backport 34814 26.0 by edewit · Pull Request #35791 · keycloak/keycloak

edewit · 2024-12-11T07:01:07Z

Update 26_0_0.adoc
** Commit proto.lock files to release/26.0 branch**
fix: document having multiple operators installed (fix: document having multiple operators installed #33448) (fix: document having multiple operators installed (#33448) #33582)
fix: correcting the container examples wrt hostname (fix: correcting the container examples wrt hostname #33542) (fix: correcting the container examples wrt hostname (#33542) #33584)
Fixing broken links after KC26 docs changes (Fixing broken links after KC26 docs changes #33580)
Fix runaway formatting
skip flaky test (skip flaky test #33555)
fix: ensuring placeholders can be used with --import-realm (fix: ensuring placeholders can be used with --import-realm #33589) (fix: ensuring placeholders can be used with --import-realm (#33589) #33598)
Ensure createRegisterUrl() calls are awaited internally (Ensure createRegisterUrl() calls are awaited internally #33650) (Ensure createRegisterUrl() calls are awaited internally (#33650) #33655)
Fixes RTL on keycloak.v2 login template (Fixes RTL on keycloak.v2 login template #33644) (Fixes RTL on keycloak.v2 login template (#33644) #33676)
Better logging when error happens during transaction commit closes Better logging when error happens during transaction commit #33275
reset error so when doing a new request, error could be gone (reset error on new fetch it could be resolved #32974) (BACKPORT: reset error so when doing a new request, error could be gone (#32974) #33591)
Return next action if the current action is not supported in AIA Closes Can get authorization code on a non verified user with some specific kc_action (AIA) #33513
Allow proto-schema-compatibility-maven-plugin to be skipped with property
Removed hard-coded LTR dir attribute in inputs in configure OTP template
Only show organization section in account UI of enabled
Treat unencrypted local origins as an insecure context in Safari
Fix running Cypress tests on Firefox (Fixed running cypress tests on firefox #33768) (Backport to fix running cypress tests on Firefox #33770)
Only process organization selection when the user is identified
The event should also support user invalidation events
Don't fail on drop index IDX_US_SESS_ID_ON_CL_SESS
Check email with ignorecase when setting basic attributes in IdP Closes Repeated email verifications while logging in through IDP caused by email case sensitivity #31848
Fix incorrect filter in docker protocol Closes [Regression] 26.0.0 return empty "access: []" JWT for Docker-v2 Auth provider, resulting in "access denied" #33776
Bump manusa/actions-setup-minikube from 2.11.0 to 2.13.0 (Bump manusa/actions-setup-minikube from 2.11.0 to 2.13.0 #33801) (Bump manusa/actions-setup-minikube from 2.11.0 to 2.13.0 (#33801) #33829)
Temporarily comment FIPS CI until it is figured what causes the issue closes [Keycloak CI] - FIPS IT - Failed to fetch maven #33875
Run all maven commands inside the ubi docker container Closes Add back FIPS IT builds #33881
Re-add links to policy-enforcer to the authorization services documen…
NPE when Default Role is not present on CachedRealm
Fix NPE on whoami with unknown Realm
Check if deviceRepresentation is set (Check if deviceRepresentation is set #33828)
LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and user already exists
Add check to ensure that no unstaged proto.lock files exist on PRs issued against release/26.x branches (Add check to ensure that no unstaged proto.lock files exist on PRs is… #33592) (Add check to ensure that no unstaged proto.lock files exist on PRs is… #33952)
Avoid iterating over user policies when removing users
Allow Keycloak JS to be initialized without passing options (Allow Keycloak JS to be initialized without passing options #33950) (Allow Keycloak JS to be initialized without passing options (#33950) #33962)
AuroraDB IT - Error creating EC2 runner instance
password is a required field
Auth not possible for auth session where user was enabled in the meantime (Auth not possible for auth session where user was enabled in the mean… #33966)
Fix unstable testPostBrokerLoginFlowWithOTP_bruteForceEnabled test (Fix unstable testPostBrokerLoginFlowWithOTP_bruteForceEnabled test #33969)
Add AuthzClientCryptoProvider to authz-client in keycloak main repository closes Update authz-client in keycloak main repository #33831
fix: removing erroneous warnings
[PERF] OpenTelemetry is initialized even when disabled ([PERF] OpenTelemetry is initialized even when disabled #34032)
Small grammatical error in documentation
Fixing link to external docs
Respect the locale set to a user when redering verify email pages
Do not show domain match message in the identity-first login when no login hint is provided
Fixing action token lifespan information in the invitation email
