libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions
25338 commits 4 branches 9 tags 483 MiB
Commit graph

499 commits

Author SHA1 Message Date
Alexander Schwartz
42f66f2c6f Avoid recording metrics for http server endpoints while they contain resource IDs 
Closes #17281
 2023-03-01 09:58:30 +01:00
Pedro Igor
9874da150e Avoid resolving expressions twice but rely on MP config expression support 
Closes #16573
 2023-03-01 09:22:27 +01:00
Pedro Igor
2b98fcdecb Support for standard Forwarded header 
Closes #11580
 2023-02-22 19:28:04 +01:00
rmartinc
f91ac2970d
Polish fips-mode switch for preview (#17228) 
* Polish fips-mode switch for preview
Closes #17208 #17210 


Co-authored-by: mposolda <mposolda@gmail.com>
 2023-02-22 12:12:52 +01:00
mposolda
4f068fcdcc Make https-trust-store-type set to bcfks by default in strict-mode 
Closes #17119
 2023-02-16 08:00:21 -03:00
Pedro Igor
2059ffb219 Make sure the distribution is using FIPS providers 
Closes #12428
 2023-02-10 17:26:55 +01:00
Pedro Igor
22e256149c Make it possible to run the embedded distribution in FIPS mode 
Closes keycloak#16962
 2023-02-09 16:14:01 -03:00
vramik
fc9e9e6fda Add support for file store configuration into Quarkus 
Closes #16821
 2023-02-08 14:49:53 +01:00
Stian Thorgersen
4782a85166
Remove old admin console feature (#16861) 
* Remove old admin console feature

Closes #16860

* Update help txt files for Quarkus tests
 2023-02-07 12:59:35 +01:00
Pedro Igor
263e86e434 Support paths without a beginning slash when setting the root path 
Closes #16002
 2023-02-02 17:41:22 +01:00
Pedro Igor
b5fb528508 Do not enable caching metrics by default and provide a guide 
Closes #16751
 2023-02-01 18:55:43 +01:00
Alexander Schwartz
c6aba2e3de Make LockAcquiringTimeoutException a RuntimeException 
Closes #16690
 2023-01-31 08:21:32 +01:00
Alexander Schwartz
7933f0489d Align startup of Quarkus with the regular startup to ensure boostrap locks are created. 
Also fixing an issue where DBLockGlobalLockProviderFactory held on to an old session, which lead to a closed DB connection on Quarkus.

Closes #16642
 2023-01-30 12:59:40 +01:00
Sebastian Schuster
54c34dc75b 15901 enabled Infinispan metrics 2023-01-25 04:26:35 -08:00
Stian Thorgersen
8d05895adb
Move Admin REST extension to main repository (#16530) 
Closes #16529
 2023-01-19 13:06:21 +01:00
Pedro Igor
33cb1ad7cd Support runnning tests using an embedded distribution 
Closes #16420
 2023-01-13 12:03:36 -08:00
Pedro Igor
4d2f86202d Remove Hashicorp Support 
Closes #9144
 2023-01-13 15:52:19 +01:00
Dominik Guhr
7398d7e1ed initial impl of running export/import without serving 2023-01-12 12:19:40 -08:00
Pedro Igor
522bf1c0b0 Keep consistency when importing realms at startup when they are exported via the export command 
Closes #16281

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2023-01-06 18:53:01 +01:00
Michal Hajas
6566b58be1 Introduce Infinispan GlobalLock implementation 
Closes #14721
 2023-01-05 16:58:44 +01:00
Hynek Mlnarik
071fc03f41 Move transaction processing into session close 
Fixes: #15223
 2023-01-05 16:12:32 +01:00
Martin Kanis
c0e103dc95 Replace old HotRod index annotation with new one 2022-12-21 12:50:08 +01:00
mposolda
36bd76957d Make Keycloak FIPS working with OpenJDK 17 on FIPS enabled RHEL 
Closes #15721
 2022-12-20 21:03:55 +01:00
Pedro Igor
f32e012c11 Make it possible to set a custom user and cache providers when using legacy store 
Closes #15008
 2022-12-15 16:56:20 +01:00
Stian Thorgersen
a5670af745
Keycloak CI workflow refactoring (#15968) 
* Keycloak CI workflow refactoring

Closes #15861

* Update testsuite/integration-arquillian/tests/base/testsuites/base-suite.sh

Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>

* Update testsuite/integration-arquillian/tests/base/testsuites/suite.sh

Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>

* Update testsuite/integration-arquillian/tests/base/testsuites/suite.sh

Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>

* Update CodeQL actions

Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>
 2022-12-14 16:12:23 +01:00
Pedro Igor
0c4ac62a5f Disabling strict https if hostname is diasabled 
Closes #15287
 2022-12-12 09:10:39 -08:00
Alexander Schwartz
e4804de9e3 Changing Quarkus transaction handling for JPA map storage to JTA 
This has been recommended as the supported way of transaction handling by the Quarkus team.
Adding handling of exceptions thrown when committing JTA.
Re-adding handling of exceptions when interacting with the entity manager, plus wrapping access to queries to map exceptions during auto-flushing.

