Commit graph

615 commits

Author SHA1 Message Date
github-actions[bot]
c11d93d936 Set version to 26.1.3
Some checks failed
Keycloak CI / Forms IT (push) Has been cancelled
Keycloak CI / WebAuthn IT (push) Has been cancelled
Keycloak CI / SSSD (push) Has been cancelled
Keycloak CI / Migration Tests (push) Has been cancelled
Keycloak CI / Test Framework (push) Has been cancelled
Keycloak CI / Base IT (new) (push) Has been cancelled
Keycloak CI / Status Check - Keycloak CI (push) Has been cancelled
CodeQL / CodeQL Java (push) Has been cancelled
CodeQL / CodeQL JavaScript (push) Has been cancelled
CodeQL / CodeQL TypeScript (push) Has been cancelled
CodeQL / Status Check - CodeQL (push) Has been cancelled
Keycloak Documentation / Build (push) Has been cancelled
Keycloak Documentation / External links check (push) Has been cancelled
Keycloak Documentation / Status Check - Keycloak Documentation (push) Has been cancelled
Keycloak Guides / Build (push) Has been cancelled
Keycloak Guides / Status Check - Keycloak Guides (push) Has been cancelled
Keycloak JavaScript CI / Build Keycloak (push) Has been cancelled
Keycloak JavaScript CI / Admin Client (push) Has been cancelled
Keycloak JavaScript CI / UI Shared (push) Has been cancelled
Keycloak JavaScript CI / Account UI (push) Has been cancelled
Keycloak JavaScript CI / Admin UI (push) Has been cancelled
Keycloak JavaScript CI / Account UI E2E (push) Has been cancelled
Keycloak JavaScript CI / Generate Test Seed (push) Has been cancelled
Keycloak JavaScript CI / Admin UI E2E (push) Has been cancelled
Keycloak JavaScript CI / Status Check - Keycloak JavaScript CI (push) Has been cancelled
Keycloak Operator CI / Build distribution (push) Has been cancelled
Keycloak Operator CI / Test local (push) Has been cancelled
Keycloak Operator CI / Test remote (push) Has been cancelled
Keycloak Operator CI / Test OLM installation (push) Has been cancelled
Keycloak Operator CI / Status Check - Keycloak Operator CI (push) Has been cancelled
2025-02-28 09:50:59 +00:00
Steven Hawkins
d7ae8d48c2
fix: allow ignored artifacts to find the default (#37498) (#37639)
closes: #37128

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 5e61b03b8e38b20f382fde4ad056f8f472e8df76)
2025-02-25 16:48:17 +00:00
Martin Bartoš
d183a1ca93
Properties mapped in our property mappers are overriden (#37390)
* Properties mapped in our property mappers are overriden

Fixes #36927

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Properly reset Configuration

Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-02-17 22:13:00 +01:00
Martin Bartoš
31c8b02ebe
Invalid migration export for empty database
Fixes #32535

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-11 13:24:06 +01:00
Alexander Schwartz
ff79675a83
Ensure a sufficient virtual threads pool
Closes #37162

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-10 17:32:25 +01:00
Martin Bartoš
d7d2a76676
Unable to set '--log-syslog-max-length' property (#36252)
Fixes #35386

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-01-08 15:41:46 +01:00
Steven Hawkins
3db9689010
fix: resetting failingSince on datasourceHealthCheck == UP (#35905)
closes: #35904

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-08 14:21:40 +01:00
Michal Hajas
3839f8e3b5
Add metric for password validations (#36049)
Closes #36048
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-01-07 10:05:47 +01:00
Michal Hajas
f41ce7177c Add default max-count for cache-local.xml file
Closes #36117

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-12-29 13:52:08 +01:00
Manuel Schallar
7e08b095a3
Use optional realm attribute for request param max size/number (#25007)
closes #25006 

Enable fail-fast toggle for additional request parameter parsing
Enable configuration of an overall size of additional request parameters

Everything is backwardscompatible. No configuration necessary when upgrading.

