141 commits

Author	SHA1	Message	Date
mposolda	d8a7773947	Adding dummyHash to DirectGrant request in case user does not exists. Fix dummyHash for normal login requests ... closes #12298 Signed-off-by: mposolda <mposolda@gmail.com>	2024-05-13 16:33:29 +02:00
Alexander Schwartz	6fbe207d64	Create documentation for persistent user sessions ... Closes #29218 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2024-05-13 11:02:45 +02:00
Pedro Igor	d2c5fc86a9	Additional note on release and upgrade guides about partial update on user attributes ... Closes #28220 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-05-07 09:59:38 -03:00
Dimitri Papadopoulos Orfanos	9db1443367	Fix typos found by codespell in docs (#28890) ... Run `chmod -x` on files that need not be executable. Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-05-03 12:41:16 +00:00
Steven Hawkins	4697cc956b	further refinement of context handling (#28182) ... * fully removing providers and moving the keycloaksession creation / final cleanup also deprecated Resteasy utility methods closes: #29223 Signed-off-by: Steve Hawkins <shawkins@redhat.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-05-02 11:21:01 -04:00
Mark Banierink	ad32896725	replaced and removed deprecated token methods (#27715) ... closes #19671 Signed-off-by: Mark Banierink <mark.banierink@nedap.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-04-23 09:23:37 +02:00
Stefan Guilhen	8ca4bc77a1	Improve the performance of the queries used to find granted resources ... - simplifies the queries to avoid unnecessary join - creates two new indexes to speed up search time Closes #28861 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>	2024-04-22 11:26:06 -03:00
Pedro Ruivo	3e0a185070	Remove deprecated EnvironmentDependentProviderFactory.isSupported method ... Closes #26280 Signed-off-by: Pedro Ruivo <pruivo@redhat.com>	2024-04-19 16:36:49 +02:00
Ricardo Martin	fc6b6f0d94	Perform exact string match if redirect URI contains userinfo, encoded slashes or parent access (#131) (#28872) ... Closes keycloak/keycloak-private#113 Closes keycloak/keycloak-private#134 Signed-off-by: rmartinc <rmartinc@redhat.com> Co-authored-by: Stian Thorgersen <stianst@gmail.com>	2024-04-18 16:02:24 +02:00
Martin Bartoš	7f74286106	Emphasize the need for setting container limit ... Closes #28729 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-04-18 15:44:27 +02:00
rmartinc	ddacfbdefd	Remove deprecated LinkedIn social provider ... Closes #23127 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-04-18 10:10:58 +02:00
Martin Bartoš	1fb83bb165	Release notes and Migration guide for Hostname v2 (#28621) ... Closes #27730 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Václav Muzikář <vmuzikar@redhat.com> Co-authored-by: Peter Zaoral <pzaoral@redhat.com>	2024-04-17 09:29:59 +02:00
Steven Hawkins	58398d1f69	fix: replaces aesh with picocli (#28276) ... * fix: replaces aesh with picocli closes: #28275 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * fix: replaces aesh with picocli closes: #28275 Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-04-15 13:04:58 +00:00
Marek Posolda	e6747bfd23	Adjust priority of SubMapper (#28663) ... closes #28661 Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-04-12 14:13:03 +02:00
Martin Bartoš	a3669a6562	Make general cache options runtime (#28542) ... Closes #27549 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-04-12 11:56:11 +02:00
rmartinc	6d74e6b289	Escape slashes in full group path representation but disabled by default ... Closes #23900 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-04-12 10:53:39 +02:00
Marek Posolda	74faddec8e	Release notes for lightweight access tokens and group together relate… (#28622) ... closes #28460 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-04-11 20:02:33 +02:00
Marek Posolda	13daaa55ba	Documentation for changes related to 'You are already logged in' scen… (#28595) ... closes #27879 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>	2024-04-11 08:18:41 +02:00
Giuseppe Graziano	33b747286e	Changed userId value for refresh token events ... Closes #28567 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-04-11 07:46:44 +02:00
Giuseppe Graziano	c76cbc94d8	Add sub via protocol mapper to access token ... Closes #21185 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-04-10 10:40:42 +02:00
Martin Bartoš	b2c88e9876	docs: Support management port for health and metrics (#28213) ... Relates to #19334 Signed-off-by: Martin Bartoš <mabartos@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>	2024-04-09 14:33:30 +02:00
Alexander Schwartz	3ba9a905c9	Provide histograms for http server metrics ... Closes #28178 Co-authored-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Martin Bartoš <mabartos@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-04-09 12:52:42 +02:00
Steve Hawkins	9afe3a2560	fix: changing max threads default ... closes: #17483 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-04-09 12:14:56 +02:00
Pedro Igor	52ba9b4b7f	Make sure attribute metadata from user storage providers are added only for the provider associated with a federated user ... Closes #28248 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>	2024-04-08 09:05:16 -03:00
Giuseppe Graziano	b4f791b632	Remove session_state from tokens ... Closes #27624 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-04-08 08:12:51 +02:00