Clear all entries stored in local storage (Clear all entries stored in local storage #34056) (Clear all entries stored in local storage (#34056) #34088)
Honor baseUrl when generating the client home URL in the Admin Console (Honor baseUrl when generating client home url in admin-ui #34016) (Honor baseUrl when generating the client home URL in the Admin Console (#34016) #34087)
fix: ignore errors caused by webauthn's conditional ui to avoid loop (fix: ignore errors caused by webauthn's conditional ui to avoid loop #34101)
Clear local storage when quota exceeded (Clear local storage when quota exceeded #34109) (Clear local storage when quota exceeded (#34109) #34115)
Only use cookie detection iframe for non-OIDC configurations (Only use cookie detection iframe for non-OIDC configurations #34139) (Only use cookie detection iframe for non-OIDC configurations (#34139) #34144)
fix: adding a server guide on installation location / layout (fix: adding a server guide on installation location / layout #33604) (fix: adding a server guide on installation location / layout (#33604) #34158)
Change order of absolute path and normalize in the theme folder (Change order of absolute path and normalize in the theme folder #34153)
Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP_bruteForceEnabled
Invalidate user session when associated IdP is missing (previously removed)
reset error in error dialog (reset error in error dialog #34203) (BACKPORT: reset error in error dialog (#34203) #34211)
Deleting a user leads to ISPN marshalling exception
Add validation for role and time policies
Fix password validation with uppercase and lowercase minimum requirements (JS password validation doesn't work as intended with uppercase and lowercase minimum requirements #34152) (Fix password validation with uppercase and lowercase minimum requirements (#34152) #34240)
Add explicit getter method for organizations in RealmAdminResource - makes OrganizationsResource reachable to OpenAPI generator
fix: providing a separate session for each file (fix: providing a separate session for each file #34210) (fix: providing a separate session for each file (#34210) #34252)
Fix link to Keycloak JS documentation (Fix link to keycloak-js documentation #33845) (Fix link to Keycloak JS documentation (#33845) #34205)
fix: corrects cli arg stringification (fix: corrects cli arg stringification #34156) (fix: corrects cli arg stringification (#34156) #34254)
fix: persist build time spi options (fix: persist build time spi options #34157) (fix: persist build time spi options (#34157) #34261)
fix: refines the provider caching logic (fix: refines the provider caching logic #34220)
Keycloak-admin-client should work with the future versions of Keycloak server (Keycloak-admin-client should work with the future versions of Keycloa… #34285) (Keycloak-admin-client should work with the future versions of Keycloak server (#34285) #34293)
Fix password validation error messages (Fix password validation error messages #34030) (Fix password validation error messages (#34030) #34294)
Client Scope updates are not replicated between Keycloak nodes
ConcurrentModificationException when restarting user sessions (ConcurrentModificationException when restarting user sessions #34314)
Make organizations chapter available in downstream (Make organizations chapter available in downstream #34384)
add linear strategy to brute force
Ensure searched LDAPObject is properly cached before other methods that trigger user validation run
Check if LDAPObject is available from a previously cached proxied user
Implement pagination for getLDAPRoleMappings (Implement pagination for getLDAPRoleMappings #34043) ([Backport] Implement pagination for getLDAPRoleMappings (#34043) #34409)
fix: upgrading angus mail to 2.0.3 (fix: upgrading angus mail to 2.0.3 #34316) (fix: upgrading angus mail to 2.0.3 (#34316) #34392)
Automatically retrieve configuration for authorization (Automatically retrieve configuration for authorization #34044) (Automatically retrieve configuration for authorization (#34044) #34097)
Add oracle dependency required for IDELauncher
fixed key of policy group help (fixed key of policy group help #34332) (BACKPORT: fixed key of policy group help (#34332) #34478)
added possible override (BACKPORT: added possible override #34479)
more space for the title override PF style (more space for the title override PF style #33746) (BACKPORT: more space for the title override PF style (#33746) #34480)
also call onToggle on open changed (also call onToggle on open changed #33813) (BACKPORT: also call onToggle on open changed (#33813) #34481)
Remove not needed Quarkus dependencies related to Dev UI services (Remove not needed Quarkus dependencies related to Dev UI services #34309) (Remove not needed Quarkus dependencies related to Dev UI services (#34309) #34534)
