GitHub/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-07-25 18:26:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,456 Commits 35 Branches 311 Tags
copilot/fix-code-review-comments
Commit Graph
342 Commits
Author SHA1 Message Date
Michal Vavřík 2aaa975c31 docs(admin api v2): add release note for new experimental feature (#50187) 
Closes: https://github.com/keycloak/keycloak/issues/47985

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-06-25 12:47:16 +02:00
Steven HawkinsandPeter Zaoral 64dabdb486 fix: refining the health check and exposing excluding the health check (#49273) 
* fix: refining the health check and exposing excluding the health check

closes: #49248

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* simplifying the health check

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching the health check to a dedicated executor

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help messages

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/DatabaseOptions.java

Co-authored-by: Peter Zaoral <pepo48@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and adding dist tests

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a release note and a small doc note.

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* addressing review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Peter Zaoral <pepo48@gmail.com>
 2026-06-25 12:42:57 +02:00
mposolda e56d25d53c [OID4VCI] release notes for 26.7.0 
closes #50035

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-06-16 18:32:38 +02:00
Yike Gao e7f01579fe Rename discoverable key as discoverable credential (#50016) 
Closes #50015

Signed-off-by: Yike Gao <yikegao8@gmail.com>
 2026-06-16 12:48:45 +02:00
Yike Gao 31cf0d50b2 Add residentKey WebAuthn policy option. Closes #42513 (#49687) 
Signed-off-by: Yike Gao <yikegao8@gmail.com>
 2026-06-15 13:19:29 +02:00
Giuseppe Graziano 7341976c5c Identity brokering v2 supported 
Closes #47339
Closes #47478

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2026-06-11 09:47:56 +02:00
Martin Bartoš e1585658e6 Ability to add parameterized scope type (#49420) 
* Ability to add parameterized scope type

Closes #49532

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Be more defensive in the contract with nullability + emptiness

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide test for scopes with the target user

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-06-04 10:42:39 +02:00
Martin Bartoš 10edb765b7 Rename 'Dynamic scopes' feature to 'Parameterized scopes' (#49015) 
Closes #49014

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-06-02 12:03:55 +02:00
Vlasta Ramik ba23dd1c24 Support mapping existing Realm and Client roles to Organization Groups (#48670) 
Closes #47327

Signed-off-by: vramik <vramik@redhat.com>
 2026-05-28 13:33:32 +02:00
Martin Bartoš 16fc31dfee Unify buttons in horizontal layout for Login UI 
Closes #49372

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-05-27 23:51:02 +02:00
Peter Skopek 480c730efb Mention SHA1 is deprecated in the documentation 
Closes #40706

Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
 2026-05-13 10:58:36 +02:00
Martin Bartošandrmartinc 9d1e562f03 Update WebAuthn Metadata service and show icons (#48551) 
* Update WebAuthn Metadata service and show icons

Closes #48539
Closes #48540

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>

* Revert back the transport type for providerId-less authenticators

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
 2026-05-11 17:15:38 +02:00
vramik e1329516d5 Introduce ORGANIZATIONS resource type in Fine-Grained Admin Permissions 
Closes #47284

Signed-off-by: vramik <vramik@redhat.com>
 2026-04-29 11:10:05 -03:00
vramik 13560136cf Introduce manage-organizations, view-organizations admin roles for Organization management 
Closes #45497
Closes #31641

Signed-off-by: vramik <vramik@redhat.com>
 2026-04-21 11:45:35 -03:00
tre2man 024a9026e6 Search realms by displayName 
closes #45292

Signed-off-by: tre2man <kimtree3940@gmail.com>
 2026-04-20 19:34:05 -03:00
Rahul Ramkumar 799699a808 Add KCRAW_ prefix for environment variables to preserve literal values (#47197) 
Closes #46657

Signed-off-by: Rahul Ramkumar <rahulram226@gmail.com>
 2026-04-07 10:12:18 +02:00
Alexander Schwartz 97fce120ac Finalizing release notes and migration guide for 26.6 (#47791) 
Closes #47790

