Commit Graph

  • 55126dc916 Fix temporary password not persisting UPDATE_PASSWORD for AD federated users main Stefan Guilhen 2026-05-22 16:45:18 -03:00
  • 3e8a1310d9 Enable configurable client_id parameter validation for federated client assertions (#48026) Sebastian Łaskawiec 2026-05-26 15:14:36 +02:00
  • 71e63e99dc moved AdminEnvironment to seperate file (#48039) Erik Jan de Wit 2026-05-26 13:19:08 +02:00
  • cc3cd11751 Account ResourceService user endpoint returns excessive user data in UMA-enabled realms release/26.4 Martin Kanis 2026-04-24 14:55:43 +02:00
  • 5f78513393 Tighten UNSAFE_PATH_PATTERN against encoded path-traversal terminators release/26.6 Ricardo Martin 2026-05-26 12:40:23 +02:00
  • 00afdeeb0b Use datatracker.ietf.org instead of www.rfc-editor.org for specs Ricardo Martin 2026-05-26 12:38:49 +02:00
  • 30a97da0f3 upgrade pnpm version (#48975) Steven Hawkins 2026-05-26 06:33:59 -04:00
  • d0590bc9b9 Fix location of SCIM resources so IDs don't appear twice in the URL Stefan Guilhen 2026-05-21 18:02:30 -03:00
  • 090549c7de Revert back to use Java 25 in FIPS CI scripts (#49290) Ricardo Martin 2026-05-26 12:07:38 +02:00
  • f6cca689c2 [26.6] Disable the Account UI when the ACCOUNT feature is disabled (#49303) Martin Bartoš 2026-05-26 12:01:14 +02:00
  • 3ed18221ec fix quick theme export to contain variables for both light and dark mode (#49125) (#49322) bu6n 2026-05-26 11:00:23 +02:00
  • 2e2d06dab7 [OID4VCI] Self-Signed x5c Bypasses Key Attestation Validation Dominik Schlosser 2026-05-05 18:53:28 +02:00
  • 5ec8540fa4 Upgrade playwright to avoid hangs on CI (#49307) Ricardo Martin 2026-05-26 08:31:56 +02:00
  • 77b1d13578 add revoke endpoint to issued credentials APIs Giuseppe Graziano 2026-05-25 15:14:57 +02:00
  • f6ad35bd2d [quarkus-next] Adapt LoggingDistTest to Quarkus access log masking and OTel sender changes quarkus-next Peter Zaoral 2026-04-24 18:10:09 +02:00
  • 12d8de6092 [quarkus-next] TracingProviderTest.spanInfo fails due to OTel 1.60 W3C random trace flag (#48555) Peter Zaoral 2026-04-30 19:09:58 +02:00
  • 5b4301c1ae Adapt to OTel instrumentation API change in ApacheHttpClientTelemetry (#47896) Peter Zaoral 2026-04-22 17:40:28 +02:00
  • 0620007966 Set quarkus version to 999-SNAPSHOT github-actions[bot] 2026-05-26 01:02:11 +00:00
  • 629e86afd2 Disable the Account UI when the ACCOUNT feature is disabled (#48807) nightly Martin Bartoš 2026-05-25 15:37:15 +02:00
  • 577bddb8e5 Fix broken SAML 2.0 specification links in documentation Angel-Tornero 2026-04-30 13:58:56 +02:00
  • 8171999894 feat(admin api v2): stricter Client v2 contracts (#48935) Michal Vavřík 2026-05-25 09:48:48 +02:00
  • 16b518b52d Issued credentials: Update db schema and admin rest api (#49201) jimmychakkalakal 2026-05-25 08:41:15 +01:00
  • a1bd1ab855 Introduce mechanism for different trust material sources (#48869) Dominik Schlosser 2026-05-25 08:12:28 +02:00
  • 2d56c49bef Bump the actions-dependencies group across 1 directory with 4 updates dependabot/github_actions/actions-dependencies-0364a8fb16 dependabot[bot] 2026-05-24 03:08:49 +00:00