Ensure hide_on_login has the default value set to 0 on MSSQL
Add validChecksum to jpa-changelog-26.0.0.xml
Remove inaccurate statement about master realm imports (Remove inaccurate statement about master realm imports #34544)
Do not rely on the pwdLastSet attribute when updating AD entries
Fix Quarkus dev mode (Fix Quarkus dev mode #34550)
Add checks to prevent GroupLDAPStorageMapper from performing operations on groups it does not manage
Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC closes Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC #34570
Fixing cross-references between guides
Fixing explicit Anchor for downstream
added required attribute to multiline (added required attribute to multiline #34336) (BACKPORT: added required attribute to multiline (#34336) #34477)
fix bundling issues (fix bundling issues #34387) (BACKPORT: fix bundling issues (#34387) #34648)
cache-embedded-mtls-enabled is ignored
Use a weekly cache key for PNPM store (Use a weekly cache key for PNPM store #34656) (Use a weekly cache key for PNPM store (#34656) #34691)
fix: mark slf4j as not optional for the operator (fix: mark slf4j as not optional for the opera 10BC8 tor #32652) (fix: mark slf4j as not optional for the operator (#32652) #34699)
update the sizing guide with the correct instance type
Surefire reports - support 26.0 release branch
Remove Provider annotation along with default constructors from org resources
fixed link to documentation (fixed link to documentation #34613) (BACKPORT: fixed link to documentation (#34613) #34689)
Fix broken JavaScript adapter tests when running in cross-origin context (Fix broken JavaScript adapter tests when running in cross-origin context #34753)
Guard against NPE by checking if caches are null in InfinispanOrganizationProvider - caches can be disabled and the provider has to check if they are set when using them
Add Lets Encrypt intermediate CAs to keycloak.truststore - certificates used by stackexchange (stackoverflow social login)
Fix credential_type in update/remove credential email template
Strip Double Quotes from Request Content in Organization API
Better message when updating users when import is disabled
Revise help icons for WebauthnPolicy settings (Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui #34465) (Revise help icons for WebauthnPolicy settings (#34465) #34466) (BACKPORT: Revise help icons for WebauthnPolicy settings (#34465) (#34466) #34690)
Added a representation that includes an organization and user model
changed to use TextArea (changed to use TextArea #34539) (BACKPORT: changed to use TextArea (#34539) #34688)
add brute force enabled so we can render switch (add brute force enabled so we can render switch #34282) (BACKPORT: add brute force enabled so we can render switch (#34282) #34476)
Surefire artifacts - updating names for Quarkus IT and UT. (Surefire artifacts - updating names for Quarkus IT and UT. #34908)
Address QE comments on HA guide (Address QE comments on HA guide #34902)
Update Leveraging Jakarta EE (Update Leveraging Jakarta EE #34901)
Update installation locations (Update installation locations #34871)
Backport to make improvements for translations (Backport to improve translations #34878)
Update docs with security warning around client certificate lookup (oauth client generates secret #213)
EMBARGOED CVE-2024-10270 org.keycloak/keycloak-services: Keycloak Denial of Service (Theme updates #214)
fix: returning addresses instead of hosts on the ClientConnection (fix demo doc #208)
fix: prevent inclusion of characters that could lead to FileVault path traversal (Fix compilation with JDK8. Minor polishing in mongo model #212)
fix: ensures that properties are runtime properties are filtered (docbook updates for adapter #209)
Address QE comments on Server Admin Guide
** Allow returning attributes when querying organizations**
Send exact param in user attr search only when its enabled
Apply QE authorization services guide comments
Use a hidden form to do POST based logout
Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes.
Check "Always use lightweight access token" is enabled on the client for Admin REST APIs
Ignore Accept-Language header for email themes
Update upgrade guide docs 25.0.0 cache options
more stable way to assert the text
Use short UUID for ldap components
Check the authentication config exists before returning its reference
Fixed the wrapping issue
Backport to fix a11y issue in FormattedLink (Backport to fix a11y issue in FormattedLink #35126)
Removed obsololete a11y tests
Allow updating the username when registration as email is enabled during LDAP updates
Make sure unmanaged attributes are populated before updating username when in update email context
fix: using stable ordering for deprecated metadata
getAll() organization and organization members only returns the first 10 items
Remove new test PoC from workflow
Upgrade to ISPN 15.0.11.Final
