Commit Graph

218 Commits

Author SHA1 Message Date
Sebastian Rose
4fb1c41155 Sending Mails via SMTP and XOAUTH2 authentication mechanism
Closes #17432

Signed-off-by: Sebastian Rose <sebastian.rose@gmail.com>
2025-03-21 10:12:18 +01:00
Stian Thorgersen
a18948f731
Reorder items in release notes for 26.2 (#38290)
Signed-off-by: stianst <stianst@gmail.com>
2025-03-20 11:52:53 +01:00
Alexander Schwartz
c9b88c6bf6
Finalizing release notes and documentation for initial rolling update
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
Alexander Schwartz
b5d8c46202
Fix links that have been moved
Closes #38190

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-18 13:36:41 +01:00
Marek Posolda
290905c9cf
Documentation for supported token-exchange (#38008)
closes #37126

Signed-off-by: Marek Posolda <mposolda@gmail.com>


Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-03-14 09:55:44 +01:00
Alexander Schwartz
151e019935
Make NetworkPolicy supported and enabled by default
Closes #36036

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-03-10 11:12:38 +01:00
Alexander Schwartz
bc7ec1208e
Enable the TLS based JGroups encryption by default and update the docs
Closes #37696

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 10:50:51 -03:00
Akbar Husain
9d3cfe0672
Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Michal Hajas
f54bb16a61
Add Grafana dashboards to release notes
Closes #37402

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-02-18 14:04:23 +01:00
rmartinc
6850f41060 Force login in reset-credentials to federated users
Closes #37207

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-02-12 13:47:39 -03:00
Alexander Schwartz
822eb4471d
Ensure a sufficient virtual threads pool (#37197)
Closes #37162

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-10 16:28:24 +01:00
Martin Bartoš
98f74026c6
Certificate reloading does not work for the management interface (#37052)
Fixes #37039

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-02-05 14:39:21 +01:00
Pedro Igor
602df06191 Allows querying credential from user storage providers
Closes #35020

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-02-05 07:56:05 -03:00
Martin Bartoš
20203746fb
Support ECS for logs
Closes #36854

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-04 17:59:30 +01:00
Ricardo Martin
8671f86046
Provide an option to force login after reset credentials (#36856)
Closes #36844

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: Ricardo Martin <rmartinc@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2025-01-28 18:35:02 +01:00
Giuseppe Graziano
bd807ceac3
Select auth flow via acr using client policies (#36441)
Closes #24297


Co-authored-by: Ben Cresitello-Dittmar <bcresitellodittmar@mitre.org>
Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2025-01-23 19:46:07 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-01-22 14:58:35 +01:00
rmartinc
f89be1813d Check next update time for CRL in certificate validation
Closes #35983

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-01-22 14:58:35 +01:00
Stian Thorgersen
fc2b9018f1
Extend REST API for login and admin events to support sync scenarios (#36601)
Closes #36600

Signed-off-by: stianst <stianst@gmail.com>
2025-01-20 14:32:55 +01:00
Alexander Schwartz
05e612bfb6
Moving the docs for password metrics to a new guide
Closes #36442

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2025-01-14 16:17:04 +00:00
Stian Thorgersen
bc2665fc2a
Re-order items in release notes for 26.1 (#36346)
* Re-order items in release notes for 26.1

Signed-off-by: stianst <stianst@gmail.com>

* Review (#161)

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-01-14 09:21:04 +00:00
Michal Hajas
3839f8e3b5
Add metric for password validations (#36049)
Closes #36048
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-01-07 10:05:47 +01:00
Marek Posolda
4ab34f4816
Updating release notes with core-clients contributions and features (#36066)
closes #35953

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-12-20 10:15:55 +01:00
Marek Posolda
a3fd076960
Adding ConditionalClientScopeAuthenticator (#36020)
closes #36081 

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-12-20 09:53:51 +01:00
Jan Verhaeghe
56246096e0
Align on one realm-name placeholder
Closes #36047

Signed-off-by: Jan Verhaeghe <jan@hwfaq.be>
2024-12-19 13:48:18 +00:00
Pedro Ruivo
3767642f93
[Operator] Network Policy Rules
Closes #35598

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-19 10:06:25 +01:00
Marek Posolda
47753b9624
Release note about node.js adapter and javascript adapter released in… (#35857)
closes #35856

