libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions
25654 commits 4 branches 5 tags 483 MiB
Commit graph

25654 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pedro Igor
a79761a447 Support for blocking concurrent requests when brute force is enabled 
Closes #31726

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
 2024-07-30 10:01:48 +02:00
Hynek Mlnarik
183cd6c957 Run tests with keycloak.v2 login theme 
The fixes (mostly selectors) are needed for tests.

In the future, to switch the keycloak.v2 to the default theme, do
the following:

- Update `ThemeSelectorProvider`: Uncomment relevant lines
- Update `testsuite/integration-arquillian/tests/pom.xml`: Revert the change in `<login.theme.default>` property
- Update `ThemeSelectorTest` per comment

Signed-off-by: Hynek Mlnarik <hmlnarik@redhat.com>
 2024-07-30 10:01:17 +02:00
Giuseppe Graziano
c3019fb2d3
Move oidc documentation to guides (#31627) 
Closes #31329

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2024-07-30 09:46:14 +02:00
Martin Kanis
d91d6d18d5 Can not update organization group error when trying to create organisation from REST API 
Closes #31144

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-07-29 17:39:56 +02:00
Alexander Schwartz
00d8e06f79
Optimize CPU cycles for persistent sessions (#31702) 
Closes #31701

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 16:34:13 +02:00
Pascal Knüppel
94784182df
Implement DPoP for all grantTypes (#29967) 
fixes #30179
fixes #30181


Signed-off-by: Pascal Knüppel <captain.p.goldfish@gmx.de>
Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2024-07-29 16:30:54 +02:00
Stefan Guilhen
17c01c9380 Enable new IDP Storage SPI in JPA model tests 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
f45529de8c Deprecate IDP related methods in RealmModel 
- delegate to the new provider

Closes #31253

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
c16e88bcee Make the IDPProvider via session.identityProviders() 
Closes #31252

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Stefan Guilhen
4c5f54ce0b Add JPA implementation for the IDPProvider 
Closes #31250

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Steven Hawkins
6a91436746
enhance: add bootstrap admin handling to the operator (#31646) 
switching to manual invocation of statefulset reconciliation

closes: #30004



* Update docs/guides/operator/advanced-configuration.adoc




* enhance: add bootstrap admin handling to the operator

closes: #30004



---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2024-07-29 14:08:31 +02:00
Erik Jan de Wit
afec4401fc
initial version of the kc-create tool (#31314) 
* initial version of the kc-create tool

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Update js/apps/kc-create/package.json

Co-authored-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>

* renamed and addressed review

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
 2024-07-29 13:47:32 +02:00
Alexander Schwartz
557cf1e60e Add a tombstone operation to optimize multiple deletes 
Closes #31699

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 13:23:06 +02:00
dependabot[bot]
5895faddaa
Bump @eslint/js from 9.7.0 to 9.8.0 (#31691) 
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.7.0 to 9.8.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.8.0/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:58 +02:00
dependabot[bot]
abeff00148
Bump rollup from 4.19.0 to 4.19.1 (#31692) 
Bumps [rollup](https://github.com/rollup/rollup) from 4.19.0 to 4.19.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.19.0...v4.19.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:29 +02:00
dependabot[bot]
e28b624974
Bump husky from 9.1.2 to 9.1.3 (#31693) 
Bumps [husky](https://github.com/typicode/husky) from 9.1.2 to 9.1.3.
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](https://github.com/typicode/husky/compare/v9.1.2...v9.1.3)

---
updated-dependencies:
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-29 13:10:12 +02:00
Steven Hawkins
22f8e5cdf0
Added field to the RealmImport spec to replace environment variables within the realm import (#31232) 
* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* testing refinement for placeholder handling

closes: #26470

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* changing from placeholdersecret to placeholder

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/realm-import.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_0_0.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: stustison <scott.tustison@gmail.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: stustison <scott.tustison@gmail.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2024-07-29 11:16:09 +02:00
Alexander Schwartz
28a27c9148 Improving the error messages in the Operator Test 
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 10:37:42 +02:00
Alexander Schwartz
6d404b86c9 Trigger clearing the user cache when the duplicate email allowed flag changes 
Closes #31045

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-29 10:37:42 +02:00
Erik Jan de Wit
0b5f42f95d
Use TextControl in StringComponent (#31442) 
* Use TextControl in StringComponent

This makes that the field is required and partially fixes:

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
#26963

* enable test-id override

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-07-29 09:29:56 +01:00
Weblate (bot)
9b4b72e8f9
Translations update from Hosted Weblate 
* Updated translation for German

Language: de

Signed-off-by: Florian Maurer <fmaurer@disroot.org>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Florian Maurer <fmaurer@disroot.org>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2024-07-29 08:21:52 +00:00
agagancarczyk
0cd0a91a68
removed needless aria-label (#31652) 
Signed-off-by: Agnieszka Gancarczyk <agancarc@redhat.com>
 2024-07-29 09:40:29 +02:00
Francis Pouatcha
cc78fd7ca0
Provided keycloak with a protocol mapper, that can allow to optionally add iat and nbf claims to VCs (#31620) 
closes #31581 


