8000 Add old LinkedIn provider to the deprecated profile · keycloak/keycloak@7da52a4 · GitHub < 8000 meta name="octolytics-dimension-repository_is_fork" content="false" />
[go: up one dir, main page]
Skip to content

Commit 7da52a4

Browse files
rmartincmposolda
rmartinc
authored and
mposolda
committed
Add old LinkedIn provider to the deprecated profile
Closes #23067
1 parent 506e253 commit 7da52a4

20 files changed

Lines changed: 120 additions & 83 deletions

‎common/src/main/java/org/keycloak/common/Profile.java‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,9 @@ public enum Feature {
9090

9191
FIPS("FIPS 140-2 mode", Type.DISABLED_BY_DEFAULT),
9292

93-
DPOP("OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer", Type.PREVIEW);
93+
DPOP("OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer", Type.PREVIEW),
94+
95+
LINKEDIN_OAUTH("LinkedIn Social Identity Provider based on OAuth", Type.DEPRECATED);
9496

9597
private final Type type;
9698
private String label;

‎common/src/test/java/org/keycloak/common/ProfileTest.java‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,8 @@ public void checkDefaults() {
8383
Profile.Feature.MAP_STORAGE,
8484
Profile.Feature.DECLARATIVE_USER_PROFILE,
8585
Profile.Feature.CLIENT_SECRET_ROTATION,
86-
Profile.Feature.UPDATE_EMAIL
86+
Profile.Feature.UPDATE_EMAIL,
87+
Profile.Feature.LINKEDIN_OAUTH
8788
));
8889

8990
// KERBEROS can be disabled (i.e. FIPS mode disables SunJGSS provider)

‎docs/documentation/upgrading/topics/keycloak/changes-22_0_2.adoc‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,4 +6,8 @@ The option `Never expires` is now removed from all the combos of the Advanced Se
66

77
A new social identity provider called *LinkedIn OpenID Connect* has been introduced for the business and employment-focused platform. LinkedIn released recently a new product for developers called link:https://learn.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/sign-in-with-linkedin-v2[Sign In with LinkedIn using OpenID Connect]. The product provides a new way to authenticate members using OpenID Connect, but the default *OpenID Connect v1.0* identity provider does not work with it at present time. For that reason, {project_name} adds this new identity provider as the specific social provider for the new product.
88

9-
The old LinkedIn way based on OAuth seems to be completely removed from the link:https://developer.linkedin.com[developer portal]. How the existing LinkedIn social provider is working with current applications is not clear. {project_name} maintains the old provider but deprecated, and it will be removed in future versions. Its name was changed to *LinkedIn (deprecated)* to avoid misunderstandings.
9+
The old LinkedIn way based on OAuth seems to be completely removed from the link:https://developer.linkedin.com[developer portal]. How the existing LinkedIn social provider is working with current applications is not clear. {project_name} maintains the old provider renamed to *LinkedIn (deprecated)*, but in a deprecated feature called *linkedin-oauth* which is disabled by default. It will be removed in future versions. Please enable it again at startup if needed:
10+
11+
```
12+
kc.[sh|bat] start --features linkedin-oauth ...
13+
```

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.unix.approved.txt‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,17 @@ Feature:
4848
account2, account3, admin-api, admin-fine-grained-authz, admin2,
4949
authorization, ciba, client-policies, client-secret-rotation,
5050
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
51-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
52-
step-up-authentication, token-exchange, update-email, web-authn.
51+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
52+
recovery-codes, scripts, step-up-authentication, token-exchange,
53+
update-email, web-authn.
5354
--features-disabled <feature>
5455
Disables a set of one or more features. Possible values are: account-api,
5556
account2, account3, admin-api, admin-fine-grained-authz, admin2,
5657
authorization, ciba, client-policies, client-secret-rotation,
5758
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
58-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
59-
step-up-authentication, token-exchange, update-email, web-authn.
59+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
60+
recovery-codes, scripts, step-up-authentication, token-exchange,
61+
update-email, web-authn.
6062

6163
HTTP/TLS:
6264

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.windows.approved.txt‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,17 @@ Feature:
4848
account2, account3, admin-api, admin-fine-grained-authz, admin2,
4949
authorization, ciba, client-policies, client-secret-rotation,
5050
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
51-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
52-
step-up-authentication, token-exchange, update-email, web-authn.
51+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
52+
recovery-codes, scripts, step-up-authentication, token-exchange,
53+
update-email, web-authn.
5354
--features-disabled <feature>
5455
Disables a set of one or more features. Possible values are: account-api,
5556
account2, account3, admin-api, admin-fine-grained-authz, admin2,
5657
authorization, ciba, client-policies, client-secret-rotation,
5758
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
58-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
59-
step-up-authentication, token-exchange, update-email, web-authn.
59+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
60+
recovery-codes, scripts, step-up-authentication, token-exchange,
61+
update-email, web-authn.
6062

6163
HTTP/TLS:
6264

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelp.unix.approved.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -59,15 +59,17 @@ Feature:
5959
account2, account3, admin-api, admin-fine-grained-authz, admin2,
6060
authorization, ciba, client-policies, client-secret-rotation,
6161
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
62-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
63-
step-up-authentication, token-exchange, update-email, web-authn.
62+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
63+
recovery-codes, scripts, step-up-authentication, token-exchange,
64+
update-email, web-authn.
6465
--features-disabled <feature>
6566
Disables a set of one or more features. Possible values are: account-api,
6667
account2, account3, admin-api, admin-fine-grained-authz, admin2,
6768
authorization, ciba, client-policies, client-secret-rotation,
6869
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
69-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
70-
step-up-authentication, token-exchange, update-email, web-authn.
70+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
71+
recovery-codes, scripts, step-up-authentication, token-exchange,
72+
update-email, web-authn.
7173

7274
Config:
7375

@@ -140,4 +142,4 @@ Export:
140142
--users-per-file <number>
141143
Set the number of users per file. It is used only if 'users' is set to
142144
'different_files'. Increasing this number leads to exponentially increasing
143-
export times. Default: 50.
145+
export times. Default: 50.