Closes #13222
 2022-12-09 10:07:05 -03:00
Peter Zaoral
1073a342cf Cleanup dependencies and align with Quarkus 
* aligned parent POM dependency versions with the Quarkus BOM

Closes #15325

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2022-12-09 09:10:30 -03:00
Sebastian Schuster
3c6e2c3c1e 15234 switch to micrometer metrics 2022-12-05 08:11:35 -03:00
Pedro Igor
168734b817 Removing references to request and response from Resteasy 
Closes #15374
 2022-12-01 08:38:24 -03:00
Stefan Guilhen
55b2162421 Create map-file module with empty implementations 
Closes #15706
 2022-11-29 12:58:55 +01:00
Michal Hajas
6d683824a4 Deprecate DBLockProvider and replace it with new GlobalLockProvider 
Closes #9388
 2022-11-16 16:13:25 +01:00
Stefan Guilhen
bc014d3e69 Upgrade Liquibase to version 4.16.1 
* aligns with version used in quarkus

Closes #15089
 2022-11-16 13:14:23 +01:00
stianst
1de9c201c6 Refactor Profile 
Closes #15206
 2022-11-07 07:28:11 -03:00
Alexander Schwartz
1b7ae48dcb Use RESOURCE_LOCAL transactions for JPA map storage 
Closes #15248
 2022-11-01 16:43:46 -03:00
Pedro Igor
f6985949b6
Close the session within resteasy boundaries (#15193) 
Closes #15192
 2022-11-01 11:06:34 +01:00
Alexander Schwartz
1059b3a837
Log errors when welcome page can't be shown on Quarkus (#14995) 
Closes #14994
 2022-10-21 07:38:33 +02:00
Stian Thorgersen
97ae90de88
Remove Red Hat Single Sign-On product profile from upstream (#14697) 
* Remove Red Hat Single Sign-On product profile from upstream

Closes #14916

* review suggestions: Remove Red Hat Single Sign-On product profile from upstream

Closes #14916

Co-authored-by: Peter Skopek <pskopek@redhat.com>
 2022-10-18 14:43:04 +02:00
Marek Posolda
0756ef9a75
Initial integration tests with BCFIPS distribution (#14895) 
Closes #14886
 2022-10-17 23:33:22 +02:00
Alexander Schwartz
97c4495c4f Updating H2 database to 2.x 
Closes #12607

Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2022-10-14 11:52:34 +02:00
Martin Kanis
761929d174
Merge ActionTokenStoreProvider and SingleUseObjectProvider (#13677) 
Closes #13334
 2022-10-13 09:26:44 +02:00
Pedro Igor
00e4c3567a Make it possible to switch between BC and BC-FIPS libraries 
Closes #12424
 2022-09-23 07:50:02 -03:00
Thomas Darimont
962a685b7b KEYCLOAK-15773 Control availability of admin api and admin-console via feature flags 
Inline profile checks for enabled admin-console to avoid issues during
static initialization with quarkus.

Potentially Re-enable admin-api feature if admin-console is enabled
via the admin/admin2 feature flag.

Add legacy admin console as deprecated feature flag
Throw exception if admin-api feature is disabled but admin-console is enabled

Adapt ProfileTest

Consider adminConsoleEnabled flag in QuarkusWelcomeResource
Fix check for Admin-Console / Admin-API feature dependency.

Add new features to approved help output files

Co-authored-by: Stian Thorgersen <stian@redhat.com>
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
 2022-09-09 18:18:51 -03:00
Pedro Igor
ced18f2722 Requests to health endpoint still dispatched to worker threads when http-relative-path is set 
Closes #14011
 2022-08-31 12:42:41 +02:00
Pedro Igor
127569ed2f
Upgrade to Quarkus 2.12.0.Final (#14006) 
Closes #14003
 2022-08-30 16:48:20 +02:00
Stian Thorgersen
aeba5e9f4b
Add FreeMarkerProvider to prevent multiple instances of FreeMarker templates (#14062) 
* Add FreeMarkerProvider to prevent multiple instances of FreeMarker templates

Closes #19185
 2022-08-29 08:42:53 -03:00
Pedro Igor
52aad0bbdc Allow setting a URL to configure frontend and admin URLs 
Closes #13524

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
 2022-08-25 23:03:09 -03:00
Erik Jan de Wit
e7a3e4b601
Revert "removing admin ui excludes (#13752)" (#13958) 
This reverts commit 15b258bf26.

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
 2022-08-25 14:43:58 +02:00
Pedro Igor
2b9a0bff51
Do not run build when executing import and export commands (#13942) 
Closes #13940
 2022-08-25 13:43:18 +02:00
Pedro Igor
2a2ada9575
Improve how expected values are set to options (#13842) 
Closes #13841
 2022-08-19 14:55:01 +02:00
Pedro Igor
5f2191813a
Remove unnecessary code paths during startup (#13848) 
Closes #13847
 2022-08-19 14:54:11 +02:00
Alexander Schwartz
bd926b8fd0 Remove warning from StoragePropertyMappers about the deployment state version seed 
It duplicates the logic in the provider and is incomplete. A follow-up issue will investigate how a provider can defer a configuration option.

Closes #13807
 2022-08-17 13:55:05 -03:00
Erik Jan de Wit
15b258bf26
removing admin ui excludes (#13752) 
fixes: #13751
 2022-08-17 07:18:27 -04:00
Pedro Igor
e3af0610e2 Support running base testsuite on Windows 
Closes #12648

Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-08-10 20:03:53 -03:00
Michal Hajas
ec808d28bb Remove possibility to start embedded HotRod server in hotrod-map module 
Closes #13247
 2022-08-05 21:08:38 +02:00
Pedro Igor
f7d258f333 IDELauncher not recognizing CLI options at runtime 
Closes #13517
 2022-08-04 09:55:19 -03:00
Dominik Guhr
43afcf11ac add gelf log level option 
also aligns writing in logging.adoc to always use GELF instead of gelf/Gelf in plain text.