Giuseppe Graziano	fe06df67c2	New default client scope for 'basic' claims with 'auth_time' protocol mapper ... Closes #27623 Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>	2024-04-02 08:44:28 +02:00
Steven Hawkins	e9ad9d0564	fix: replace aesh with picocli (#27458) ... * fix: replace aesh with picocli closes: #27388 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update integration/client-cli/admin-cli/src/main/java/org/keycloak/client/admin/cli/commands/AbstractRequestCmd.java Co-authored-by: Martin Bartoš <mabartos@redhat.com> * splitting the error handling for password input Signed-off-by: Steve Hawkins <shawkins@redhat.com> * adding a change note about kcadm Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/documentation/upgrading/topics/changes/changes-25_0_0.adoc Co-authored-by: Martin Bartoš <mabartos@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Co-authored-by: Martin Bartoš <mabartos@redhat.com>	2024-03-28 14:34:06 +01:00
rmartinc	d4da0c816c	Upgrading note to warn truststore changes affect webauthn registration ... Closes #28113 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-03-22 10:58:48 +01:00
Steven Hawkins	7eab019748	task: deprecate WILDCARD and STRICT options (#26833) ... closes: #24893 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-03-21 16:22:41 +01:00
Alexander Schwartz	c4fdf1cee7	Enable HTTP metrics for Keycloak by default (#28088) ... Closes #27924 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-21 16:18:03 +01:00
Steve Hawkins	91c89c28e7	fix: changes xa transaction related defaults ... xa is not enabled by default recovery is enabled by default closes #27308 Signed-off-by: Steve Hawkins <shawkins@redhat.com>	2024-03-21 16:01:19 +01:00
Sebastian Schuster	0542554984	12671 querying by user attribute no longer forces case insensitivity for keys ... Signed-off-by: Sebastian Schuster <sebastian.schuster@bosch.io>	2024-03-21 08:35:29 -03:00
Alexander Schwartz	fbdb2ed9f7	Updated performance impact due to changed hashing ... Fixes #27900 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-19 09:30:49 +01:00
Alexander Schwartz	62d24216e3	Remove offline session preloading ... Closes #27602 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-15 15:19:27 +01:00
andymunro	be29be6741	Edit Keycloak 23 part of Upgrading Guide ... Closes #27484 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-03-14 11:03:58 +01:00
Alexander Schwartz	1788cf2b09	Enable Infinispan metrics automatically if overall metrics are enabled ... Closes #27724 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-13 18:55:45 +01:00
Alexander Schwartz	6de5325d1c	Limit the received content when handling the content as a String ... Closes #27293 Co-authored-by: rmartinc <rmartinc@redhat.com> Signed-off-by: rmartinc <rmartinc@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-13 16:43:03 +01:00
Alexander Schwartz	967ceddfbb	Fixing downstream documentation build (#27781) ... Closes #27780 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-12 08:37:41 +01:00
andymunro	66cffca3d4	Simplify Upgrade Guide structure ... Closes #27632 Signed-off-by: AndyMunro <amunro@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-11 16:22:46 +01:00
Alexander Schwartz	050acf0d94	Map Storage Removal: Remove deprecated model/legacy module (#27601) ... Closes #26657 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-03-08 15:17:24 +00:00
rmartinc	dea15e25da	Only add the nonce claim to the ID Token (mapper for backwards compatibility) ... Closes #26893 Signed-off-by: rmartinc <rmartinc@redhat.com>	2024-03-07 09:56:57 +01:00
AndyMunro	405feb0bc2	Edit Keycloak 24 changes chapter ... Closes 27452 Signed-off-by: AndyMunro <amunro@redhat.com>	2024-03-02 21:11:35 +01:00
Václav Muzikář	3e3cb2222d	Deprecate GELF (#27367) ... Closes #27364 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-02-29 12:07:28 +01:00
Alexander Schwartz	3950b4ed46	Cleaning old product documentation from the upstream documentation ... Closes #27324 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-02-28 13:30:39 +01:00
Jon Koops	89af9e3ffd	Write announcement and documentation for Account Console v3 (#26318) ... Closes #26122 Signed-off-by: Jon Koops <jonkoops@gmail.com>	2024-02-21 13:42:33 -05:00
Alexander Schwartz	3b6886d970	Add warning about too long attribute values as it can exhaust caches (#27126) ... Closes #27125 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>	2024-02-21 13:47:58 +01:00
Václav Muzikář	33425dacd9	Add proxy-headers option to the Keycloak CR (#27092) ... Closes #25179 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-02-21 12:19:37 +01:00
Václav Muzikář	de60c9b469	Tweak the default memory request and limit in the Operator (#27170) ... Closes #27169 Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>	2024-02-21 10:03:17 +01:00
Vlasta Ramik	76453550a5	User attribute value length extension ... Closes #9758 Signed-off-by: vramik <vramik@redhat.com> Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Michal Hajas <mhajas@redhat.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Michal Hajas <mhajas@redhat.com>	2024-02-16 08:09:34 +01:00
Martin Bartoš	59007844d9	Supported option to specify resource management for pods in Keycloak CR (#26661) ... Closes #26456 Signed-off-by: Martin Bartoš <mabartos@redhat.com>	2024-02-15 13:38:41 +01:00