wait for login to finish (wait for login to finish #35044) (BACKPORT: wait for login to finish (#35044) #35083)
trying to make general test switch less flaky (trying to make general test switch less flaky #34993) (BACKPORT: trying to make general test switch less flaky (#34993) #35100)
no longer disable when resource is pre selected (no longer disable when resource is pre selected #34702) (BACKPORT: no longer disable when resource is pre selected (#34702) #35134)
fix(doc): v24 changelog grammar typo "longer" -> "no longer" (fix(doc): v24 changelog grammar typo "longer" -> "no longer" #35285)
Fix unordered list in caching guide (Fix unordered list in caching guide #35283)
Backport to expose membership type
Make PermissionTicket events marshallable
Do not count current sessions in UserSessionLimitsAuthenticator Closes Your login attempt timed out #35276
Improve session polling to prevent accidental redirects
Use regular CREATE TABLE instead of CREATE TEMPORARY
Flaky test: AuthenticationSessionTest
Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton Closes Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton #32676
setting the user in ExecuteActionsActionTokenHandler.handleToken to manage user null case in FreeMarkerLoginFormsProvider.createResponse
Persist admin event only when roles is non-empty
Port required changes for reCAPTCHA to the new login theme (reCAPTCHA v3 not working #35474) (Port required changes for reCAPTCHA to the new login theme (#35474) #35492)
Make sure event details are not stored if they are null ([Backport] Make sure event details are not stored if they are null #35502)
Enable autocomplete for username in login (enable autocomplete for Username Form #34099) (Enable autocomplete for username in login (#34099) #35543)
BACKPORT: Events tab on client and user (BACKPORT: Events tab on client and user #35512)
SAML Adapter Galleon Pack for EAP8 cannot use new metadata options for layers
Upgrading guide 26.0.6 is missing in the upgrading guide (Upgrading guide 26.0.6 is missing in the upgrading guide #35546)
Create a new logout session when initiating it for another client Closes logout with client_id and/or post_logout_redirect_uri results in bad request on logout confirmation page #34207
added missing components to the bundle (added missing components to the bundle #35312) (BACKPORT: added missing components to the bundle (#35312) #35560)
Backport to improve label in admin events search (Backport to improve label in admin events search #35494)
Fix migration for MySQL database - MariaDB and MySQL now use the same statement - prevents a possible illegal mix of collations
Intermittent missing organization claim in Keycloak JWT token
Backport to sort event types (Backport to sort event types #35648)
do not filter the realm list on recent used as it might be on the next page (do not filter the realm list on recent used as it might be on the next page #34510) (BACKPORT: do not filter the realm list on recent used as it might be on the next page (#34510) #35642)
fix: changing the bootstrapping suggestion to the command (fix: changing the bootstrapping suggestion to the command #35616) (fix: changing the bootstrapping suggestion to the command (#35616) #35666)
Do not run changeset if comlumn already exists
Better message when failing to update passwords due to invalid constraint/policy violation
organizationEnabled attributes are present as attributes in an export
Changing mis-formatted definition list of hashing algorithms to a table
Fix help text for role policy. (Fix help text for role policy. #35423) (BACKPORT: Fix help text for role policy. (#35423) #35707)
Fix(admin-ui): key status filtering issue in KeysListTab (Fix(admin-ui): key status filtering issue in KeysListTab #34721) (BACKPORT: Fix(admin-ui): key status filtering issue in KeysListTab (#34721) #35133)
Show forbidden section only after whoAmI is set (Show forbidden section only after whoAmI is set #34589) (BACKPORT: Show forbidden section only after whoAmI is set (#34589) #35132)
Backport to fix css for temporary password switch (Backport to fix css for temporary password switch #35658)
Backport to fix dialog title when deleting a user (Backport to fix dialog title when deleting a user #35508)
make test less flaky (make test less flaky #34994) (BACKPORT: make test less flaky (#34994) #35099)
fix: using regex to expand local ipv6 matching (fix: using regex to expand local ipv6 matching #35736) (fix: using regex to expand local ipv6 matching (#35736) #35737)
Revert back submitRequest to submit for saml ftl (Revert back submitRequest to submit for saml ftl Closes (26.0) #35659)
Set clientId in the VerifyEmailActionToken when no one is passed Closes Token issuer is null in executeActionsEmail and sendVerifyEmail if no clientId is passed #35317
added wait for group to load (added wait for group to load #34814)

