83676bf927
Extract JUnit5 support in the distributoin testsuite to a separate module
...
Closes #19552
2023-04-11 10:48:56 +02:00
615dc89e13
14613 increase max URI and header length to Wildfly defaults ( #19551 )
2023-04-05 18:21:53 +00:00
d540f449f0
Upgrade agroal ( #17642 )
...
Closes #17161
2023-04-04 20:21:42 +02:00
1c9992fdae
Removed lots of unnecessary quotes and allowed passing quoted argument values
...
Closes #16189
Closes #16319
2023-04-04 11:53:47 -03:00
c6f13363b9
Add nashorn javascript engine to Keycloak server
...
closes #17671
2023-04-04 14:56:46 +02:00
d857ea8ec2
Removing custom classloader and allow loading drivers at runtime
...
Closes #13205
Co-authored-by: Brett Lounsbury <brett.lounsbury@nasdaq.com>
2023-03-31 18:05:55 +02:00
5202ba0245
Set default object store directory for quarkus transaction-manager via application.properties
2023-03-30 17:24:04 +02:00
cda0c9dce0
Avoid initing the profile multiple times during re-augmentation
...
Closes keycloak#19324
2023-03-27 14:39:48 -03:00
aa9744246c
NPE on welcome page when 'spi-theme-default' doesn't exists #15476
...
closes #15476
2023-03-27 09:23:08 +02:00
251f6151e8
Rework the Import SPI to be configurable via the Config API
...
Also rework the export/import CLI for Quarkus, so that runtime options are available.
Closes #17663
2023-03-24 15:28:55 -03:00
c366901224
Fix dist build race condition
...
Closes #19251
2023-03-22 18:44:54 -03:00
513bb809f3
Add a map storage global locking implementation for JPA
...
Closes #14734
2023-03-21 08:21:11 +01:00
bef0a4a6f1
Check frontendUrl in the hostname providers
...
Closes https://github.com/keycloak/keycloak/issues/17686
2023-03-20 18:54:58 -03:00
ce1e0a65e7
Add keycloak-rest-admin-ui-ext to quarkus app ( #17650 )
...
Fixes #17649
2023-03-14 14:35:08 +00:00
96aa4b3394
Add Maven build for the Admin UI ( #17552 )
2023-03-13 18:16:12 +00:00
4c4b266cb4
#16226 explicitly set UTF-8 as stdin and stdout encoding
2023-03-13 14:01:40 +01:00
af475ffe23
Fixing classloading issue due to the curated application being eagerly closed
2023-03-13 09:34:49 +01:00
31e4c5cb7e
Add `storage-jpa-db` property into Quarkus. Distinguish postgres and crdb for jpa map store.
...
Closes #17305
2023-03-09 11:09:56 +01:00
bc0e2d04b7
Make Keycloak container working on FIPS environment - adding sqlite-libs package back to the dist
...
closes #17253
2023-03-09 10:38:26 +01:00
4cf5c11020
Fix start-dev mode on Windows by avoiding backslashes escaping expressions
...
Closes #17413
2023-03-07 10:38:43 -03:00
f6f179eaca
Rework the export to use CLI options and property mappers
...
Also, adding the wiring to support Model tests for the export.
Closes #13613
2023-03-07 08:22:12 +01:00
6d2e57f93a
Move Keycloak JS into the NPM workspace ( #17401 )
2023-03-03 13:56:53 +01:00
972ebb9650
Use a valid SemVer format for the SNAPSHOT version ( #17334 )
...
* Use a valid SemVer format for the SNAPSHOT version
* Update pom.xml
* Update pom.xml
---------
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
2023-03-03 11:11:44 +01:00
4a96afb374
Removing nonexistent path '../lib/bootstrap/*' from the classpath ( #15914 )
...
Closes #15911
2023-03-01 16:14:19 -03:00
42f66f2c6f
Avoid recording metrics for http server endpoints while they contain resource IDs
...
Closes #17281
2023-03-01 09:58:30 +01:00
9874da150e
Avoid resolving expressions twice but rely on MP config expression support
...
Closes #16573
2023-03-01 09:22:27 +01:00
8a2d645dd4
Avoid internal server error when root path and non-appliation root path are both set and the wrong metrics/health endpoint is called.
...
Fixes #17166
Avoid internal server error when root path and non-appliation root path are both set and the wrong metrics/health endpoint is called.
Fixes #17166
2023-02-27 11:14:10 -03:00
2b98fcdecb
Support for standard Forwarded header
...
Closes #11580
2023-02-22 19:28:04 +01:00
f91ac2970d
Polish fips-mode switch for preview ( #17228 )
...