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>

---------

Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
2024-12-13 09:38:55 +01:00
Martin Bartoš
41356dff24
Add Keycloak CR support for Tracing options (#35703)
Closes #32092

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-12 12:59:27 +01:00
Ricardo Martin
bbca6116b0
Implement a conditional authenticator to check if a sub-flow was executed or not previously in the process (#35668)
Closes #35231

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-12-12 11:16:30 +01:00
Martin Bartoš
8f2c825835
Enable opentelemetry feature by default (#35756)
Closes #35753

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-11 16:53:14 +00:00
Václav Muzikář
9993e17346
Ability to specify log category levels through separate options (#35138)
Closes #34957

Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-12-11 17:27:44 +01:00
Alexander Schwartz
7c4a5aed77
Restructuring the migration guide (#35724)
Closes #35487

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-12-10 12:07:32 +01:00
Stian Thorgersen
5bc4ab1429
Delete OpenShift 3.x identity provider (#34331)
Closes #34330

Signed-off-by: stianst <stianst@gmail.com>
2024-12-06 11:24:47 +01:00
Marek Posolda
d0cab170a3
Update release notes for Keycloak 26.1.0 with new community additions (#35590)
closes #35588

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-12-04 18:51:15 +01:00
Martin Kanis
20770d8aaa Fix upgrading guide about deprecation of getAll() methods in the organization APIs
Closes #34975

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-11-25 10:10:02 +01:00
Václav Muzikář
cf622e8d51
Update docs with security warning around client certificate lookup (#35222)
Closes #35217

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-11-22 10:12:21 +01:00
Martin Kanis
05116f7951 getAll() organization and organization members only returns the first 10 items
Closes #34975

Signed-off-by: Martin Kanis <mkanis@redhat.com>
2024-11-21 17:29:37 -03:00
Marek Posolda
a56378e989
Remove upgrading client libraries from the server documentation (#35101)
closes #34949

Signed-off-by: mposolda <mposolda@gmail.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-11-20 16:14:42 +01:00
Pedro Ruivo
d7e5319f70
Document network ports for Keycloak clustering
Also switch the default to jdbc-ping as this  should be a drop-in replacement looking at the networking behavior of udp.

Closes #34658

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-11-11 13:28:15 +01:00
Erik Jan de Wit
19ef0a608b
Add switch to toggle dark mode (#33822)
Closes #33821

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
2024-10-31 10:19:03 +00:00
Pedro Igor
4ad462fbd3 Do not rely on the pwdLastSet attribute when updating AD entries
Closes #34467

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2024-10-30 17:43:07 +01:00
Jon Koops
05e8b932c3
Add dark mode support to welcome theme and unify approach (#32495)
Closes #26178

Signed-off-by: Jon Koops <jonkoops@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
2024-10-04 08:27:37 -04:00
Alexander Schwartz
d8c8c6a0be
Fixing broken links after KC26 docs changes (#33577)
Closes #33576

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-04 13:59:47 +02:00
Stian Thorgersen
64e096d89c
Update 26_0_0.adoc
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
2024-10-04 10:54:19 +02:00
Stian Thorgersen
81f1974f7a
Re-order items in release notes for 26 (#33551)
Signed-off-by: stianst <stianst@gmail.com>
2024-10-04 06:47:08 +02:00
mposolda
41c72d46d2 Document users hashed passwords with argon2 does not work in FIPS environment
closes #33296

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-10-03 08:47:45 +02:00
Alexander Schwartz
cb12f03003
Rework AWS Lambda doc to show it is required (#33462)
Closes #33461
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-10-02 12:42:11 +02:00
Jon Koops
21704a70c1
Update documentation and release notes for Keycloak JS (#33409)
Closes #32843

Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-10-01 10:29:23 +02:00
Stan Silvert
b4a200d333
Fixes release notes section on new login theme, keycloak.v2 (#33359)
* Fixes #33351

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fixes #33351

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Ignore saml.xml.org because of expired cert.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2024-09-30 15:38:29 +02:00
Steven Hawkins
cf2ecf87f6
fix: add the proxy-protocol option (#33276)
* fix: add the proxy-protocol-enabled option

closes: #10492

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/reverseproxy.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-09-27 23:44:59 +02:00