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

Closes keycloak#30684 Signed-off-by: Ryan Emerson <remerson@redhat.com>

…eycloak#33582) * fix: document having multiple operators installed closes: keycloak#32152 Signed-off-by: Steve Hawkins <shawkins@redhat.com> * Update docs/guides/operator/installation.adoc Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> * Update docs/guides/operator/installation.adoc Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> Signed-off-by: Steven Hawkins <shawkins@redhat.com> --------- Signed-off-by: Steve Hawkins <shawkins@redhat.com> Signed-off-by: Steven Hawkins <shawkins@redhat.com> Co-authored-by: Václav Muzikář <vaclav@muzikari.cz> (cherry picked from commit 9fb187c)

…eycloak#33584) closes: keycloak#33539 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit c092867)

Closes keycloak#33576 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

Closes keycloak#33585 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…33589) (keycloak#33598) closes: keycloak#33578 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit cb3954f)

…#33650) (keycloak#33655) Closes keycloak#33645 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit c3a74fa)

) Closes keycloak#33642 Signed-off-by: Jon Haynes <senyahnoj@gmail.com> Co-authored-by: Jon Haynes <senyahnoj@gmail.com> (cherry picked from commit 8719e2d) Co-authored-by: Jon Haynes <senyahnoj@users.noreply.github.com>

closes keycloak#33275 Signed-off-by: mposolda <mposolda@gmail.com> (cherry picked from commit 07cf71e)

…k#32974) (keycloak#33591) fixes: keycloak#32847 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit 57dc5a1) Co-authored-by: Agnieszka Gancarczyk <4890675+agagancarczyk@users.noreply.github.com>

Closes keycloak#33513 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit 44b1290)

…erty Closes keycloak#33692 Signed-off-by: Ryan Emerson <remerson@redhat.com>

This should be done in the html opening tag only (see issue keycloak#33642) Closes keycloak#32844 (cherry picked from commit df30358) Signed-off-by: Jon Haynes <senyahnoj@gmail.com> Co-authored-by: Jon Haynes <senyahnoj@gmail.com>