Closes #13397
 2022-08-01 12:28:47 -03:00
Dominik Guhr
10e3c797a3 Only show non-hidden options in --help-all for options where supportlevel is not SUPPORTED 
Closes #13385
 2022-08-01 10:03:28 -03:00
Alexander Schwartz
8470a30446 Introduce CLI parameter to set the deployment state version seed 
Closes #12710
 2022-07-27 20:10:17 +02:00
Alexander Schwartz
7f355b43f8 Add prefix to the area Map storage options for Quarkus 
Closes #13355
 2022-07-27 11:00:25 +02:00
Alexander Schwartz
67e2f342a9 Allow Quarkus configuration to mix different storage providers 
Closes #13312
 2022-07-26 21:56:16 +02:00
Michal Hajas
3589778a10 Add possibility to configure HotRod storage in Quarkus distribution 
Closes #12617
 2022-07-26 14:13:39 +02:00
Dominik Guhr
878e3e0cbc
change --help to only show "supported" options (#13304) 
* Unsupported options only shown when using help-all
* reworked impl based on comment in #13284
* Also fixes minor things of #13284 as unused imports

Closes #13283

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2022-07-25 19:34:10 +02:00
Dominik Guhr
9bb1299d89 change optimised to optimized 
also: fix kc.bat to not use autobuild in devmode anymore, fix containers.adoc to not use auto_build naming, fix build command cli help as it is not required anymore to run it beforehand.
 2022-07-22 10:29:07 -03:00
Pedro Igor
e14bd51656 Properly enable/disable metrics and health endpoints 
Closes #11506

Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-07-22 09:41:29 -03:00
Alexander Schwartz
cb81a17611 Disable Infinispan for map storage and avoid the component factory when creating a realm independent provider factory 
Provide startup time in UserSessionProvider independent of Infinispan,
cleanup code that is not necessary for the map storage as it isn't using Clustering.
Move classes to the legacy module.

Closes #12972
 2022-07-22 08:20:00 +02:00
Alexander Schwartz
4d19099c66 Workarounds to make Listeners and non-autocommit work on Quarkus 
Closes #13200
 2022-07-20 12:06:06 +02:00
Pedro Igor
2f216ad505 Do not exit when restarting the server in dev mode. Initial contributing guide. 
Closes #13196

Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-07-19 18:42:48 -03:00
Dominik Guhr
b563028f42 Rename Cluster to Cache in cli help and rename classes to refer to caching 
Should be merged after the changes to auto-build are in to avoid more merge conflicts

Closes #13124
 2022-07-19 08:17:39 -03:00
Alexander Schwartz
3f5a087db9 Enable JPA map user session store 
Also removing previous workarounds when this wasn't available, yet.

Closes #13121
 2022-07-19 08:58:51 +02:00
Pedro Igor
89028613d8 Introducing --optimise option 
Closes #10737
 2022-07-15 15:12:17 -03:00
Pedro Igor
f6a2b334d1
Integrate the JPA map store (#13097) 
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2022-07-14 17:47:51 -03:00
Pedro Igor
b80731decf
Remove any legacy provider from runtime when running the new store (#12963) 2022-07-13 07:30:14 -03:00
Dominik Guhr
e9714c78a6 Fix internal filepath for logging on windows 
Alo fixes filepath for concurrenthashmap and one windows-only test referencing now non-existing QuarkusJpaConnectionProviderFactory log output in LoggingDistTest

Closes #12984
 2022-07-11 08:23:26 -03:00
Dominik Guhr
1edce54aff Baseline: Ability to set SupportLevel for categories and show marker in CLI help 
Closes #12927
 2022-07-07 12:48:19 -03:00
Dominik Guhr
1d6dde02e5 Add support and docs for centralized logging using gelf. 
* 99% 1:1 wrapper of the underlying quarkus gelf extension.
* excluded `filter-stack-trace` and `stack-trace-throwable-reference` options for now, as they are either undocumented on the quarkus side or not important imo.
* added docs and examples for Graylog and ELK stack
* NOT added an automated test, as this is really a 1:1 wrapper around the extension, Test setup would be cumbersome, test would take too much time and tests are done in quarkus itself.

Closes #12125
 2022-06-30 16:16:19 -03:00
Dominik Guhr
c19428aa81 introduce hidden transaction-jta-enabled config option 
Closes #12400
 2022-06-30 16:01:23 -03:00
Pedro Igor
605b51890e Enables the new store and the concurrenthashmap provider 
Closes #12651
 2022-06-30 10:55:22 -03:00
Marek Posolda
be1e31dc68
Introduce crypto/default module. Refactoring BouncyIntegration (#12692) 
Closes #12625
 2022-06-29 07:17:09 +02:00
andreaTP
e3ece8244f From supported runtimes back to hidden 2022-06-28 11:33:44 -03:00
Pedro Igor
c972ec4383 Allow to conditionally bootstrap the default persistence unit 
Closes #12662
 2022-06-27 08:26:37 -03:00
Pedro Igor
95528e77bb
Fixing env vars precedence over conf file (#12638) 
Closes #12413
 2022-06-22 15:13:58 +02:00
Marek Posolda
3f5741e988
Possibility to switch between FIPS and non-FIPS during keycloak+quarkus seerver build (#12513) 
* Possibility to switch between FIPS and non-FIPS during keycloak+quarkus server build

Closes #12522
 2022-06-21 11:17:45 +02:00
Hynek Mlnarik
64b1e976af Quarkus 2022-06-21 08:53:06 +02:00
andreaTP
3abcc699a1 Move all dist options to the new module 
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2022-06-17 09:06:40 -03:00
Dominik Guhr
9df0d9a5c4 Fixes wrong values shown for configkeys (e.g. http-enabled) in show-config when in dev-mode. 
also removes unnecessary internal and self-referencing values from output