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-04-07 09:44:13 +02:00
Václav Muzikář 3560286f0d Update docs to better reflect FIPS support with Java 25. (#47699) 
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-04-02 15:04:15 +02:00
Stefan Guilhen 7e8eb64a52 Add troubleshooting section to workflows documentation 
- also add workflows as supported in release notes

Closes #47692

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-04-02 00:05:04 +02:00
Václav Muzikář d7238a77ba Clarify Java 25 support scope in docs (#47539) 
Closes #47537

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-04-01 15:20:37 +02:00
Takashi Norimatsu a504df1a1c Update release-notes for CIMD 
closes #47667

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
 2026-04-01 12:42:53 +02:00
Martin BartošandDaniele Mams c0458c0801 Provide documentation for customizable log service properties 
Closes #47586

Co-authored-by: Daniele Mams <mammarella.daniele@gmail.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-03-31 11:16:29 +02:00
mposolda 5b82688883 Moving identity-broker-api to 'security and standards' section of release notes for 26.6.0 
closes #45839

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-03-26 17:46:32 +01:00
rmartinc b6fe6c2db8 Documentation for brokering API V2 and make it preview 
Closes #46590
Closes #47259

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-26 11:13:58 +01:00
Gilvan FilhoandVáclav Muzikář ed66ac6b0c add labels and annotations to service monitor (serviceMonitorSpec) (#47298) 
* add labels and annotations to service monitor (serviceMonitorSpec)

closes #42626

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

* add labels and annotations to service monitor (serviceMonitorSpec)

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

---------

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-03-23 17:35:44 +00:00
Alexander SchwartzandStian Thorgersen 86a44bd378 Review release notes about missing items (#47359) 
* Review release notes about missing items

Closes #47358

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
 2026-03-23 07:58:34 +01:00
Alexander Schwartz b9cd14f931 Regroup the release notes by category 
Closes #47239

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-03-18 14:29:17 +01:00
Stian Thorgersen 607096fd4e Promote federated client authentication, including OIDC and Kube to fully supported 
Closes #42634, closes #42635, closes #42826, closes #44412

Signed-off-by: stianst <stianst@gmail.com>
 2026-03-17 05:15:13 +01:00
Ricardo Martin a712d01234 Change links from issues.redhat.com to redhat.atlassian.net (#47181) 
Closes #47179

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-16 14:58:08 +01:00
Tero Saarni e2e89523c5 Add release note for Envoy client certificate lookup (#47096) 
* Add release note for Envoy client certificate lookup

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Fixed heading level, combined into one chapter

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

---------

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
 2026-03-12 15:26:23 -04:00
vramik 367f9e2cc8 Organization Groups Documentation 
Closes #45516

Signed-off-by: vramik <vramik@redhat.com>
 2026-03-10 10:31:50 -03:00
Václav Muzikář 5c062a9e59 Downgrade server container image back to OpenJDK 21 (#46813) 
* Downgrade server container image back to OpenJDK 21

Closes #46812

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Remove JDK downgrade note, rename attribute

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-03-10 14:26:11 +01:00
rmartinc db7d9bfc8c Promote JWT Authorization Grant feature to supported 
Closes #45463

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-10 09:13:44 +01:00
Oluwatobi Mustapha 24a819eabc Fix FGAP deny evaluation for manage-group-membership 
Add the missing Users FGAP scope alias from manage-group-membership to Groups manage-membership so deny permissions on group members apply during user membership updates.

Add a regression test covering a protected group member, an unrelated user, and the no-mutation postcondition after a forbidden request.

