition of a duplicate resource via CLI
- Subsystem test was enhanced so it now tests some invalid configs with duplicate elements
2020-06-23 20:03:36 +02:00
Simon Legner
3c0ecefacc
fix(keycloak.d.ts): class cannot extend interface
2020-06-22 13:22:35 -04:00
Jon Koops
c0744daa5b
KEYCLOAK-14496 Use KeycloakAdapter interface for 'adapter' option
...
Also improves documentation by adding more details and an explicit example on how to use the interface.
2020-06-18 18:09:19 -03:00
Jon Koops
6dde131609
KEYCLOAK-13739 Add missing type definition for register options
2020-06-17 15:26:15 -04:00
mhajas
5d1d75db40
KEYCLOAK-14103 Add Warn message for possibly missing SameSite configuration
2020-06-15 14:45:57 +02:00
Douglas Palmer
33863ba161
KEYCLOAK-10162 Usage of ObjectInputStream without checking the object types
...
Co-authored-by: mposolda <mposolda@gmail.com>
2020-06-08 13:12:08 +02:00
spurreiter
6332ed42c0
KEYCLOAK-13940 remove duplicated urlsafe decoding
2020-05-08 15:18:56 +02:00
Hynek Mlnarik
32f13016fa
KEYCLOAK-12874 Align Destination field existence check with spec
2020-05-04 09:19:44 +02:00
keycloak-bot
ae20b7d3cd
Set version to 11.0.0-SNAPSHOT
2020-04-29 12:57:55 +02:00