Closes #9525

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2022-06-14 09:19:03 -03:00
Pedro Igor
5e5cfff4e2 Resolve default values for runtime options when running re-aug 
Closes #10818
 2022-06-09 08:32:30 -03:00
Pedro Igor
b34f46155c Allow setting the admin hostname 
Closes #12190
 2022-06-08 16:41:43 -03:00
Pedro Igor
8aecba1795 Fixing how realm frontendurl is cached when resolving the hostname 
Closes #11894
 2022-06-08 16:41:25 -03:00
Pedro Igor
c18b87af5f Keycloak server fails to start when using different named schema 
Closes #12219
 2022-06-08 09:10:25 -03:00
Marek Posolda
eed944292b
Make script providers working on JDK 17 (#11322) 
Closes #9945
 2022-05-27 12:28:50 +02:00
andreaTP
d66710205c Refactor dist config to a common module 2022-05-26 12:07:03 -03:00
Pedro Igor
6156272f39
Persisted config source not loading properties at runtime (#12157) 
Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-05-25 16:29:37 -03:00
Martin Bartoš
86f31e8df5 Fix BlacklistPasswordPolicyDefaultPath Failures on Windows 
Fixes #11967
 2022-05-24 17:26:19 -03:00
Pedro Igor
b5a5d68dbc Imposing certain constraints to files when importing at start-up 
Closes #11861
 2022-05-16 16:49:42 +02:00
Pedro Igor
eab2dff979
Loading message bundles using the flat-classpath theme provider (#11711) 
Closes #11186
 2022-05-05 15:34:54 +02:00
Kai Josef Schauerte
016c28e7a5 Added a hint to the --cache-config-file config option that you not need to specify the configuration folder 
Closes #11302
 2022-05-03 09:48:22 -03:00
Stian Thorgersen
75cb29017c
Add option to skip new admin console while doing a build (#11591) 2022-04-22 14:25:29 +02:00
Stian Thorgersen
435a78364f
Add BOM wrapper for new admin console to limit Sonatype snapshot to only admin-ui (#11574) 2022-04-21 16:33:55 +02:00
Jon Koops
8ea8aaebcf
Include Admin UI as a regular dependency (#11281) 2022-04-21 11:39:00 +02:00
Pedro Igor
15b2f8e26d
Obtaining the resource version using native SQL during startup (#11264) 
Closes #11263
 2022-04-20 14:25:48 +02:00
Yoshikazu Nojima
e495a3d403
Add Apache Kerby to Quarkus runtime dependencies (#10994) 
Apache Kerby is used by WebAuthn attestation verification
Without this library the assertion verification fails in Quarkus
distribution

Closes #10779
 2022-04-19 14:04:22 +02:00
Pedro Igor
9eca6b4e75
Add environment variable expansion to keycloak.conf (#11285) 
Closes #11283

Co-authored-by: Dominik Guhr <dguhr@redhat.com>

Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-04-19 09:11:29 +02:00
Pedro Igor
52d205ca91
Allow exposing some initial provider config options via web site (#10572) 
* Allow exposing some initial provider config options via web site

Co-authored-by: Stian Thorgersen <stian@redhat.com>

Closes #10571

* Include type to provider options, and hide build-icon column as it's not relevant

Co-authored-by: stianst <stianst@gmail.com>
 2022-04-19 08:01:42 +02:00
McLaynV
91c191024e
Fix a typo in a description String (#11260) 
Resolves #11344
 2022-04-18 07:09:24 -03:00
Stan Silvert
ed79c2a861
Revert "Include Admin UI as a regular dependency (#11156)" (#11280) 
This reverts commit 31c272d73f.
 2022-04-13 09:19:49 -04:00
Jon Koops
31c272d73f
Include Admin UI as a regular dependency (#11156) 2022-04-13 09:18:56 -04:00
Dominik Guhr
7811f3721a Add db-url-port option 
to set the port when not using a full db-url

closes #11251
 2022-04-13 08:31:25 -03:00
Bruno Oliveira da Silva
bb025f1378 Update wildfly-elytron dependency in the main Quarkus distribution (CVE-2021-3642) 
Resolves #11196
 2022-04-11 09:47:39 -03:00
Dominik Guhr
f247b07022 fixes admin console access using default https port without proxy 
Closes #11083
 2022-04-05 23:13:37 -03:00
Pedro Igor
23c5199c0c
Allow overriding the host header using X-Forwarded-Host (#11021) 
Closes #10997
 2022-04-05 09:17:08 +02:00
Pedro Igor
2b5d68d645
Allow resoving theme resources from flat classpath (#10989) 
Closes #10951
 2022-04-05 09:16:20 +02:00
Dominik Guhr
9e57f836f2 Make quarkus runtime properties also available as runtime properties in keycloak 
Changes behaviour to:
- all raw quarkus config properties are handled as runtime config in keycloak, with the exception of raw properties we need for additional datasources, there we check for build- vs runtime
- unknown quarkus buildtime properties require a build first or the usual quarkus warning is shown
- wrapped quarkus properties still get ignored / overwritten by our configuration layer (no change in behaviour here)

Closes #10968
 2022-03-30 18:13:09 -03:00
Dominik Guhr
a5c3d035b9 Fixes showing sensitive values like passwords and irritating error msg when key used is unknown 
Only first unknown option is shown for now. May be iterated in the future.

Closes #10050

Closes #10051
 2022-03-29 10:37:07 -03:00
Dominik Guhr
0941a4709e Fixes windows configuration test 
also fixes using ~ as database default for e.g. IDELauncher (does not work on all windows versions)

also fixes the HelpCommandTest, as approvalTests are now generated based on the OS the tests run

Closes #10246

Co-authored-by: Victor-Philipp Negoescu <victor-philipp.negoescu@iteratec.com>
 2022-03-29 10:34:34 -03:00
Pedro Igor
e177f90299
Allow importing realms during startup (#10754) 
Closes #9261
 2022-03-24 14:35:09 +01:00
keycloak-bot
c71aa8b711
Set version to 999-SNAPSHOT (#10784) 2022-03-22 09:22:48 +01:00
Pedro Igor
ffa6df5547
Fixes to hostname (#10820) 
Closes #10627
Closes #10331
 2022-03-22 08:11:50 +01:00
Pedro Igor
183ad30755 Capacity to change hibernate dialect 
Closes #10749
 2022-03-21 07:18:01 -03:00
Bruno Oliveira da Silva
8aa394ca6b Update to Liquibase 4.8.0 
Closes #10678

Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Martin Kanis <mkanis@redhat.com>
 2022-03-16 13:46:31 -03:00
Dominik Guhr
b82b0000bc fixes port not recognized when setting hostname and port without proxy 
Closes #10627