We now only show organization section in account ui if org support is enabled for realm. Fixes keycloak#33735 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com> (cherry picked from commit bc4fde1)

Closes keycloak#33557 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit 3930356)

Closes keycloak#32617 Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com>

Closes keycloak#33699 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

Closes keycloak#33777 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

Closes keycloak#33780 (cherry picked from commit 23a6822) Signed-off-by: Kevin Köllmann <kevin@kllmnn.de> Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net> Co-authored-by: Kevin Köllmann <kevin@kllmnn.de>

Closes keycloak#31848 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit a74e60f)

Closes keycloak#33776 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit 7e5734f)

) (keycloak#33829) Bumps [manusa/actions-setup-minikube](https://github.com/manusa/actions-setup-minikube) from 2.11.0 to 2.13.0. - [Release notes](https://github.com/manusa/actions-setup-minikube/releases) - [Commits](manusa/actions-setup-minikube@v2.11.0...v2.13.0) --- updated-dependencies: - dependency-name: manusa/actions-setup-minikube dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 268229d) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

closes keycloak#33875 Signed-off-by: mposolda <mposolda@gmail.com>

Closes keycloak#33881 Signed-off-by: rmartinc <rmartinc@redhat.com>

closes keycloak#32644 Signed-off-by: mposolda <mposolda@gmail.com> Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com> Signed-off-by: Marek Posolda <mposolda@gmail.com> (cherry picked from commit 94b5f05)

closes: keycloak#33817 (cherry picked from commit 91026d6) Signed-off-by: Pedro Hos <pedro-hos@outlook.com> Co-authored-by: Pedro Hos <pedro-hos@outlook.com>

Closes keycloak#33907 (cherry picked from commit 936cf68) Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com> Co-authored-by: Oliver <antikalk@users.noreply.github.com>

Closes keycloak#33814 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit 008faf4)

Closes keycloak#35288 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…35543) Closes keycloak#34091 Signed-off-by: xsrf <xsrf@users.noreply.github.com> (cherry picked from commit 47a7d9c) Co-authored-by: Andreas <xsrf@users.noreply.github.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* [issue-33569] Show User Events on dedicated tab on Client-/User-Details (keycloak#33574) Fixes keycloak#33569 Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * use user and client from form when on the events section (keycloak#35098) fixes: keycloak#35048 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * Remove columns and un-clearable filters (keycloak#34735) fixes: keycloak#34734 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> --------- Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> Co-authored-by: Oliver <antikalk@users.noreply.github.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…r layers Closes keycloak#35410 Signed-off-by: Peter Skopek <pskopek@redhat.com> (cherry picked from commit aceb8bc) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

) Closes keycloak#35544 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#34207 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit e41553b) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit a3f85ec) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

- MariaDB and MySQL now use the same statement - prevents a possible illegal mix of collations Closes keycloak#34995 Signed-off-by: Stefan Guilhen <sguilhen@redhat.com> (cherry picked from commit 88cfe42) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35324 Signed-off-by: Martin Kanis <mkanis@redhat.com> (cherry picked from commit 2482302) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…t page (keycloak#34510) (keycloak#35642) * do not filter the realm list on recent used as it might be on the next page fixes: keycloak#34072 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * remove deleted realms from realm list Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * filter recent realms with existing realms Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> --------- Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit 04e32c1) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…5616) (keycloak#35666) closes: keycloak#35526 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit 4c7dea5) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35290 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…aint/policy violation Closes keycloak#35421 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35052 Signed-off-by: vramik <vramik@redhat.com> Co-authored-by: vramik <vramik@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35416 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Fixes keycloak#35273 Signed-off-by: Stan Silvert <ssilvert@redhat.com> (cherry picked from commit c5d9750) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

