 
|
9430a3f928
|
Add CLI option for tx and migration timeout
Closes #19453
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
2026-02-27 16:11:18 +00:00 |
|
 Lukas HanusovskyandGitHub
|
accf95cfd9
|
Keycloak Test Framework - 26.6.0 release notes (#46611)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
|
2026-02-26 14:08:57 +01:00 |
|
 
|
193a423571
|
invalid_grant errors now return HTTP 400 (#46528)
Closes #45812
Signed-off-by: Marie Daly <marie.daly1@ibm.com>
Signed-off-by: Marie Daly <mdaly@redhat.com>
Co-authored-by: Ricardo Martin <rmartinc@redhat.com>
|
2026-02-25 18:03:36 +01:00 |
|
 Giuseppe GrazianoandGitHub
|
ebfc294c85
|
Executor for client uris pattern validation (#46300)
Closes #45645
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
|
2026-02-24 16:26:00 +01:00 |
|
 Ricardo MartinandGitHub
|
2bd386842a
|
Step up authentication for saml - preview (#44185)
Closes #10155
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-23 19:57:00 +01:00 |
|
 
|
be175346cd
|
Aggregate client-id field for improved Infinispan query
Closes #46471
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
2026-02-23 16:43:23 +01:00 |
|
 Peter SkopekandMarek Posolda
|
248c635fda
|
Rename Docker Registry to Distribution Registry
Closes #45163
Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
|
2026-02-20 13:57:30 +01:00 |
|
 Tero SaarniandGitHub
|
128384ca15
|
Implement forced password change for LDAP federated user (password policy control) (#15253)
* Add limited support for LDAP password policy control
Signed-off-by: Tero Saarni <tero.saarni@est.tech>
|
2026-02-20 09:15:51 -03:00 |
|
 Ricardo MartinandGitHub
|
4f90ef67f6
|
Limit the inflating size for the SAML redirect binding
Closes #46372
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-17 18:40:11 +00:00 |
|
 Michal VavříkandGitHub
|
8e816f749c
|
feat: Update container images to use OpenJDK 25 (#46386)
This PR is mostly based on https://github.com/vmuzikar/keycloak/commit/303446b465f2896b269df42388a685ec69b22560.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.
* Closes: https://github.com/keycloak/keycloak/issues/45830
Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
|
2026-02-17 15:35:46 +01:00 |
|
  
|
d04d833ec5
|
Update external Infinispan metrics documentation
Closes #46390
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-02-17 10:34:17 +00:00 |
|
 Akbar HusainandGitHub
|
3f62bb4d2b
|
Make shebang in bash scripts consistent (#37369)
Closes #34983
Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
|
2026-02-17 11:32:28 +01:00 |
|
 
|
f92c27e26d
|
Make rolling updates for patch releases fully supported and Updated docs, release notes and upgrading guide for zero-downtime patch releases
Closes #45381
Closes #45756
Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-02-16 15:11:16 +00:00 |
|
 Stefan GuilhenandPedro Igor
|
aeda5c4f01
|
Increase workflow executor timeout to 5 seconds by default
Closes #46332
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
|
2026-02-13 14:33:31 -03:00 |
|
 Pedro IgorandGitHub
|
5c67b60920
|
Fixing authorization service docs to remove references to the default settings
Closes #46159
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
|
2026-02-13 17:18:15 +01:00 |
|
 Stefan GuilhenandPedro Igor
|
c17d9d0d0c
|
Add section about handling failures to the workflows documentation
Closes #45175
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
|
2026-02-13 12:01:00 -03:00 |
|
 
|
e82e107b85
|
Enable graceful HTTP shutdown and document default behavior
Closes #43589
Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-02-13 14:28:49 +00:00 |
|
 Pedro IgorandGitHub
|
8df79202a0
|
Fixing organization members docs to mention they can join multiple organizations
Closes #46040
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
|
2026-02-13 14:54:10 +01:00 |
|
 Ricardo MartinandGitHub
|
bef8f7f0fd
|
Move upgrading note for the serverinfo to 26.5.4
Closes #46267
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-12 14:50:45 +01:00 |
|
 Václav MuzikářandGitHub
|
d45dfeb44a
|
Java 25 support (#45872)
Closes #45905
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
|
2026-02-10 23:35:35 +00:00 |
|
 Marie DalyandGitHub
|
7d6108d4b9
|
Redirect Wildcard changes and more https checks to secure-client-executor (#46082)
Closes #45587
Signed-off-by: Marie Daly <marie.daly1@ibm.com>
|
2026-02-10 13:00:06 +01:00 |
|
 rmartincandMarek Posolda
|
d701329f49
|
Move upgrading note for SAML to 26.5.4
Closes #46150
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-10 11:01:45 +01:00 |
|
 Ricardo MartinandGitHub
|
f0381f8482
|
Check SubjectConfirmationData element for bearer type
Closes #45646
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-10 08:20:17 +01:00 |
|
 