Closes #10331
 2022-03-16 12:03:19 -03:00
Pedro Igor
ad865e75c1 Change the flush mode to auto and fixing how entities are checked if they are loaded in the EM 
Closes #10411
 2022-03-11 12:21:52 -03:00
Dominik Guhr
5233f2a729 Remove wrong message from build command help 
Closes #10664
 2022-03-10 13:36:48 -03:00
Dominik Guhr
1710b38cf8 Update to quarkus 2.7.3 
Full changelog on quarkus side: https://github.com/quarkusio/quarkus/releases/tag/2.7.3.Final | startup performance: no degradation | manual smoke tests: passed

Closes #10641
 2022-03-08 13:45:25 -03:00
Pedro Igor
c11a6e3ef0 Allow using an additional persistence unit and datasource 
Closes #10579
 2022-03-08 12:09:49 -03:00
rmartinc
48565832d4 [#10608] Password blacklists folder 2022-03-08 08:22:34 -03:00
Dominik Guhr
8454dc5a5d Support for console-JSON and FILE logging 
See logging.adoc for details on the usage

Closes #10523, #10607 and #10415
 2022-03-08 08:19:03 -03:00
andreaTP
59d9e3e3ee Enable the heatlh endpoints under a flag 2022-02-24 14:35:42 -03:00
Pedro Igor
e3d294e988 Wrong description for import/export options 
Fixes #10355
 2022-02-24 13:28:24 +01:00
Pedro Igor
209df44641
Fixing responses when unexpected errors occurs (#10383) 
Closes #10338
 2022-02-23 07:44:25 +01:00
Dominik Guhr
19a17e79ba Change tx driver handling. 
Introduce a non-tx driver for the vendors and map based on new build option transaction-tx-enabled

Closes #10191 and others.

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2022-02-22 18:00:31 -03:00
Dominik Guhr
9358535161
Fix admin user creation message when calling quarkus welcomepage from remote (#10362) 
For wildfly, everything is as before. For Quarkus, we check if http is enabled and provide the right port and scheme if so, and also we are relative-path aware.

Closes #10335
 2022-02-22 08:19:45 +01:00
Pedro Igor
a9668d14ce Proper error response when handing unexpected errors 
Closes #10176
 2022-02-16 15:35:38 -03:00
Pedro Igor
f3c3bb5001
Removing unnecessary code paths during startup (#10131) 
Closes #10130
 2022-02-15 12:09:14 +01:00
Dominik Guhr
5d781304e7 Fix idelauncher resourceloading 
caused by doubled slashes when getting the path for resources while running IDELauncher. So now we sanitize them. Tests by building and running  wf and quarkus distribution, running from idelauncher and running using quarkus:dev, assets got always loaded.

closes #9942
 2022-02-14 15:51:58 -03:00
keycloak-bot
d9f1a9b207
Set version to 18.0.0-SNAPSHOT (#10165) 2022-02-11 21:28:06 +01:00
Stefan Guilhen
7c1d6eae43
Upgrade to Liquibase 4.6.2 
* Upgrade to Liquibase 4.6.2
* Add valid checksums to changesets to allow migration to newest liquibase
* Update liquibase licenses

Co-authored-by: Martin Kanis <mkanis@redhat.com>
 2022-02-09 12:56:46 +01:00
Pedro Igor
82300ba731 Failing to use cache remote-stores due to missing dependencies 
Closes #10046
 2022-02-09 06:34:41 -03:00
Pedro Igor
0908325e6d Can not set a jgroups stack other than the defaults from Infinispan 
Closes #10052
 2022-02-09 06:34:25 -03:00
Dominik Guhr
c22299045c remove profile references 
Closes #9683
 2022-02-09 06:24:37 -03:00
Dominik Guhr
1b77358160 Logging guide v1 
Closes #10001
 2022-02-08 18:13:05 -03:00
Pedro Igor
f107f0596e Rename h2-file and h2-mem and removing defaults from production databases 
Closes #9973
 2022-02-04 15:43:51 -03:00
Pedro Igor
eaa8ea6334 Revert changes to stick session defaults 
Repoen #9393
 2022-02-04 15:12:56 +01:00
Dominik Guhr
a592fae626 Fix success on invalid build 
Closes #9790
 2022-02-04 15:11:53 +01:00
Dominik Guhr
0f3293cf00 Do not show full help when providing an invalid option 
Closes #9956
 2022-02-04 13:53:02 +01:00
Pedro Igor
ec49695a98 Initial logging support 
Closes #9901
 2022-02-03 13:44:24 +01:00
Pedro Igor
0de72105d7 Default to not attach route to cookies 
Closes #9393
 2022-02-02 13:35:18 -03:00
Pedro Igor
3967c81453
Review Configuring a Database guide (#9559) 
Closes #9457

Co-authored-by: Stian Thorgersen <stian@redhat.com>

Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2022-02-02 13:30:53 +01:00
Pedro Igor
fe0cb36284 Do not run re-augmentation if config is the same in dev mode 
Closes #9906
 2022-02-01 13:32:16 -03:00
Dominik Guhr
5a1f4b8889 Quarkus update to 2.7.0.Final 
Minor and micro dependency updates, some relocations (e.g. vault, ZipUtils), so some changes were needed to make this work.

