3130 commits

Author	SHA1	Message	Date
Bill Burke	a9297df89c	KEYCLOAK-6335	2018-01-23 12:09:49 -05:00
Hynek Mlnarik	4ba72e2d2d	KEYCLOAK-5976 Fix client setting in brokered IdP-initiated scenario	2018-01-23 09:34:11 +01:00
stianst	f762173eb0	KEYCLOAK-3370 Add option to override theme in client template and client	2018-01-18 09:14:13 +01:00
stianst	35ada9d636	KEYCLOAK-6289 Add ThemeSelectorSPI	2018-01-18 09:14:13 +01:00
Thomas Darimont	bae4d4c673	KEYCLOAK-5791 Allow multi-valued ScriptBasedOIDCProtocolMapper ... We now support multi-valued attribute values for the `ScriptBasedOIDCProtocolMapper`. Previously the `ScriptBasedOIDCProtocolMapper` only supported single valued output. If a script returned a list of output values then only the first value was emitted to the token. By default multi-valued is set to `false` / `off`.	2018-01-11 08:52:24 +01:00
stianst	d8c0cc447f	KEYCLOAK-6090 Add missing cors headers with invalid username/password and resource owner grant	2018-01-02 15:15:15 +01:00
Marko Strukelj	23d0afbfd8	KEYCLOAK-6058 Partial import should ignore built-in clients	2017-12-21 13:52:58 +01:00
stianst	f0c5752ef9	KEYCLOAK-5443 Fix update user account when both email as username and edit username are enabled	2017-12-20 14:40:03 +01:00
Bruno Oliveira	811cd3a04a	KEYCLOAK-6011	2017-12-20 13:37:11 +01:00
stianst	e96c6a4bcb	KEYCLOAK-6068 Fix preflight request on admin endpoints	2017-12-20 10:19:34 +01:00
stianst	465675ac28	KEYCLOAK-5019 Fixes for password managers	2017-12-19 16:13:16 +01:00
mposolda	5a66f577eb	KEYCLOAK-5982 Fix NPEs when client 'account' was renamed/removed	2017-12-18 21:47:17 +01:00
stianst	27b5e1aae2	KEYCLOAK-6050 Fix export doesn't export internal realm rep	2017-12-18 13:15:42 +01:00
stianst	b303acaaba	KEYCLOAK-2120 Added manual setup page for OTP	2017-12-18 11:20:20 +01:00
Bill Burke	118e998570	Merge pull request #4834 from pedroigor/KEYCLOAK-5806 ... [KEYCLOAK-5806] - Create policy button to associated policies	2017-12-16 23:44:35 -05:00
Bill Burke	80be4c9dbc	fix more	2017-12-16 07:12:32 -05:00
pedroigor	5d7ba39e0c	[KEYCLOAK-5806] - Create policy component to permission pages	2017-12-15 23:41:52 -02:00
Bill Burke	7cb39c2dfc	KEYCLOAK-5420	2017-12-15 12:16:24 -05:00
Hynek Mlnarik	e4a91c0706	KEYCLOAK-6042 Encode user ID before storing in auth session	2017-12-15 15:16:26 +01:00
stianst	a8943fb323	KEYCLOAK-6043 Use same urls for get and posts in account	2017-12-15 08:31:04 +01:00
Bruno Oliveira	1a541889f4	[KEYCLOAK-6015] replyTo can be empty string in DB	2017-12-15 07:01:15 +01:00
stianst	b672229efc	KEYCLOAK-6032 Fix error page when internationalization is enabled	2017-12-15 06:32:00 +01:00
Vlastimil Elias	7e20a65989	KEYCLOAK-6040 AuthenticationSessionModel pushing into ... EmailTemplateProvider	2017-12-14 15:51:04 +01:00
Hynek Mlnarik	2a2e6c839b	KEYCLOAK-5635	2017-12-13 21:07:46 +01:00
Hynek Mlnarik	7174c0b4ec	KEYCLOAK-6025 Simplify easy access to current session in action token handlers	2017-12-12 17:53:44 +01:00
stianst	f939818252	KEYCLOAK-5907 Use client manager to delete clients in client registration services	2017-12-12 14:25:05 +01:00
mposolda	63efee6e15	KEYCLOAK-5938 Authentication sessions: Support for logins of multiple tabs of same client	2017-12-12 08:01:02 +01:00
stianst	867de9de50	KEYCLOAK-6010 Add CORS headers to keycloak.js	2017-12-11 14:24:12 +01:00
k-tamura	d7a90817f2	KEYCLOAK-6009 Fix incorrect String.format usage	2017-12-10 20:56:36 +01:00
Bill Burke	c9b218db71	Merge pull request #4823 from patriot1burke/master ... KEYCLOAK-5724	2017-12-08 20:03:05 -05:00
Bill Burke	ce9f4bf97a	KEYCLOAK-5724	2017-12-08 10:25:30 -05:00
Bill Burke	5d5a200413	Merge pull request #4818 from patriot1burke/master ... KEYCLOAK-5926	2017-12-08 09:59:32 -05:00
Hynek Mlnarik	00fb36437d	KEYCLOAK-5861 Remove AUTH_SESSION_ID when END_AFTER_REQUIRED_ACTIONS set	2017-12-08 09:52:14 +01:00
Hynek Mlnarik	4a012b73ea	KEYCLOAK-4998 Fix NPE in AttributeToRoleMapper	2017-12-08 09:21:21 +01:00
Bill Burke	49ba71fd8f	add logic for sync	2017-12-07 20:03:10 -05:00
Bill Burke	0dee393071	KEYCLOAK-5926	2017-12-07 19:49:10 -05:00
stianst	c055ffb083	KEYCLOAK-4215 Consider session expiration when setting token timeouts	2017-12-07 10:45:02 +01:00
stianst	cccddebfd0	KEYCLOAK-5984 Fix error message in client initiated	2017-12-06 19:46:11 +01:00
mposolda	8a0fa521c4	KEYCLOAK-5915 Support for sticky sessions managed by loadbalancer. Support for KeyAffinityService	2017-12-06 13:06:54 +01:00
Bill Burke	f669fdf0df	Merge pull request #4797 from stianst/KEYCLOAK-5734 ... KEYCLOAK-5734	2017-12-05 17:31:36 -05:00
stianst	94ce97b972	KEYCLOAK-5734	2017-12-05 21:22:47 +01:00
stianst	c3d9f4704e	KEYCLOAK-5946 Make sure wildcard origin is never returned	2017-12-04 19:55:34 +01:00
stianst	4541acc628	KEYCLOAK-5176 Strip headers from PEM when uploading to client	2017-12-04 19:54:15 +01:00
mposolda	ff6fcd30d9	KEYCLOAK-4478 OIDC auth response lacks session_state in some cases	2017-12-04 16:13:22 +01:00
mposolda	7b03eed9c8	KEYCLOAK-5797 Refactoring authenticationSessions to support login in multiple browser tabs with different clients	2017-11-30 12:56:45 +01:00
Peter Nalyvayko	b8e5fd2b99	KC-4335: working on adding a reverse proxy support to allow X.509 client certificate authentication when running keycloak behind a reverse proxy ... KC-4335: reverse proxy => a swtich to change a type of reverse proxy when running the X509 integration tests; changes to the names of the reverse proxy providers KC-4335: updated the migration scripts to add x509 spi to standalone and domain configurations; removed the HAproxy and apache x509 spi configuration	2017-11-30 11:00:32 +01:00
pedroigor	17748d5ba8	[KEYCLOAK-5660] - Adding UserQueryProvider.getUsersCount(realm, includeServiceAccount) method	2017-11-30 10:45:54 +01:00
Marko Strukelj	c5d9301951	KEYCLOAK-4920 NPE when exporting configuration without alias	2017-11-30 10:40:25 +01:00
Bruno Oliveira	6a528a3ee6	[KEYCLOAK-2645] Reset password page says 'You need to change your password to activate your account.'	2017-11-30 10:37:21 +01:00
stianst	2be78a0239	KEYCLOAK-5924 Add error handler for uncaught errors	2017-11-30 10:33:13 +01:00
Bruno Oliveira	af66c5dbd2	[KEYCLOAK-5483] X.509 Auth - log in attempt is not sometimes logged in the Login Events	2017-11-29 20:08:22 +01:00
Pedro Igor	d22c58ee30	Merge pull request #4760 from pedroigor/KEYCLOAK-5900 ... [KEYCLOAK-5900] - Returning error response when resource does not exist	2017-11-29 10:38:44 -02:00
pedroigor	c5b06f23e9	[KEYCLOAK-5900] - Returning error response when resource does not exist	2017-11-28 19:46:18 -02:00
pedroigor	bf73375a5c	[KEYCLOAK-5901] - Changing response to return a 400 in case scope is invalid	2017-11-28 19:32:41 -02:00
stianst	36314c51d6	KEYCLOAK-5856 Fix infinite loop	2017-11-28 07:54:49 +01:00
pedroigor	e3c9fa25a3	[KEYCLOAK-5770] - Global Saml Logout doesn't create logout event	2017-11-23 21:08:07 +01:00
Bill Burke	2117db5e6d	Merge pull request #4730 from patriot1burke/master ... KEYCLOAK-4715	2017-11-22 12:45:23 -05:00
mposolda	bd1072d2eb	KEYCLOAK-5747 Ensure refreshToken doesn't need to send request to the other DC. Other fixes and polishing	2017-11-22 11:55:12 +01:00
Bill Burke	8993ca08ad	KEYCLOAK-4715	2017-11-21 17:46:48 -05:00
Bill Burke	06762ba13d	KEYCLOAK-5878	2017-11-20 17:03:28 -05:00
Marek Posolda	8e53ccf5ab	Merge pull request #4706 from stianst/KEYCLOAK-5383 ... KEYCLOAK-5383 Fix creating password in LDAP through admin create user…	2017-11-20 09:17:45 +01:00
Bill Burke	7c0c48da01	Merge pull request #4717 from patriot1burke/master ... KEYCLOAK-5715	2017-11-17 12:59:36 -05:00
Bill Burke	ff5010cdd0	Merge pull request #4663 from mstruk/KEYCLOAK-5702 ... KEYCLOAK-5702 kcadm delete realm fails with nullpointer	2017-11-17 11:57:58 -05:00
Bill Burke	c66ff60c58	KEYCLOAK-5715	2017-11-17 11:34:32 -05:00
Stian Thorgersen	86fb18395e	KEYCLOAK-5383 Fix creating password in LDAP through admin create user endpoint	2017-11-15 21:20:00 +01:00
Pedro Igor	1bd2f0e98f	Merge pull request #4674 from thomasdarimont/issue/fix-npe-in-userpermissions ... KEYCLOAK-5841 Fix NPE in deletePermissionSetup in UserPermissions	2017-11-15 10:22:44 -02:00
Pedro Igor	eebf0b0499	Merge pull request #4690 from pedroigor/KEYCLOAK-5824 ... [KEYCLOAK-5824] - Keycloak throws "Error while evaluating permissions" exception often	2017-11-14 18:35:56 -02:00
Pedro Igor	b0ccce397a	[KEYCLOAK-5824] - Fixing logging of error mesages	2017-11-14 11:28:21 -02:00
Stian Thorgersen	89f4b87038	KEYCLOAK-5567 Set correct status code on login error pages	2017-11-14 12:33:29 +01:00
Bruno Oliveira	03d0488335	[KEYCLOAK-2052] Allows independently set timeouts for e-mail verification link and rest e.g. forgot password link ... Co-authored-by: Hynek Mlnarik <hmlnarik@redhat.com>	2017-11-13 19:57:04 -02:00
Stian Thorgersen	925d5e1dea	KEYCLOAK-3173 enable logout offline refresh token using OIDC logout endpoint	2017-11-13 18:23:39 +01:00
Stian Thorgersen	51c7917853	KEYCLOAK-5772 Missing produces type on welcome resource post	2017-11-13 16:38:42 +01:00
Stian Thorgersen	d02ffd33b3	KEYCLOAK-5721 Moved state checker from separate cookie to claim on identity cookie	2017-11-13 14:11:28 +01:00
Thomas Darimont	a5b73a365d	KEYCLOAK-5841 Fix NPE in deletePermissionSetup in UserPermissions ... Previously a call to `UserPermissions#deletePermissionSetup` always resulted in a NPE if the usersResource was null. We now only try to delete the resourceStore information if the given usersResource is not null.	2017-11-13 13:35:40 +01:00
Stian Thorgersen	90900b1a1f	KEYCLOAK-5825 Clear state checker for welcome on form submit	2017-11-10 13:40:29 +01:00
Stian Thorgersen	4295f4ec31	KEYCLOAK-1886 Added cors headers to errors in token endpoint	2017-11-10 12:01:21 +01:00
Marko Strukelj	7035a4647d	KEYCLOAK-5702 kcadm delete realm fails with nullpointer	2017-11-09 20:57:49 +01:00
Xiaojian Liu	19eed51582	KEYCLOAK-5352 Basic Auth fails if password contains a ':'	2017-11-09 13:56:02 +01:00
Xiaojian Liu	9ff22f596d	KEYCLOAK-5352 Basic Auth fails if password contains a ':'	2017-11-09 13:56:02 +01:00
Xiaojian Liu	e1af9f133f	KEYCLOAK-5352 Basic Auth fails if password contains a ':'	2017-11-09 13:56:02 +01:00
Bruno Oliveira	26e253f4a5	[KEYCLOAK-5284]	2017-11-09 13:45:06 +01:00
mposolda	701b7acd80	KEYCLOAK-5371 More stable cross-dc tests	2017-11-08 10:03:04 +01:00
Stian Thorgersen	b1a05dfce2	KEYCLOAK-5664 (#4604)	2017-11-07 10:09:34 +01:00
Hynek Mlnarik	fe2f65daac	KEYCLOAK-5581 Fix SAML identity broker context serialization	2017-11-03 21:09:18 +01:00
Pedro Igor	3716fa44ac	[KEYCLOAK-5728] - Permission Claims support	2017-10-27 12:40:30 -02:00
Pedro Igor	57d3c44bb7	[KEYCLOAK-4901] - New policy mgmt rest api should return specific representations for a policy type	2017-10-26 15:26:40 -02:00
Pedro Igor	a70cab502c	[KEYCLOAK-4901] - Reviewing methods on provider spis	2017-10-26 13:39:57 -02:00
Hynek Mlnařík	248da4687a	Merge pull request #4610 from hmlnarik/KEYCLOAK-5745-Extract-client-sessions-from-user-sessions ... KEYCLOAK-5745 Separate user and client sessions in infinispan	2017-10-26 13:09:06 +02:00
Hynek Mlnarik	75c354fd94	KEYCLOAK-5745 Separate user and client sessions in infinispan	2017-10-26 10:39:41 +02:00
Bruno Oliveira da Silva	375e01a074	KEYCLOAK-5278 (#4606)	2017-10-25 15:27:24 +02:00
Stian Thorgersen	f0bbcbf0fd	KEYCLOAK-5487 (#4603)	2017-10-24 10:49:08 +02:00
Stan Silvert	9083e5fe5c	KEYCLOAK-5298: Enable autoescaping in Freemarker (#4561) ... * KEYCLOAK-5298: Enable autoescaping in Freemarker * Fix several of the failing tests. * Fix broken tests in integration-deprecated * Fix last failing test.	2017-10-23 12:03:00 -04:00
Stian Thorgersen	9b75b603e3	KEYCLOAK-5234 (#4585)	2017-10-23 16:13:22 +02:00
Stian Thorgersen	d9ffc4fa21	KEYCLOAK-5225 (#4577) ... KEYCLOAK-5225 fix test Fix	2017-10-19 08:23:16 +02:00
Stian Thorgersen	fea4c54adc	KEYCLOAK-5280 (#4576)	2017-10-19 08:02:23 +02:00
Bill Burke	649bca7618	KEYCLOAK-4328	2017-10-18 09:37:17 -04:00
Hynek Mlnarik	056ba75a72	KEYCLOAK-5656 Use standard infinispan remote-store	2017-10-16 21:49:42 +02:00
Bruno Oliveira da Silva	b6ab2852c2	Remove unused imports (#4558)	2017-10-16 14:23:42 +02:00
Bill Burke	31dccc9a5e	Merge pull request #4509 from TeliaSoneraNorge/KEYCLOAK-5032 ... KEYCLOAK-5032 Forward request parameters to another IdP	2017-10-13 18:47:05 -04:00
Bill Burke	46d3ed7832	Merge remote-tracking branch 'upstream/master'	2017-10-13 17:00:57 -04:00
Bill Burke	d9af93850c	KEYCLOAK-5683, KEYCLOAK-5684, KEYCLOAK-5682, KEYCLOAK-5612, KEYCLOAK-5611	2017-10-13 16:51:56 -04:00
mposolda	26f11078dc	KEYCLOAK-5371 Use managed executors on Wildfly	2017-10-11 11:09:53 +02:00
mposolda	f5ff24ccdb	KEYCLOAK-5371 Fix SessionExpirationCrossDCTest, Added ExecutorsProvider. Debug support for cache-servers in tests	2017-10-10 22:30:44 +02:00
Bill Burke	b0464f1751	Merge remote-tracking branch 'upstream/master'	2017-10-10 09:10:04 -04:00
Bill Burke	5bd4ea30ad	rev	2017-10-10 09:09:51 -04:00
Marek Posolda	d336667972	Merge pull request #4527 from Hitachi/master ... OIDC Financial API Read Only Profile : scope MUST be returned in the response from Token Endpoint	2017-10-10 11:37:45 +02:00
Carl Kristian Eriksen	50dd07217d	KEYCLOAK-5032 Forward request parameters to another IdP ... Forwarding of prompt and acr_values, if provided in the authorization request. If prompt is set in the configuration for the identity provider, the configuration overrules the request parameter.	2017-10-09 16:15:27 +02:00
Marek Posolda	c6483f8b1e	Merge pull request #4523 from abustya/master ... KEYCLOAK-5616 Processing of claims parameter	2017-10-09 11:14:23 +02:00
Bill Burke	c8516c2349	support social external exchange	2017-10-06 16:44:26 -04:00
Vlastimil Eliáš	c9da02912e	KEYCLOAK-2671 - FreeMarker form providers refactored for better (#4533) ... extensibility	2017-10-05 13:37:32 +02:00
Takashi Norimatsu	6f6a467c7b	OIDC Financial API Read Only Profile : scope MUST be returned in the ... response from Token Endpoint	2017-10-04 12:59:49 +09:00
Václav Muzikář	da146f13c1	KEYCLOAK-5566 Google IdP doesn't reliably fetch user's full name (#4503)	2017-10-03 20:56:25 +02:00
Áron Bustya	c2ffaa0777	Merge remote-tracking branch 'keycloak/master'	2017-10-03 14:53:40 +02:00
Áron Bustya	632414cc92	process claims parameter ... also support parsing from request object	2017-10-03 14:51:46 +02:00
Bruno Oliveira da Silva	da72968085	KEYCLOAK-4401: Wrong message when a temporarily disabled user requests password reset (#4506)	2017-10-03 06:28:34 +02:00