* Polish fips-mode switch for preview
Closes #17208 #17210
Co-authored-by: mposolda <mposolda@gmail.com>
2023-02-22 12:12:52 +01:00
4f068fcdcc
Make https-trust-store-type set to bcfks by default in strict-mode
...
Closes #17119
2023-02-16 08:00:21 -03:00
e76418e3de
Removing unused code, as JPA Map storage always uses JTA nowadays
...
Closes #13222
2023-02-16 11:08:37 +01:00
febe134d5b
Make the event listeners specific to the persistence unit
...
Closes #13219
2023-02-16 11:08:15 +01:00
3be2775f9e
Do not enable storage chm by default if db option is set
2023-02-16 08:30:45 +01:00
fbc9177f27
Doublecheck if we need to override properties in java.security
...
Closes https://github.com/keycloak/keycloak/issues/16702
2023-02-15 12:33:48 +01:00
1f929c78af
Make lockTimeout more friendly for JPA map storage
...
Closes #16616
2023-02-15 10:38:18 +01:00
6319b462c7
Upgrade to ubi9 parent image
...
This PR switches the Quarkus Dockerfile to use `ubi9` parent images instead of `ubi8` ones.
ubi-null.sh has some minor changes to handle differences in RHEL 9. It's also been renamed.
Closes #17057
2023-02-14 09:46:58 +01:00
a266cdcba9
Fix bug, add tests
2023-02-13 17:09:36 -03:00
a57821ed80
Fix JDK 17 InaccessibleObjectException with infinispan
2023-02-13 17:09:36 -03:00
2059ffb219
Make sure the distribution is using FIPS providers
...
Closes #12428
2023-02-10 17:26:55 +01:00
22e256149c
Make it possible to run the embedded distribution in FIPS mode
...
Closes keycloak#16962
2023-02-09 16:14:01 -03:00
610e3044ad
Minimize the RPM content of the Quarkus container
...
Even though we use `ubi8-minimal` as the parent of our container, it
still has many RPMs installed that aren't necessary to run the Keycloak
server. Also, since the JDK RPM (that we install on top of
`ubi8-minimal`) is designed for general use, it pulls in more dependency
RPMs than it strictly needs to, like cups and avahi. Keycloak will never
need to access a printer itself!
Trimming down these excess RPMs will improve our CVE statistics with
automated scanners, and therefore let us perform fewer CVE rebuilds.
`ubi8-null.sh` uses the low-level `rpm` command to identify and forcibly
remove dependencies and operating system files that are not required to
boot our Quarkus-based server. This includes `microdnf` and `rpm`
itself! I have preserved bash however, so it's still possible to debug
the container from a shell.
I've created an initial set of allow/disallow lists, that seems to pass
a smoke test (server boots, admin console works). This leaves 37
packages installed, with 96 removed relative to `ubi8-minimal`. We could
go more minimal than this, or less minimal if required. Trial and error
is required.
Closes #16902
2023-02-09 11:20:09 +01:00
fc9e9e6fda
Add support for file store configuration into Quarkus
...
Closes #16821
2023-02-08 14:49:53 +01:00
4782a85166
Remove old admin console feature ( #16861 )
...
* Remove old admin console feature
Closes #16860
* Update help txt files for Quarkus tests
2023-02-07 12:59:35 +01:00
263e86e434
Support paths without a beginning slash when setting the root path
...
Closes #16002
2023-02-02 17:41:22 +01:00
b5fb528508
Do not enable caching metrics by default and provide a guide
...
Closes #16751
2023-02-01 18:55:43 +01:00
c6aba2e3de
Make LockAcquiringTimeoutException a RuntimeException
...
Closes #16690
2023-01-31 08:21:32 +01:00
7933f0489d
Align startup of Quarkus with the regular startup to ensure boostrap locks are created.
...
Also fixing an issue where DBLockGlobalLockProviderFactory held on to an old session, which lead to a closed DB connection on Quarkus.
Closes #16642
2023-01-30 12:59:40 +01:00
a804400c84
Added KERBEROS feature. Disable it when running tests on FIPS
...
closes #14966
2023-01-25 18:38:46 +01:00
54c34dc75b
15901 enabled Infinispan metrics
2023-01-25 04:26:35 -08:00
8d05895adb
Move Admin REST extension to main repository ( #16530 )
...
Closes #16529
2023-01-19 13:06:21 +01:00
Pedro Igor
Sebastian Schuster
Václav Muzikář
mposolda
sbrajchuk
Pedro Hos
Alexander Schwartz
rmartinc
Thomas Darimont
Jon Koops
Simon Bäurle
vramik
Alexander Schwartz
hanouard
Joerg Matysiak
Michal Hajas
Alex Szczuczko
Stian Thorgersen
Sebastian Schuster