Closes #9872
 2022-01-31 09:55:02 -03:00
Pedro Igor
d140abb8fa
Mapped Quarkus properties should not be persisted (#9808) 
Closes #9807
 2022-01-27 11:12:31 +01:00
Pedro Igor
7c162b42a6
Improve enabling/disabling features in Quarkus distribution (#9801) 
Closes #9706
 2022-01-27 11:11:46 +01:00
Pedro Igor
781ceb24fd Add a quarkus.properties for unsupported configuration options 
Closes #9682
 2022-01-26 11:26:50 -03:00
Pedro Igor
d28b54e5d5
Hide Hasicorp Vault from CLI (#9700) 
Closes #9688
 2022-01-25 14:24:35 +01:00
Pedro Igor
b53c5d5eee Build command should not allow runtime options 
Closes #9618
 2022-01-23 16:30:48 -03:00
Pedro Igor
1b1e220236
Remove system property from help message (#9694) 
Closes #9687
 2022-01-21 13:22:21 +01:00
Stian Thorgersen
b8d3c12a08
Update layout for options in guides (#9658) 2022-01-20 14:21:23 +01:00
Pedro Igor
0a9387ff4f Unified configuration option format and renaming keycloak.properties to keycloak.conf 
Closes #9606
 2022-01-19 08:47:15 -03:00
Pedro Igor
8ed7c0544f Defaults to TLSv1.3 
Closes #9530
 2022-01-18 07:42:24 -03:00
Dominik Guhr
fe506bceaa
Change config ordinals and simpler keycloak.properties file 
Closes #9473
 2022-01-11 15:11:59 -03:00
Pedro Igor
b2e55762f1
Properly setting the database schema (#9400) 
Closes #9398
 2022-01-11 09:22:11 +01:00
Pedro Igor
cbfd989ca9
Allow equal sign within option values (#9402) 
Closes #9397
 2022-01-11 09:21:38 +01:00
Pedro Igor
981cda5bfd Database configuration tests 
Closes #9293
 2022-01-05 09:26:46 -08:00
CorneliaLahnsteiner
dff79cee3c
KEYCLOAK-847 Add support for step up authentication (#7897) 
KEYCLOAK-847 Fix behavior of unknown not essential acr claim

Co-authored-by: Georg Romstorfer <georg.romstorfer@gmail.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
 2021-12-22 12:43:12 +01:00
Pedro Igor
ca58aa7b3d
[fixes #9250] - Wrong query when fetching last model version (#9251) 2021-12-22 08:25:06 +01:00
Pedro Igor
4f568dff63 [fixes #9133] - Allow setting JDBC driver and transaction type 2021-12-21 09:57:21 -08:00
keycloak-bot
9f3d4a7d42 Set version to 17.0.0-SNAPSHOT 2021-12-20 10:50:39 +01:00
Dominik Guhr
68271ba486 Solves Issue [#9186] Update to 2.5.3 and small typo fix 2021-12-16 07:43:45 -08:00
Dominik Guhr
dad5639b4e WIP: use extra buildstep and configprovider for tests 2021-12-14 04:07:48 -08:00
Pedro Igor
6cc674a875 [fixes #9108] - Unable to recognized SPI persisted properties 2021-12-14 03:32:59 -08:00
Pedro Igor
9b243cebeb [fixes #9089] - Fixing export and import commands 2021-12-14 03:32:10 -08:00
Dominik Guhr
f2abfecca1 KEYCLOAK-19858 Add Tests to check that no credentials are leaking when using CLI commands. Also: Tests for Help Command output using Golden master technique 2021-12-14 02:13:59 -08:00
Dominik Guhr
21ccf7dd8a Fixes 9094: Remove other values for features command. Only preview allowed for now. 2021-12-13 13:58:56 -08:00
Dominik Guhr
d6abade872 Solves #9080 - relocating dependency jars to new location. 2021-12-13 06:23:34 -08:00
Pedro Igor
bf0f3d605c [fixes #9052] - Renaming cluster options to cache 2021-12-10 08:20:53 +01:00
Thomas Darimont
50060775f6 8877 Make KeycloakMetricsHandler aware of context-path 
Adapt KeycloakMetricsHandler to consider custom relative paths via `kc.http.relative-path`
or --http-relative-path=/auth. Previously only the fixed path /metrics was allowed which did not work
with custom context-paths.

- Adapted KeycloakProcessor to Pedros proposal from 0b28d71dd0
- Removed unnecessary KeycloakMetricsHandler
- Added MetricsDistTest

Fixes #8877
 2021-12-09 13:13:14 -08:00
Pedro Igor
48835576da [KEYCLOAK-19885] - Parallelize cache manager init 2021-12-09 15:35:55 +01:00
Pedro Igor
43c46dbcf8 [KEYCLOAK-19686] - Windows support and recording if persisted properties 2021-12-07 09:18:32 -08:00
Dominik Guhr
28673ed4d8 KEYCLOAK-19832 Update to Quarkus 2.5.1 2021-12-06 12:10:55 -08:00
Pedro Igor
9a4ab82d08 [KEYCLOAK-19847] - Optimizations and refactoring for better/stable startup time 2021-12-02 08:57:23 -08:00
Pedro Igor
7bef534392 [KEYCLOAK-19859] - Patching request filter to properly end responses 2021-12-01 09:18:56 -08:00
Dominik Guhr
7f734c9e68 KEYCLOAK-19858: Sanitize CLI Log output and show-config output 2021-11-30 13:02:35 -08:00
Pedro Igor
e1916fbdb1 [KEYCLOAK-19311] - Baseline for Dist.X tests 2021-11-24 05:06:53 -08:00
andreaTP
82bfe9d977 [KEYCLOAK-19833] Fix message format 2021-11-23 02:29:15 -08:00
andreaTP
49bb06325e [KEYCLOAK-19833] Fix command line completion on ZSH 2021-11-22 16:50:43 -08:00
Pedro Igor
a1eb915c5f [KEYCLOAK-19798] - Filtering options based on the command 2021-11-22 05:17:31 -08:00
Pedro Igor
f5725cb629 [KEYCLOAK-19798] - Move pf,cf,v options to the root command and error handling 2021-11-18 14:01:46 -03:00
Dominik Guhr
4fd29759ad KEYCLOAK-19824: Use Config variables instead of system variables to change the default jdbc url 2021-11-17 12:22:08 -03:00
Pedro Igor
e14e56e0f3 [KEYCLOAK-19798] - Hostname support for Dist.X 
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2021-11-17 10:51:58 -03:00
Dominik Guhr
8bd18ff21a KEYCLOAK-19808 throw error when using start command after start-dev without rebuild first 2021-11-16 14:36:25 -03:00
Pedro Igor
37b36decbb [KEYCLOAK-19798] - Less verbose HTTP options and minor changes to property mappers 2021-11-12 07:50:32 -03:00
Pedro Igor
6071e2d518 [KEYCLOAK-19310] - Oracle Support 2021-11-11 08:51:09 -03:00
Pedro Igor
3a7f5171ab [KEYCLOAK-19310] - MSSQL Support 2021-11-10 08:07:10 -03:00
Dominik Guhr
13a7f773a9 KEYCLOAK-19446 Use FolderThemeProviderFactory with fallback for quarkus so no need to always set config or system variable 2021-11-09 07:59:40 -03:00
Pedro Igor
430fd35e2f [KEYCLOAK-19767] - Changing paramLabel and options formatting in help 2021-11-09 09:14:56 +01:00
Pedro Igor
4606b85596 [KEYCLOAK-19767] - Minor improvements to CLI 2021-11-04 12:14:12 -03:00
Dominik Guhr
579c5462b2 KEYCLOAK-19308 Grouping for help commands and refactoring of Propertymapper usage to provida a fluid API 2021-11-04 08:59:56 -03:00
Dominik Guhr
29b1aec4b5 KEYCLOAK-19711 Change Locations of h2-db files and gzip files 2021-11-03 22:42:34 -03:00
Pedro Igor
eaa96f6147 [KEYCLOAK-18255] - Vault Support in Dist.X 2021-11-03 09:23:33 -03:00
Pedro Igor
9dfcaf0162 [KEYCLOAK-19687] - Moving cluster config parsing to build time 2021-11-01 10:26:48 -03:00
Dominik Guhr
5628370099 KEYCLOAK-19307 provide hints in CLI 2021-10-27 15:05:04 -03:00
Dominik Guhr
02355403e9 KEYCLOAK-19582 Quarkus update to 2.4.0.CR1 2021-10-19 15:24:38 -03:00
Pedro Igor
b4c837f148 [KEYCLOAK-19564] - Avoid split packages in Dist.X 2021-10-18 14:38:24 -03:00
Dominik Guhr
c45a6fde12
KEYCLOAK-19547 Switch arquillian quarkus container to use autobuild to prevent timeo… (#8576) 
* KEYCLOAK-19547 Switch arquillian quarkus container to use autobuild to prevent timeouts when reaugmentation is longer than 10s

Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2021-10-18 08:53:12 -03:00
Pedro Igor
82e4f9a314 [KEYCLOAK-19459] - Supporting options with spaces 2021-10-14 17:08:06 -03:00
Pedro Igor
fa1544a25e [KEYCLOAK-19309] - Minor fixes and improvements 2021-10-14 07:40:44 -03:00
Pedro Igor
cdfe29d1e3 [KEYCLOAK-19309] - Initial support for auto-complete 2021-10-13 14:53:18 -03:00
Dominik
8f3940032e KEYCLOAK-19461 Add dependency for openshift restclient to quarkus dist to make the OpenShiftClientStorageTest work. 2021-10-13 14:52:19 -03:00
Dominik
395cd792ff KEYCLOAK-19521 Fix resourcetag after restart in Keycloak.X 2021-10-11 14:19:46 -03:00
Pedro Igor
26a2bbac60 [KEYCLOAK-19309] - Refactoring code to make easier to support additional commands 2021-10-08 11:10:28 -03:00
Martin Kanis
30b3caee9f KEYCLOAK-18445 Add support for cross-site model tests 2021-10-06 14:37:06 +02:00
Dominik
24a6b77fb4 KEYCLOAK-19425 Allow comma separated args-list in CLI 2021-10-04 15:32:58 -03:00
Pedro Igor
4e6e125ede [KEYCLOAK-19426] - Support for auto-build when starting the server 2021-10-04 10:33:14 -03:00
Pedro Igor
0210acadad [KEYCLOAK-19424] - Rename the config command to build 2021-10-01 08:39:50 +02:00
stianst
f471a110cd KEYCLOAK-19408 Better client secrets 2021-09-29 18:19:43 +02:00
Pedro Igor
36706c7bd1 [KEYCLOAK-19306] - Automatic re-augmentation 2021-09-29 09:12:14 -03:00
Pedro Igor
6e8cd3262d [KEYCLOAK-19380] - Import not running once schema is inited and requiring full server setup 2021-09-27 11:46:51 -03:00
Pedro Igor
10e425315f [KEYCLOAK-19274] - Avoid loading queries from properties at runtime for Dist.X 2021-09-24 09:26:43 +02:00
Thomas Darimont
6b9e25e42d KEYCLOAK-19292 Add missing metadata to fix quarkus dev ui rendering 
This allows to open http://localhost:8080/q/dev/ without problems.