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelpAll.unix.approved.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -122,15 +122,17 @@ Feature:
122122
account2, account3, admin-api, admin-fine-grained-authz, admin2,
123123
authorization, ciba, client-policies, client-secret-rotation,
124124
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
125-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
126-
step-up-authentication, token-exchange, update-email, web-authn.
125+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
126+
recovery-codes, scripts, step-up-authentication, token-exchange,
127+
update-email, web-authn.
127128
--features-disabled <feature>
128129
Disables a set of one or more features. Possible values are: account-api,
129130
account2, account3, admin-api, admin-fine-grained-authz, admin2,
130131
authorization, ciba, client-policies, client-secret-rotation,
131132
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
132-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
133-
step-up-authentication, token-exchange, update-email, web-authn.
133+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
134+
recovery-codes, scripts, step-up-authentication, token-exchange,
135+
update-email, web-authn.
134136

135137
Config:
136138

@@ -203,4 +205,4 @@ Export:
203205
--users-per-file <number>
204206
Set the number of users per file. It is used only if 'users' is set to
205207
'different_files'. Increasing this number leads to exponentially increasing
206-
export times. Default: 50.
208+
export times. Default: 50.

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelp.unix.approved.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -59,15 +59,17 @@ Feature:
5959
account2, account3, admin-api, admin-fine-grained-authz, admin2,
6060
authorization, ciba, client-policies, client-secret-rotation,
6161
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
62-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
63-
step-up-authentication, token-exchange, update-email, web-authn.
62+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
63+
recovery-codes, scripts, step-up-authentication, token-exchange,
64+
update-email, web-authn.
6465
--features-disabled <feature>
6566
Disables a set of one or more features. Possible values are: account-api,
6667
account2, account3, admin-api, admin-fine-grained-authz, admin2,
6768
authorization, ciba, client-policies, client-secret-rotation,
6869
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
69-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
70-
step-up-authentication, token-exchange, update-email, web-authn.
70+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
71+
recovery-codes, scripts, step-up-authentication, token-exchange,
72+
update-email, web-authn.
7173

7274
Config:
7375

@@ -134,4 +136,4 @@ Import:
134136
--file <file> Set the path to a file that will be read.
135137
--override <true|false>
136138
Set if existing data should be overwritten. If set to false, data will be
137-
ignored. Default: true.
139+
ignored. Default: true.

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelpAll.unix.approved.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -122,15 +122,17 @@ Feature:
122122
account2, account3, admin-api, admin-fine-grained-authz, admin2,
123123
authorization, ciba, client-policies, client-secret-rotation,
124124
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
125-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
126-
step-up-authentication, token-exchange, update-email, web-authn.
125+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
126+
recovery-codes, scripts, step-up-authentication, token-exchange,
127+
update-email, web-authn.
127128
--features-disabled <feature>
128129
Disables a set of one or more features. Possible values are: account-api,
129130
account2, account3, admin-api, admin-fine-grained-authz, admin2,
130131
authorization, ciba, client-policies, client-secret-rotation,
131132
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
132-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
133-
step-up-authentication, token-exchange, update-email, web-authn.
133+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
134+
recovery-codes, scripts, step-up-authentication, token-exchange,
135+
update-email, web-authn.
134136

135137
Config:
136138

@@ -197,4 +199,4 @@ Import:
197199
--file <file> Set the path to a file that will be read.
198200
--override <true|false>
199201
Set if existing data should be overwritten. If set to false, data will be
200-
ignored. Default: true.
202+
ignored. Default: true.

‎quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.unix.approved.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -75,15 +75,17 @@ Feature:
7575
account2, account3, admin-api, admin-fine-grained-authz, admin2,
7676
authorization, ciba, client-policies, client-secret-rotation,
7777
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
78-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
79-
step-up-authentication, token-exchange, update-email, web-authn.
78+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
79+
recovery-codes, scripts, step-up-authentication, token-exchange,
80+
update-email, web-authn.
8081
--features-disabled <feature>
8182
Disables a set of one or more features. Possible values are: account-api,
8283
account2, account3, admin-api, admin-fine-grained-authz, admin2,
8384
authorization, ciba, client-policies, client-secret-rotation,
8485
declarative-user-profile, docker, dpop, dynamic-scopes, fips, impersonation,
85-
js-adapter, kerberos, map-storage, par, preview, recovery-codes, scripts,
86-
step-up-authentication, token-exchange, update-email, web-authn.
86+
js-adapter, kerberos, linkedin-oauth, map-storage, par, preview,
87+
recovery-codes, scripts, step-up-authentication, token-exchange,
88+
update-email, web-authn.
8789

8890
Hostname:
8991

@@ -252,4 +254,4 @@ Security:
252254
Do NOT start the server using this command when deploying to production.
253255

254256
Use 'kc.sh start-dev --help-all' to list all available options, including build
255-
options.
257+
options.

0 commit comments

Comments
 (0)
0