Signed-off-by: Manuel Schallar <manuel.schallar@prime-sign.com>
Co-authored-by: Manuel Schallar <manuel.schallar@prime-sign.com>
2024-12-16 14:03:12 +01:00
Steven Hawkins
cb1d28d043
fix: deprecating the default db value in production mode (#35674)
closes: #23805



Fix typo in docs, some improvements



adding a negative assertion



Update docs/documentation/upgrading/topics/changes/changes-26_1_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-12-13 11:59:55 +01:00
Alexander Schwartz
c8078fa2af
Optimize meter generation
Closes #35834

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2024-12-12 18:00:41 +01:00
Martin Bartoš
8f2c825835
Enable opentelemetry feature by default (#35756)
Closes #35753

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-11 16:53:14 +00:00
Václav Muzikář
9993e17346
Ability to specify log category levels through separate options (#35138)
Closes #34957

Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-12-11 17:27:44 +01:00
Alexander Schwartz
a429f94863
Adding the available event types to the CLI and the docs (#35593)
Closes #35573

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-12-11 13:25:44 +01:00
Pedro Igor
45a6b5c657 Setting protocol when initializing the LDAP provider
Closes #35758

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-12-11 10:21:11 +01:00
Niko Köbler
2639f3ee43
set default ldap connection pooling to plain and ssl (#35763)
* set default ldap connection pooling to plain and ssl

closes #35758
2024-12-10 12:05:14 -03:00
Martin Bartoš
d7aa0042fd
Apache HTTP client OpenTelemetry instrumentation
Closes #32094

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-12-06 11:43:36 +01:00
Steven Hawkins
37dc2b6ca3
correcting handling of \ in configuration values on windows (#34462)
closes: #34041

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
2024-12-04 17:15:05 +01:00
Steven Hawkins
806e140f45
fix: ensuring quarkus-embedded does does not use system.exit (#35574)
closes: #35550

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-12-04 12:08:16 +01:00
Stefan Guilhen
3c33a7180e
Add initial IPA-Tuura federation (#35467)
* Add initial federation ipatuura plugin

Closes #35325

Signed-off-by: Justin Stephenson <jstephen@redhat.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
2024-12-02 14:59:21 -03:00
Alexander Schwartz
909db9e65e
Add a span per rest resource, thereby showing subresources (#35420)
* Add a span per rest resource, thereby showing subresources

Closes #35419

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-11-29 10:09:34 +01:00
Jon Koops
7f0983a48c
Move themes PNPM build into js directory (#35413)
Closes #35411

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-11-29 08:37:26 +01:00
Martin Bartoš
10657d7396 OTelTracingProvider should be request-scoped
Fixes #35427

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-11-28 17:47:19 +01:00
Martin Bartoš
959ce9c483 Provide Tracing SPI
Closes #34711

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2024-11-28 10:45:31 +01:00
Steven Hawkins
0eb0281bf2
fix: returning addresses instead of hosts on the ClientConnection (#35247)
also consolidates checks of whether a host or address is local

closes: #35216
closes: #34671

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-22 20:57:20 +01:00
Steven Hawkins
198214310e
fix: ensures that properties are runtime properties are filtered (#35246)
closes: #CVE-2024-10451

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-22 20:53:47 +01:00
Steven Hawkins
245498c0cb
fix: using stable ordering for deprecated metadata (#34999)
closes: #34858

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-21 12:47:13 +01:00
kaustubh-rh
c8f43ec216
Fix for Log handler specific log levels support only lower-case levels (#34865)
* fix for #34817

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Fixes #34817

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Added validator to LOG_CONSOLE_LEVEL and LOG_FILE_LEVEL

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Added validateLogParameters

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Added tests

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Added tests

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* Fixed logging messaging

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>

* switching to a declarative case-insensitivity

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* refining suggested message changes

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Kaustubh Bawankar <kbawanka@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-11-19 09:39:03 +01:00
Steven Hawkins
799ee85b7f
fix: refining the usage of distribution tests (#34272)
* fix: refining distribution tests

allows for the capturing of dry run build values for subsequent commands

closes: #34058

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* converting a few more tests to dry run and several other cleanups

also splitting the stdout and stderr collection for docker

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-15 10:28:45 -05:00
Pedro Ruivo
837fbf85f4
Upgrade to ISPN 15.0.11.Final
Closes #34931

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-11-15 12:38:50 +00:00
Pedro Ruivo
d7e5319f70
Document network ports for Keycloak clustering
Also switch the default to jdbc-ping as this  should be a drop-in replacement looking at the networking behavior of udp.