  • 94dcc24a8d Upgrade playwright to avoid hangs on CI Ricardo Martin 2026-05-23 19:54:51 +02:00
  • 26ef6d1b08 task: using a beanparam for client listing options (#49074) Steven Hawkins 2026-05-22 13:54:20 -04:00
  • 2ffb8b676e fix: prevent service account name from being set in multi-namespace mode (#49036) Steven Hawkins 2026-05-22 13:40:31 -04:00
  • aea6b24242 fix: allowing the general use of synthetic wildcards (#48223) Steven Hawkins 2026-05-22 13:22:38 -04:00
  • 36513bae36 show/update credential attributes in admin/account ui (#49218) Giuseppe Graziano 2026-05-22 15:48:56 +02:00
  • 6b3241ea1f Fix Themes cross-reference AndyMunro 2026-05-21 11:11:59 -04:00
  • c3f34c3515 Tighten UNSAFE_PATH_PATTERN against encoded path-traversal terminators (#49000) Kosiorkosa47 2026-05-21 17:23:27 +02:00
  • 4090a86495 Remove explicit --shutdown-timeouts configuration from proxy example configurations Ryan Emerson 2026-05-21 15:08:34 +01:00
  • 8d24c2f13e Prevent access to the Admin API from external IP addresses for HAProxy Pedro Ruivo 2026-05-21 15:01:01 +01:00
  • da726a9123 Do not allow wildcards in the hostname for Valid Redirect Address Ricardo Martin 2026-05-21 15:42:04 +02:00
  • 630335ff21 Do not allow wildcards in the hostname for Valid Redirect Address Ricardo Martin 2026-05-21 15:41:40 +02:00
  • 0e54bf11e4 fix: extract 12 unsafe expression(s) to env vars dagecko 2026-05-21 09:32:43 -04:00
  • 7a76787e3e Reorder X509 validation to check revocation after trust Ricardo Martin 2026-05-21 15:30:03 +02:00
  • 3b940e65b5 Account API: Resource sharing endpoints ignore userManagedAccessAllowed realm setting Martin Kanis 2026-05-21 15:28:04 +02:00
  • ba5d4bf165 Account resource sharing resolves recipient by username before email, granting access to wrong user Martin Kanis 2026-05-21 15:27:30 +02:00
  • 4a1defaeab adds missing tests to TokenIntrospectionTest Giuseppe Graziano 2026-05-21 12:32:44 +02:00
  • f94a4a9a67 Traefik reencrypt documentation based on the quickstart Ruchika Jha 2026-05-21 13:30:35 +01:00
  • 2b92a7ee91 docs(workflows): fix offboarding example revoke-role role list format Stefan Guilhen 2026-05-21 09:28:42 -03:00
  • e7be3bd3d3 Add SPI option to disable FD_SOCK2 failure detection Pedro Ruivo 2026-05-20 16:10:59 +01:00
  • 0734d2506a Enable JGroups message stats Pedro Ruivo 2026-05-20 14:57:06 +01:00
  • 6ca3258d82 Disable single thread sender in JGroups Pedro Ruivo 2026-05-20 14:55:36 +01:00
  • 5268db0d42 Add SPI option to disable FD_SOCK2 failure detection Pedro Ruivo 2026-05-21 13:24:56 +01:00
  • feca053c2e Refactor legacy test suite's ExportImportResource (#48967) Šimon Vacek 2026-05-21 11:15:19 +02:00
  • 1637e10ddf [OID4VCI] Simplify JpaUserProvider.updateVerifiableCredential . Make sure OID4VCExportImportTest asserts equality of imported credentials closes #49199 mposolda 2026-05-21 09:43:37 +02:00
  • 2a86a960c7 Add area/admin/api-v2 to cloud-native team (#48639) Václav Muzikář 2026-05-21 10:44:32 +02:00