|
02c6499d96
|
Deprecate unused methods in UserSessionProvider
Closes #45823
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
2026-02-06 19:04:19 +01:00 |
|
 Hugo Hakim DamerandGitHub
|
292a177b10
|
[OID4VCI] Add support for nested claims in OID4VCI user attribute mapper (#45751)
Closes #45748
Signed-off-by: Hugo Hakim Damer <HugoHakim.Damer@governikus.de>
|
2026-02-06 10:57:12 +01:00 |
|
 rmartincandMarek Posolda
|
69fabcf902
|
Documentation changes to deprecate Token Exchange V1
Closes #45792
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-05 17:32:04 +01:00 |
|
 Aggelos SachtourisandPedro Igor
|
28bb0b2cd9
|
Create documentation for unlink user workflow step
Signed-off-by: Aggelos Sachtouris <aggelos_sachtouris@hotmail.com>
|
2026-02-05 12:22:37 -03:00 |
|
 Stefan GuilhenandPedro Igor
|
63d9a19982
|
Allow step-runner-task-timeout to be specified using ISO-8601 format
Closes #45987
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
|
2026-02-03 14:53:19 -03:00 |
|
 Stefan GuilhenandPedro Igor
|
c379192bf8
|
Adjust event names in workflows documentation to match the new event provider names
Closes #45968
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
|
2026-02-03 14:47:41 -03:00 |
|
 
|
3e568fc81b
|
OTEL: Use suggested 'code.function.name' for span attributes
Closes #45944
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
|
2026-02-03 15:56:48 +01:00 |
|
 rmartincandMarek Posolda
|
c63f54ba3a
|
Client policy executor to allow extra audiences for JWT authorization grant
Closes #45180
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-03 13:39:31 +01:00 |
|
 Stefan GuilhenandPedro Igor
|
43b5b3484b
|
Fix: use valid format for condition used in the documentation
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
|
2026-02-02 10:15:18 -03:00 |
|
 rmartincandMarek Posolda
|
d4e9b16ea9
|
Include version in system-info for manage-realm and restrict view-system mapping
Closes #45776
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-02-02 12:40:57 +01:00 |
|
 Pedro IgorandGitHub
|
13cf35ded3
|
Only realm admins can manage workflows
Closes #45875
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
|
2026-01-30 21:18:06 +01:00 |
|
  
|
bae3963d25
|
Refactor SessionsResource for better memory usage and performance
Closes #45727
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-01-29 11:38:54 +01:00 |
|
 Tero SaarniandMarek Posolda
|
47b91b995d
|
Add revert button to client credentials form
Signed-off-by: Tero Saarni <tero.saarni@est.tech>
|
2026-01-28 18:36:36 +01:00 |
|
 Tero SaarniandGitHub
|
cb4c533464
|
Add support for looking up client secrets via Vault SPI (#39650)
Fixes #13102
Signed-off-by: Tero Saarni <tero.saarni@est.tech>
|
2026-01-28 16:45:30 +01:00 |
|
 Giuseppe GrazianoandGitHub
|
0bc95be9cc
|
Remove ignored-links after 26.5.0
Closes #44810
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
|
2026-01-28 15:08:08 +00:00 |
|
 Pedro IgorandGitHub
|
b9243a7270
|
Only enable JS policies if the scripts feature is enabled
Closes #44132
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
|
2026-01-28 12:28:32 +01:00 |
|
 Steven HawkinsandGitHub
|
38b5466093
|
fix: aligns our dev http-host default behavior with that of quarkus (#45691)
closes: #42876
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
|
2026-01-27 16:51:47 +01:00 |
|
 Martin BartošandRyan Emerson
|
eac504cce5
|
OTEL: Ability to specify headers for exporters
Closes #45220
Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
|
2026-01-27 10:36:18 +00:00 |
|
 Steven HawkinsandGitHub
|
77704a91b6
|
fix: adding support for xforwarded prefix (#45699)
closes: #35298
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
|
2026-01-26 18:14:54 +01:00 |
|
 
|
2f4f36eabc
|
Add realm id column to offline_client_session table
Closes #44424
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
2026-01-23 16:28:34 +01:00 |
|
 Alexander SchwartzandGitHub
|
e278a2f6fd
|
Changing default clock skew for not-issued-before to 10 seconds
Closes #45620
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-01-22 19:11:10 +01:00 |
|
  
|
57f0b15c80
|
OTEL: Add Telemetry options to Keycloak CR (#45397)
* OTEL: Add Telemetry options to Keycloak CR
Closes #45348
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
* Add validation to resource attributes
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Avoid unnecessary warning logs during the operator tests execution
Closes #45623
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
|
2026-01-22 16:02:06 +00:00 |
|
 Nate DrakeandGitHub
|
139de283cc
|
Add missing space to fix markdown code rendering (#45621)
Signed-off-by: Nate Drake <ndrake@gmail.com>
|
2026-01-22 15:59:24 +01:00 |
|
 rmartincandMarek Posolda
|
7e20b87136
|
Add abstract property for themes and do not display base for selection
Closes #41924
Signed-off-by: rmartinc <rmartinc@redhat.com>
|
2026-01-21 15:42:52 +01:00 |
|
 Alexander SchwartzandGitHub
|
cc8947a060
|
Keycloak should not allow matrix parameters in URLs as we don't use them
Closes #45533
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-01-20 19:45:02 -03:00 |
|
 Martin BartošandGitHub
|
1138952ba7
|
Provide HTTP access logs written to file with rotation (#45437)
Closes #41353
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
|
2026-01-20 15:16:33 +01:00 |
|
 Alexander SchwartzandGitHub
|
dd0214bc78
|
Do not use whitelist/blacklist in the UI
Closes #45539
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
|
2026-01-20 11:12:23 +01:00 |
|