8000 [OID4VCI] Conformance with OpenID HAIP Profile by tdiesler · Pull Request #48844 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

[OID4VCI] Conformance with OpenID HAIP Profile - #48844

Closed
tdiesler wants to merge 16 commits into
keycloak:mainfrom
tdiesler:ghi47149
Closed

tdiesler wants to merge 16 commits into
keycloak:mainfrom
tdiesler:ghi47149

Conversation

@tdiesler
@tdiesler tdiesler commented May 8, 2026
Copy link
Copy Markdown
Contributor

closes #47149

This is a squashed aggregate of all the other OID4VCI-HAIP PRs

depends on

@keycloak-github-bot keycloak-github-bot Bot left a comment
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@keycloak-github-bot
Copy link
Copy Markdown

Unreported flaky test detected

If the flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.forms.LoginTest#loginDifferentUserAfterDisabledUserThrownOut

Keycloak CI - Forms IT (firefox)

org.openqa.selenium.TimeoutException: 
Navigation timed out after 10000 ms
Build info: version: '4.28.1', revision: '73f5ad48a2'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '6.17.0-1010-azure', java.version: '25.0.2'
Driver info: org.openqa.selenium.firefox.FirefoxDriver
...

Report flaky test

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
@tdiesler
tdiesler force-pushed the ghi47149 branch 14 times, most recently from 33465d4 to 90dc9c6 Compare May 12, 2026 07:25
tdiesler added 3 commits May 12, 2026 10:02
* ghi48542:
  [OAuth] Prefer authorization error on redirect_uri
…request-object-not-used

closes keycloak#48047

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
…e-code-idtoken-fails

closes keycloak#48067

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
@tdiesler
tdiesler force-pushed the ghi47149 branch 3 times, most recently from 9b5d3c9 to 5e59ae9 Compare May 12, 2026 08:34
tdiesler added 2 commits May 12, 2026 11:01
…y-required

closes keycloak#48069

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
closes keycloak#48070

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
@tdiesler
tdiesler force-pushed the ghi47149 branch 2 times, most recently from e140d91 to 0389b20 Compare May 12, 2026 09:17
tdiesler added 8 commits May 12, 2026 11:27
Signed-off-by: Thomas Diesler <tdiesler@proton.me>
…equest-uri-prior-to-auth-completion-succeeds

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
…expired-request_uri

closes keycloak#48074

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
closes keycloak#48502

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
closes keycloak#48506

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
closes keycloak#48530

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
…ong-aud

closes keycloak#48532

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
…ct-without-redirect-uri-fails

closes keycloak#48579

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
tdiesler added 2 commits May 12, 2026 11:36
* ghi48542:
  [OAuth] Prefer authorization error on redi
8000
rect_uri
closes keycloak#47149

  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-ensure-request-object-without-redirect-uri-fails
  [OID4VCI-HAIP] Pass oid4vci-1_0-issuer-fail-client-attestation-pop-wrong-aud
  [OID4VCI-HAIP] Pass oid4vci-1_0-issuer-fail-client-attestation-no-sub
  [OID4VCI-FAPI2] SecureRequestObjectExecutor fails on PAR
  [OID4VCI-FAPI2] Add DPoP as alternative holder of key proof
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-par-attempt-to-use-expired-request_uri
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-par-ensure-reused-request-uri-prior-to-auth-completion-succeeds
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-refresh-token
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-dpop-negative-tests
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-ensure-holder-of-key-required
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-ensure-response-type-code-idtoken-fails
  [OID4VCI-FAPI2] Pass fapi2-security-profile-final-state-only-outside-request-object-not-used

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
@tdiesler tdiesler closed this May 12, 2026
@tdiesler
tdiesler deleted the ghi47149 branch May 12, 2026 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[OID4VCI] Conformance with OpenID HAIP Profile

1 participant

0