) (keycloak#35133) Support customer reports that keys with 'Active' set to 'off' still appear in the Active keys list in the Admin console under Realms settings -> Keys -> Keys list. The root cause was identified as the filtering logic, which does not apply status-based filtering for the first item in FILTER_OPTIONS ('ACTIVE'). This commit corrects the filtering logic to properly exclude keys based on the 'Active' status selection. Closes keycloak#34675 (cherry picked from commit 46f7fb5) Signed-off-by: Charley <charley.geoffroy@protonmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> Co-authored-by: Charley <71822392+charley04310@users.noreply.github.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…cloak#35132) closes keycloak#34402 (cherry picked from commit 6482e41) Signed-off-by: Christian Janker <christian.janker@gmx.at> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> Co-authored-by: Christian Ja <christian.janker@gmx.at> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Backport to fix dialog title when deleting a user Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> * improvement Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> --------- Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* skip this flacky test references keycloak#34822 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> * make test less flaky Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> --------- Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit e325130) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…loak#35737) closes: keycloak#35675 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit 8089073) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35488 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit e488f34) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Closes keycloak#35317 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit d19ba82) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

fixes: keycloak#34605 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit 6a46667) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

stianst and others added 30 commits October 4, 2024 10:54

Update 26_0_0.adoc

00bca27

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

Commit proto.lock files to release/26.0 branch

4c73e50

Closes keycloak#30684 Signed-off-by: Ryan Emerson <remerson@redhat.com>

fix: correcting the container examples wrt hostname (keycloak#33542) (k…

94ece15

…eycloak#33584) closes: keycloak#33539 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit c092867)

Fixing broken links after KC26 docs changes (keycloak#33580)

f422b77

Closes keycloak#33576 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

Fix runaway formatting

6e60287

Closes keycloak#33585 Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

skip flaky test (keycloak#33555)

6138d82

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

fix: ensuring placeholders can be used with --import-realm (keycloak#…

2fcc88a

…33589) (keycloak#33598) closes: keycloak#33578 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit cb3954f)

Ensure createRegisterUrl() calls are awaited internally (keycloak…

3b22d90

…#33650) (keycloak#33655) Closes keycloak#33645 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit c3a74fa)

Better logging when error happens during transaction commit

1c4b93d

closes keycloak#33275 Signed-off-by: mposolda <mposolda@gmail.com> (cherry picked from commit 07cf71e)

Return next action if the current action is not supported in AIA

b3c28fd

Closes keycloak#33513 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit 44b1290)

Allow proto-schema-compatibility-maven-plugin to be skipped with prop…

fa4523d

…erty Closes keycloak#33692 Signed-off-by: Ryan Emerson <remerson@redhat.com>

Only show organization section in account UI of enabled

6dac3ae

We now only show organization section in account ui if org support is enabled for realm. Fixes keycloak#33735 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com> (cherry picked from commit bc4fde1)

Treat unencrypted local origins as an insecure context in Safari

a9d823d

Closes keycloak#33557 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit 3930356)

Fix running Cypress tests on Firefox (keycloak#33768) (keycloak#33770)

36207eb

Closes keycloak#32617 Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com>

Only process organization selection when the user is identified

beb26fd

Closes keycloak#33699 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

The event should also support user invalidation events

d822154

Closes keycloak#33777 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

Check email with ignorecase when setting basic attributes in IdP

9adeea7

Closes keycloak#31848 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit a74e60f)

Fix incorrect filter in docker protocol

0828145

Closes keycloak#33776 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit 7e5734f)

Temporarily comment FIPS CI until it is figured what causes the issue

63899d8

closes keycloak#33875 Signed-off-by: mposolda <mposolda@gmail.com>

Run all maven commands inside the ubi docker container

7ca6b37

Closes keycloak#33881 Signed-off-by: rmartinc <rmartinc@redhat.com>

NPE when Default Role is not present on CachedRealm

afa3e55

closes: keycloak#33817 (cherry picked from commit 91026d6) Signed-off-by: Pedro Hos <pedro-hos@outlook.com> Co-authored-by: Pedro Hos <pedro-hos@outlook.com>

