dataware/datawareauthic
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
27243 commits 3 branches 0 tags 495 MiB
Commit graph

279 commits

Author SHA1 Message Date
github-actions[bot]
c11d93d936 Set version to 26.1.3
Some checks failed
Keycloak CI / Forms IT (push) Has been cancelled
Details
Keycloak CI / WebAuthn IT (push) Has been cancelled
Details
Keycloak CI / SSSD (push) Has been cancelled
Details
Keycloak CI / Migration Tests (push) Has been cancelled
Details
Keycloak CI / Test Framework (push) Has been cancelled
Details
Keycloak CI / Base IT (new) (push) Has been cancelled
Details
Keycloak CI / Status Check - Keycloak CI (push) Has been cancelled
Details
CodeQL / CodeQL Java (push) Has been cancelled
Details
CodeQL / CodeQL JavaScript (push) Has been cancelled
Details
CodeQL / CodeQL TypeScript (push) Has been cancelled
Details
CodeQL / Status Check - CodeQL (push) Has been cancelled
Details
Keycloak Documentation / Build (push) Has been cancelled
Details
Keycloak Documentation / External links check (push) Has been cancelled
Details
Keycloak Documentation / Status Check - Keycloak Documentation (push) Has been cancelled
Details
Keycloak Guides / Build (push) Has been cancelled
Details
Keycloak Guides / Status Check - Keycloak Guides (push) Has been cancelled
Details
Keycloak JavaScript CI / Build Keycloak (push) Has been cancelled
Details
Keycloak JavaScript CI / Admin Client (push) Has been cancelled
Details
Keycloak JavaScript CI / UI Shared (push) Has been cancelled
Details
Keycloak JavaScript CI / Account UI (push) Has been cancelled
Details
Keycloak JavaScript CI / Admin UI (push) Has been cancelled
Details
Keycloak JavaScript CI / Account UI E2E (push) Has been cancelled
Details
Keycloak JavaScript CI / Generate Test Seed (push) Has been cancelled
Details
Keycloak JavaScript CI / Admin UI E2E (push) Has been cancelled
Details
Keycloak JavaScript CI / Status Check - Keycloak JavaScript CI (push) Has been cancelled
Details
Keycloak Operator CI / Build distribution (push) Has been cancelled
Details
Keycloak Operator CI / Test local (push) Has been cancelled
Details
Keycloak Operator CI / Test remote (push) Has been cancelled
Details
Keycloak Operator CI / Test OLM installation (push) Has been cancelled
Details
Keycloak Operator CI / Status Check - Keycloak Operator CI (push) Has been cancelled
Details
2025-02-28 09:50:59 +00:00
Pedro Ruivo
bcdfe0ba04
Upgrade Infinispan to 15.0.12.Final 
Closes #36686

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-02-10 18:48:08 +01:00
Alexander Schwartz
a447cbfebc Also cache client roles if looked up by name and not found 
Closes #36919

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-06 08:41:57 -03:00
Alexander Schwartz
eee2805cef Cache empty results for role-by-name lookup 
Closes #36919

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-06 08:41:57 -03:00
Stian Thorgersen
c1c147cb17
Restrict access to environment variables when at the server runtime (#36472) 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-15 09:36:19 +01:00
Stefan Guilhen
6f5077ddcb Increase thread sleep time when testing two different locks 
Closes #35448

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-12-04 15:20:28 -03:00
Pedro Ruivo
86c475b9fc Invoking BaseUpdater.markDeleted() more than once cause the transient status to be lost 
Fixes #35570

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-12-03 18:06:07 +01:00
Pedro Ruivo
ff939d6b28 Test AuthenticationSession optimization 
Closes #35513

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-12-02 18:41:05 +01:00
Stefan Guilhen
9861acc2aa UserSessionProvider.removeUserSessions now removes all user sessions (both regular and offline) 
Closes #31359

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-11-29 12:35:15 -03:00
Pedro Ruivo
9bd0cdc00f Flaky test: AuthenticationSessionTest 
Enable transactions to handle conflicts.