Closes keycloak#46693
 2026-03-09 12:01:17 -03:00
CopilotshawkinsSteve Hawkins
 		8d318c552a Add Traefik-specific X509 client certificate lookup provider (#46616) 
* Add Traefik-specific X509 client certificate lookup provider

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* correcting the header handling and adding documentation

closes: #46395

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/release_notes/topics/26_6_0.adoc

* Update docs/guides/server/reverseproxy.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestion from @shawkins

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* removing optional traefik behavior

and further refining the docs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2026-03-05 15:00:05 +01:00
CopilotshawkinsSteve HawkinsMartin Bartoš
 		9682f6a9a0 Add log file rotation configuration options to allow disabling rotation (#46724) 
* Add log file rotation configuration options to Keycloak

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Update approved help texts and add release note for log file rotation
options

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* updating expected possible options

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-03-05 10:37:41 +00:00
CopilotshawkinsSteve Hawkins
 		d600298df7 operator: add support for configurable Kubernetes Service port and name in Keycloak CRD (#46683) 
closes: #46633

* Add support for configurable Kubernetes Service port and name in Keycloak CRD

- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Remove HasMetadata getServiceName overload; add integration test for custom service name and port

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* refining the integration test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Add documentation for configurable Service name and port in operator guide and release notes

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Apply review suggestions to documentation wording

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2026-03-04 10:49:51 -05:00
Sebastian ŁaskawiecCopilotVáclav MuzikářSteven Hawkins
 		35d725fe1b Moved adding Kubernetes/OpenShift CAs to the server (#44506) 
* Kubernetes Truststore moved to the server

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and updating upgrade instructions

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help command output

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Comments addressed

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* lint errors fix

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-03-04 16:39:10 +01:00
Lukas Hanusovsky accf95cfd9 Keycloak Test Framework - 26.6.0 release notes (#46611) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2026-02-26 14:08:57 +01:00
Ricardo Martin 2bd386842a Step up authentication for saml - preview (#44185) 
Closes #10155


Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-23 19:57:00 +01:00
Michal Vavřík 8e816f749c feat: Update container images to use OpenJDK 25 (#46386) 
This PR is mostly based on https://github.com/vmuzikar/keycloak/commit/303446b465f2896b269df42388a685ec69b22560.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.

* Closes: https://github.com/keycloak/keycloak/issues/45830

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-02-17 15:35:46 +01:00
Ruchika JhaandAlexander Schwartz f92c27e26d Make rolling updates for patch releases fully supported and Updated docs, release notes and upgrading guide for zero-downtime patch releases 
Closes #45381
Closes #45756

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-16 15:11:16 +00:00
Ruchika JhaandAlexander Schwartz e82e107b85 Enable graceful HTTP shutdown and document default behavior 
Closes #43589

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-13 14:28:49 +00:00
Václav Muzikář d45dfeb44a Java 25 support (#45872) 
Closes #45905

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-02-10 23:35:35 +00:00
Martin BartošandRyan Emerson eac504cce5 OTEL: Ability to specify headers for exporters 
Closes #45220

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-27 10:36:18 +00:00
Martin BartošSteven HawkinsVáclav Muzikář
 		57f0b15c80 OTEL: Add Telemetry options to Keycloak CR (#45397) 
* OTEL: Add Telemetry options to Keycloak CR

Closes #45348

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Add validation to resource attributes

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid unnecessary warning logs during the operator tests execution

Closes #45623

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-22 16:02:06 +00:00
Martin Bartoš 1138952ba7 Provide HTTP access logs written to file with rotation (#45437) 
Closes #41353

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-20 15:16:33 +01:00
Martin BartošandVáclav Muzikář 137a35c110 Mask certain HTTP headers and cookies in the HTTP access log (#45400) 
* Mask certain HTTP headers and cookies in the HTTP access log

Closes #43811

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Improve tests, Improve docs

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix test

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-19 19:01:45 +01:00
Ryan Emerson 4a2ed7c4e6 Use correct anchor for mdc logging in 26.5.0 release notes 
Closes #45185

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2026-01-06 17:21:48 +01:00
Alexander SchwartzandStian Thorgersen e43cf55028 Finalizing 26.5 release notes 
Closes #45131

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2026-01-05 14:10:32 +01:00