Closes #34658

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-11-11 13:28:15 +01:00
Alexander Schwartz
b86c3c6898
Avoid a build warning about missing Infinispan annotations (#34786) 2024-11-11 10:59:13 +01:00
Pedro Ruivo
0bbe568d4f
Make cache-remote-host enabled when needed
Closes #34536

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-11-11 08:22:21 +01:00
Steven Hawkins
4e49246286
fix: addresses consistency issues with property mapping (#34250)
localized, and standardized, expression expansion
replaced context.proceed for kc and quarkus properties - where possible

closes: #33741

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-07 09:03:21 -05:00
Pedro Ruivo
36defd5f33 cache-embedded-mtls-enabled is ignored
Fixes #34644

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-11-05 18:57:22 +01:00
Steven Hawkins
927f110aef
fix: consolidating logic dealing with persisted property handling (#34260)
closes: #34258

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-05 16:42:56 +01:00
Steven Hawkins
e8543e77d2
fix: ensure that kc.config.args is omitted from show-config (#34461)
closes: #34460

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-11-04 16:06:38 +01:00
Bernd Bohmann
7681687e0a
Provide missing user event metrics from aerogear/keycloak-metrics-spi to a keycloak micrometer event listener
inspired by
https://github.com/aerogear/keycloak-metrics-spi
https://github.com/please-openit/keycloak-native-metrics

Closes #33043

Signed-off-by: Bernd Bohmann <bommel@apache.org>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2024-11-04 08:56:24 +01:00
Ryan Emerson
ba51140a25 Asynchronously create EmbeddedCacheManager when JDBC_PING2 not required
Closes #34313

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2024-10-31 12:55:15 +01:00
Ryan Emerson
a79b67cac8 Deprecate other transport stacks (ec2, azure, google)
Closes #34253

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2024-10-31 11:47:13 +01:00
Pedro Ruivo
0d9d2908f1
Username and password should be optional for multi-site deployment (#34511)
Fixes #34508

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-10-31 10:47:41 +01:00
Ryan Emerson
6eb870fcfc
Add JDBC_PING2 stacks for both TCP and UDP
Closes #34265

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-25 00:17:44 +02:00
Steven Hawkins
f06d76a5aa
fix: adding more information about http-enabled (#33795)
closes: #33605

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-23 17:34:34 +02:00
Steven Hawkins
b2ccde29bb
fix: persist build time spi options (#34157)
closes: #33902

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-23 16:51:11 +02:00
Steven Hawkins
358d234538
fix: corrects cli arg stringification (#34156)
closes: #34155

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-23 14:27:36 +02:00
Ryan Emerson
902abfdae4
JDBC_PING as default discovery protocol
Closes #29399

- Add ProviderFactory#dependsOn to allow dependencies between
  ProviderFactories to be explicitly defined
- Disable Infinispan default shutdownhook disabled to ensure lifecycle
  is managed exclusively by Keycloak
- Remove Infinispan shutdown hook in KeycloakRecorder and manage
  EmbeddedCacheManager lifecycle only in DefaultInfinispanConnectionProviderFactory#close

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-22 20:19:19 +00:00
Steven Hawkins
af1a5ea2a8
fix: refining https file type detection (#33703)
also making common trustore logic align

closes: #33649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-22 13:05:56 -04:00
Steven Hawkins
307041c021
fix: encapsulating where static import/export state is set/used (#33690)
closes: #33596

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-22 16:03:39 +02:00
Steven Hawkins
1d38fa88cd
fix: remove erroneous spi warnings (#33648)
closes: #34057

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-10-21 18:15:33 +02:00