Commit graph

21580 commits

Author SHA1 Message Date
dependabot[bot]
44c2ca2390 Bump node-fetch from 3.2.4 to 3.2.5
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v3.2.4...v3.2.5)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-07 11:20:34 +02:00
Stian Thorgersen
e49e8335e0
Refactor BouncyIntegration (#12244)
Closes #12243
2022-06-07 09:02:00 +02:00
Martin Kanis
df72cf72f2 Hot Rod map storage: Single-use (action token) no-downtime store 2022-06-06 16:01:18 +02:00
Bruno Oliveira da Silva
a102e28dbb Update webauthn4j to 0.20.0
A new version which contains a couple of
bug fixes plus CVE updates for its dependencies:

Breaking changes
    - Add EdDSA support #662
    - Correct AuthenticationAlgorithm(0x0011) value #657

Dependency Upgrades
    - Bump spring-boot-dependencies from 2.6.7 to 2.7.0 #661
    - Bump jacksonVersion from 2.13.2 to 2.13.3 #660
    - Bump kerby-asn1 from 2.0.1 to 2.0.2 #659
Bump checker-qual from 3.21.4 to 3.22.0 #654

Resolves #12311
2022-06-06 13:45:17 +02:00
rmartinc
198c67fb18 Issue #9194: Client authentication fails when using signed JWT, if the JWA signing algorithm is not RS256 2022-06-06 12:08:23 +02:00
rmartinc
5332a7d435 Issue #9194: Client authentication fails when using signed JWT, if the JWA signing algorithm is not RS256 2022-06-06 12:07:09 +02:00
Alexander Bokovoy
1915f11cba OAuth2DeviceConfig: fix polling interval defaults
Instead of DEFAULT_OAUTH2_DEVICE_POLLING_INTERVAL, constant for the
lifespan was used to initialize the default polling interval.

This leads to inability to continuously poll the result as the result
stuck in the actionTokens cache for far longer than expected (600
seconds instead of 5 seconds). As a result, only the first request for
the token succeeds if a resource owner already did grant the access. If
that has not happened, any additional polling within 600 seconds would
get rejected with a 'slow_down' response.

This makes hard to write OAuth 2.0 clients using device code
authorization grant flow against multiple IdPs. Microsoft's
implementation of OAuth 2.0 device code grant flow requires 'nudging'
the Authorization Server's token endpoint before it even starts
recognizing the device code. Keycloak mismatch of the polling interval
default makes this flow impossible.

Closes #12327

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-06-06 11:54:56 +02:00
Takashi Norimatsu
3889eeda30 Client Policies: pkce-enforcer executor with client-access-type condition is not applied on client change via Admin API
Closes #12295
2022-06-06 11:30:48 +02:00
Nick Farley
91e88f554e Replaces instances of himself with more inclusive language
Closes #12300
2022-06-03 12:25:14 -03:00
andreaTP
f9c6ea84ad Respect http-relative-path with probes 2022-06-03 12:23:36 -03:00
Erik Jan de Wit
572259998f
Adding a subflow to a subflow didn't work (#2740) 2022-06-03 15:06:11 +02:00
vramik
c31d37ddf1 Each JpaRootEntity should have its own current schema version
Closes #12272
2022-06-02 17:16:34 +02:00
Michal Hajas
09c0a69a8f Add HotRod no downtime store for events
Closes #9676
2022-06-02 13:30:19 +02:00
Jon Koops
d6edaa1ee1
Add a 'Reset' button the the events search form (#2732) 2022-06-02 09:27:57 +02:00
Jon Koops
b6d71a25cc
Link security header help text to MDN (#2733) 2022-06-02 09:27:29 +02:00
Erik Jan de Wit
8885cd45c2
only select items from the list not rows (#2731)
fixes: #2730
2022-06-02 09:06:31 +02:00
Jon Koops
f14dd1f86e
Disallow deletion of restricted user attributes (#2734) 2022-06-02 09:04:11 +02:00
andreaTP
0a8e132c7c Refactor the packages structure of the operator 2022-06-01 17:30:47 -03:00
agagancarczyk
0692102ff0
Updated account console chapter #1494 (#1546)
* updated account text

* updated account.adoc

* cleaned up the .adoc

* resized images

Co-authored-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2022-06-01 14:17:59 -04:00
Stan Silvert
eec1dfa00c
Revert "updated to reflect the new ui (#1531)" (#1551)
This reverts commit f55b704052.
2022-06-01 14:13:14 -04:00
agagancarczyk
68e8a6fefc
removed action menu for create new client profile (#2728)
Co-authored-by: Agnieszka Gancarczyk <agancarc@redhat.com>
2022-06-01 14:21:29 +01:00
Adam Jones
74870a2ac6
Update issues link to GitHub issues rather than JBoss/RedHat JIRA (#12218)
* Update welcome page link to GitHub issues rather than JBoss/RedHat JIRA