Signed-off-by: Francis Pouatcha <francis.pouatcha@adorsys.com>
 2024-07-29 09:32:48 +02:00
Pedro Igor
87c279d645 Respect the username value format when processing federated users 
Closes #31240

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:28:43 +02:00
Pascal Knüppel
b20123dcdc Add x5c and jwk as optional params to JWSBuilder and JWSHeader 
Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2024-07-29 09:25:02 +02:00
Pedro Igor
4d8c525644
Make sure changes to user profile metadata is not stored when calling decorators (#31549) 
Closes #30476

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:03:21 +02:00
Pedro Igor
04bd6653ec Invalidating domain cache and introducing cache for more query methods 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:02:36 +02:00
Pedro Igor
1f8280c71a Allow members joining multiple organizations 
Closes #30747

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:02:36 +02:00
Giuseppe Graziano
12732333c8 Client scope assignment for client registration 
Closes #31062

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2024-07-26 17:33:49 +02:00
Ryan Emerson
69a8509f6c Remove outdated test code from model/infinispan module 
Closes #31661

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-07-26 17:14:49 +02:00
Martin Bartoš
4d60c91cb8
Improve Quarkus configuration tests execution (#31668) 
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2024-07-26 14:47:51 +00:00
Stefan Guilhen
c9f5a0aa32 Testsuite: ensure realm is set in session context 
Closes #31636

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-26 11:11:44 -03:00
Lex Cao
3818f8f575 Prevent removing flow that used by client flow overrides 
Closes #30707

Signed-off-by: Lex Cao <lexcao@foxmail.com>
 2024-07-26 16:05:29 +02:00
rmartinc
e97ffe7a32 Convert chapter docker registry from securing apps into guides 
Closes #31331

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-07-26 15:39:51 +02:00
Stian Thorgersen
34f4eeedd8
Testsuite PoC - Prototype OAuth client (#31663) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 15:01:36 +02:00
Stian Thorgersen
4d66f3886b
Testsuite PoC - Added initial config builders (#31659) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 13:54:59 +02:00
Stian Thorgersen
30cd88fefe
Change default bootstrap admin service account client-id (#31649) 
Closes #31648

Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 10:45:26 +00:00
Alexander Schwartz
6c8aa65346
All CURL commands should check the HTTP response code (#31602) 
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-26 12:38:06 +02:00
Stian Thorgersen
63c9fc52e9
Testsuite PoC - Allow inner classes for config to be non-public (#31656) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 12:02:41 +02:00
Alexander Schwartz
227c71f7f0
Persisting revoked access tokens 
Closes #31296

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-26 11:46:14 +02:00
dependabot[bot]
90ff35bcd2
Bump vite from 5.3.4 to 5.3.5 (#31644) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.3.4 to 5.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-26 11:35:17 +02:00
dependabot[bot]
02489db9f2
Bump husky from 9.1.1 to 9.1.2 (#31645) 
Bumps [husky](https://github.com/typicode/husky) from 9.1.1 to 9.1.2.
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](https://github.com/typicode/husky/compare/v9.1.1...v9.1.2)

---
updated-dependencies:
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-26 11:34:58 +02:00
Václav Muzikář
6f62e6768c Revert "operator bootstrap admin handling (#30711)" 
This reverts commit 3139b82e3c.
 2024-07-26 10:02:13 +02:00
Stian Thorgersen
bcbff87336
Add ManagedRealm (#31621) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-26 09:09:34 +02:00
dependabot[bot]
6ab3e95ec5
Bump eslint-plugin-cypress from 3.3.0 to 3.4.0 (#31594) 
Bumps [eslint-plugin-cypress](https://github.com/cypress-io/eslint-plugin-cypress) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/cypress-io/eslint-plugin-cypress/releases)
- [Commits](https://github.com/cypress-io/eslint-plugin-cypress/compare/v3.3.0...v3.4.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-07-25 17:39:52 +02:00
Stian Thorgersen
140e953d3f
Testsuite PoC - Add support for browsers with and without headless (#31611) 
Signed-off-by: stianst <stianst@gmail.com>
 2024-07-25 13:41:50 +02:00
Jon Koops
c92c642fec
TestSuite PoC - Rename Test prefix to Inject (#31570) 
* TestSuite PoC - Rename `Test` prefix to `Inject`

Closes #31522

Signed-off-by: Jon Koops <jonkoops@gmail.com>

* Rename test database annotation

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: stianst <stianst@gmail.com>
 2024-07-25 13:13:53 +02:00
Erik Jan de Wit
eea1d10e23
keep default value a string when stringify (#31597) 
fixes: #31480

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
 2024-07-25 11:20:37 +01:00
vramik
01f5747eed If the user is federated before the broker is associated with an organization this user is not a managed user 
Closes #30744

Signed-off-by: vramik <vramik@redhat.com>
 2024-07-25 04:30:13 -03:00
vramik
649b35929e Make sure users created through a registration link are managed members 
Closes #30743

Signed-off-by: vramik <vramik@redhat.com>
 2024-07-25 04:30:13 -03:00