Unrelated changes:
* Disable IP multicast (not available in MacOS by default)
* Bind JGroups to 127.0.0.1
* Remove FD_SOCK2 (single JVM tests do not require failure detection)

Closes #35087
Closes #35015

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-11-28 12:39:06 +01:00
Martin Bartoš
959ce9c483 Provide Tracing SPI 
Closes #34711

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2024-11-28 10:45:31 +01:00
Pedro Ruivo
e143b022e5 Flaky test: AuthenticationSessionTest 
Workaround for flaky test AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval

Closes #35015

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-11-25 13:49:08 +01:00
Giuseppe Graziano
05adf19848
Authentication session with changelog transaction 
Closes #23881
Closes #32658

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2024-11-15 14:10:15 +01:00
Alexander Schwartz
8be4237fd4
Fix failing test AdminEventQueryTest by adding required session parameter (#34612) 
Closes #34611

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-04 12:28:59 +01:00
Pedro Ruivo
f507caae6c Deleting a user leads to ISPN marshalling exception 
Fixes #34224

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-10-23 11:53:25 +02:00
Michal Hajas
d9c567a5e4 Run model tests with clusterless feature enabled 
Closes #33058
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-09-24 14:06:52 +02:00
Michal Hajas
d065be362a
Fix flaky UserSessionPersisterProviderTest 
Closes #32892

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-09-20 13:24:34 +02:00
Vlasta Ramik
4ce40be1af
Make the ORGANIZATION a default feature (#32404) 
Closes #32395

Signed-off-by: vramik <vramik@redhat.com>
 2024-09-18 12:19:28 +02:00
Pedro Ruivo
f67bec0417 Rename remote-cache Feature 
Renamed to "clusterless"

Closes #32596

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-09-13 13:03:13 +02:00
Pedro Ruivo
ba861fc5d7 Remove version() projection from Ickle Queries 
Closes #32590

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-09-03 18:07:32 +02:00
Stefan Guilhen
88cca10472 Rename IDPSpi to IdentityProviderStorageSpi 
Closes #31639

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-08-26 15:10:09 -03:00
Michal Hajas
f5b2775939 Enable persistent sessions by default 
Run CI with the feature disabled to test also the old settings
Closes #32265

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-08-21 17:37:54 +02:00
Stefan Guilhen
aeb1951aba Replace calls to deprecated RealmModel IDP methods 
- use the new provider instead

Closes #31254

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-08-15 10:55:36 -03:00
Pedro Ruivo
e13c9bf462 Retry remote cache operations with back off 
Implement a retry mechanism for remote cache writes.

Fixes #32030

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-08-13 15:55:59 +02:00
Pedro Ruivo
07c92c85cb Drop AuthenticatedClientSessionStore from user sessions 
New entities for client and user sessions, more query friendly.
The client sessions are found using query instead of storing them in the
user session entity.
Remove of sessions by its field is done based on queries.

Closes #30934

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-08-12 20:35:50 +02:00
Martin Kanis
e750b44e9d Flaky test: org.keycloak.testsuite.model.DBLockTest#testTwoLocksCurrently 
Closes #25794

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-08-07 09:00:37 -03:00
Michal Hajas
50c07c6e7c
Simplify configuration for MULTI_SITE 
Closes #31807

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-08-06 16:14:33 +00:00
Pedro Ruivo
3fbe26d2e1 Disable SessionTimeoutsTest for old cross-site code 
The test is disabled for the embedded caches + remote store combination
(old cross-site code) due to the async event processing.

Events can be handled after the test changes the time offset, causing
the test to fail.

Fixes #31612

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-08-06 15:33:44 +02:00
Pedro Ruivo
fed804160b Enable ProtoStream encoding for External Infinispan feature 
The ProtoStream schema is automatically uploaded to the Infinispan
server during startup.
When the schema is updated, the indexes are updated and re-created.
Use the delete statement to delete entities when a realm is removed.

Fixes #30931

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-08-01 16:16:19 +02:00
Ryan Emerson
176ac3404a EmbeddedInfinispanSplitBrainTest fails with "IllegalState Session not bound to a realm" 
Closes #31828

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-08-01 13:58:41 +02:00
Ryan Emerson
8d7e18ec29 Clear local caches on split-brain heal 
Closes #25837

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-07-31 13:59:06 +02:00
Pedro Ruivo
17e30e9ec1 Persist revoke tokens with remote cache feature 
Stores the revoked tokens into the database and preloads them during
startup.

Fixes #31760

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-07-31 11:02:38 +02:00
Pedro Ruivo
e62604b1ec ConditionalRemover interface for External Infinispan feature 
Add a ConditionalRemover interface to remove entries from a RemoteCache
based on the key or value fields.
The default implementation provided by this PR uses streaming/iteration
to test and remove entries

On a side change, moved all the transactions to the same package and
created one transaction class per entity/cache to simplify code and
avoid writing "RemoteChangeLogTransaction" with a long list of types.

Fixes #31046

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-07-30 15:16:17 +02:00
Stefan Guilhen
17c01c9380 Enable new IDP Storage SPI in JPA model tests 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-29 16:02:26 +02:00
Pedro Igor
87c279d645 Respect the username value format when processing federated users 
Closes #31240

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-29 09:28:43 +02:00
Stefan Guilhen
c9f5a0aa32 Testsuite: ensure realm is set in session context 
Closes #31636

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-07-26 11:11:44 -03:00
Alexander Schwartz
227c71f7f0
Persisting revoked access tokens 
Closes #31296

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-07-26 11:46:14 +02:00
Jon Koops
df18629ffe
Use a default Java version from root POM (#29927) 
Signed-off-by: Jon Koops <jonkoops@gmail.com>
 2024-06-21 14:19:31 +02:00
Pedro Ruivo
5fc12480fd External Infinispan as cache - Part 4 (#30072) 
UserSessionProvider implementation to make use of Infinispan remote
cache.

Closes #28755

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-06-19 14:47:57 +02:00
Pedro Ruivo
9006218559 External Infinispan as cache - Part 3 
Implementation of UserLoginFailureProvider using remote caches only.

Closes #28754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-06-19 14:47:57 +02:00
Pedro Ruivo
833aad661e External Infinispan as cache - Part 2 
Includes a new implementation for the providers:

* StickySessionEncoderProviderFactory
* LoadBalancerCheckProviderFactory
* SingleUseObjectProviderFactory

Closes #28648

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-06-19 14:47:57 +02:00
Pedro Ruivo
d2ae27a1e2 External Infinispan as cache - Part 1 
Part 1 includes

* New experimental feature to enable the new code
* New providers using RemoteCache only
* New test profile to run the tests with the experimental feature

New providers' implementation for:
* InfinispanConnectionProvider
* AuthenticationSessionProvider
* ClusterProvider

Closes #28140

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-06-19 14:47:57 +02:00
Pedro Ruivo
18a6c79011
Infinispan Protostream Marshaller (#29474) 
Closes #29394

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-06-13 18:02:46 +02:00
Alexander Schwartz
792a3457ff
Use Maven wrapper instead of platform dependent Maven version (#29988) 
Closes #29987

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-06-03 15:45:39 +02:00
Alexander Schwartz
f6f3b385c5 Improve the cleanup after a failed test to ensure retries work 
Closes #30018

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-06-03 08:59:03 +02:00
Alexander Schwartz
46f0da43da Instead of the test blocking for an unknown reason, specify a timeout 
Closes #29528

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-28 21:06:49 +02:00
Alexander Schwartz
80de3a0a71
Allow migration of non-persistent sessions to persistent sessions 
Closes #29375

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-22 10:30:46 +02:00
Pedro Ruivo
cbce548e71 Infinispan 15.0.3.Final 
Closes #29068

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-05-08 17:18:39 +02:00
Michal Hajas
128bba34d3 Remove PERSISTENT_USER_SESSIONS_No_CACHE feature 
Closes #29264

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-05-06 08:53:39 +02:00
Michal Hajas
8b715d3a31 Do not use LastSessionRefreshPersister with persistent user sessions enabled 
Closes #29144

Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-05-06 08:49:48 +02:00