  • 0a7fff7102 Test migration util - Migrate runOnServer (#49170) Šimon Vacek 2026-05-21 10:14:04 +02:00
  • 69b3503a0f Use runOnServerMaster on LightWeightAccessTokenTest Closes #49192 rmartinc 2026-05-21 08:32:11 +02:00
  • 7c5192c0e0 [OID4VCI-HAIP] Revisit ABCA in connection with fapi-2-dpop-security-profile Thomas Diesler 2026-05-19 13:21:43 +02:00
  • 5778a322fc Support for user attributes and updating them (#49066) jimmychakkalakal 2026-05-21 07:42:11 +01:00
  • 27262be569 fix for service account role management in admin v2 (#48166) Erik Jan de Wit 2026-05-21 08:30:16 +02:00
  • 492d1f04cd Enforce access check when resolving users during client scope evaluation (#49124) Pedro Igor 2026-05-21 03:01:46 -03:00
  • 440f9a90f2 Move the rest of TestingResource methods to a utils-shared helper class (1/2) (#48722) Šimon Vacek 2026-05-21 07:55:20 +02:00
  • 00f1e40e96 Bump the npm-dependencies group across 1 directory with 27 updates dependabot/npm_and_yarn/js/npm-dependencies-eb3302e05e dependabot[bot] 2026-05-21 03:16:34 +00:00
  • a988875ac4 docs(workflows): fix offboarding example revoke-role role list format Thomas DELORGE 2026-05-20 23:31:45 +02:00
  • b6cd645683 fix not before validation Giuseppe Graziano 2026-05-20 19:12:27 +02:00
  • 8c19ab7502 fix not before validation Giuseppe Graziano 2026-05-20 19:08:11 +02:00
  • a1405663f7 Token introspection now validates audience claim. UserInfo endpoint rejects lightweight access tokens. Giuseppe Graziano 2026-05-06 12:40:45 +02:00
  • c15bcccf7b Adding blank lines at the beginning to render content correctly Alexander Schwartz 2026-05-20 17:24:10 +02:00
  • 23bac7b976 Add SPI option to disable FD_SOCK2 failure detection Pedro Ruivo 2026-05-20 16:10:59 +01:00
  • 6478d28784 Downgrade java version to 21 for the FIPS jobs Ricardo Martin 2026-05-20 17:00:13 +02:00
  • 87160a4e84 Missing and incorrect permission checks on organization invitation endpoints vramik 2026-05-18 16:08:39 +02:00
  • 6ef5a79876 [OID4VCI] Integration of user verifiable-credentials with credentials-endpoint and credential-offers closes #48547 mposolda 2026-05-18 09:13:46 +02:00
  • 228286f570 Enable JGroups message stats Pedro Ruivo 2026-05-20 14:57:06 +01:00
  • 75bc048774 Disable single thread sender in JGroups Pedro Ruivo 2026-05-20 14:55:36 +01:00
  • 6aeccb28cd [OID4VCI-HAIP] Treat attestation-based clients as confidential (#49155) Thomas Diesler 2026-05-20 14:50:43 +02:00
  • 59330ad543 Downgrade java version to 21 for the FIPS jobs Closes #49151 rmartinc 2026-05-20 11:35:11 +02:00
  • d0e0b0f1f7 Use EventAssertion in some remaining tests. Closes #49142 rmartinc 2026-05-20 08:44:51 +02:00
  • 03624df8db fix: simplifying quarkus integration test annotations (#48977) Steven Hawkins 2026-05-20 07:05:36 -04:00
  • 710539ca14 Add bottom padding on Authorization Evaluate results page Muhammed Oğuz 2026-05-20 11:29:27 +03:00
  • 3119efdb13 Improve handling for backchannel logout requests (#34104) (#34105) Thomas Darimont 2026-05-20 08:13:21 +02:00
  • 33f6f873fd Prevent access to user info if not the owner or requested of a resource (#49122) Pedro Igor 2026-05-20 02:54:53 -03:00
