8000 SCIM: PATCH on a group does not update meta.lastModified by martin-kanis · Pull Request #54990 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

SCIM: PATCH on a group does not update meta.lastModified - #54990

Merged
pedroigor merged 1 commit into
keycloak:mainfrom
martin-kanis:issue-54565
Nov 12, 2026
Merged

pedroigor merged 1 commit into
keycloak:mainfrom
martin-kanis:issue-54565

Conversation

@martin-kanis
Copy link
Copy Markdown
Member

Closes #54565

@martin-kanis
martin-kanis requested a review from a team as a code owner November 10, 2026 13:47
Copilot AI balanced review requested due to automatic review settings November 10, 2026 13:48
Copilot AI left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are recorded for the SCIM PATCH update-hook change.

No open issues 🎉

What changed in this PR

Fixes #54565 by invoking the update hook after SCIM PATCH operations, allowing group changes to advance meta.lastModified and appear in timestamp-based queries.

Changes:

  • Calls onUpdate after applying patches in the shared resource provider.
  • Adds a regression test for group membership PATCH, verifying that lastModified advances, created stays unchanged, and timestamp filtering returns the group.
File Description
scim/​tests/​base/​src/​test/​java/​org/​keycloak/​tests/​scim/​tck/​GroupTest.java Adds timestamp and filtering regression coverage using a controlled time offset.
scim/​core/​src/​main/​java/​org/​keycloak/​scim/​resource/​spi/​AbstractScimResourceTypeProvider.java Invokes the update hook after PATCH operations.

Review effort: Balanced

@keycloak-github-bot keycloak-github-bot Bot left a comment
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@keycloak-github-bot
Copy link
Copy Markdown

Unreported flaky test detected

If the flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.adapter.servlet.SAMLServletAdapterTest#testPostBadAssertionSignature

Keycloak CI - Adapter IT

org.openqa.selenium.JavascriptException: 
TypeError: can't access property "outerHTML", document.documentElement is null
Build info: version: '4.46.0', revision: 'df5a634 df5a6341cbb5f8f06b836bd595752775627c80dc'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '7.0.0-1019-azure', java.version: '21.0.13'
Driver info: org.openqa.selenium.firefox.FirefoxDriver
...

Report flaky test

@keycloak-github-bot keycloak-github-bot Bot left a comment
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@keycloak-github-bot
Copy link
Copy Markdown

Unreported flaky test detected

If the flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.adapter.servlet.SAMLServletAdapterTest#testPostBadAssertionSignature

Keycloak CI - Adapter IT

org.openqa.selenium.JavascriptException: 
TypeError: can't access property "outerHTML", document.documentElement is null
Build info: version: '4.46.0', revision: 'df5a634 df5a6341cbb5f8f06b836bd595752775627c80dc'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '7.0.0-1019-azure', java.version: '21.0.13'
Driver info: org.openqa.selenium.firefox.FirefoxDriver
...

Report flaky test

Copilot AI balanced review requested due to automatic review settings November 11, 2026 15:11
@pedroigor
pedroigor enabled auto-merge (rebase) November 11, 2026 15:12
Copilot AI left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues were identified for the SCIM PATCH timestamp update change.

No open issues 🎉

Review effort: Balanced

Closes keycloak#54565

Signed-off-by: Martin Kanis <mkanis@ibm.com>
Copilot AI balanced review requested due to automatic review settings November 12, 2026 10:43 7438
auto-merge was automatically disabled November 12, 2026 10:43

Head branch was pushed to by a user without write access

Copilot AI left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues were identified for the SCIM PATCH timestamp update.

No open issues 🎉

Review effort: Balanced

@pedroigor
pedroigor enabled auto-merge (rebase) November 12, 2026 11:04
@pedroigor
pedroigor merged commit 7565ff4 into keycloak:main Nov 12, 2026
96 of 165 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SCIM: PATCH on a group does not update meta.lastModified

3 participants

0