Fix NPE on whoami with unknown Realm

627da7d

Closes keycloak#33907 (cherry picked from commit 936cf68) Signed-off-by: Oliver Cremerius <antikalk@users.noreply.github.com> Co-authored-by: Oliver <antikalk@users.noreply.github.com>

Check if deviceRepresentation is set (keycloak#33828)

bb5f7cd

Closes keycloak#33814 Signed-off-by: Jon Koops <jonkoops@gmail.com> (cherry picked from commit 008faf4)

pedroigor and others added 27 commits December 11, 2024 08:01

Make sure event details are not stored if they are null (keycloak#35502)

a1c6493

Closes keycloak#35288 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

SAML Adapter Galleon Pack for EAP8 cannot use new metadata options fo…

b6c5d33

…r layers Closes keycloak#35410 Signed-off-by: Peter Skopek <pskopek@redhat.com> (cherry picked from commit aceb8bc) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Upgrading guide 26.0.6 is missing in the upgrading guide (keycloak#35546

3f61058

) Closes keycloak#35544 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Create a new logout session when initiating it for another client

9b2d286

Closes keycloak#34207 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit e41553b) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

added missing components to the bundle (keycloak#35312) (keycloak#35560)

24e9524

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit a3f85ec) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Backport to improve label in admin events search (keycloak#35494)

a05f863

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Intermittent missing organization claim in Keycloak JWT token

ec62199

Closes keycloak#35324 Signed-off-by: Martin Kanis <mkanis@redhat.com> (cherry picked from commit 2482302) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Backport to sort event types (keycloak#35648)

901fbbc

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

fix: changing the bootstrapping suggestion to the command (keycloak#3…

47968bd

…5616) (keycloak#35666) closes: keycloak#35526 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit 4c7dea5) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Do not run changeset if comlumn already exists

b6772ea

Closes keycloak#35290 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Better message when failing to update passwords due to invalid constr…

5e38ab2

…aint/policy violation Closes keycloak#35421 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

organizationEnabled attributes are present as attributes in an export

c26ee82

Closes keycloak#35052 Signed-off-by: vramik <vramik@redhat.com> Co-authored-by: vramik <vramik@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Changing mis-formatted definition list of hashing algorithms to a table

fd7d78f

Closes keycloak#35416 Signed-off-by: Alexander Schwartz <aschwart@redhat.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Fix help text for role policy. (keycloak#35423) (keycloak#35707)

3926ef6

Fixes keycloak#35273 Signed-off-by: Stan Silvert <ssilvert@redhat.com> (cherry picked from commit c5d9750) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Backport to fix css for temporary password switch (keycloak#35658)

1a163be

Signed-off-by: Agnieszka Gancarczyk <agagancarczyk@gmail.com> Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

fix: using regex to expand local ipv6 matching (keycloak#35736) (keyc…

0c6ea3c

…loak#35737) closes: keycloak#35675 Signed-off-by: Steve Hawkins <shawkins@redhat.com> (cherry picked from commit 8089073) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Revert back submitRequest to submit for saml ftl (keycloak#35659)

97a86cf

Closes keycloak#35488 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit e488f34) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Set clientId in the VerifyEmailActionToken when no one is passed

8983013

Closes keycloak#35317 Signed-off-by: rmartinc <rmartinc@redhat.com> (cherry picked from commit d19ba82) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

added wait for group to load (keycloak#34814)

9f06c93

fixes: keycloak#34605 Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com> (cherry picked from commit 6a46667) Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

edewit force-pushed the backport-34814-26.0 branch from c79446a to 9f06c93 Compare December 11, 2024 07:02

edewit closed this Dec 11, 2024

edewit deleted the backport-34814-26.0 branch December 11, 2024 07:03

Navigation Menu

Repository navigation

backport 34814 26.0 - #35791

backport 34814 26.0#35791
edewit wants to merge 183 commits into
keycloak:mainfrom
edewit:backport-34814-26.0

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants