libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions
7268 commits 4 branches 9 tags 483 MiB
Commit graph

7268 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pedro Igor
bfe10e34e7 [KEYCLOAK-3390] - Updating authorization objects doesn't invalidate cache in cluster 2016-08-12 11:15:13 -03:00
Pedro Igor
27187c11f1 Merge pull request #3138 from pedroigor/KEYCLOAK-3428 
[KEYCLOAK-3428] - Removing scope policies in case the resource does not match
 2016-08-11 14:59:20 -03:00
Pedro Igor
0030df060b [KEYCLOAK-3428] - Removing scope policies in case the resource does not match 2016-08-11 14:58:14 -03:00
Marek Posolda
f6f587e472 Merge pull request #3137 from thomasdarimont/issue/KEYCLOAK-3412-remove-unused-adminEventBuilder-error-method 
KEYCLOAK-3412 - Remove erroneous AdminEventBuilder.error method
 2016-08-11 17:41:04 +02:00
Marek Posolda
841c6b619a Merge pull request #3136 from mposolda/oidc-dynamic2 
OIDC dynamic client registrations from conformance testsuite
 2016-08-11 17:16:11 +02:00
Thomas Darimont
e0d70a35d6 KEYCLOAK-3412 - Remove erroneous AdminEventBuilder.error method 
Wasn't used within the Keycloak codebase and wouldn't have worked either
since the OperationType lookup would always fail since there are no
"_ERROR" operation types.

Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>
 2016-08-11 16:10:49 +02:00
mposolda
0520d465c1 KEYCLOAK-3414 Support for client registration from trusted hosts 2016-08-11 15:55:32 +02:00
mposolda
a8fb988e31 KEYCLOAK-3406 OIDC dynamic client registrations specs fixes 2016-08-11 15:54:51 +02:00
Marek Posolda
c34d175572 Merge pull request #3135 from mposolda/master 
Fix ExportImportTest
 2016-08-11 15:53:16 +02:00
mposolda
9c7442c75b Fix ExportImportTest 2016-08-11 15:51:56 +02:00
Marek Posolda
2df7d6252e Merge pull request #3128 from mposolda/master 
Set version to 2.2.0-SNAPSHOT
 2016-08-10 09:02:13 +02:00
mposolda
d52e043322 Set version to 2.2.0-SNAPSHOT 2016-08-10 08:57:18 +02:00
Marek Posolda
6c8d55d534 Merge pull request #3125 from thomasdarimont/issue/KEYCLOAK-3391-hide-service-account-roles-if-service-accounts-disabled 
KEYCLOAK-3391 Better control over service account roles tab visibility
 2016-08-10 08:16:27 +02:00
Marek Posolda
26bc07b2c4 Merge pull request #3126 from pedroigor/KEYCLOAK-3398 
[KEYCLOAK-3398] - Review input fields on AuthZ UI to fetch data on demand
 2016-08-10 06:50:51 +02:00
Bill Burke
7f6fc170dc Merge pull request #3119 from fkiss/master-exportimport 
KEYCLOAK-3211 - ExportImportTest fix for Wildfly
 2016-08-09 20:59:04 -04:00
Bill Burke
741bbf471f Merge pull request #3123 from patriot1burke/master 
components import/export
 2016-08-09 20:58:20 -04:00
Pedro Igor
70eb27ec83 [KEYCLOAK-3398] - Review input fields on AuthZ UI to fetch data on demand 2016-08-09 21:56:29 -03:00
Thomas Darimont
96b729886f KEYCLOAK-3391 Better control of service account roles tab visibility 
Previously the service account roles remain visible when changing
the client type from confidential to public or bearer only.