Previously opening the /q/dev UI resulted in an Exception being thrown.
```
io.quarkus.qute.TemplateException: Property "description" not found on the base object "java.util.LinkedHashMap" in expression {it.description} in template tags/nonActionableExtension.html on line 21
```
 2021-09-14 15:40:22 -03:00
Dominik
8ffd53e206 KEYCLOAK-18705 add twitter4j dependency to fix twitter social login in quarkus distribution 2021-09-13 08:58:00 -03:00
Pedro Igor
aa018295c4 [KEYCLOAK-17866] - Upgrade to Quarkus v2 2021-09-10 11:21:09 -03:00
rmartinc
47484c1aed KEYCLOAK-18842: deleteExpiredClientSessions very slow on MariaDB 2021-09-10 08:25:33 +02:00
keycloak-bot
262ec3d031 Set version to 16.0.0-SNAPSHOT 2021-07-30 14:56:10 +02:00
vramik
333f77a039 KEYCLOAK-18518 Add expiration lifespan configuration to every distributed and replicated cache 2021-07-09 13:25:56 +02:00
keycloak-bot
13f7831a77 Set version to 15.0.0-SNAPSHOT 2021-06-18 10:42:27 +02:00
Pedro Igor
7d64637438 [KEYCLOAK-18117] - Unhandled exceptions not releasing worker thread 2021-06-10 10:58:07 +02:00
Yoshiyuki Tabata
ead667aaac KEYCLOAK-18378 cannot configure Agroal ExceptionSorter correctly 2021-06-09 08:55:40 -03:00
mposolda
2817cb4a19 KEYCLOAK-17683 Use dedicated tmp directory even in unit tests 2021-05-24 10:07:26 +02:00
Pedro Igor
927c359693
[KEYCLOAK-18086] - cluster-stack setting not working (#8037) 2021-05-14 09:54:01 +02:00
Marek Posolda
a6d4316084
KEYCLOAK-14209 Client policies admin console support. Changing of format of JSON for client policies and profiles. Remove support for default policies (#7969) 
* KEYCLOAK-14209 KEYCLOAK-17988 Client policies admin console support. Changing of format of JSON for client policies and profiles. Refactoring based on feedback and remove builtin policies
 2021-05-12 16:19:55 +02:00
Pedro Igor
1855a5e17c [KEYCLOAK-17923] - No marshaller registered for clustered sessions in Keycloak.X 2021-05-10 16:15:24 -03:00
Tjeu Kayim
0bf347e26d KEYCLOAK-17897 Parse CLI arguments with multiple = 
To support cases like --db-url=jdbc:mariadb://localhost/kc?a=1
Reverts a part of commit 04415d34ea
 2021-05-10 10:12:40 -03:00
Yoshiyuki Tabata
ce4f31a8c3 KEYCLOAK-17801 Help message for DB is incorrect 2021-05-10 08:09:01 -03:00
keycloak-bot
4b44f7d566 Set version to 14.0.0-SNAPSHOT 2021-05-06 14:55:01 +02:00
Pedro Igor
2c09f4d205 [KEYCLOAK-17208] - Upgrade Quarkus 1.13.3.Final 2021-04-29 12:49:32 -03:00
vramik
162043beec KEYCLOAK-17615 Move database initialization from KeycloakApplication to JpaConnectionProviderFactory 2021-04-28 13:43:48 +02:00
Pedro Igor
6d17117f42 Upgrading to Quarkus 1.13.2.Final 2021-04-26 07:58:39 -03:00
Yoshiyuki Tabata
fa6903a1b5 KEYCLOAK-17820 Adding default clustering configuration for Azure and GCP 
to help message
 2021-04-22 09:31:03 -03:00
Hynek Mlnarik
ff4c0e4412 KEYCLOAK-16935 Fix liquibase to work with MySQL 8.0.23+ 2021-04-21 20:20:33 +02:00
Takashi Norimatsu
42dec08f3c
KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation) (#7780) 
* KEYCLOAK-16805 Client Policy : Support New Admin REST API (Implementation)

* support tests using auth-server-quarkus

* Configuration changes for ClientPolicyExecutorProvider

* Change VALUE of table REALM_ATTRIBUTES to NCLOB

* add author tag

* incorporate all review comments

Co-authored-by: mposolda <mposolda@gmail.com>
 2021-04-06 16:31:10 +02:00
Hynek Mlnarik
a36fafe04e KEYCLOAK-17409 Support for amphibian (both component and standalone) provider 2021-03-25 13:28:20 +01:00
Pedro Igor
cbb118c013 [KEYCLOAK-17442] - Upgrade to Quarkus 1.12.2 2021-03-17 13:45:30 -03:00
mposolda
853a6d7327 KEYCLOAK-17000 Adding server tmp directory inside the auth-server home directory 2021-03-17 10:06:48 +01:00
Pedro Igor
ffadbc3ba3 [KEYCLOAK-17173] - Support for script providers in keycloak.x 2021-02-22 10:12:36 -03:00
Pedro Igor
35ecaf07cb [KEYCLOAK-16667] - Can't set key when setting up TLS using PEM files 2021-02-02 11:30:08 -03:00
Pedro Igor
cdf0ead957
[KEYCLOAK-16780] - Allow batching writes to storage when running migration (#7717) 
Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>

Co-authored-by: Hynek Mlnařík <hmlnarik@users.noreply.github.com>
 2021-01-29 09:35:19 -03:00
Michal Hajas
ba8e2fef6b KEYCLOAK-15524 Cleanup user related interfaces 2021-01-18 16:56:10 +01:00
Pedro Igor
ca7c866eb4 [KEYCLOAK-16668] - Error when creating admin user when starting Keycloak.x for the first time 2021-01-05 15:19:52 -03:00
keycloak-bot
75be33ccad Set version to 13.0.0-SNAPSHOT 2020-12-16 17:31:55 +01:00
Jan Lieskovsky
833bf98643 [KEYCLOAK-15692] Upgrade to Wildfly "21.0.1.Final" 
Base fixes:
* [KEYCLOAK-15780]      Upgrade Keycloak to Wildfly 21.0.0.Beta1 / Wildfly Core 13.0.0.Beta6
* [KEYCLOAK-16031]      Upgrade Keycloak to Wildfly 21.0.0.Final / Wildfly Core 13.0.1.Final
* [KEYCLOAK-16442]      Upgrade Keycloak to Wildfly 21.0.1.Final / Wildfly Core 13.0.3.Final

Other (dependent) fixes:
* [KEYCLOAK-15408]      Deprecate former Wildfly and Wildfly Core versions in Arquillian's
                        testsuite pom.xml file as part of the upgrade script
* [KEYCLOAK-15442]      Update the version of 'jboss-parent' as part of the Wildfly upgrade
                        script if necessary
* [KEYCLOAK-15474]      Add --verbose and --force options to the Wildfly upgrade automated script
* [KEYCLOAK-15649]      Update "urn:jboss:domain:infinispan:10.0" version as part of the Wildfly
                        upgrade automated script
* [KEYCLOAK-15652]      Wildfly upgrade automated script - Align Python artifact version
                        comparsion algorithm with the Maven / Java one

Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>
 2020-11-26 09:25:29 +01:00