Repository navigation
Scope FGAP filtering to admin requests (26.8 backport) - #54630
Merged
pedroigor merged 3 commits intoNov 12, 2026
Merged
Conversation
pedroigor
marked this pull request as ready for review
November 9, 20
8000
26 14:34
pedroigor
force-pushed
the
backport-54054-26.8
branch
4 times, most recently
from
November 12, 2026 11:28
9d32d4f to
37d49f8
Compare
pedroigor
previously approved these changes
Nov 12, 2026
pedroigor
enabled auto-merge (rebase)
November 12, 2026 11:30
…kups Backport all three commits from PR keycloak#54074 for keycloak#54054 to release/26.8. Bind automatic FGAP query filtering to the authenticated Admin or SCIM identity. Keep internal role, group and policy lookups unfiltered to avoid LDAP group resolution failures and recursive authorization evaluation. Include LDAP login, token and delegated-admin regression coverage. Adapt the group visibility test to the 26.8 admin client using a local REST proxy while preserving the flat-list assertions. Closes keycloak#54054 (cherry picked from commit 8ae1053) (cherry picked from commit c612179) (cherry picked from commit 244ec89) Signed-off-by: Martin Kanis <mkanis@ibm.com> Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com> Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
closes: keycloak#54356 Signed-off-by: Michal Vavřík <dev@michalvavrik.net> (cherry picked from commit 95ef67c) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> (cherry picked from commit 03f977f)
Closes keycloak#53265 Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com> (cherry picked from commit 7a11890) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> # Conflicts: # tests/base/src/test/java/org/keycloak/tests/admin/PermissionsTest.java # tests/base/src/test/java/org/keycloak/tests/admin/authz/fgap/ClientResourceTypeEvaluationTest.java
pedroigor
force-pushed
the
backport-54054-26.8
branch
from
November 12, 2026 12:11
37d49f8 to
cbd757c
Compare
pedroigor
approved these changes
Nov 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #54054 to release/26.8.
The three commits from #54074 were squashed into one backport commit.