mposolda	4a7013d550	KEYCLOAK-5440 RestartLoginCookie field 'cs' not marked ignorable	2017-10-02 14:19:27 +02:00
Bruno Oliveira da Silva	bb0bccc3c0	[KEYCLOAK-5486] Test email connection feature does not work the second time (#4517)	2017-10-02 13:14:50 +02:00
Marek Posolda	13fe9e7cf8	Merge pull request #4510 from glavoie/KEYCLOAK-3303 ... KEYCLOAK-3303: Allow reuse of refresh tokens.	2017-09-29 17:07:45 +02:00
mposolda	3b6e1f4e93	KEYCLOAK-5007 Used single-use cache for tracke OAuth code. OAuth code changed to be encrypted and signed JWT	2017-09-29 13:20:22 +02:00
Gabriel Lavoie	134daeac7f	KEYCLOAK-3303: Allow reuse of refresh tokens. ... - Configurable max reuse count.	2017-09-28 15:30:40 -04:00
Bill Burke	fd025ae76b	Merge pull request #4209 from guitaro/feature/group-search-and-pagination ... [KEYCLOAK-2538] - groups pagination and group search	2017-09-23 20:52:19 -04:00
Bill Burke	9db6a5e0df	Merge pull request #4497 from thomasdarimont/issue/KEYCLOAK-3599-add-script-based-protocol-mapper ... KEYCLOAK-3599 Revise Script based OIDC ProtocolMapper	2017-09-23 20:38:51 -04:00
Thomas Darimont	57c633967a	KEYCLOAK-3599 Revise Script based OIDC ProtocolMapper ... We now use the `ScriptingProvider` API instead of using the `ScriptEngineManager` because dynamic `ScriptEngineManager` lookups might fail in some environments like JBoss EAP. Refactored `AbstractOIDCProtocolMapper` to provide a new version of the `setClaim(..)` method which takes a `KeycloakSession` as additional argument. The old `setClaim(..)` method is marked as deprecated and should be scheduled for removal in a later release. To ensure backwards compatibility we call the old `setClaim(..)` from the new `setClaim(..,keycloakSession)` method in order to not break user implementations of OIDC ProtocolMappers. The existing OIDC ProtocolMappers which override the old `setClaim(..)` method should be updated to use the new version `setClaim(..,keycloakSession)`. This was necessary to be able to lookup a `ScriptingProvider`.	2017-09-22 22:57:07 +02:00
Bill Burke	1599e6db6e	KEYCLOAK-5518	2017-09-22 16:38:50 -04:00
Bill Burke	537081ec9d	Merge pull request #4494 from patriot1burke/master ... KEYCLOAK-5516	2017-09-22 16:38:13 -04:00
Bill Burke	3020a04a8b	Merge pull request #4490 from Fiercely/master ... Keycloak 2035	2017-09-22 16:13:22 -04:00
Bill Burke	790e2dc69f	fix compiler bug	2017-09-22 15:43:13 -04:00
Thomas Darimont	236b2b9273	KEYCLOAK-3599 Add Script based OIDC ProtocolMapper	2017-09-22 21:24:20 +02:00
Bill Burke	eb4f7f3b21	KEYCLOAK-5516	2017-09-22 11:48:30 -04:00
howcroft	e78bf5f876	Keycloak 2035 ... This PR adds: * an endpoint to Role that lists users with the Role * a tab "Users in Role" in Admin console Role page * it is applicable to Realm and Client Roles * Extends UserQueryProvider with default methods (throwing Runtime Exception if not overriden) * Testing in base testsuite and Console	2017-09-22 15:05:49 +01:00
Bill Burke	8ace0e68c3	KEYCLOAK-910 KEYCLOAK-5455	2017-09-21 17:15:18 -04:00
Bill Burke	ab58052a4c	Merge pull request #4482 from patriot1burke/master ... KEYCLOAK-5491 KEYCLOAK-5492 KEYCLOAK-5490	2017-09-19 14:01:40 -04:00
Marek Posolda	fa35249afd	Merge pull request #4480 from TeliaSoneraNorge/KEYCLOAK-5494 ... Fix introspection error for pairwise access tokens	2017-09-18 16:44:24 +02:00
Pedro Igor	e8ef050093	Merge pull request #4471 from pedroigor/KEYCLOAK-5095 ... [KEYCLOAK-5095] - RPT should contain the RS as audience	2017-09-18 09:32:47 -03:00
Martin Hardselius	6b687c4318	Fix offline validation errors ... Refactored token validation method to run user checks only if the user session is valid.	2017-09-18 11:26:57 +02:00
Bill Burke	f927ee7b4e	KEYCLOAK-5491 KEYCLOAK-5492	2017-09-15 16:30:45 -04:00
Bill Burke	3e6adbc904	KEYCLOAK-5490 (#4477)	2017-09-15 11:36:48 +02:00
Martin Hardselius	a4315f4076	Fix introspection error for pairwise access tokens ... When access tokens containing a pairwise sub are introspected, user related checks are using that sub to fetch the UserModel instead of fetching the user from the UserSession. No corresponding user is found (or possibly even another user) and the token is reported inactive. Resolves: KEYCLOAK-5494	2017-09-15 10:31:47 +02:00
Bill Burke	c999a0d8f9	Merge remote-tracking branch 'upstream/master'	2017-09-14 21:17:12 -04:00
Bill Burke	affeadf4f3	KEYCLOAK-5490	2017-09-14 21:16:50 -04:00
Stian Thorgersen	ee35673615	KEYCLOAK-1250 Profile and console loader for new account management console	2017-09-14 19:53:02 +02:00
Levente NAGY	d18aa44fb4	Merge branch 'feature/group-search-and-pagination' of https://github.com/guitaro/keycloak into feature/group-search-and-pagination	2017-09-13 16:48:24 +02:00
Levente NAGY	e907da77d7	KEYCLOAK 2538 - UI group pagination - Remove junit mocked TUs, add arquillian Tests, delete mockito from poms, fix groups sorting when get result from cache	2017-09-13 16:45:45 +02:00
Léventé NAGY	503ce3a47f	Merge branch 'master' into feature/group-search-and-pagination	2017-09-13 10:27:38 +02:00
Hisanobu Okuda	b7af96aa4d	KEYCLOAK-5315 Conditional OTP enforcement does not work (#4399)	2017-09-13 06:58:59 +02:00
Martin Kanis	550e5f752a	KEYCLOAK-5146 TokenEndpoint returns wrong methods for preflight requests (#4455)	2017-09-13 06:23:11 +02:00
Pedro Igor	cdb3c159c5	[KEYCLOAK-5095] - RPT should contain the RS as audience	2017-09-12 16:59:20 -03:00
Pedro Igor	90db6654d3	Merge pull request #4451 from glavoie/KEYCLOAK-4858-ResourceServer ... KEYCLOAK-4858: Slow query performance for client with large data volume	2017-09-12 15:54:16 -03:00
Levente NAGY	c8c88dd58c	KEYCLOAK 2538 - UI group pagination - TU + some code improvement + add mockito dependency	2017-09-12 15:09:08 +02:00
Petter Lysne	7f8b5e032a	feat: added PayPal IDP (#4449)	2017-09-12 11:57:59 +02:00
Hynek Mlnarik	24e9cbb292	KEYCLOAK-4899 Replace updates to user session with temporary auth session	2017-09-11 21:43:49 +02:00
Levente NAGY	2c24b39268	KEYCLOAK 2538 - UI group pagination	2017-09-07 19:39:06 +02:00
Gabriel Lavoie	c1664478d9	KEYCLOAK-4858: Slow query performance for client with large data volume ... - Changing RESOURCE_SERVER PK to the client ID. - Changing FK on children of RESOURCE_SERVER. - Use direct fetch of ResourceServer through ID/PK to avoid a lot of implicit Hibernate flush.	2017-09-06 09:55:53 -03:00
mposolda	fe43c26829	KEYCLOAK-5248 auth_time is not updated when reauthentication is requested with 'login=prompt'	2017-09-05 12:22:30 +02:00
Pedro Igor	fa6d5f0ee2	[KEYCLOAK-4653] - Identity.hasClientRole(String) and Identity.hasRole(String) break role namespaces and should be removed	2017-09-01 16:08:34 -03:00
filipelautert	e055589448	[KEYCLOAK-4778] Fix for Oracle null value when having an empty String as attribute value (#4406) ... * Add client.name as a second parameter to the title expressions in login template * Fixing tooltip. * pt_BR localization for admin screens. * Reverting login.ftl * Added all tooltip messages - even the ones not translated. Translated around 150 messages todas. * More translations. * Fixing wrong edit. * [KEYCLOAK-4778] Null check on Attribute value. This value can be null when retrieved from an Oracle database. * [KEYCLOAK-4778] Create unit tests for empty and null values. * [KEYCLOAK-4778] Move empty and null attributes tests to a separated test method; change tests to empty or null Strings. * [KEYCLOAK-4778] Check if value is null and set it as empty array. In the former code if null was received it would generate an array with 1 string element ["null"]. Also if we set value as null instead of ArrayList, later when the rest call is executed it will generate the same incorrect array again. * [KEYCLOAK-4778] Tests clean up.	2017-08-31 06:09:41 +02:00
Wim Vandenhaute	924b4f651a	KEYCLOAK-5186 createUser: set federationLink (#4316)	2017-08-31 06:07:43 +02:00
Hynek Mlnařík	e36b94d905	KEYCLOAK-5318 Verify signature on raw query parameters (#4445)	2017-08-31 05:46:26 +02:00
Stian Thorgersen	d3dc26181e	KEYCLOAK-3481 (#4441)	2017-08-30 08:00:22 +02:00
Stian Thorgersen	dcfa4aca8c	KEYCLOAK-943 Started account rest service. Profile and sessions completed. (#4439)	2017-08-29 20:12:09 +02:00
Stian Thorgersen	8cc1d02d46	KEYCLOAK-5342 (#4431)	2017-08-28 14:35:58 +02:00
Hynek Mlnařík	9ee8f72be9	\KEYCLOAK-5335 Destination attr in SAML requests is optional (#4424)	2017-08-28 08:06:48 +02:00
Stian Thorgersen	d58c6ad4e0	[KEYCLOAK-4900] Pass login_hint parameter to idp & review (#4421)	2017-08-25 10:14:38 +02:00
w9n	e173bf33ba	auth is already part of the serverBaseUri (#4418)	2017-08-25 08:16:01 +02:00
John Ament	30ea556a7a	KEYCLOAK-5285: Adding protected access. (#4405) ... Allows FreemarkerEmailTemplateProvider to be more extensible.	2017-08-25 07:30:26 +02:00
Bill Burke	6696c44dc0	Merge remote-tracking branch 'upstream/master'	2017-08-24 15:19:48 -04:00
Bill Burke	7a57723c01	more token exchange	2017-08-24 15:19:38 -04:00
mposolda	fe5891fbdb	KEYCLOAK-5293 Add notBefore to user	2017-08-23 08:58:26 +02:00
Stian Thorgersen	20ac70d3fd	KEYCLOAK-5119 (#4400)	2017-08-22 08:07:36 +02:00
John Ament	5b179420fd	KEYCLOAK-5274: Check that authenticator config id is null before attempting to fetch it. (#4404)	2017-08-22 06:57:49 +02:00
mposolda	a6a6a62dc0	KEYCLOAK-5260 kc_idp_hint was only working first time	2017-08-18 11:09:17 +02:00
mposolda	089514d8a6	KEYCLOAK-4634 Cross-dc support for UserLoginFailures	2017-08-17 10:22:12 +02:00
Bill Burke	16954fc370	fix	2017-08-10 14:58:09 -04:00
Levente NAGY	c8aa708cff	Merge remote-tracking branch 'upstream/master'	2017-08-10 18:14:49 +02:00
Bill Burke	41cdd9db70	KEYCLOAK-5268	2017-08-10 09:36:45 -04:00
Bill Burke	fbeef3e75f	manageMembership not deleted	2017-08-10 09:25:44 -04:00
Bill Burke	45eac1093d	show permissions	2017-08-09 10:39:59 -04:00
Bill Burke	3470b1839d	Merge remote-tracking branch 'upstream/master'	2017-08-09 10:25:25 -04:00
Bill Burke	2fa55550f3	token exchange permissions	2017-08-09 10:04:14 -04:00
mposolda	a72c297d5d	KEYCLOAK-4187 Fix LoginCrossDCTest	2017-08-08 14:02:48 +02:00
Hynek Mlnarik	9ca72dc5c6	KEYCLOAK-4189 Improve logging and concurrency/cross-DC testing	2017-08-08 10:11:51 +02:00
Bill Burke	430fe60533	Merge pull request #4374 from patriot1burke/master ... KEYCLOAK-5190	2017-08-07 14:19:23 -04:00
Bill Burke	ed5e880931	Merge remote-tracking branch 'upstream/master'	2017-08-07 12:02:50 -04:00
Bill Burke	c9b7504e3f	KEYCLOAK-5190	2017-08-07 12:02:18 -04:00
Bill Burke	3fce14d9ce	Merge pull request #4369 from patriot1burke/master ... KEYCLOAK-5249	2017-08-03 09:57:55 -04:00
Bill Burke	3b5ca2bac0	Merge pull request #4366 from hmlnarik/KEYCLOAK-4694-null ... KEYCLOAK-4694	2017-08-02 19:47:34 -04:00
Bill Burke	cf0ee31bc5	KEYCLOAK-5249	2017-08-02 19:42:35 -04:00
Hynek Mlnarik	4583a45e78	KEYCLOAK-4694	2017-08-01 09:57:12 +02:00
Bill Burke	8f542618f7	KEYCLOAK-4748	2017-07-31 10:36:04 -04:00
Bill Burke	486a0c9528	remove restriction	2017-07-28 16:25:32 -04:00
Bill Burke	6b991b850e	change role name	2017-07-28 16:20:23 -04:00
Bill Burke	852e9274d4	Merge remote-tracking branch 'upstream/master'	2017-07-28 16:15:53 -04:00
Bill Burke	db9b1bcb21	token exchange	2017-07-28 16:15:39 -04:00
mposolda	07e2136b3b	KEYCLOAK-4187 Added UserSession support for cross-dc	2017-07-27 22:32:58 +02:00
Hynek Mlnarik	ab05216730	KEYCLOAK-4775 Added encryption certificate to SAML metadata	2017-07-27 08:18:10 +02:00
Hynek Mlnarik	3c537f5f28	KEYCLOAK-4446 Do not encrypt SAML status messages ... SAML status messages are not encryptable per Chapter 6 of saml-core-2.0-os.pdf. Only assertions, attributes, base ID and name ID can be encrypted.	2017-07-26 11:22:56 +02:00
Hynek Mlnarik	c7046b6325	KEYCLOAK-4189 Preparation for cross-DC SAML testing	2017-07-25 09:44:36 +02:00
Marek Posolda	79a64657f7	Merge pull request #4331 from hmlnarik/KEYCLOAK-5209-IdpEmailVerificationAuthenticator-should-use-user-action-timeout ... KEYCLOAK-5209 Make IdpEmailVerificationAuthenticator use user action …	2017-07-21 15:32:40 +02:00
Hynek Mlnarik	a192b6f50a	KEYCLOAK-5209 Make IdpEmailVerificationAuthenticator use user action timeout	2017-07-19 15:25:20 +02:00
Hynek Mlnarik	d52d685161	KEYCLOAK-4818 Fix undeclared namespace error in context serialization	2017-07-19 15:18:53 +02:00
Hynek Mlnarik	c36074c7f3	KEYCLOAK-4187 Minor updates (abstraction)	2017-07-18 15:08:06 +02:00
Bill Burke	27b4f0e25d	Merge pull request #4324 from patriot1burke/master ... KEYCLOAK-5194	2017-07-15 09:26:51 -04:00
Bill Burke	a7940c6ffa	KEYCLOAK-5194	2017-07-14 18:29:48 -04:00
Bill Burke	1e059e3fa3	Merge pull request #4282 from cargosoft/KEYCLOAK-5131 ... KEYCLOAK-5131 ProviderFactory::postInit not called with hot deployment	2017-07-14 15:53:34 -04:00
Bill Burke	01152144bb	Merge pull request #4321 from hmlnarik/KEYCLOAK-4187-Minor-updates ... KEYCLOAK-4187 Minor updates in API	2017-07-14 15:48:53 -04:00
Bill Burke	f68754290f	KEYCLOAK-5152	2017-07-14 14:14:38 -04:00
Hynek Mlnarik	ddcbee2bff	KEYCLOAK-4187 Minor updates in API	2017-07-14 15:40:43 +02:00
Bill Burke	b0a33c9765	KEYCLOAK-5155	2017-07-13 14:51:27 -04:00
mposolda	3fca731395	KEYCLOAK-5136 Improve browser refresh button after switch to different flow	2017-07-11 13:03:18 +02:00
mposolda	936efe872a	KEYCLOAK-5061 Process correct initial flow when action expired	2017-07-10 22:52:54 +02:00
mposolda	7be2c55f61	KEYCLOAK-5061 Better error messages when action expired	2017-07-10 19:50:28 +02:00
Marek Posolda	48eaebf1c3	Merge pull request #4293 from TeliaSoneraNorge/KEYCLOAK-5139 ... KEYCLOAK-5139 refresh token does not work with pairwise subject ident…	2017-07-10 11:21:34 +02:00
Pedro Igor	65251748c7	[KEYCLOAK-5148] - Create authorization settings when creating a new client using a config file	2017-07-05 18:19:00 -03:00
Pedro Igor	4b7c61111c	Merge pull request #4288 from pedroigor/KEYCLOAK-5135 ... [KEYCLOAK-5135] - Wrong comparison when checking for duplicate resources during creation	2017-07-05 08:22:23 -03:00
Martin Hardselius	8cb8678525	KEYCLOAK-5139 refresh token does not work with pairwise subject identifiers	2017-07-05 12:32:43 +02:00
Stian Thorgersen	c95aace6e0	KEYCLOAK-5141 Return '*' in Cors requests when '*' is in list of permitted origins. Stop caching well-known information as it can change. (#4290)	2017-07-05 09:25:21 +02:00
Stian Thorgersen	9a9f4137e5	KEYCLOAK-4556 KEYCLOAK-5022 Only cache keycloak.js and iframe if specific version is requested (#4289)	2017-07-04 21:18:34 +02:00
Pedro Igor	adffe16cb8	[KEYCLOAK-5135] - Wrong comparison when checking for duplicate resources during creation	2017-07-04 10:16:55 -03:00
Stan Silvert	32b16717a7	KEYCLOAK-4234: Link to app in acct mgt doesn't use root url (#4285) ... * KEYCLOAK-4234: Link to app in acct mgt not use root url * Add tests.	2017-07-04 07:01:58 +02:00
Dmitry Telegin	fba264433a	KEYCLOAK-5131 ProviderFactory::postInit not called with hot deployment	2017-07-03 12:20:29 +03:00
Bill Burke	999dff353c	Merge remote-tracking branch 'upstream/master'	2017-06-29 17:37:45 -04:00
Bill Burke	f5389b0e17	don't clean up properly	2017-06-29 17:36:45 -04:00
Sebastien Blanc	500a21685f	KEYCLOAK-5082 : Add new redirect-rewrite-rule parameters for the adapters (#4255) ... * add rewrite rule config property * add subsystem support for redirect rewrite * update deployment unit test * add license headers * Optimize rewrite method	2017-06-29 12:50:42 +02:00
Stian Thorgersen	5e225c2bd5	Merge pull request #4266 from CoreFiling/FullNameMapper ... Fallback to using username in FullNameMapper	2017-06-29 07:28:42 +02:00
Stian Thorgersen	c9bc321d2a	Merge pull request #4269 from stianst/dockerdockerdocker ... KEYCLOAK-3592 Docker auth implementation	2017-06-29 07:23:47 +02:00
Stian Thorgersen	74fe9249d5	Merge pull request #4216 from machielg/master ... KEYCLOAK-5026 Store credentials	2017-06-29 06:52:16 +02:00
Josh Cain	89fcddd605	KEYCLOAK-3592 Docker auth implementation	2017-06-29 06:37:34 +02:00
Stian Thorgersen	e964b156cc	Merge pull request #4264 from stianst/KEYCLOAK-5074 ... KEYCLOAK-5074 Allow updating client secret through client registratio…	2017-06-28 11:40:04 +02:00
Jay Anslow	bdc9e8d2c3	Omit empty name claim in FullNameMapper ... If a user has no first or last name, don't add the `name` claim.	2017-06-28 09:40:57 +01:00
Stian Thorgersen	ce4506f367	Merge pull request #4261 from hmlnarik/KEYCLOAK-4377-null ... KEYCLOAK-4377	2017-06-28 08:21:20 +02:00
Stian Thorgersen	1220d7f898	KEYCLOAK-5074 Allow updating client secret through client registration service	2017-06-28 08:11:51 +02:00
Hynek Mlnarik	a3ccac2012	KEYCLOAK-4377	2017-06-27 14:34:47 +02:00
Stian Thorgersen	4be0e36306	Merge pull request #4208 from ASzc/KEYCLOAK-4758 ... KEYCLOAK-4758	2017-06-27 11:35:43 +02:00
Stian Thorgersen	56c5996aff	Merge pull request #4259 from stianst/abstractj-KEYCLOAK-4444 ... KEYCLOAK-4444	2017-06-27 10:44:30 +02:00
Machiel Groeneveld	7849191ec7	Merge branch 'master' into master	2017-06-27 10:27:07 +02:00
Stian Thorgersen	06a318d7d5	KEYCLOAK-4444 Update for fine grained permissions	2017-06-27 08:38:51 +02:00
Bruno Oliveira	361ab1c988	[KEYCLOAK-4444] Allow sending test email	2017-06-27 08:38:36 +02:00
Stian Thorgersen	b4d39ca061	KEYCLOAK-4984 Don't update client registration access token on read	2017-06-27 08:29:03 +02:00
Léventé NAGY	1a50e77a4d	Merge branch 'master' into feature/group-search-and-pagination	2017-06-26 20:36:36 +02:00
Bill Burke	bc05560d4d	Merge remote-tracking branch 'upstream/master'	2017-06-26 11:41:12 -04:00
Bill Burke	28b3ef9aa9	admin console work	2017-06-26 11:40:32 -04:00
Bill Burke	22987bb90b	Merge pull request #4250 from mposolda/RHSSO-1027 ... KEYCLOAK-5085 Easy fix to just handle the exception	2017-06-26 10:04:02 -04:00
Bill Burke	f1807aead4	impersonate	2017-06-25 11:28:37 -04:00
mposolda	756d996a4a	KEYCLOAK-5085 RHSSO-1027 Fix to handle the exception thrown from alternative flow	2017-06-23 19:13:43 +02:00
Bill Burke	3ee86fedc7	Merge remote-tracking branch 'upstream/master'	2017-06-23 09:57:35 -04:00
Bill Burke	e7f781df5a	fix	2017-06-23 09:57:25 -04:00
Hynek Mlnarik	8f9ed32a66	KEYCLOAK-5078 ConcurrencyTest fails intermittently ... This commit fixes 401 Unauthorized issues	2017-06-23 15:16:23 +02:00
Bill Burke	39dea4b078	restricting admin role mapping	2017-06-22 16:51:46 -04:00
Léventé NAGY	41d8d17062	Merge branch 'master' into feature/group-search-and-pagination	2017-06-22 17:41:30 +02:00
Levente NAGY	124bf43a27	[KEYCLOAK-2538] - groups count for pagination	2017-06-22 17:32:38 +02:00
Stian Thorgersen	6f731dfee9	Merge pull request #4118 from skjolber/feature/KEYCLOAK-3056-verify-signature-2 ... Some adjustments for KEYCLOAK-3056 / PR #3893	2017-06-22 08:44:32 +02:00
Marek Posolda	ab7a0c2252	Merge pull request #4248 from mposolda/client-initial-access-db ... KEYCLOAK-4631 Move ClientInitialAccessModel from userSession model to…	2017-06-22 06:27:25 +02:00
Bill Burke	d08ddade2e	merge	2017-06-21 17:43:54 -04:00
Bill Burke	52e40922bc	removal	2017-06-21 17:42:57 -04:00
Bill Burke	2b1613d36b	Merge pull request #4064 from frelibert/KEYCLOAK-4781 ... KEYCLOAK-4781 Support for an AttributeStatement Mapper	2017-06-21 17:06:16 -04:00
Bill Burke	f1132ffabe	Merge pull request #4175 from mrezai/fix-pkce-s256-code-challenge ... KEYCLOAK-4956: Fix incorrect PKCE S256 code challenge generation	2017-06-21 17:04:31 -04:00
mposolda	fc61a4e89f	KEYCLOAK-4631 Move ClientInitialAccessModel from userSession model to realm model	2017-06-21 22:14:20 +02:00
Marek Posolda	eae0360eb1	Merge pull request #4243 from mposolda/KEYCLOAK-3316 ... KEYCLOAK-3316 Fixes for OAuth2 requests without 'scope=openid'	2017-06-20 22:05:23 +02:00
Pedro Igor	93d57c7d00	Merge pull request #4236 from CoreFiling/js-policy-performance ... [KEYCLOAK-5072] - Improve performance of JSPolicyProvider	2017-06-20 15:11:40 -03:00
mposolda	32cf8b7cad	KEYCLOAK-3316 Fixes for OAuth2 requests without 'scope=openid'	2017-06-20 17:17:43 +02:00
mposolda	f363dbcad0	KEYCLOAK-4327 Switching language on User consent gives error	2017-06-20 09:21:41 +02:00
Bill Burke	57cb46148f	tests	2017-06-19 11:21:59 -04:00
Jay Anslow	7614ff8c6f	Extract EvaluatebleScriptAdapter ... Precursor for InvocableScriptAdapter, which compiles/evaluates a script without affecting the engine's bindings. This allows the same script to be compiled once and then evaluated multiple times (with the same ScriptEngine).	2017-06-19 15:32:14 +01:00
Bill Burke	a994af9010	remove scope	2017-06-16 11:26:43 -04:00
Pedro Igor	93105a2182	[KEYCLOAK-5056] - @NoCache to scope admin api	2017-06-15 09:49:20 -03:00
Martin Hardselius	60942346f3	KEYCLOAK-4924: pairwise clients get duplicate subs in tokens	2017-06-14 10:47:40 +02:00
Hynek Mlnarik	a0f3a6469f	KEYCLOAK-4189 - Cross DC testing	2017-06-12 11:14:28 +02:00
Pedro Igor	f12cef2c86	[KEYCLOAK-4904] - Authorization Audit - Part 1	2017-06-09 13:31:06 -03:00
Machiel Keizer-Groeneveld	80f8815b9a	KEYCLOAK-5026 Store credentials ... Credentials are stored with user creation if they are present in the UserRepresentation.	2017-06-09 09:32:33 +02:00
Bill Burke	94528976d4	console work	2017-06-07 16:29:43 -04:00
Levente NAGY	f377a45c4e	[KEYCLOAK-2538] - groups count for pagination limits	2017-06-07 20:52:22 +02:00
Levente NAGY	c4da7637d6	[KEYCLOAK-2538] - groups pagination and group search	2017-06-06 18:32:48 +02:00
Bill Burke	536a57a514	ui for permission reference	2017-06-05 19:52:51 -04:00
Alex Szczuczko	5d88c2b8be	KEYCLOAK-4758 Update Encode class using latest resteasy. Use encodeQueryParamAsIs instead of encodeQueryParam when encoding key=value pairs for URI query sections. Also fix a few callers who were relying on the bad behaviour of queryParam.	2017-06-05 16:24:38 -06:00
Pedro Igor	9be9e30ad6	Merge pull request #4206 from pedroigor/KEYCLOAK-4983 ... [KEYCLOAK-4983] - Authz settings export of role base policy generates json where are just role-names	2017-06-05 16:19:58 -03:00
Pedro Igor	23887f4031	Fixing tests and more client policy tests	2017-06-05 11:26:33 -03:00
Pedro Igor	3760f2753b	[KEYCLOAK-4983] - Authz settings export of role base policy generates json where are just role-names	2017-06-02 20:09:33 -03:00
Pedro Igor	d0f505455d	[KEYCLOAK-4991] - Allow clients to limit the number of permission in a RPT when using entitlements	2017-06-02 19:06:40 -03:00
Bill Burke	a41d282e92	client permission tests	2017-06-02 15:49:20 -04:00
Pedro Igor	813af5d757	[KEYCLOAK-4992] - Using query parameter metadata for GET requests	2017-06-02 16:13:04 -03:00
Thomas Skjølberg	241c58dd61	Add unit tests related to signatures, check that a signature is present when want assertion signing.	2017-06-02 15:36:52 +02:00
Bill Burke	b9f7a43a72	group permissions	2017-06-01 20:16:35 -04:00
Pedro Igor	dcd1a68d95	[KEYCLOAK-4992] - Allow clients to exclude resource_set_name from RPT	2017-05-31 19:33:34 -03:00
Pedro Igor	c4a0470a37	[KEYCLOAK-4987] - Remove async support from AuthZ Token Endpoints	2017-05-30 12:48:18 -03:00
Stian Thorgersen	a6e4245185	Merge pull request #4194 from stianst/KEYCLOAK-4888 ... KEYCLOAK-4888	2017-05-30 14:49:22 +02:00
Stian Thorgersen	8c53c5a90e	KEYCLOAK-4888 ... Change default hashing provider for realm	2017-05-30 09:54:05 +02:00
Thomas Darimont	7d0b461683	KEYCLOAK-4975 Use authenticationSession binding name in ScriptBasedAuthenticator ... We now use authenticationSession instead of clientSession to reflect the renaming of ClientSessionModel to AuthenticationSessionModel. Note that this is a breaking change which needs to be mentioned in the upgrade notes!	2017-05-29 18:14:02 +02:00
Bill Burke	c3ea847b3e	auth changes	2017-05-29 09:53:17 -04:00
mposolda	5560175888	KEYCLOAK-4626 Changed javadoc. Remove unused ClientSessionModel class	2017-05-25 18:51:05 +02:00
Pedro Igor	81f1a5b145	Merge pull request #4183 from pedroigor/stan-ui-fixes ... [KEYCLOAK-4915] - Fixes to evaluation tool UI	2017-05-24 09:32:42 -03:00
mposolda	2b59db71a8	KEYCLOAK-3316 Remove the IDToken if scope=openid is not used	2017-05-24 09:23:14 +02:00
Pedro Igor	829bcf5eaf	Fix to evaluation tool	2017-05-23 17:50:06 -03:00
Pedro Igor	554e692d8f	Merge pull request #4171 from pedroigor/KEYCLOAK-4913 ... [KEYCLOAK-4913] - Caching more query methods	2017-05-23 17:40:51 -03:00
Stian Thorgersen	c442bcd8d3	Merge pull request #4174 from stianst/KEYCLOAK-4889 ... KEYCLOAK-4889	2017-05-23 14:26:15 +02:00
Stian Thorgersen	1b6405a28f	Merge pull request #4173 from hmlnarik/KEYCLOAK-4941 ... KEYCLOAK-4941	2017-05-23 14:00:43 +02:00
Stian Thorgersen	ef29097679	Merge pull request #4172 from hmlnarik/KEYCLOAK-4813-Destination-Validation-should-ignore-whether-default-port-is-explicitly-specified ... KEYCLOAK-4813 Destination validation counts on port being not specified	2017-05-23 13:59:36 +02:00
Mohammad Rezai	acd78ee407	KEYCLOAK-4956: Fix incorrect PKCE S256 code challenge generation	2017-05-23 16:15:44 +04:30
Stian Thorgersen	130452f6c3	Merge pull request #4085 from mstruk/RHSSO-402 ... RHSSO-402 need a way to dump configuration (including ldap provider config) to a file	2017-05-23 13:29:32 +02:00
Stian Thorgersen	097a2267f5	KEYCLOAK-4889 ... Improve error messages for password policies	2017-05-23 13:18:06 +02:00
Hynek Mlnarik	f47283f61a	KEYCLOAK-4813 Destination validation counts on port being not specified	2017-05-23 12:52:48 +02:00
Hynek Mlnarik	03b1dff1bd	KEYCLOAK-4941	2017-05-23 11:15:51 +02:00
mposolda	8adde64e2c	KEYCLOAK-4016 Provide a Link to go Back to The Application on a Timeout	2017-05-23 09:08:58 +02:00
Pedro Igor	37a98fba20	[KEYCLOAK-4913] - Caching more query methods	2017-05-22 19:08:24 -03:00
Pedro Igor	62ffab7239	Exporting a client is updating policy config	2017-05-19 19:45:47 -03:00
Bill Burke	ab763e7c5b	fixes after merge	2017-05-19 15:54:36 -04:00
Bill Burke	f114895cd2	for merge	2017-05-19 11:29:26 -04:00
Bill Burke	2cac8b1bb7	KEYCLOAK-4929	2017-05-18 16:53:31 -04:00
Bill Burke	c291748f43	KEYCLOAK-4929	2017-05-18 16:48:04 -04:00
Marko Strukelj	7d0ca42c6c	RHSSO-402 need a way to dump configuration (including ldap provider config) to a file	2017-05-15 12:13:58 +02:00
Bill Burke	954ef99f22	Merge remote-tracking branch 'upstream/master'	2017-05-12 10:10:29 -04:00
mposolda	7d8796e614	KEYCLOAK-4626 Support for sticky sessions with AUTH_SESSION_ID cookie. Clustering tests with embedded undertow. Last fixes.	2017-05-11 22:24:07 +02:00
Hynek Mlnarik	b8262a9f02	KEYCLOAK-4628 Single-use cache + its functionality incorporated into reset password token. Utilize single-use cache for relevant actions in execute-actions token	2017-05-11 22:16:26 +02:00
mposolda	db8b733610	KEYCLOAK-4626 Fix TrustStoreEmailTest and PolicyEvaluationCompositeRoleTest. Distribution update	2017-05-11 22:16:26 +02:00
Hynek Mlnarik	c431cc1b01	KEYCLOAK-4627 IdP email account verification + code cleanup. Fix for concurrent access to auth session notes	2017-05-11 22:16:26 +02:00
mposolda	168153c6e7	KEYCLOAK-4626 Authentication sessions - SAML, offline tokens, broker logout and other fixes	2017-05-11 22:16:26 +02:00
Hynek Mlnarik	47aaa5a636	KEYCLOAK-4627 reset credentials and admin e-mails use action tokens. E-mail verification via action tokens.	2017-05-11 22:16:26 +02:00
mposolda	e7272dc05a	KEYCLOAK-4626 AuthenticationSessions - brokering works. Few other fixes and tests added	2017-05-11 22:16:26 +02:00
Hynek Mlnarik	b55b089355	KEYCLOAK-4627 Changes in TokenVerifier to include token in exceptions. Reset credentials uses checks to validate individual token aspects	2017-05-11 22:16:26 +02:00
mposolda	a9ec69e424	KEYCLOAK-4626: AuthenticationSessions - working login, registration, resetPassword flows	2017-05-11 22:16:26 +02:00
Hynek Mlnarik	19a41c8704	KEYCLOAK-4627 Refactor TokenVerifier to support more than just access token checks. Action tokens implementation with reset e-mail action converted to AT	2017-05-11 22:16:26 +02:00
mposolda	83b29c5080	KEYCLOAK-4626 AuthenticationSessions: start	2017-05-11 22:16:26 +02:00
mposolda	e4aba9e471	KEYCLOAK-4829 Access token from offline token falsely reported as inactive by token introspection	2017-05-11 21:17:04 +02:00
Stian Thorgersen	c3a2b3a6b6	KEYCLOAK-4523 PBKDF2WithHmacSHA256 and PBKDF2WithHmacSHA512 providers	2017-05-11 11:58:22 +02:00
Bill Burke	46ec12c41c	fixes	2017-05-10 14:19:10 -04:00
Bill Burke	a8a8ea4bcd	Merge remote-tracking branch 'upstream/master'	2017-05-08 13:49:03 -04:00
Bill Burke	f760427c5c	fine grain tests	2017-05-08 13:48:51 -04:00
Johannes Knutsen	47a8077426	KEYCLOAK-4862: Expose client description in ClientBean	2017-05-05 15:06:21 +02:00
Bill Burke	e1b6ba13cc	Merge pull request #3893 from anderius/feature/KEYCLOAK-3056-verify-signature ... [WIP] Saml broker: Added wantAssertionsSigned and wantAssertionsEncrypted	2017-05-05 09:04:41 -04:00
Stian Thorgersen	8da766e02e	Merge pull request #4104 from sjvs/master ... Fix three lgtm.com alerts: two possible NPEs, one possible int overflow	2017-05-05 13:13:02 +02:00
Marc Heide	d5c643eaf9	KEYCLOAK-4521: consider offline sessions if no active user session was found for user info endpoint	2017-05-04 15:25:09 +02:00
Bill Burke	c3b44e61d4	Merge remote-tracking branch 'upstream/master'	2017-05-01 14:51:07 -04:00
Bas van Schaik	2df1175315	Fix lgtm.com alert: potential NPE due to non-short circuit logic ... The logical-AND operator '&&' evaluates its operands in order, which is what is required here. The bitwise-AND operator '&' always evaluates all operands, which will in some cases result in a NPE in the second operand. Details: https://lgtm.com/projects/g/keycloak/keycloak/snapshot/dist-7900299-1490802114895/files/services/src/main/java/org/keycloak/services/resources/admin/RealmAdminResource.java#V543	2017-04-28 14:51:51 +01:00
Eriksson Fabian	ca1152c3e5	KEYCLOAK-4204 Extend brute force protection with permanent lockout on failed attempts ... - Can still use temporary brute force protection. - After X-1 failed login attempt, if the user successfully logs in his/her fail login count is reset.	2017-04-28 09:02:10 +02:00
Bill Burke	c7bdb489ee	Merge remote-tracking branch 'upstream/master'	2017-04-26 18:57:56 -04:00
Pedro Igor	0cad34abbe	Merge pull request #4087 from pedroigor/master ... Checking realm role directly	2017-04-26 16:51:14 -03:00
Bill Burke	2276f99d54	Merge remote-tracking branch 'upstream/master'	2017-04-26 14:39:45 -04:00
Bill Burke	f67013bcb6	fix	2017-04-26 14:39:41 -04:00
Pedro Igor	4e43518b2a	Checking realm role directly	2017-04-26 15:39:37 -03:00
Johannes Knutsen	0809033924	KEYCLOAK-4780 Ensure Base64 encoded HMAC secret key is decoded before use	2017-04-26 16:04:44 +02:00
Stian Thorgersen	2913ee8e23	Merge pull request #4081 from stianst/KEYCLOAK-4785 ... KEYCLOAK-4785 Use realm name when creating admin console base url	2017-04-26 13:12:31 +02:00
Stian Thorgersen	f68b28db20	KEYCLOAK-4785 Use realm name when creating admin console base url	2017-04-26 12:39:56 +02:00
Pedro Igor	79c9078caa	[KEYCLOAK-4792] - Client credentials provider support and making easier to obtain authz client	2017-04-25 14:51:45 -03:00
Stian Thorgersen	84f5df4814	Merge pull request #4070 from stianst/KEYCLOAK-4671 ... KEYCLOAK-4671 Add server-private-spi to dependency deployer	2017-04-25 10:36:22 +02:00
Stian Thorgersen	54ee055bd8	KEYCLOAK-4671 Add server-private-spi to dependency deployer	2017-04-25 10:16:24 +02:00
Hynek Mlnarik	e8a65017fa	KEYCLOAK-4779 Fix NPE	2017-04-24 23:09:27 +02:00
Bill Burke	12cb295a35	Merge remote-tracking branch 'upstream/master'	2017-04-24 10:05:46 -04:00
Bill Burke	58868ca99f	prototype	2017-04-24 10:05:39 -04:00
Frederik Libert	b84f6d306d	KEYCLOAK-4781 Support for an AttributeStatement Mapper	2017-04-24 11:29:55 +02:00
Stian Thorgersen	f92ad70ff0	KEYCLOAK-4774 redirect_fragment doesn't work in Admin Console	2017-04-21 14:03:05 +02:00
Pedro Igor	df163d86e8	Merge pull request #4052 from pedroigor/KEYCLOAK-4754 ... [KEYCLOAK-4754] - Unable to delete realm when using aggregated policies	2017-04-20 13:23:09 -03:00
Pedro Igor	bf69bc94bb	[KEYCLOAK-4754] - Unable to delete realm when using aggregated policies	2017-04-20 12:10:52 -03:00
Stian Thorgersen	2a8b2aabb9	Merge pull request #4049 from stianst/KEYCLOAK-4738 ... KEYCLOAK-4738 Make sure script engine always uses correct classloader	2017-04-20 10:02:23 +02:00
Stian Thorgersen	1d03eb5f2b	Merge pull request #4045 from stianst/KEYCLOAK-4737 ... KEYCLOAK-4737 Admin Console redirect loop when hostname contains console	2017-04-20 09:29:41 +02:00
Stian Thorgersen	4da07474fa	KEYCLOAK-4738 Make sure script engine always uses correct classloader	2017-04-20 09:28:46 +02:00
Stian Thorgersen	8919015f74	KEYCLOAK-4287 Remove deprecated session iframe endpoint	2017-04-19 15:01:15 +02:00
Stian Thorgersen	0a0d2174e4	KEYCLOAK-4737 Admin Console redirect loop when hostname contains console	2017-04-19 14:43:56 +02:00
Pedro Igor	8e877a7f6c	[KEYCLOAK-3135] - More tests	2017-04-12 14:34:27 -03:00
Pedro Igor	eec712a259	[KEYCLOAK-3135] - Role and user policies apis	2017-04-12 00:52:14 -03:00
Pedro Igor	54ebc1918c	[KEYCLOAK-3135] - Using abstract policy representation when creating policies and updating tests	2017-04-12 00:52:13 -03:00
Pedro Igor	d60dcb4c62	[KEYCLOAK-3135] - Some more tests and making policy type rest api more generic	2017-04-12 00:52:13 -03:00
Pedro Igor	8e64bc3e4d	Tests for new permission management rest api	2017-04-12 00:52:13 -03:00
Pedro Igor	0b8fc3d6e1	[KEYCLOAK-3135] - Fixing permission test	2017-04-12 00:52:13 -03:00
Pedro Igor	55f747ecd0	[KEYCLOAK-3135] - Part 1: Permission Management API	2017-04-12 00:52:13 -03:00
Bill Burke	9452d37926	Merge remote-tracking branch 'upstream/master'	2017-04-06 18:33:50 -04:00
Bill Burke	2e284bdd9b	fix protocol mappers	2017-04-06 18:33:06 -04:00
Bill Burke	54cd41c955	Revert "KEYCLOAK-4727 KEYCLOAK-4652 - Fixing protocol mappers when evaluating policies using the tool"	2017-04-06 18:24:31 -04:00
Pedro Igor	6a959b32fc	KEYCLOAK-4727 KEYCLOAK-4652 - Fixing protocol mappers when evaluating policies using the tool	2017-04-06 18:43:54 -03:00
Bill Burke	3ce0c57e17	Merge pull request #3831 from Hitachi/master ... KEYCLOAK-2604 Proof Key for Code Exchange by OAuth Public Clients	2017-04-06 15:36:08 -04:00
Bill Burke	0fd11d16ee	Merge pull request #3983 from bartoszmajsak/oso_typo_fix ... Fixes misspelled config class in Openshift provider	2017-04-06 15:29:44 -04:00
Bill Burke	6ca5b7de03	Merge pull request #3998 from cainj13/fixNullProtocols ... Fix null protocols for default clients	2017-04-06 15:29:21 -04:00
Bill Burke	13afc0147e	close user/client session later	2017-04-06 15:07:40 -04:00
Bill Burke	201d2c6aac	Merge remote-tracking branch 'upstream/master'	2017-04-06 10:44:43 -04:00
Bill Burke	31074c3c8d	KEYCLOAK-4727 KEYCLOAK-4652	2017-04-06 10:44:33 -04:00
Stian Thorgersen	af4c74f1d9	Merge pull request #3718 from thomasdarimont/issue/KEYCLOAK-4163-improve-support-for-email-addresses ... KEYCLOAK-4163 Improve support for e-mail addresses	2017-04-06 15:34:30 +02:00
Stian Thorgersen	6201257f76	KEYCLOAK-4549 [RH-SSO] EAP 7.1.0 Alpha16	2017-04-05 11:55:21 +02:00
Josh Cain	0482ec40fd	Fix null protocols in default realm applications	2017-03-31 16:13:38 -05:00
Pedro Igor	838a045239	[KEYCLOAK-4650] - Adding scope filter and fixing cancel buttons	2017-03-29 12:59:41 -03:00
Takashi Norimatsu	ef3aef9381	Merge branch 'master' into master	2017-03-28 16:21:40 +09:00
Stian Thorgersen	6b21b4d87b	KEYCLOAK-4657 Sort out REST API for prod profile	2017-03-27 20:50:13 +02:00
Bartosz Majsak	0197600565	Fixes misspelled config class	2017-03-27 09:38:47 +02:00
Bill Burke	71f0c01d4f	Merge pull request #3980 from patriot1burke/master ... KEYCLOAK-4664 KEYCLOAK-4665	2017-03-25 20:12:22 -04:00
Bill Burke	8c2e756732	fix	2017-03-25 19:21:50 -04:00
Bill Burke	d8e98d1de6	KEYCLOAK-4665	2017-03-25 12:47:32 -04:00
Bill Burke	dd8a64f30c	KEYCLOAK-4664	2017-03-25 11:21:11 -04:00
Bartosz Majsak	63e8e7f842	Alings SimpleHttp API with new version	2017-03-23 13:51:14 +01:00
Bartosz Majsak	210143738e	Merge branch 'master' into oso_provider	2017-03-23 13:45:07 +01:00
Peter Nalyvayko	b2f10359c8	KEYCLOAK-4335: x509 client certificate authentication ... Started on implementing cert thumbprint validation as a part of x509 auth flow. Added a prompt screen to give users a choice to either log in based on the identity extracted from X509 cert or to continue with normal browser login flow authentication; clean up some of the comments x509 authentication for browser and direct grant flows. Implemented certificate to user mapping based on user attribute Implemented CRL and OCSP certificate revocation checking and added corresponding configuration settings to set up responderURI (OCSP), a location of a file containing X509CRL entries and switiches to enable/disable revocation checking; reworked the certificate validation; removed superflous logging; changed the certificate authentication prompt page to automatically log in the user after 10 seconds if no response from user is received Support for loading CRL from LDAP directory; finished the CRL checking using the distribution points in the certificate; updated the instructions how to add X509 authentication to keycloak authentication flows; minor styling changes Stashing x509 unit test related changes; added the steps to configure mutual SSL in WildFly to the summary document A minor fix to throw a security exception when unable to check cert revocation status using OCSP; continue working on README Changes to the formating of the readme Added a list of features to readme Fixed a potential bug in X509 cert user authenticator that may cause NPE if the client certificate does not define keyusage or extended key usage extensions Fixed compile time errors in X509 validators caused by the changes to the user credentials model in upstream master Removed a superfluous file created when merging x509 and main branches X509 authentication: removed the PKIX path validation as superflous Reverted changes to the AbstractAttributeMapper introduced during merging of x509 branch into main Merge the unit tests from x509 branch added mockito dependency to services project; changes to the x509 authenticators to expose methods in order to support unit tests; added a default ctor to CertificateValidator class to support unit testing; updated the direct grant and browser x509 authenticators to report consistent status messages; unit tests to validate X509 direct grant and browser authenticators; fixed OCSP validation to throw an exception if the certificate chain contains a single certificate; fixed the CRL revocation validation to only use CRL distribution point validation only if configured CRL and OSCP mock tests using mock netty server. Changed the certificate validator to better support unit testing. changes to the mockserver dependency to explicitly exclude xercesImpl that was causing SAMLParsingTest to fail Added a utility class to build v3 certificates with optional extensions to facilitate X509 unit testing; removed supoerfluous certificate date validity check (undertow should be checking the certificate dates during PKIX path validation anyway) X509: changes to make configuring the user identity extraction simplier for users - new identity sources to map certificate CN and email (E) attributes from X500 subject and issuer names directly rather than using regular expressions to parse them X509 fixed a compile error caused by the changes to the user model in master Integration tests to validate X509 client certificate authentication Minor tweaks to X509 client auth related integration tests CRLs to support x509 client cert auth integration tests X509: reverted the changes to testrealm.json and updated the test to configure the realm at runtime X509 - changes to the testsuite project configuration to specify a path to a trust store used to test x509 direct grant flow; integration tests to validate x509 authentication in browser and direct grant flows; updated the client certificate to extend its validatity dates; x509 integration tests and authenticators have been refactored to use a common configuration class X509 separated the browser and direct grant x509 authenction integration tests x509 updated the authenticator provider test to remove no longer supported cert thumbprint authenticator x509 removed the dependency on mockito x509 re-implemented OCSP certificate revocation client used to check revocation status when logging in with x509 certificate to work around the dependency on Sun OCSP implementation; integration tests to verify OCSP revocation requests index.txt.attr is needed by openssl to run a simple OCSP server x509: minor grammar fixes Add OCSP stub responder to integration tests This commit adds OCSP stub responder needed for the integration tests, and eliminates the need to run external OCSP responder in order to run the OCSP in X509OCSPResponderTest. Replace printStackTrece with logging This commit replaces call to printStackTrace that will end up going to the stderr with logging statement of WARN severity. Remove unused imports Removed unused imports in org.keycloak.authentication.authenticators.x509 package. Parameterized Hashtable variable Removed unused CertificateFactory variable Declared serialVersionUID for Serializable class Removed unused CertificateBuilder class The CertificateBuilder was not used anywhere in the code, removing it to prevent technical debt. Removing unused variable declaration `response` variable is not used in the test, removed it. Made sure InputStreams are closed Even though the InputStreams are memory based, added try-with-resources to make sure that they are closed. Removed deprecated usage of URLEncoder Replaced invocation of deprecated method from URLEncoder with Encode from Keycloak util package. Made it more clear how to control OCSP stub responder in the tests X509 Certificate user authentication: moved the integration unit tests into their own directory to fix a failing travis test job KEYCLOAK-4335: reduced the logging level; added the instructions how to run X.509 related tests to HOW-TO-RUN.md doc; removed README.md from x509 folder; removed no longer used ocsp profile and fixed the exclusion filter; refactored the x509 base test class that was broken by the recent changes to the integration tests KEYCLOAK-4335: fixed a few issues after rebasing	2017-03-17 05:24:57 -04:00
Bartosz Majsak	a250f08b6c	Removes trailing slash from the base url	2017-03-15 22:27:24 +01:00
Stian Thorgersen	2aa93d7d55	Merge pull request #3924 from daklassen/KEYCLOAK-2486 ... KEYCLOAK-2486: Update SimpleHTTP to use Apache HTTP Client	2017-03-15 09:50:06 +01:00
Thomas Darimont	b782892769	KEYCLOAK-4163 Improve support for e-mail addresses ... Added support for user friendly email addresses as well as dedicated reply-to addresses for emails being sent by Keycloak. Both can be customized via the email settings per realm in the admin-console. User friendly email addresses use the format: "Friendly Name"<email@example.org> and provide way to add a meaning full name to an e-mail address. We also allow to specify an optional envelope from bounce address. If a mail sent to a user could not be delivered the email-provider will sent a notification to that address. See: https://en.wikipedia.org/wiki/Bounce_address Add test for proper email headers in sent messages	2017-03-14 18:22:54 +01:00
Bill Burke	6d51862057	Merge pull request #3897 from anderius/feature/KEYCLOAK-4504-redirect-logout ... [WIP] Saml broker: Option to specify logout request binding	2017-03-14 11:32:26 -04:00
Pedro Igor	9d1d22565c	Merge pull request #3938 from pedroigor/authz-fixes ... AuthZ Services Fixes	2017-03-13 15:20:41 -03:00
Pedro Igor	e7e6314146	[KEYCLOAK-4555] - Fixes and improvements to evaluation code	2017-03-13 14:08:54 -03:00
Alexey Kazakov	063f5303dd	KEYCLOAK-4568 Identity broker service may fail to validate client session if there is more then one active session	2017-03-11 12:59:25 -08:00
Mark Pardijs	c78c0b73d3	KEYCLOAK-4360: Add OneTimeUse condition to SAMLResponse ... Add OneTimeUse Condition to SAMLResponse when configured in client settings	2017-03-09 13:01:05 +01:00
David Klassen	7029ef80f8	KEYCLOAK-2486: Update SimpleHTTP to use Apache HTTP Client ... Update SimpleHTTP to use Apache HTTP client under the covers.	2017-03-09 09:23:09 +01:00
Thomas Darimont	1dea38bdbb	KEYCLOAK-4205 Allow to return json arrays in Client and Realm Role Mappers ... Previously the ClientRoleMapper and RealmRoleMapper returned roles as a comma delimited String in OIDC tokens which needed to be parsed by client applications. We now support to generate the role information as JSON arrays by setting "multi valued" to "true" in the client role mapper or realm role mappers respectively which makes it easier for clients to consume. The default setting for "multi valued" is "false" to remain backwards compatible. An example AccessToken that shows the two modes can be found here: https://gist.github.com/thomasdarimont/dff0cd691cd6e0b5e33c2eb4c76ae5e8	2017-03-08 20:56:56 +01:00
Bill Burke	efffcc5f41	Merge pull request #3915 from TeliaSoneraNorge/KEYCLOAK-4524 ... KEYCLOAK-4524	2017-03-08 10:08:04 -05:00
Bill Burke	c6dc59f63e	Merge remote-tracking branch 'upstream/master'	2017-03-03 11:00:32 -05:00
Martin Hardselius	a0a85f62c6	KEYCLOAK-4524 possible to add identity prover mappers with same name into single identity provider ... - unique name enforcement working - test added	2017-03-03 16:40:49 +01:00
Bill Burke	3bb29e033b	KEYCLOAK-4501, KEYCLOAK-4511, KEYCLOAK-4513	2017-03-03 09:48:52 -05:00
Bartosz Majsak	1a6bb2fedb	Adds Openshift Identity Provider as part of social brokers	2017-03-02 15:14:57 +01:00
Marek Posolda	cfb8d25ff2	Merge pull request #3900 from KillerDiller/wellknownprovider-four-oh-four ... KEYCLOAK-4519: Avoid NPE for unknown paths under .../.well-known/.	2017-03-02 12:22:35 +01:00
Marek Posolda	4f4ae44a16	Merge pull request #3896 from thomasdarimont/issue/KEYCLOAK-4505-expose-clientSession-binding-to-ScriptBasedAuthenticator ... KEYCLOAK-4505 Expose current clientSession binding to ScriptBasedAuthenticator	2017-03-01 12:17:29 +01:00
mposolda	091b376624	KEYCLOAK-1590 Realm import per test class	2017-03-01 09:38:44 +01:00
Anders Båtstrand	8d82390843	KEYCLOAK-4504 New configuration option for SAML Broker: ... * postBindingLogout: Indicates if POST or redirect should be used for the logout requests. This applies to both IdP-initiated logout, and Keycloak-initiated logout. If unset (for example when upgrading Keycloak), the setting is initially set to the same as postBindingResponse. The flag is also set when importing IdP metadata.	2017-02-28 12:08:22 +01:00
Bill Burke	0765b01189	Merge remote-tracking branch 'upstream/master'	2017-02-27 18:46:09 -05:00
Bill Burke	b4f625e1ce	KEYCLOAK-4501	2017-02-27 18:46:00 -05:00
Stefan Paletta	bcbde3fdf0	Avoid NPE for unknown paths under .../.well-known/.	2017-02-27 02:42:02 +01:00
Anders Båtstrand	89c6cda2ac	Two new configuration options for the Saml broker: ... * wantAssertionsSigned: This will toggle the flag in the SP Metadata Descriptor, and validate the signature if and only if "Validate signature" is selected. * wantAssertionsEncrypted: This will simply require that the assertion is encrypted. Default behavior is unchanged. The signature validation uses the original XML, and supports therefore an IdP that adds whitespace and line breaks between tags (for example OpenAM).	2017-02-24 15:08:57 +01:00
Thomas Darimont	18a8ed3e95	KEYCLOAK-4505 Expose current clientSession binding to ScriptBasedAuthenticator. ... Previously the ScriptBasedAuthenticator did not expose the current clientSession from the AuthenticationFlowContext. In order to implement client specific authentications with javascript one needs information about the current client.	2017-02-24 14:01:10 +01:00
Stian Thorgersen	e2b1c97e26	KEYCLOAK-943 Added initial implementation for update profile	2017-02-24 13:19:29 +01:00
Stian Thorgersen	faf0e98665	Merge pull request #3736 from guusdk/api-documentation ... Improving the generated REST API documentation	2017-02-20 15:30:32 +01:00
Stian Thorgersen	3653d7ed9a	Merge pull request #3762 from sldab/hide-providers ... KEYCLOAK-4224 Allow hiding identity providers on login page	2017-02-17 12:04:35 +01:00
Bill Burke	c3e72b11db	KEYCLOAK-4382	2017-02-13 10:51:10 -05:00
Bill Burke	d9633dc20c	Merge remote-tracking branch 'upstream/master'	2017-02-09 09:13:00 -05:00
Stian Thorgersen	44180a68e6	Merge pull request #3845 from frelibert/KEYCLOAK-4378 ... KEYCLOAK-4378 New user attribute is not added after first login from …	2017-02-09 10:02:09 +01:00
Bill Burke	cf5e2a1d20	unlink/remoteimported	2017-02-08 19:48:22 -05:00
Frederik Libert	f3a552ac9d	KEYCLOAK-4378 New user attribute is not added after first login from broker	2017-02-07 15:37:16 +01:00
mposolda	8a16ab52a9	KEYCLOAK-4371 Offline Tokens still useless When SSO Session Max is Reached and normal userSession expired	2017-02-03 11:55:58 +01:00
Takashi Norimatsu	88bfa563df	KEYCLOAK-2604 Proof Key for Code Exchange by OAuth Public Clients - RFC ... 7636 - Server Side Implementation	2017-02-03 10:38:54 +09:00
Bill Burke	1d04d56bdb	Merge pull request #3816 from patriot1burke/master ... KEYCLOAK-4218	2017-02-01 08:55:10 -05:00
Bill Burke	0d308e2b69	KEYCLOAK-4218	2017-01-31 15:15:49 -05:00
Pedro Igor	57c74e3f39	[KEYCLOAK-4341] - Resources are not properly exported when exporting authorization settings	2017-01-31 13:10:25 -02:00
Stian Thorgersen	d1e491d57d	KEYCLOAK-4286 Add deprecated support for old keycloak.js	2017-01-25 15:59:43 +01:00
mposolda	2de2df3a41	KEYCLOAK-4282 Fix authorization import in DirImportProvider	2017-01-24 21:57:35 +01:00
mposolda	194a63cc71	KEYCLOAK-4282 Import authorization after users are imported	2017-01-24 17:32:34 +01:00
Stian Thorgersen	94ffeda62a	Merge pull request #3773 from hmlnarik/KEYCLOAK-4181-SAML-Response-without-any-assertion-leads-to-an-exception ... KEYCLOAK-4181 Fix handling of SAML error code in broker	2017-01-24 10:33:05 +01:00
Marek Posolda	29c0fe564c	Merge pull request #3752 from mposolda/master ... KEYCLOAK-4024 Migration of old offline tokens	2017-01-23 16:25:35 +01:00
Stian Thorgersen	15d0a116ac	Merge pull request #3769 from hmlnarik/KEYCLOAK-4167-Unable-to-validate-access-token-for-OIDC-External-IDP-using-configured-public-key ... KEYCLOAK-4167 Always use preset key for verification if key ID not set	2017-01-23 13:59:35 +01:00
Hynek Mlnarik	5da491c270	KEYCLOAK-4181 Fix handling of SAML error code in broker	2017-01-19 16:30:06 +01:00
Hynek Mlnarik	f289b281a0	KEYCLOAK-4262	2017-01-19 16:00:03 +01:00
Stian Thorgersen	536b88790e	Merge pull request #3757 from mstruk/KEYCLOAK-4150 ... KEYCLOAK-4150 Unresolved variable ${cliane_security-admin-console} in admin web client	2017-01-19 13:55:36 +01:00
Bill Burke	73d3e8afd9	Merge pull request #3770 from patriot1burke/master ... KEYCLOAK-4077	2017-01-19 07:35:10 -05:00
Hynek Mlnarik	df4f1e7129	KEYCLOAK-4167 Always use preset key for verification if key ID not set	2017-01-18 10:29:06 +01:00
Stian Thorgersen	5a0504b5d9	Merge pull request #3753 from hmlnarik/KEYCLOAK-4216-mod-auth-mellon-logout-failed-when-using-SSO ... KEYCLOAK-4216 Fix NPE and logout binding choice	2017-01-18 08:40:02 +01:00
Stian Thorgersen	e364680792	Merge pull request #3721 from hmlnarik/KEYCLOAK-3399-End-session-endpoint-returns-error-when-keycloak-session-is-expired ... KEYCLOAK-3399 Ignore user session expiration on OIDC logout	2017-01-18 08:38:53 +01:00
mposolda	843b4b470b	KEYCLOAK-2333 LDAP/MSAD password policies are not used when user changes password	2017-01-17 21:06:09 +01:00
Bill Burke	dcf6da2a51	KEYCLOAK-4077	2017-01-17 09:20:44 -05:00
Slawomir Dabek	9bb65ba9b7	KEYCLOAK-4224 Allow hiding identity providers on login page	2017-01-17 14:32:59 +01:00
Stian Thorgersen	1913f801b9	Merge pull request #3739 from hmlnarik/KEYCLOAK-2847-Unexpected-error-when-trying-to-update-clientTemplate-to-already-existing-name ... KEYCLOAK-2847 Fix for client template duplicate name	2017-01-16 09:45:39 +01:00
Stian Thorgersen	5842f7c837	Merge pull request #3751 from stianst/KEYCLOAK-4192 ... KEYCLOAK-4192 Added missing produces annotations for update methods	2017-01-16 09:41:29 +01:00
Stian Thorgersen	178625d3f2	Merge pull request #3745 from velias/master ... KEYCLOAK-4202 - Attribute importer of Social Identity providers doesn't handle JSON 'null' values correctly	2017-01-16 08:22:04 +01:00
Marko Strukelj	d68f6bbc42	KEYCLOAK-4150 Unresolved variable ${cliane_security-admin-console} in admin web client	2017-01-13 17:48:21 +01:00
Bill Burke	ffb688b393	Merge remote-tracking branch 'upstream/master'	2017-01-13 11:45:55 -05:00
Bill Burke	6aee6b0c46	KEYCLOAK-4220	2017-01-13 11:45:48 -05:00
Hynek Mlnarik	02eda8943c	KEYCLOAK-4216 Fix NPE and logout binding choice	2017-01-13 14:30:32 +01:00
mposolda	9ad14d991c	KEYCLOAK-4140 Migration of old offline tokens	2017-01-13 11:35:19 +01:00
Stian Thorgersen	ac9268bd48	KEYCLOAK-4192 Added missing produces annotations for update methods	2017-01-13 09:56:20 +01:00
Hynek Mlnarik	0b58bebc90	KEYCLOAK-2847 Fix for client template duplicate name	2017-01-13 09:32:28 +01:00
mposolda	93157e49d5	KEYCLOAK-4201 Offline tokens become useless when accessing admin REST API	2017-01-13 09:06:53 +01:00
Vlastimil Elias	f13deab812	KEYCLOAK-4202 - Attribute importer of Social Identity providers doesn't ... handle JSON 'null' values correctly	2017-01-12 14:14:09 +01:00
Hynek Mlnarik	e11957ecf3	KEYCLOAK-4167 Make OIDC identity provider key ID configurable	2017-01-11 18:24:22 +01:00
Guus der Kinderen	45f5fa6a74	API documentation: Introduce and group by tags. ... This commit introduces grouping of the documented REST resources. The grouping is based on a free-form name of a resource (a 'tag' in Swagger terminology), which is introduced by adding a @resource javadoc tag to every Resource class.	2017-01-10 17:08:27 +01:00
Marek Posolda	227900f288	Merge pull request #3731 from mposolda/master ... KEYCLOAK-4175 Provide a way to set the connect and read timeout for l…	2017-01-10 09:49:18 +01:00
Stian Thorgersen	7eeebff874	Merge pull request #3720 from hmlnarik/KEYCLOAK-4091-Possible-NullPointerExceptions-with-disabled-cache ... KEYCLOAK-4091 Prevent NPE with disabled cache	2017-01-10 06:23:10 +01:00
Bill Burke	452611242c	Merge remote-tracking branch 'upstream/master'	2017-01-09 17:14:34 -05:00
Bill Burke	d075172fd2	KEYCLOAK-3617 KEYCLOAK-4117 KEYCLOAK-4118	2017-01-09 17:14:20 -05:00
mposolda	c32620b718	KEYCLOAK-4175 Provide a way to set the connect and read timeout for ldap connections	2017-01-09 21:35:58 +01:00
Pedro Igor	0b5b27ea3a	[KEYCLOAK-4166] - Export/Import clients functionality not working as expected	2017-01-06 16:07:10 -02:00
Hynek Mlnarik	9fb3201c8b	KEYCLOAK-3399 Ignore user session expiration on OIDC logout	2017-01-06 15:15:46 +01:00
Hynek Mlnarik	377fbced4a	KEYCLOAK-4091 Prevent NPE with disabled cache	2017-01-06 10:00:11 +01:00
Bill Burke	f9eeecf836	test KEYCLOAK-4013	2017-01-05 11:27:17 -05:00
Pedro Igor	4044b39ab7	[KEYCLOAK-3517] - Filtering SAML ECP flow	2017-01-04 11:17:39 -02:00
Stian Thorgersen	f2ee9df600	KEYCLOAK-4116 Trim username on recover password page	2017-01-03 11:50:08 +01:00
Stian Thorgersen	45411b1199	KEYCLOAK-4090	2017-01-03 07:53:08 +01:00
Stian Thorgersen	902332c5ae	Merge pull request #3696 from stianst/KEYCLOAK-4038 ... KEYCLOAK-4038 Get bind credential from component if stored	2017-01-02 15:44:59 +01:00
Stian Thorgersen	08d7211a93	KEYCLOAK-4038 Get bind credential from component if stored	2017-01-02 14:40:12 +01:00
Stian Thorgersen	d6e620a266	Merge pull request #3689 from stianst/KEYCLOAK-4133 ... KEYCLOAK-4133	2017-01-02 08:51:37 +01:00
Pedro Igor	31ed69a970	[KEYCLOAK-4136] - Missing update on resource_set endpoint	2016-12-29 11:59:42 -02:00
Stian Thorgersen	40b5731198	KEYCLOAK-4133 ... Login status iframe endpoint doesn't set encoding	2016-12-22 08:20:55 +01:00
Stian Thorgersen	04179c5681	Merge branch 'KEYCLOAK-4004' of https://github.com/l-robinson/keycloak into l-robinson-KEYCLOAK-4004	2016-12-22 06:13:41 +01:00
Stian Thorgersen	d365d9d784	Merge pull request #3649 from sldab/bearer-client-credentials ... KEYCLOAK-4086 Client credentials missing in bearer-only JSON config	2016-12-20 12:32:03 +01:00
Stian Thorgersen	f6323d94ec	Merge pull request #3676 from stianst/KEYCLOAK-4109 ... KEYCLOAK-4109 Ability to disable impersonation	2016-12-20 09:35:03 +01:00
Stian Thorgersen	eb7ad07e31	KEYCLOAK-4109 Ability to disable impersonation	2016-12-20 08:46:21 +01:00
Pedro Igor	0b3e867362	[KEYCLOAK-4034] - Minor changes to policy enforcer	2016-12-19 23:44:51 -02:00
Pedro Igor	c9c8acd029	[KEYCLOAK-4034] - Invalidating policy cache when creating resources and scopes	2016-12-19 20:28:49 -02:00
Pedro Igor	40591cff25	Merge pull request #3662 from pedroigor/KEYCLOAK-4034 ... [KEYCLOAK-4034] - Improvements to UI, performance and some code cleanup	2016-12-19 16:49:10 -02:00
Pedro Igor	5cf5168770	[KEYCLOAK-4034] - Improvements to UI, performance and some code cleanup	2016-12-19 16:48:16 -02:00
Slawomir Dabek	16fb1e2078	KEYCLOAK-4086 Client credentials missing in bearer-only Keycloak OIDC JSON	2016-12-19 16:55:19 +01:00
mposolda	ac00f7fee2	KEYCLOAK-4087 LDAP group mapping should be possible via uidNumber in memberUid mode	2016-12-19 16:27:57 +01:00
Marek Posolda	c6363aa146	Merge pull request #3630 from sldab/duplicate-email-support ... KEYCLOAK-4059 Support for duplicate emails	2016-12-19 15:37:18 +01:00
Pedro Igor	c9c9f05e29	[KEYCLOAK-4034] - Improvements to UI, performance and some code cleanup	2016-12-19 11:22:37 -02:00
Stian Thorgersen	3bd3d0285d	Merge branch 'duplicate-groups' of https://github.com/ssilvert/keycloak into ssilvert-duplicate-groups	2016-12-19 13:07:39 +01:00
Stian Thorgersen	b8adfcad87	Merge pull request #3658 from hmlnarik/KEYCLOAK-4095--Not-Recently-Used-Password-Policy-with-value-set-to-1-doesn-t-work ... KEYCLOAK-4095 Fix for expiring passwords	2016-12-19 12:15:26 +01:00
Slawomir Dabek	93cec9b3ee	KEYCLOAK-4059 Support for duplicate emails	2016-12-19 10:55:12 +01:00
Stian Thorgersen	f29bb7d501	KEYCLOAK-4092 key provider for HMAC signatures	2016-12-19 10:50:43 +01:00
Hynek Mlnarik	787a3f8fcc	KEYCLOAK-4095 Fix for expiring passwords	2016-12-16 14:45:05 +01:00
Bill Burke	a4cbf130b4	Merge pull request #3592 from sldab/default-hooks ... KEYCLOAK-4074 Decoupling of default provider implementations	2016-12-16 08:42:55 -05:00
Hynek Mlnarik	5453bec1bf	KEYCLOAK-4079, KEYCLOAK-4080 Fix for single-valued claims	2016-12-16 10:00:36 +01:00
Stian Thorgersen	9be9d3f580	Merge pull request #3651 from stianst/KEYCLOAK-4081 ... KEYCLOAK-4081	2016-12-15 15:53:39 +01:00
Bill Burke	3c2a12d019	Merge pull request #3648 from patriot1burke/master ... KEYCLOAK-3451	2016-12-14 15:46:24 -05:00
Bill Burke	56f9aa41d0	KEYCLOAK-3451	2016-12-14 15:04:53 -05:00
Stian Thorgersen	394676222f	Merge pull request #3616 from sldab/fix-cors ... KEYCLOAK-4047 WebOrigins not expanded in CORS handling of token endpoints	2016-12-14 15:13:49 +01:00
Stian Thorgersen	e316037910	KEYCLOAK-4081	2016-12-14 11:22:10 +01:00
Stian Thorgersen	97a08a1d99	Merge pull request #3644 from stianst/KEYCLOAK-4071 ... KEYCLOAK-4071	2016-12-14 09:55:55 +01:00
Stian Thorgersen	480d4e6f4f	KEYCLOAK-4071	2016-12-14 07:01:54 +01:00
mposolda	40216b5e7d	KEYCLOAK-3921 LDAP binary attributes	2016-12-13 18:31:26 +01:00
Slawomir Dabek	7ad028fcb1	KEYCLOAK-4074 Added hooks to default implementations of direct grant authenticators ... and email sender.	2016-12-13 15:32:39 +01:00
Bill Burke	62029e8a33	KEYCLOAK-3506	2016-12-10 11:59:29 -05:00
Bill Burke	10fc7302eb	Merge pull request #3632 from hmlnarik/KEYCLOAK-4057-MS-AD-FS-does-not-recognize-certificate-for-POST-signed-AuthnRequest-for-brokering ... KEYCLOAK-4057 Do not include KeyName for brokered IdPs	2016-12-09 09:09:13 -05:00
Hynek Mlnarik	24a36e6848	KEYCLOAK-4057 Do not include KeyName for brokered IdPs ... Active Directory Federation Services require that the subject name matches KeyName element when present. While KeyName is beneficial for Keycloak adapters, it breaks functionality for AD FS as the name included there is a key ID, not certificate subject expected by AD FS. This patch contains functionality that excludes KeyName from SAML messages to identity providers. This behaviour should be made configurable per client/identity provider and is prepared to do so, however actual GUI changes are left for a separate patch.	2016-12-09 14:33:40 +01:00
Bill Burke	1f0600044a	KEYCLOAK-3967	2016-12-08 19:29:02 -05:00
Bill Burke	d3e3990d77	Merge pull request #3629 from patriot1burke/master ... KEYCLOAK-2806	2016-12-08 17:36:28 -05:00
Bill Burke	4a80f1e913	Merge remote-tracking branch 'upstream/master'	2016-12-08 17:05:46 -05:00
Bill Burke	0550bdb467	KEYCLOAK-3214	2016-12-08 16:47:17 -05:00
Bill Burke	5f07fa8057	KEYCLOAK-2806	2016-12-08 16:28:22 -05:00
mposolda	e7f6c780e2	KEYCLOAK-4058 Improve LDAPStorageMapper and remove LDAPStorageMapperBridge	2016-12-08 18:35:56 +01:00
Bill Burke	75e2b404c8	Merge pull request #3618 from abstractj/KEYCLOAK-3685 ... [KEYCLOAK-3685]: Username not updated when "Email as username" is enabled	2016-12-06 22:06:55 -05:00
Bill Burke	7271fdaaaa	KEYCLOAK-3509	2016-12-06 18:52:37 -05:00
Bill Burke	68c8bfa0e1	KEYCLOAK-2705	2016-12-06 17:32:41 -05:00
Bruno Oliveira	ddb201db6c	[KEYCLOAK-3685]: Username not updated when "Email as username" is enabled	2016-12-06 19:46:31 -02:00
Slawomir Dabek	4069be3ff6	KEYCLOAK-4047 Expand + to valid WebOrigins in Cors class	2016-12-06 20:22:35 +01:00
Bill Burke	77d17de14d	Merge pull request #3611 from patriot1burke/master ... KEYCLOAK-3620	2016-12-06 08:18:36 -05:00
Bill Burke	bab08bf8f0	Merge remote-tracking branch 'upstream/master'	2016-12-06 08:18:05 -05:00
Bill Burke	6587cd2478	KEYCLOAK-3620	2016-12-05 17:51:06 -05:00
Bill Burke	693d6c0e5d	Merge pull request #3608 from hmlnarik/KEYCLOAK-4035 ... KEYCLOAK-4035 Composite roles need to be expanded in SAML attribute mapper	2016-12-05 14:44:21 -05:00
Bill Burke	952c1decf0	Merge pull request #3607 from patriot1burke/master ... KEYCLOAK-4033	2016-12-05 14:44:07 -05:00
Bill Burke	f03d79c7d3	Merge pull request #3603 from thomasdarimont/issue/KEYCLOAK-3969-Allow-authentication-via-ScriptAuthenticator-without-user ... KEYCLOAK-3969 Allow use of ScriptAuthenticator without user	2016-12-05 10:19:02 -05:00
Hynek Mlnarik	3c4114091f	KEYCLOAK-4035 Composite roles need to be expanded in SAML attribute mapper	2016-12-05 16:16:08 +01:00
Bill Burke	d354aa1f62	KEYCLOAK-4033	2016-12-05 10:15:55 -05:00
Hynek Mlnarik	197f51e50f	KEYCLOAK-3950 Fix NPE on request for NameIDPolicy without format ... ... and two more one-line issues	2016-12-05 07:24:38 +01:00
l-robinson	1c66ce7dd7	Additional test case added to check the text in the 'Back to application' link	2016-12-05 12:13:30 +10:30
Thomas Darimont	8610a02d72	KEYCLOAK-3969 Allow use of ScriptAuthenticator without user ... Previously ScriptAuthenticator required a user to be authenticated before it could be used as an additional authentication step which limited the scenarios the authenticator could be used. We now allow ScriptAuthenticators to be used without requiring an user to be authenticated before. Adapted the authenticator-template.js with a null safe username check. Note that existing custom ScriptAuthenticators might need some additional null checks since the user can now be undefined.	2016-12-04 23:15:53 +01:00
Bill Burke	0ab352706b	Merge pull request #3554 from hassaneinaltememyictu/2.3.0-ictu-change-role-attributeToRoleMapper ... grant the new role from the saml token if it exist	2016-12-03 13:43:40 -05:00
Bill Burke	88d08c4f38	component query and remove provider alis fix	2016-12-03 11:34:48 -05:00
Bill Burke	8fd7091068	KEYCLOAK-3986	2016-12-03 09:33:52 -05:00
Bill Burke	ce50b0ed29	Merge remote-tracking branch 'upstream/master'	2016-12-02 19:26:34 -05:00
Bill Burke	e88af874ca	finish	2016-12-02 19:25:17 -05:00
mposolda	17d8394ab6	KEYCLOAK-3340 Service Account user not renamed when renaming client-id	2016-12-02 18:13:29 +01:00
mposolda	cccb532a21	KEYCLOAK-3701 NullPointerException when trying to get access token from offline token	2016-12-02 16:35:21 +01:00
Stian Thorgersen	8842d88058	Merge pull request #3562 from ssilvert/overwrite-client-role-fails ... KEYCLOAK-3042: NPE when trying to overwrite client role	2016-12-02 14:06:27 +01:00
Stian Thorgersen	209f8155d1	KEYCLOAK-3835 Remove redirect on flow and return not modified if page is refreshed	2016-12-02 06:29:59 +01:00
Manuel Palacio	bfec073457	KEYCLOAK-3648	2016-12-01 19:34:33 +01:00
l-robinson	c72ceadfce	KEYCLOAK-4004 Pass the client name in the ReferrerBean instead of the referrer parameter	2016-12-01 17:17:57 +10:30
Stian Thorgersen	433f373f60	KEYCLOAK-3889 Add produces to server info endpoint	2016-11-30 15:46:01 +01:00
mposolda	d0a96d463d	KEYCLOAK-3831 Improve AddressMapper configurability. Support for 'formatted' subclaim	2016-11-30 13:04:45 +01:00
Bill Burke	9e50a45b4c	UserBulkUpdateProvider interface	2016-11-29 18:43:22 -05:00
Stan Silvert	83063a5740	KEYCLOAK-3042: NPE when trying to overwrite client role	2016-11-29 15:43:48 -05:00
Bill Burke	7efa3a3ddf	Merge remote-tracking branch 'upstream/master'	2016-11-29 11:34:04 -05:00
Marek Posolda	80c4b2aa31	Merge pull request #3556 from mposolda/master ... KEYCLOAK-3822 Changing signature validation settings of an external I…	2016-11-28 22:37:44 +01:00
Bill Burke	63458a7de7	Merge pull request #3559 from patriot1burke/master ... KEYCLOAK-3980	2016-11-28 13:36:52 -05:00
Bill Burke	f6a080729a	javadoc	2016-11-28 12:25:54 -05:00
Bill Burke	1dacddb7e3	KEYCLOAK-3980	2016-11-28 12:20:40 -05:00
mposolda	69ce1e05f0	KEYCLOAK-3822 Changing signature validation settings of an external IdP is not sometimes reflected	2016-11-28 15:27:25 +01:00
Hynek Mlnarik	65b269cd54	KEYCLOAK-3731 Provide functionality for IdP-initiated SSO for broker ... A SAML brokered IdP can send unsolicited login response to the broker. This commit adds a new GET/POST endpoint under [broker SAML endpoint]/clients/{client_id}. Broken will respond to submission to this new endpoint by looking up a SAML client with URL name equal to client_id, and if found, it performs IdP-initiated SSO to that client.	2016-11-28 13:54:04 +01:00
mposolda	7c6032cc84	KEYCLOAK-3825 Ability to expire publicKeys cache. Migrated OIDCBrokerWithSignatureTest to new testsuite	2016-11-25 17:45:37 +01:00
Bill Burke	ccbd8e8c70	remove User Fed SPI	2016-11-23 16:06:44 -05:00
Bill Burke	d5925b8ccf	remove realm UserFed SPI methods	2016-11-23 08:31:20 -05:00
mposolda	d8c8afe070	KEYCLOAK-3943 Admin console issues when updating LDAP Storage provider	2016-11-21 14:22:45 +01:00
mposolda	da52a5c9cf	KEYCLOAK-3930 KEYCLOAK-3931 LDAP and Mongo fixes	2016-11-18 20:02:02 +01:00
Stian Thorgersen	7043ecc21b	KEYCLOAK-3881 Fix login status iframe with * origin	2016-11-18 12:50:52 +01:00
Marek Posolda	3e71aeddf3	Merge pull request #3479 from hmlnarik/KEYCLOAK-3469-UserRealmRoleMapper ... KEYCLOAK-3469 Make role mappers account for user groups	2016-11-18 09:21:56 +01:00
Marek Posolda	b434c2b9cf	Merge pull request #3510 from ssilvert/delete-subflows ... KEYCLOAK-3681: Delete top flow doesn't remove all subflows	2016-11-18 08:50:13 +01:00
mposolda	a27be0cee7	KEYCLOAK-3857 Clustered invalidation cache fixes and refactoring. Support for cross-DC for invalidation caches.	2016-11-16 22:29:23 +01:00
Stan Silvert	55556fc63c	KEYCLOAK-3681: Delete top flow doesn't remove all subflows	2016-11-16 12:43:11 -05:00
Stian Thorgersen	26b1541f4a	Merge pull request #3476 from abstractj/KEYCLOAK-3875 ... [KEYCLOAK-3875] - Conditional OTP Forms not working as expected	2016-11-16 12:44:50 +01:00
Stian Thorgersen	1c3a475d1e	Merge pull request #3485 from hmlnarik/KEYCLOAK-3071 ... KEYCLOAK-3071 Add SOAP and PAOS endpoints to valid redirect URIs on SP import	2016-11-16 12:38:45 +01:00
Bill Burke	cc0eb47814	merge	2016-11-14 15:09:41 -05:00
Bill Burke	c280634bfa	fix tests	2016-11-14 15:06:17 -05:00
Hynek Mlnarik	750e942267	KEYCLOAK-3469 Make role mappers account for user groups	2016-11-14 11:38:00 +01:00
Bruno Oliveira	39f40bc005	[KEYCLOAK-3875] - Conditional OTP Forms not working as expected	2016-11-11 15:16:08 -02:00
Stian Thorgersen	a86b5988b5	Merge pull request #3484 from hmlnarik/KEYCLOAK-3658 ... KEYCLOAK-3658 Fixed typo in condition	2016-11-11 09:41:48 +01:00
Stian Thorgersen	088f0ea630	Merge pull request #3490 from stianst/KEYCLOAK-3086 ... [KEYCLOAK-3086] - NPE when accessing Account with invalid clientId s…	2016-11-11 09:35:45 +01:00
Bruno Oliveira	675faee593	[KEYCLOAK-3086] - NPE when accessing Account with invalid clientId set as ?referrer, and additional referrer_uri set	2016-11-10 13:49:40 +01:00
Stian Thorgersen	7e33f4a7d1	KEYCLOAK-3882 Split server-spi into server-spi and server-spi-private	2016-11-10 13:28:42 +01:00
Bill Burke	94076a3b24	admin console ui	2016-11-09 17:34:07 -05:00
Hynek Mlnarik	8816b55843	KEYCLOAK-3071 Add SOAP and PAOS endpoints to valid redirect URIs on SP import	2016-11-09 14:13:53 +01:00
Hynek Mlnarik	9c724b616d	KEYCLOAK-3658 Fixed typo in condition	2016-11-09 11:27:33 +01:00
Vlasta Ramik	6f1b8e1fee	remove KEYCLOAK_REMEMBERME when user logs in without rememberme checked + tests	2016-11-09 10:33:46 +01:00
Bill Burke	4880c0443c	ldap port admin console	2016-11-08 12:30:20 -05:00
Stian Thorgersen	292777259e	Merge pull request #3472 from hmlnarik/KEYCLOAK-1881-saml-key-rotation ... Keycloak 1881 - SAML key/cert rotation for IdP	2016-11-08 07:56:25 +01:00
Stian Thorgersen	db4f3561a5	Merge pull request #3454 from ssilvert/keystore-error-messages ... KEYCLOAK-3817: More detailed errors when loading keys from JKS	2016-11-08 07:33:43 +01:00
Bill Burke	5a86623c88	merge	2016-11-06 08:52:10 -05:00
Bill Burke	14dc0ff92f	Merge remote-tracking branch 'upstream/master'	2016-11-05 20:05:01 -04:00
Bill Burke	4302b440ee	ldap port	2016-11-05 20:04:53 -04:00
Bill Burke	c75dcb90c2	ldap port	2016-11-04 21:25:47 -04:00
Hynek Mlnarik	8ae1b1740d	KEYCLOAK-1881 Client installers	2016-11-04 21:53:43 +01:00
Hynek Mlnarik	4f9e35c0a1	KEYCLOAK-1881 Support for multiple certificates in broker (hardcoded at the moment)	2016-11-04 21:53:43 +01:00
Hynek Mlnarik	67bb9aef3d	KEYCLOAK-1881 Add switch to enable/disable generation of <Extensions> ... Some SP clients might be confused by using a standard SAML protocol tag <Extensions> which is used for signed REDIRECT binding messages to specify signing key ID. To enable the interoperability, generation of the tag is disabled by default and can be enabled for individual clients.	2016-11-04 21:53:43 +01:00
Hynek Mlnarik	1ae268ec6f	KEYCLOAK-1881 Include key ID for REDIRECT and use it for validation ... Contrary to POST binding, signature of SAML protocol message sent using REDIRECT binding is contained in query parameters and not in the message. This renders <dsig:KeyName> key ID hint unusable. This commit adds <Extensions> element in SAML protocol message containing key ID so that key ID is present in the SAML protocol message.	2016-11-04 21:53:43 +01:00
Hynek Mlnarik	d5c3bde0af	KEYCLOAK-1881 Make SAML descriptor endpoint return all certificates	2016-11-04 21:53:43 +01:00
Hynek Mlnarik	5d840500af	KEYCLOAK-1881 Include key ID in <ds:KeyInfo> in SAML assertions and protocol message ... Changes of SAML assertion creation/parsing that are required to allow for validation of rotating realm key: signed SAML assertions and signed SAML protocol message now contain signing key ID in XML <dsig:KeyName> element.	2016-11-04 21:53:43 +01:00
Pedro Igor	706c1e2660	[KEYCLOAK-3704] - Registering UserSinchronizer to remove resources when the owner is removed	2016-11-02 21:40:58 -02:00
Pedro Igor	95d2130405	[KEYCLOAK-3704] - Checkign if owner is a valid user	2016-11-02 21:01:24 -02:00
Stan Silvert	facdd586a3	KEYCLOAK-2720: Should not allow two groups with the same path.	2016-11-01 16:08:30 -04:00
Stan Silvert	a5e5f4cf9c	KEYCLOAK-3817: More detailed errors when loading keys from JKS	2016-11-01 13:54:34 -04:00
Bill Burke	ccaac40863	Merge pull request #3437 from patriot1burke/master ... disable credential type REST and admin ui	2016-10-28 11:33:16 -04:00
Stian Thorgersen	f4a77c3d06	Merge pull request #3444 from stianst/KEYCLOAK-3225 ... KEYCLOAK-3225	2016-10-28 11:51:35 +02:00
Stian Thorgersen	b6b567f948	Merge pull request #3441 from stianst/KEYCLOAK-3733 ... KEYCLOAK-3733 Set default max results for paginated endpoints	2016-10-28 10:36:24 +02:00
Stian Thorgersen	479295cfd2	KEYCLOAK-3225 ... Modifying user's Identity Provider Links requires manage-realm client role	2016-10-28 10:25:41 +02:00
Stian Thorgersen	a78cfa4b2c	Merge pull request #3440 from stianst/KEYCLOAK-3667 ... KEYCLOAK-3667	2016-10-28 10:13:06 +02:00
Stian Thorgersen	c6caeb3bec	Merge pull request #3439 from stianst/KEYCLOAK-3828 ... KEYCLOAK-3828	2016-10-28 10:12:51 +02:00
Stian Thorgersen	a9d47287ee	KEYCLOAK-3733 Set default max results for paginated endpoints	2016-10-28 09:15:05 +02:00
Stian Thorgersen	3d46b4c425	KEYCLOAK-3667	2016-10-28 08:43:24 +02:00
Stian Thorgersen	db428dad1d	KEYCLOAK-3828 ... Component uses wrong role	2016-10-28 07:56:44 +02:00
Stian Thorgersen	e958bd254a	Merge pull request #3435 from stianst/KEYCLOAK-3331 ... KEYCLOAK-3331 Reset password leads to 400 bad request when link is op…	2016-10-28 06:40:48 +02:00
Stian Thorgersen	0c6b47b9f2	Merge pull request #3433 from stianst/KEYCLOAK-3641 ... KEYCLOAK-3641 Clicking an invalid verification link due to re-send re…	2016-10-28 06:40:27 +02:00
Bill Burke	91da6a47d7	disable cred types ui	2016-10-27 16:17:02 -04:00
Stian Thorgersen	c6ac3266f0	KEYCLOAK-3641 Clicking an invalid verification link due to re-send removes the email verification key from the session	2016-10-27 16:16:52 +02:00
Stian Thorgersen	ab72b2b141	KEYCLOAK-3331 Reset password leads to 400 bad request when link is opened in a different browser session	2016-10-27 16:04:45 +02:00
Bill Burke	73e3f2a89b	REST API for disable cred type	2016-10-26 15:48:45 -04:00
Bill Burke	68e853b4bd	Merge remote-tracking branch 'upstream/master'	2016-10-25 13:40:32 -04:00
Bill Burke	b67cb0e97a	Merge remote-tracking branch 'upstream/master'	2016-10-25 11:44:22 -04:00
Stian Thorgersen	4b27e66714	KEYCLOAK-3782 Keysize for rsa-generated should be a dropdown	2016-10-25 08:52:02 +02:00
Bill Burke	3e28ac1e46	user spi cache policy	2016-10-24 15:36:37 -04:00
hassaneinaltememyictu	a119a46495	grant the new role from the saml token if it exist ... grant the user with the new role from the saml token if it is a realm role in keycloak	2016-10-24 17:17:22 +02:00
Stian Thorgersen	1a4f9e656d	Merge pull request #3398 from stianst/KEYCLOAK-3774 ... KEYCLOAK-3774 Fix keycloak.js with prompt=none and new stricter redir…	2016-10-21 06:34:43 +02:00
Stian Thorgersen	9801f09a93	KEYCLOAK-3774 Fix keycloak.js with prompt=none and new stricter redirect_uri	2016-10-20 21:31:25 +02:00
Stian Thorgersen	5a00aaefa8	KEYCLOAK-2594 ... bind credential being leaked in admin tool JSON response KEYCLOAK-2972 Keycloak leaks configuration passwords in Admin Event logs	2016-10-20 19:30:59 +02:00
Stian Thorgersen	1bf24d26a4	Merge pull request #3395 from stianst/master ... KEYCLOAK-3772	2016-10-20 19:27:03 +02:00
Stian Thorgersen	839c4e8ede	KEYCLOAK-3772 ... Login with Twitter is not working	2016-10-20 15:05:07 +02:00
mposolda	072ccb5c61	KEYCLOAK-3770 OIDC registration with id_token grant type should set publicClient flag to true	2016-10-20 14:10:53 +02:00
Stian Thorgersen	dfc09b69a8	Merge pull request #3380 from stianst/KEYCLOAK-3364 ... KEYCLOAK-3364 Fix for dns that ends with digit	2016-10-20 06:24:50 +02:00
Stian Thorgersen	d2e0432afb	Merge pull request #3389 from patriot1burke/master ... KEYCLOAK-3651	2016-10-20 06:24:15 +02:00
Bill Burke	34d80c9083	KEYCLOAK-3651	2016-10-19 20:28:33 -04:00
Bill Burke	9f00f693c6	Merge pull request #3387 from ssilvert/spelling-represenation ... KEYCLOAK-3496: Spelling Error in Admin GUI Documentation	2016-10-19 19:59:41 -04:00
Stan Silvert	ad59cd618e	Merge pull request #3383 from ssilvert/duplicate-fed-provider ... KEYCLOAK-2892: Bad error when create fed provider w/ same name.	2016-10-19 16:40:58 -04:00
Stan Silvert	ac80f99e8c	KEYCLOAK-3496: Spelling Error in Admin GUI Documentation	2016-10-19 16:33:59 -04:00
Bill Burke	cdf7dd3a6c	Merge pull request #3372 from patriot1burke/master ... onCreate for Components	2016-10-19 16:21:20 -04:00
Bill Burke	934ea1c33c	KEYCLOAK-3562	2016-10-19 14:01:21 -04:00
Stan Silvert	9d098e9068	KEYCLOAK-2892: Bad error when create fed provider w/ same name.	2016-10-19 13:32:28 -04:00
Stian Thorgersen	ffce2023c0	KEYCLOAK-3364 Fix for dns that ends with digit	2016-10-19 18:41:43 +02:00
mposolda	3779bfb6b4	KEYCLOAK-3666 client registration policies - polishing	2016-10-19 17:45:23 +02:00
mposolda	964cd50f1d	KEYCLOAK-3666 Added client reg policies for maxClients and clientDisabled	2016-10-19 17:45:23 +02:00
Stian Thorgersen	36c367a3bc	Merge pull request #3369 from stianst/KEYCLOAK-3625 ... KEYCLOAK-3625	2016-10-19 15:56:57 +02:00
Stian Thorgersen	1b24d2edd8	KEYCLOAK-3625 More work on the issue	2016-10-19 14:21:50 +02:00
Stian Thorgersen	bbc1d26b72	Merge pull request #3367 from stianst/KEYCLOAK-3745 ... KEYCLOAK-3745 Change attributes in user rep	2016-10-19 14:01:39 +02:00
Stian Thorgersen	4efe12cb93	KEYCLOAK-3745 Change attributes in user rep	2016-10-19 12:15:13 +02:00
Stian Thorgersen	f2f508ac2e	Merge pull request #3357 from stianst/KEYCLOAK-3107 ... KEYCLOAK-3017 Expose Location header in cors request to admin endpoint	2016-10-19 08:45:18 +02:00
Stian Thorgersen	13220e1d38	Merge pull request #3355 from stianst/KEYCLOAK-2699 ... KEYCLOAK-2699 Potential for NPE in DirImportProvider.getRealmsToImport	2016-10-19 07:35:54 +02:00
Stian Thorgersen	116027bd7b	Merge pull request #3354 from stianst/KEYCLOAK-2488 ... KEYCLOAK-2488 Token introspection returns wrong response for invalid …	2016-10-19 07:33:25 +02:00
Stian Thorgersen	a33997976f	KEYCLOAK-3017 Expose Location header in cors request to admin endpoint	2016-10-18 21:27:46 +02:00
Stian Thorgersen	0a8d1e28f1	KEYCLOAK-2699 Potential for NPE in DirImportProvider.getRealmsToImport	2016-10-18 20:31:51 +02:00
Stian Thorgersen	29538332d9	KEYCLOAK-2488 Token introspection returns wrong response for invalid token	2016-10-18 20:28:14 +02:00
Bill Burke	d941e07169	Merge pull request #3350 from patriot1burke/master ... federated import/export to json	2016-10-18 14:15:25 -04:00
Stian Thorgersen	e41d11877f	Merge pull request #3349 from stianst/KEYCLOAK-2741 ... KEYCLOAK-2741	2016-10-18 19:39:54 +02:00
mposolda	b62e6e2751	KEYCLOAK-3653 CORS headers not sent in certs endpoint	2016-10-18 16:57:06 +02:00
Stian Thorgersen	74dad004e3	KEYCLOAK-2741 ... Don't remove KEYCLOAK_REMEMBERME cookie when sso session expires.	2016-10-18 16:14:36 +02:00
Bill Burke	2199df71bf	Merge remote-tracking branch 'upstream/master'	2016-10-18 10:14:00 -04:00
Bill Burke	4182e4d92a	federated import/export	2016-10-18 10:13:51 -04:00
Marek Posolda	3986ce2ce0	Merge pull request #3345 from mposolda/master ... KEYCLOAK-3499 Fixes in OIDCProtocolMapper support for includeInUserInfo	2016-10-18 14:28:29 +02:00
Stian Thorgersen	4b56743788	Merge pull request #3343 from stianst/KEYCLOAK-2884 ... KEYCLOAK-2884 Remove ClientTemplateResource.getKeycloakApplication()	2016-10-18 14:08:50 +02:00
mposolda	a7287aad36	KEYCLOAK-3499 More fixes for IncludeInUserInfo. Fixing tests and migration	2016-10-18 13:09:30 +02:00
Thomas Darimont	c3b577de11	KEYCLOAK-3499 Revise OIDCProtocolMapper support ... Moved methods `transformUserInfoToken`, `transformAccessToken`, `transformIDToken` to the `AbstractOIDCProtocolMapper` base class in order to reduce code duplication. Previously every mapper implemented at least one or two of those methods with exactly the same code. Having those methods in the base class ensures that the code is the same for all mappers. Since the mentioned methods are declared on the `OIDCIDTokenMapper`, `OIDCAccessTokenMapper` and `UserInfoTokenMapper` interfaces `AbstractOIDCProtocolMapper` implementations can now choose how they should be handled by the `TokenManager` by implementing the desired set of interfaces `*TokenMapper`-interfaces. I think this provides a good balance between ease of use, reduced code duplication and ensured backwards compatiblity. Existing protocol mapper implementations will still work since they just implement their own logic for `transformUserInfoToken`, `transformAccessToken`, `transformIDToken`. The "claim" information provided by a `ProtocolMapper` to a `*Token` can now be provided by overriding the `AbstractOIDCProtocolMapper.setClaim` method. Adapted all eligible ProtocolMapper implementations within the `org.keycloak.protocol.oidc.mappers` package accordingly.	2016-10-18 13:09:30 +02:00
Stian Thorgersen	e157a60a23	KEYCLOAK-2884 Remove ClientTemplateResource.getKeycloakApplication()	2016-10-18 09:01:24 +02:00
Marek Posolda	2fd680092a	Merge pull request #3336 from mposolda/master ... KEYCLOAK-3719 Add 'options' to ProviderConfigProperty and use it for …	2016-10-18 08:33:26 +02:00
mposolda	00879b39b7	KEYCLOAK-3719 Add 'options' to ProviderConfigProperty and use it for 'List' type instead of defaultValue	2016-10-17 21:34:21 +02:00
Stian Thorgersen	77499be8d2	KEYCLOAK-3728 ... Disable script based authenticator in product profile	2016-10-17 21:16:51 +02:00
Stian Thorgersen	64339aaca7	Merge pull request #3317 from stianst/KEY-ROTATION ... Updated labels for java keystore provider config	2016-10-17 19:39:47 +02:00
Stian Thorgersen	2ed6067de0	Merge pull request #3290 from hmlnarik/KEYCLOAK-3655 ... KEYCLOAK-3655: Fix for unexpected server error when adding duplicate auth flow	2016-10-17 19:31:43 +02:00
Stian Thorgersen	d22f45f0d2	Merge pull request #3335 from stianst/KEYCLOAK-3635 ... KEYCLOAK-3635 Not possible to filter debug/trace logging	2016-10-17 18:50:10 +02:00
Stian Thorgersen	b320eb8fc7	KEYCLOAK-3635 Not possible to filter debug/trace logging	2016-10-17 16:12:14 +02:00
Geir Ole Hiåsen Stevning	95f62c6aeb	KEYCLOAK-3626 - CreatedDate and lastUpdatedDate on user consent	2016-10-17 13:53:12 +02:00
mposolda	5732b2c58f	KEYCLOAK-3716 Unable to start Keycloak on wildfly	2016-10-17 12:22:33 +02:00
mposolda	18e0c0277f	KEYCLOAK-3666 Dynamic client registration policies	2016-10-14 20:20:40 +02:00
Bill Burke	1c0abbd722	Merge pull request #3315 from patriot1burke/master ... import and sync spi	2016-10-14 10:12:42 -04:00
Stian Thorgersen	422805b511	Updated labels for java keystore provider config	2016-10-14 10:36:17 +02:00
Bill Burke	8c8a39c833	sync and import	2016-10-13 20:49:02 -04:00
Bill Burke	0938390654	sync and import	2016-10-13 20:38:49 -04:00
Stian Thorgersen	4e245d428c	KEYCLOAK-905 More testing	2016-10-13 20:44:33 +02:00
Stian Thorgersen	d2cae0f8c3	KEYCLOAK-905 ... Realm key rotation for OIDC	2016-10-13 11:19:52 +02:00
Bill Burke	fbaa731dfa	import spi	2016-10-11 18:33:59 -04:00
Bill Burke	db05dc6ee4	KEYCLOAK-3671	2016-10-06 15:02:15 -04:00
Bill Burke	fbb65fa072	KEYCLOAK-3671	2016-10-06 14:56:02 -04:00
Bill Burke	74325fe133	initial sync/import spi	2016-10-06 14:48:53 -04:00
Hynek Mlnarik	cfbc9cf14b	KEYCLOAK-3655: Fix for unexpected server error when adding duplicate auth flow	2016-10-05 13:57:02 +02:00
Bill Burke	c5600e888d	revactor CredentialValidationOutput apis	2016-10-04 17:26:45 -04:00
Bill Burke	4af0976194	remove UserCredValueModel and hold hash providers	2016-10-04 12:34:15 -04:00
mposolda	bc916a1909	KEYCLOAK-3564 Update demo examples with public key rotation	2016-10-04 14:05:01 +02:00
mposolda	0f9798a10d	KEYCLOAK-3493 KEYCLOAK-3532 Renamed KeyStorageProvider to PublicKeyStorageProvider	2016-10-03 15:23:50 +02:00
Thomas Darimont	c852d6d817	KEYCLOAK-3642 Favor StreamUtil over IOUTils in ScriptBasedAuthenticatorFactory ... The dependency on commons-io through the use of IOUtils in ScriptBasedAuthenticatorFactory resulted in NoClassDefFoundError org/apache/commons/io/IOUtils when building the keycloak-distribution. We now use the StreamUtil from keycloak-common to avoid this dependency.	2016-10-03 13:33:53 +02:00
Bill Burke	d4c3fae546	merge conflicts	2016-09-30 19:19:12 -04:00
Bill Burke	6a4e413bf4	final mongo fixes	2016-09-30 19:08:34 -04:00
mposolda	f9a0abcfc4	KEYCLOAK-3493 KEYCLOAK-3532 Added KeyStorageProvider. Support key rotation for OIDC clients and identity providers with JWKS url.	2016-09-30 21:28:23 +02:00
Stian Thorgersen	5d34b7e682	Merge pull request #3189 from thomasdarimont/issue/KEYCLOAK-3491-revise-scripting-support ... KEYCLOAK-3491 Revise Scripting Support	2016-09-29 10:12:15 +02:00
Bill Burke	8967ca4066	refactor mongo entities, optimize imports	2016-09-28 15:25:39 -04:00
Stian Thorgersen	34f62eb31d	Fixes to [KEYCLOAK-2438] PR	2016-09-28 10:25:37 +02:00
Bruno Oliveira	98d2fe15e8	[KEYCLOAK-2438] - Add display name to social login buttons ... [KEYCLOAK-3291] - Names of social identity providers are wrongly capitalized (eg GitHub vs Github)	2016-09-26 13:36:28 -03:00
Stian Thorgersen	033d1f564a	KEYCLOAK-2756 ... Renaming a realm breaks down the Clients	2016-09-26 10:11:28 +02:00
Bill Burke	27e86e36c4	Merge remote-tracking branch 'upstream/master'	2016-09-23 16:50:16 -04:00
Bill Burke	ff1326fe35	authenticator example updated	2016-09-23 16:50:08 -04:00
Marek Posolda	5fc7149aac	Merge pull request #3257 from mposolda/pairwise ... KEYCLOAK-3422 Pairwise subjects : few fixes and bit of refactoring	2016-09-23 20:58:51 +02:00
Bill Burke	a1bcd0651d	fixes	2016-09-23 10:38:49 -04:00
Marek Posolda	22aaa4cb52	Merge pull request #3237 from brat000012001/kc-iss-3505 ... KEYCLOAK-3505: updated the oidc user attribute mapper used to map oid…	2016-09-23 15:38:20 +02:00
mposolda	04f05c0cd1	KEYCLOAK-3422 Pairwise subjects : few fixes and bit of refactoring	2016-09-23 15:29:13 +02:00
Bill Burke	8e65356891	creds	2016-09-22 19:57:39 -04:00
Bill Burke	7209a95dce	credential refactoring	2016-09-22 08:34:45 -04:00
Thomas Darimont	8e113384aa	KEYCLOAK-3491 Revise Scripting Support ... Refactored the scripting infrastructure and added documentation. Added tests and an authenticator template in JavaScript for a quickstart. Increased height of ace code editor to 600px to avoid scrolling.	2016-09-20 14:33:39 +02:00
Stian Thorgersen	4977527f60	Merge pull request #3239 from stianst/SERVER-PROFILE ... KEYCLOAK-3579 Add ability to define profiles	2016-09-20 10:39:05 +02:00
Stian Thorgersen	992268a8e6	KEYCLOAK-3579 Add ability to define profiles	2016-09-20 08:41:23 +02:00
Stian Thorgersen	44c47431a1	Merge pull request #3233 from betovieirasilva/master-KEYCLOAK-LoginUsername ... [PULL-REQUEST-3181 & PULL-REQUEST-3233] Username is not displayed on the login screen with that email	2016-09-16 09:23:26 +02:00
Peter Nalyvayko	0348e427de	KEYCLOAK-3505: cosmetic coding style changes	2016-09-15 15:42:09 -04:00
Peter Nalyvayko	b97908fb02	KEYCLOAK-3505: updated the oidc user attribute mapper used to map oidc broker claims to map the claims from userinfo claim set	2016-09-15 11:11:58 -04:00
Gilberto Vieira da Silva	6d5dc673d4	When keycloak is set to login email and Username is different from email, to check the "Remember Me" username is not displayed on the login screen with that email because the KEYCLOAK_REMEMBER_ME cookie is always recorded the username field. ... Conflicts: services/src/main/java/org/keycloak/services/managers/AuthenticationManager.java [PULL-REQUEST-3181]	2016-09-13 18:56:25 -03:00
Gilberto Vieira da Silva	55e07bcde2	Reverted to appli to branch master-KEYCLOAK-LoginUsername	2016-09-13 18:52:16 -03:00
Gilberto Vieira da Silva	cb1b34eee5	When keycloak is set to login email and Username is different from email, to check the "Remember Me" username is not displayed on the login screen with that email because the KEYCLOAK_REMEMBER_ME cookie is always recorded the username field. ... Conflicts: services/src/main/java/org/keycloak/services/managers/AuthenticationManager.java	2016-09-13 18:21:04 -03:00
Martin Hardselius	04d03452bd	KEYCLOAK-3422 support pairwise subject identifier in oidc	2016-09-13 09:18:45 +02:00
mposolda	bf6246f5c1	KEYCLOAK-905 Realm keys rotation support on adapters	2016-09-12 21:24:04 +02:00
Stian Thorgersen	1630b9a20c	Merge pull request #3220 from abstractj/KEYCLOAK-3535 ... KEYCLOAK-3535 - Check if SSSD is available via DBUS	2016-09-09 08:15:11 +02:00
Stian Thorgersen	65befb16fd	Merge pull request #3219 from pedroigor/KEYCLOAK-3534 ... [KEYCLOAK-3534] - Authorization tab appears too soon in admin console	2016-09-09 08:14:03 +02:00
Stian Thorgersen	e8f99a2109	Merge pull request #3221 from patriot1burke/master ... KEYCLOAK-3423	2016-09-09 07:45:53 +02:00
Pedro Igor	7af16fc747	[KEYCLOAK-3534] - Authorization tab appears too soon in admin console	2016-09-09 01:03:09 -03:00
Bill Burke	84f5c0926b	KEYCLOAK-3423	2016-09-08 16:47:06 -04:00
Bruno Oliveira	11245701d2	Check if SSSD is available via DBUS	2016-09-08 16:01:45 -03:00
Bill Burke	2a5c778af5	Merge pull request #3209 from patriot1burke/master ... KEYCLOAK-3440	2016-09-08 09:10:54 -04:00
Stian Thorgersen	36bb94afb8	Environment dependent provider	2016-09-08 07:40:19 -03:00
Marek Posolda	76e1160b36	Merge pull request #3210 from mposolda/master ... KEYCLOAK-3537 Username not shown when validation error on Account pro…	2016-09-08 10:04:38 +02:00
Stian Thorgersen	f726caea9b	Merge pull request #3205 from stianst/KEYCLOAK-3342 ... KEYCLOAK-3342 Add Identity Provider authenticator	2016-09-08 08:40:32 +02:00
mposolda	16282aeb7b	KEYCLOAK-3537 Username not shown when validation error on Account profile page	2016-09-08 08:36:39 +02:00
Stian Thorgersen	d2c546bdc2	Merge pull request #3201 from pedroigor/KEYCLOAK-3129 ... [KEYCLOAK-3129] - Add authorization services endpoints to PermissionsTest	2016-09-08 08:03:40 +02:00
Stian Thorgersen	7c292b1213	KEYCLOAK-3342 Add Identity Provider authenticator	2016-09-08 07:20:35 +02:00
Bill Burke	3b9a6b32e1	Revert "Revert "KEYCLOAK-3440"" ... This reverts commit 01e48dc4b8.	2016-09-07 23:41:32 -04:00
Bill Burke	01e48dc4b8	Revert "KEYCLOAK-3440"	2016-09-07 23:17:35 -04:00
Bill Burke	3f35234cf5	Merge remote-tracking branch 'upstream/master'	2016-09-07 23:11:38 -04:00
Bill Burke	da135389c7	KEYCLOAK-3440	2016-09-07 23:11:28 -04:00
mposolda	5a015a6518	KEYCLOAK-3494 Input elements backed by user attributes fail to update in themes	2016-09-07 20:08:09 +02:00
Pedro Igor	517413d38e	[KEYCLOAK-3129] - Add authorization services endpoints to PermissionsTest	2016-09-06 17:32:37 -03:00
Bill Burke	15d31a202f	Merge remote-tracking branch 'upstream/master'	2016-09-06 08:56:17 -04:00
Bill Burke	6714c1a136	cred refactor	2016-09-06 08:55:47 -04:00
mposolda	8c5b1e4892	KEYCLOAK-3525 Validation callback when creating/updating protocolMapper	2016-09-06 07:15:27 +02:00
mposolda	03c05bd72b	KEYCLOAK-2957 IdpEmailVerificationAuthenticator should setEmailVerified to true after successfuly link user by email verification	2016-09-05 18:04:24 +02:00
mposolda	a24a43c4be	KEYCLOAK-3349 Support for 'request' and 'request_uri' parameters	2016-09-02 20:20:38 +02:00
Vaclav Muzikar	1b085d3e13	KEYCLOAK-3421 Validation for URI fragments in redirect_uri	2016-08-31 13:07:33 +02:00
mposolda	02f28a7e8e	KEYCLOAK-3416 Add support for signed Userinfo requests	2016-08-30 20:21:04 +02:00
Stian Thorgersen	5a4bb5f3f0	Merge pull request #3168 from stianst/master ... KEYCLOAK-3462 Fix exception not displayed in init from KeycloakServer	2016-08-30 09:47:31 +02:00
mposolda	f4aee129e4	KEYCLOAK-3424 Issuer or token-endpoint as audience in signed JWT	2016-08-29 14:43:35 +02:00
mposolda	a7f9a6e095	KEYCLOAK-3424 Support for import from public key	2016-08-29 14:43:29 +02:00
Stian Thorgersen	4f51b7b34c	KEYCLOAK-3462 Fix exception not displayed in init from KeycloakServer	2016-08-29 09:21:22 +02:00
Stian Thorgersen	2a29f2a9c6	Merge pull request #3151 from ssilvert/dmr-server-config ... KEYCLOAK-3196: Use WildFly management model for server configuration.	2016-08-26 13:44:45 +02:00
Marek Posolda	d138b19adb	Merge pull request #3142 from vmuzikar/KEYCLOAK-3429 ... KEYCLOAK-3429 Fix behaviour of redirect_uri parameter with query components	2016-08-24 09:53:29 +02:00
Stan Silvert	3abcf713e5	KEYCLOAK-3196: Test need ability to load keycloak-server.json from ... /META-INF	2016-08-23 11:27:06 -04:00
Stan Silvert	e4d97485ec	KEYCLOAK-3196: Create master cli script for server-subsystem.	2016-08-23 11:27:04 -04:00
Stan Silvert	3493aa4ab7	KEYCLOAK-3196: Use WildFly management model for server configuration.	2016-08-23 11:26:56 -04:00
Stian Thorgersen	c522a20ab9	KEYCLOAK-3447 Manual upgrade of database schema	2016-08-22 10:22:08 +02:00
Pedro Igor	4cd0a8e894	[KEYCLOAK-3377] - Add pagination to authorization UI	2016-08-18 13:29:54 -03:00
Pedro Igor	a8d2b810cf	[KEYCLOAK-3144] - Add authorization settings when exporting/importing a realm.	2016-08-15 10:35:28 -03:00
mposolda	2cba13db9c	KEYCLOAK-3424 Possibility to import JWK key through admin console	2016-08-12 15:51:14 +02:00
mposolda	3eb9134e02	KEYCLOAK-3424 Support for save JWKS in OIDC ClientRegistration endpoint	2016-08-12 15:51:14 +02:00
Vaclav Muzikar	b7f2e0b5ff	KEYCLOAK-3429 Fix behaviour of redirect_uri parameter with query components	2016-08-12 14:02:17 +02:00
Pedro Igor	27187c11f1	Merge pull request #3138 from pedroigor/KEYCLOAK-3428 ... [KEYCLOAK-3428] - Removing scope policies in case the resource does not match	2016-08-11 14:59:20 -03:00
Pedro Igor	0030df060b	[KEYCLOAK-3428] - Removing scope policies in case the resource does not match	2016-08-11 14:58:14 -03:00
Marek Posolda	f6f587e472	Merge pull request #3137 from thomasdarimont/issue/KEYCLOAK-3412-remove-unused-adminEventBuilder-error-method ... KEYCLOAK-3412 - Remove erroneous AdminEventBuilder.error method	2016-08-11 17:41:04 +02:00
Thomas Darimont	e0d70a35d6	KEYCLOAK-3412 - Remove erroneous AdminEventBuilder.error method ... Wasn't used within the Keycloak codebase and wouldn't have worked either since the OperationType lookup would always fail since there are no "_ERROR" operation types. Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>	2016-08-11 16:10:49 +02:00
mposolda	0520d465c1	KEYCLOAK-3414 Support for client registration from trusted hosts	2016-08-11 15:55:32 +02:00
mposolda	a8fb988e31	KEYCLOAK-3406 OIDC dynamic client registrations specs fixes	2016-08-11 15:54:51 +02:00
Marek Posolda	26bc07b2c4	Merge pull request #3126 from pedroigor/KEYCLOAK-3398 ... [KEYCLOAK-3398] - Review input fields on AuthZ UI to fetch data on demand	2016-08-10 06:50:51 +02:00
Pedro Igor	70eb27ec83	[KEYCLOAK-3398] - Review input fields on AuthZ UI to fetch data on demand	2016-08-09 21:56:29 -03:00
Bill Burke	530870f05e	realm components import/export	2016-08-09 15:06:29 -04:00
Bill Burke	ff703f935f	component export/import	2016-08-09 12:25:04 -04:00
Bill Burke	f838c697d1	Merge remote-tracking branch 'upstream/master'	2016-08-08 16:04:16 -04:00
Bill Burke	83306963e8	jta transaction abstraction	2016-08-08 12:32:36 -04:00
mposolda	65e2f127c9	KEYCLOAK-3400 OIDC request with missing response_type should respond with error	2016-08-08 16:11:50 +02:00
mposolda	9be6777685	KEYCLOAK-2169 KEYCLOAK-3286 Support for at_hash and c_hash	2016-08-08 10:57:44 +02:00
Bill Burke	f14f303dfe	Merge remote-tracking branch 'upstream/master'	2016-08-07 11:50:44 -04:00
Bill Burke	33d7d89ad9	provider hot deployment	2016-08-07 11:41:52 -04:00
Marek Posolda	65c49c39f4	Merge pull request #3114 from mposolda/master ... KEYCLOAK-3321 OIDC requests without 'nonce' claim should be rejected …	2016-08-05 16:45:56 +02:00
mposolda	e0a59baaf2	KEYCLOAK-3321 OIDC requests without 'nonce' claim should be rejected unless using the code flow. Started responseType tests	2016-08-05 15:05:26 +02:00
Thomas Darimont	e49afb2d83	KEYCLOAK-3142 - Revised according to codereview ... Liquibase Moved schema evolution configuration from jpa-changelog-2.1.0 to jpa-changelog-2.2.0. Corrected wrong ResourceType references in tests. Adapted AdminEvents copy-routines to be aware of resourceType attribute. Added ResourceType enum to exposed ENUMS of ServerInfoAdminResource. Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>	2016-08-05 00:01:03 +02:00
Thomas Darimont	586f6eeece	KEYCLOAK-3142 - Capture ResourceType that triggers an AdminEvent ... Introduced new ResourceType enum for AdminEvents which lists the current supported ResourceTypes for which AdminEvents can be fired. Previously it was difficult for custom EventListeners to figure out which ResourceType triggered an AdminEvent in order to handle it appropriately, effectively forcing users to parse the representation. Having dedicated resource types as a marker on an AdminEvent helps to ease custom EventListener code. We now also allow filtering of admin events by ResourceType in the admin-console. Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>	2016-08-04 11:30:02 +02:00
Bill Burke	534ee2e50c	Merge remote-tracking branch 'upstream/master'	2016-08-03 19:16:45 -04:00
Bill Burke	70722d0d3d	user storage provider jpa example	2016-08-03 19:16:11 -04:00
Bill Burke	7f08717dfb	Merge pull request #3105 from patriot1burke/master ... component model	2016-08-02 09:28:55 -04:00
Bill Burke	e3aec098a2	Merge pull request #3064 from cainj13/oneSamlAttributeStatement ... SamlProtocol should only drop attributes into a single attributeStatement	2016-08-02 07:14:08 -04:00
Bill Burke	17e75950fe	more fixes	2016-08-02 06:56:22 -04:00
Bill Burke	1c75b03e59	props	2016-08-02 06:50:13 -04:00
Bill Burke	1d695237b7	fix	2016-08-02 05:49:50 +02:00
Bill Burke	09693eb108	component model	2016-08-02 05:48:57 +02:00
Pedro Igor	ae1a7542d8	[KEYCLOAK-3385] - Improvements to evaluation tool UI and result	2016-08-01 18:01:24 -03:00
Bill Burke	a8a77add39	fix	2016-08-01 12:07:02 -04:00
Bill Burke	5facec73e4	Merge remote-tracking branch 'upstream/master'	2016-08-01 11:19:09 -04:00
Bill Burke	91a267a0d8	component model	2016-08-01 11:18:58 -04:00
Marek Posolda	0d99b797b6	Merge pull request #3068 from mstruk/KEYCLOAK-2981-m ... KEYCLOAK-2981 Upload-certificate admin endpoint does not nullify private keys	2016-08-01 11:20:55 +02:00
Marek Posolda	159b752fb0	Merge pull request #3085 from pedroigor/master ... [KEYCLOAK-3376] - Show authorization data when evaluating authorization requests	2016-08-01 09:09:55 +02:00
Dmitry Telegin	fea277a7f5	KEYCLOAK-3369: Fire RealmPostCreateEvent	2016-08-01 01:00:50 +03:00
Pedro Igor	bd5b434894	[KEYCLOAK-3376] - Show authorization data when evaluating authorization requests	2016-07-29 22:09:17 -03:00
Pedro Igor	3c8ed8e3d8	[KEYCLOAK-3372] - Code cleanup	2016-07-29 05:18:38 -03:00
Pedro Igor	8cfa50f134	[KEYCLOAK-3338] More testing and improvements when importing role policies	2016-07-28 12:31:46 -03:00
Bill Burke	5d9fe09599	Merge pull request #3070 from mstruk/KEYCLOAK-2571 ... KEYCLOAK-2571 RESET_PASSWORD_ERROR and UPDATE_PASSWORD_ERROR events not fired	2016-07-28 07:23:32 -04:00
Bill Burke	2219cd363e	Merge pull request #3079 from patriot1burke/master ... KEYCLOAK-3268	2016-07-28 07:22:45 -04:00
Pedro Igor	7e1b97888a	[KEYCLOAK-3338] - Adding client roles to role policy and UX improvements	2016-07-27 15:15:14 -03:00
Bill Burke	46b4bb0909	KEYCLOAK-3268	2016-07-27 09:28:48 -04:00
Marko Strukelj	59e0570cdf	KEYCLOAK-2571 RESET_PASSWORD_ERROR and UPDATE_PASSWORD_ERROR events not fired	2016-07-26 21:32:57 +02:00
Marko Strukelj	94f583e935	KEYCLOAK-2981 Upload-certificate admin endpoint does not nullify private keys	2016-07-25 11:13:21 +02:00
Bill Burke	3973aed57d	Merge pull request #2989 from thomasdarimont/issue/KEYCLOAK-3234-allow-restricting-mapper-for-userinfo ... KEYCLOAK-3234 Allow restricting claim mapper for userinfo endpoint	2016-07-22 17:54:00 -04:00
Josh Cain	535a0763fc	put imports back, new IDE snuck a * in there.	2016-07-22 14:57:07 -05:00
Josh Cain	283581f920	SamlProtocol should only drop attributes into a single attributeStatement element	2016-07-22 14:49:48 -05:00
mposolda	01830fd7f3	KEYCLOAK-3319 More OIDC tests. Minor refactoring	2016-07-22 18:16:58 +02:00
mposolda	9169bcd88d	KEYCLOAK-3354 request and request_uri not supported	2016-07-22 13:44:45 +02:00
mposolda	56e011dce4	KEYCLOAK-3318 Adapter support for prompt and max_age. Refactoring to not hardcode OIDC specifics to CookieAuthenticator	2016-07-21 18:19:53 +02:00
Pedro Igor	484d5d6e08	[KEYCLOAK-3313] - UI improvements and messages	2016-07-20 22:11:24 -03:00
mposolda	f4ddfe4a52	KEYCLOAK-3318 Support for prompt=login. More tests for prompt parameter	2016-07-20 21:27:38 +02:00
Bill Burke	6f92bac782	Merge pull request #3000 from tonswieb/master ... KEYCLOAK-3265 Support writing a NameIDType AttributeValue	2016-07-20 11:23:18 -04:00
Stian Thorgersen	1b517a461e	Merge pull request #3041 from stianst/KEYCLOAK-3302 ... KEYCLOAK-3302 Allow logout with expired refresh token	2016-07-19 08:03:52 +02:00
Marek Posolda	a6bdf81e6d	Merge pull request #3040 from mposolda/master ... KEYCLOAK-3220 Added test for missing response_type	2016-07-15 22:19:52 +02:00
Stian Thorgersen	e708c53730	KEYCLOAK-3302 Allow logout with expired refresh token	2016-07-15 12:56:31 +02:00
Stian Thorgersen	1ce17c459d	Merge pull request #3039 from stianst/KEYCLOAK-3192 ... KEYCLOAK-3192 Ignore disabled required action	2016-07-15 10:38:49 +02:00
mposolda	fda0a79e27	KEYCLOAK-3237 Add scopes_supported to OIDC WellKnown endpoint	2016-07-15 09:47:09 +02:00
Stian Thorgersen	970c89dd6a	KEYCLOAK-3192 Ignore disabled required action	2016-07-15 09:01:44 +02:00
mposolda	13a21e5fda	KEYCLOAK-3220 Improve error handling on adapters	2016-07-14 23:56:46 +02:00