  • 4796207690 Wildcards should not be allowed if authority cannot be parsed (#607) (#49130) Ricardo Martin 2026-05-20 07:50:38 +02:00
  • 69182286ef Refactor AssertEvents expect() and related methods to use EventAssertion equivalents. (#48752) Lukas Hanusovsky 2026-05-20 07:18:03 +02:00
  • 4e9b17cbed Enforce owner checks when calling the resource set service (#49121) Pedro Igor 2026-05-20 00:24:16 -03:00
  • d791b270b9 Better check for authSessionCookie in SessionCodeChecks (#603) (#49134) Ricardo Martin 2026-05-20 05:16:17 +02:00
  • 7635dfbccc Filtering out headers from external IP addresses Pedro Ruivo 2026-05-19 22:55:50 +01:00
  • 2d1a24f501 Make all required actions one time action by default Ricardo Martin 2026-05-19 23:40:06 +02:00
  • 2c992a182f Reject CORS requests with invalid Origin before endpoint logic runs Yike Gao 2026-05-19 19:26:40 +01:00
  • 918a74f930 fix: updating the auto logic if the pod cannot be found (#49030) Steven Hawkins 2026-05-19 14:26:12 -04:00
  • 5d7bda083a fix: refining startup, and adding a log on async start error (#48733) (#48974) Steven Hawkins 2026-05-19 14:01:32 -04:00
  • c5bda802e9 fix not before validation Giuseppe Graziano 2026-05-19 17:02:35 +02:00
  • 56bbfa3d8a set only redirect_uri from client_data during restart Giuseppe Graziano 2026-04-28 11:58:13 +02:00
  • be84d28ce4 Fix parsing SAML11 incorrect requests. (#609) (#49119) Peter Skopek 2026-05-19 18:44:10 +02:00
  • 781e26cc5c chore(quarkus): avoid transitive kotlinx-metadata-jvm deployment-only dep Michal Vavřík 2026-05-19 18:40:08 +02:00
  • 3bf29d5a61 Unhandled NPE with alg:none JWT in Bearer Authentication Martin Bartoš 2026-05-19 18:38:56 +02:00
  • 17dd9f183a Fix MSSQL queries to work with case sensitive collations Pedro Ruivo 2026-05-19 17:38:17 +01:00
  • 38a811b759 [CVE-2026-7500] Improper Access Control on Keycloak Server when the account Account API feature is disabled Martin Bartoš 2026-05-19 18:38:03 +02:00
  • f4b4797929 Ensure MSSQL sever deployments have the IDX_IDP_FOR_LOGIN index created Stefan Guilhen 2026-05-19 13:37:34 -03:00
  • 92e58cb9e6 Fix virtual thread check Pedro Ruivo 2026-05-19 17:37:13 +01:00
  • 8a9d291b8b Remove form data from the registerNode and unregisterNode method signature Ricardo Martin 2026-05-19 18:36:57 +02:00
  • 42b831c4d7 Add id and description when building ResourceType representation Stefan Guilhen 2026-05-19 13:36:15 -03:00
  • 109e62a111 Remove form data from the registerNode and unregisterNode method signature Ricardo Martin 2026-05-19 18:35:02 +02:00
  • bf86b55b2c [CVE-2026-7500] Improper Access Control on Keycloak Server when the account Account API feature is disabled Martin Bartoš 2026-05-19 18:34:02 +02:00
  • 836ef86ec8 Upgrade to Quarkus 3.27.3.1 (#48690) Václav Muzikář 2026-05-19 15:57:36 +02:00
  • f0a567a73b Upgrade to Quarkus 3.20.6.1 (#48706) release/26.2 Václav Muzikář 2026-05-19 15:57:29 +02:00
  • fe667cdb10 Ignore oasis-open.org in ExternalLinksTest (#48682) (#48817) Ricardo Martin 2026-05-19 15:56:56 +02:00