* Update GOVERNANCE.md

* Update index.ftl
2022-06-01 15:20:36 +02:00
Salih Candir
990df8feb5
fix wrong xRobotsTag label bound (#12288)
Set the `for` attribute of the xRobotsTag label to `xRobotsTag`

Closes #12286
2022-06-01 15:18:38 +02:00
Jon Koops
f7ca1a5196
Remove arbitrary margin from bottom of forms (#2724) 2022-06-01 15:02:55 +02:00
Erik Jan de Wit
f55b704052
updated to reflect the new ui (#1531)
* updated to reflect the new ui

fixes: #1500

* pr review comments
2022-06-01 07:43:49 -04:00
Martin Kanis
75754eca6b Extract timestamp from Expirable entity 2022-06-01 13:03:31 +02:00
Erik Jan de Wit
8202f363c5
Fixed toobar shown in graph mode (#2720) 2022-06-01 11:19:39 +02:00
Jon Koops
a7719d1ace
Move 'Sessions' tab before 'Permissions' tab (#2725) 2022-06-01 11:13:28 +02:00
Erik Jan de Wit
49b0170952
Fixed insets (#2723) 2022-06-01 11:12:47 +02:00
Erik Jan de Wit
219b60ff77
Changed to use one confirm dialog (#2722) 2022-06-01 11:12:30 +02:00
Erik Jan de Wit
152a62b72a
Improved search sub links / breadcrumbs (#2721) 2022-06-01 11:12:16 +02:00
Alexander Schwartz
6c3d25fd8f Limit the number of clientSessionIds in the test
Before it was 1500 client sessions, now its only 150 client sessions. This should help to keep the test within its time constraint of 60 + 30 seconds.

Closes #12264
2022-05-31 17:10:49 +02:00
mposolda
f90fbb9c71 Changing locale on logout confirmation did not work
Closes #11951
2022-05-31 16:03:58 +02:00
andreaTP
8f54f03f17 Fix CodeQl actions syntax 2022-05-31 08:53:42 -03:00
andreaTP
8912b6dc96 Improve Operator CI robustness 2022-05-31 08:52:40 -03:00
Takashi Norimatsu
d083b6c484 ciba http auth channel sends client_id and client_secret via delegation request
Closes #10993
2022-05-31 08:22:50 +02:00
vramik
be28e866b9 JPA map storage: Authorization services no-downtime store
Closes #9669
2022-05-30 21:05:34 +02:00
andreaTP
7c7588e8db Make OLM tests Maven build self-contained 2022-05-30 15:23:11 -03:00
Pedro Igor
ea22989d89 Fixing ClientTokenExchangeTest to also run when TLS is disabled
Closes #11818
2022-05-30 11:23:46 -03:00
Pedro Hos
e121371401 /clients-registrations API doesn't return secret anymore and is not coherent #11116
/clients-registrations API doesn't return secret anymore and is not coherent

fixing merge

/clients-registrations API doesn't return secret anymore and is not coherent

fixing test that was failing

Replace tabs with regular spaces

fixing identation

/clients-registrations API doesn't return secret anymore and is not coherent. Closes #11116

fixing test that was failing
2022-05-30 15:18:56 +02:00
mposolda
4222de8f41 OIDC RP-Initiated Logout POST method support
Closes #11958
2022-05-30 14:10:58 +02:00
dependabot[bot]
73df18ac92 Bump cypress from 9.6.1 to 9.7.0
Bumps [cypress](https://github.com/cypress-io/cypress) from 9.6.1 to 9.7.0.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/.releaserc.base.js)
- [Commits](https://github.com/cypress-io/cypress/compare/v9.6.1...v9.7.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-30 14:01:46 +02:00
Pedro Igor
c0fd3b89ea Fixing docs to state that substitution only works when importing at startup
Closes #12069
2022-05-30 08:09:00 -03:00
Jon Koops
5a8e388704
Use cy.wait() instead of cy.waitFor() (#2718) 2022-05-30 13:07:57 +02:00
Erik Jan de Wit
48f68358f4
Refactored scroll form so to easier hide section (#2697) 2022-05-30 13:07:33 +02:00
Stefan Guilhen
808738220f Change CodeGenerateUtil so that it doesn't add/remove the code in an inner transaction
Fixes #11617
2022-05-30 12:55:48 +02:00
Jon Koops
0d0e086913
Use correct field for authentication of e-mail server (#2706) 2022-05-30 12:20:17 +02:00
dependabot[bot]
d2a56a0ae7 Bump i18next-http-backend from 1.4.0 to 1.4.1
Bumps [i18next-http-backend](https://github.com/i18next/i18next-http-backend) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/i18next/i18next-http-backend/releases)
- [Commits](https://github.com/i18next/i18next-http-backend/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: i18next-http-backend
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-30 12:09:44 +02:00
dependabot[bot]
775596e2d8 Bump @typescript-eslint/parser from 5.25.0 to 5.26.0
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.25.0 to 5.26.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.26.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-30 12:09:08 +02:00
Stan Silvert
5b559bcdbd
Fine grained clients (#2702) 2022-05-30 11:23:24 +02:00