We now only show the service account roles tab iif:
- service accounts are enabled
- client access type is set to confidential
 2016-08-10 00:44:14 +02:00
Bill Burke
530870f05e realm components import/export 2016-08-09 15:06:29 -04:00
Bill Burke
1633f062d5 Merge remote-tracking branch 'upstream/master' 2016-08-09 12:25:13 -04:00
Bill Burke
ff703f935f component export/import 2016-08-09 12:25:04 -04:00
fkiss
4974079794 KEYCLOAK-3211 - ExportImportTest fix for Wildfly 2016-08-09 15:20:40 +02:00
Bill Burke
d94515cdae Merge pull request #3117 from patriot1burke/master 
deployer, jta lookup, merge user fed/storage
 2016-08-08 17:46:35 -04:00
Bill Burke
f838c697d1 Merge remote-tracking branch 'upstream/master' 2016-08-08 16:04:16 -04:00
Bill Burke
d14de43ac7 merge User Federation/Storage menu 2016-08-08 16:02:06 -04:00
Marek Posolda
e198e7e0b9 Merge pull request #3116 from mposolda/master 
KEYCLOAK-3400 OIDC request with missing response_type should respond …
 2016-08-08 21:50:08 +02:00
Bill Burke
83306963e8 jta transaction abstraction 2016-08-08 12:32:36 -04:00
mposolda
65e2f127c9 KEYCLOAK-3400 OIDC request with missing response_type should respond with error 2016-08-08 16:11:50 +02:00
Marek Posolda
64c2077c0b Merge pull request #3115 from mposolda/master 
KEYCLOAK-2169 KEYCLOAK-3286 Support for at_hash and c_hash
 2016-08-08 12:36:33 +02:00
mposolda
9be6777685 KEYCLOAK-2169 KEYCLOAK-3286 Support for at_hash and c_hash 2016-08-08 10:57:44 +02:00
Bill Burke
f14f303dfe Merge remote-tracking branch 'upstream/master' 2016-08-07 11:50:44 -04:00
Bill Burke
33d7d89ad9 provider hot deployment 2016-08-07 11:41:52 -04:00
Marek Posolda
65c49c39f4 Merge pull request #3114 from mposolda/master 
KEYCLOAK-3321 OIDC requests without 'nonce' claim should be rejected …
 2016-08-05 16:45:56 +02:00
Marek Posolda
6c0f685c39 Merge pull request #2948 from thomasdarimont/issue/KEYCLOAK-3142-Add-ResourceType-to-AdminEvents 
KEYCLOAK-3142 - Capture ResourceType that triggers an AdminEvent
 2016-08-05 15:07:56 +02:00
mposolda
e0a59baaf2 KEYCLOAK-3321 OIDC requests without 'nonce' claim should be rejected unless using the code flow. Started responseType tests 2016-08-05 15:05:26 +02:00
Marek Posolda
6a797a61a9 Merge pull request #3113 from vmuzikar/KEYCLOAK-3367 
KEYCLOAK-3367 Improve stability of Adapters Tests
 2016-08-05 09:44:52 +02:00
Thomas Darimont
e49afb2d83 KEYCLOAK-3142 - Revised according to codereview 
Liquibase Moved schema evolution configuration from jpa-changelog-2.1.0
to jpa-changelog-2.2.0.
Corrected wrong ResourceType references in tests.
Adapted AdminEvents copy-routines to be aware of resourceType attribute.
Added ResourceType enum to exposed ENUMS of ServerInfoAdminResource.

Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>
 2016-08-05 00:01:03 +02:00
Vaclav Muzikar
0d225f44de KEYCLOAK-3367 Improve stability of Adapters Tests 2016-08-04 14:43:49 +02:00
Thomas Darimont
586f6eeece KEYCLOAK-3142 - Capture ResourceType that triggers an AdminEvent 
Introduced new ResourceType enum for AdminEvents which lists
the current supported ResourceTypes for which AdminEvents
can be fired.

Previously it was difficult for custom EventListeners to figure
out which ResourceType triggered an AdminEvent in order
to handle it appropriately, effectively forcing users to parse
the representation.
Having dedicated resource types as a marker on an AdminEvent helps
to ease custom EventListener code.

We now also allow filtering of admin events by ResourceType in the
admin-console.

Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>
 2016-08-04 11:30:02 +02:00
Bill Burke
f91907c8f9 Merge pull request #3107 from thomasdarimont/issue/KEYCLOAK-3392-honor-web-context-for-odic-endpoint-link 
KEYCLOAK-3392 Use authUrl prefix for OIDC Configuration link
 2016-08-03 21:34:00 -04:00
Bill Burke
9e0667bc11 Merge pull request #3080 from trajakovic/issue/editAccountHtmlTtile 
Fixing typo in account resource(s) bundle
 2016-08-03 21:31:44 -04:00
Bill Burke
a3ffb32532 Merge pull request #3060 from fkiss/master-ldaps 
KEYCLOAK-2281 added ldap tests over ssl
 2016-08-03 21:31:12 -04:00
Bill Burke
1e7cf9fb3f Merge pull request #3088 from thomasdarimont/issue/KEYCLOAK-3380-allow-ignore-pattern-in-filter 
KEYCLOAK-3380 Allow to configure paths to skip in KeycloakOIDCFilter
 2016-08-03 21:30:20 -04:00
Bill Burke
f75c0d3e61 Merge pull request #3111 from patriot1burke/master 
user storage provider jpa example
 2016-08-03 21:27:30 -04:00
Bill Burke
534ee2e50c Merge remote-tracking branch 'upstream/master' 2016-08-03 19:16:45 -04:00
Bill Burke
70722d0d3d user storage provider jpa example 2016-08-03 19:16:11 -04:00
Marek Posolda
0292acd5e2 Merge pull request #3110 from mposolda/master 
Master: Oracle & EAP7 overlay
 2016-08-03 14:24:50 +02:00
mposolda
bf3541414c KEYCLOAK-3393 Fix Keycloak on EAP7 overlay 2016-08-03 13:01:44 +02:00
mposolda
9242e972c0 Fix Oracle DB 2016-08-03 13:01:30 +02:00
Thomas Darimont
57a96fa6aa KEYCLOAK-3392 Use authUrl prefix for OIDC Configuration link 
We now use the {{authUrl}} prefix for the OIDC configuration link
in the admin-console to honor different web-context paths.

Previously when a different web-context than /auth was configured
the generated link pointed to the wrong location.

Signed-off-by: Thomas Darimont <thomas.darimont@gmail.com>
 2016-08-02 15:52:22 +02:00