Skip to content

Miscellaneous improvements #177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Apr 4, 2025
Merged

Miscellaneous improvements #177

merged 12 commits into from
Apr 4, 2025

Conversation

ostrya
Copy link
Collaborator

@ostrya ostrya commented Jan 20, 2025

No description provided.

If the redirect_uri as given by the client already contained (escaped) query
parameters or fragments, we previously ignored them and still appended a new
query or fragment part. With this fix, we now append our return values to the
existing parts, if necessary.

Signed-off-by: Kai Helbig <[email protected]>
@ostrya ostrya self-assigned this Jan 20, 2025
@ostrya ostrya force-pushed the miscellaneous-improvements branch from 27e81a2 to 3b3f2cc Compare January 20, 2025 06:58
Signed-off-by: Kai Helbig <[email protected]>
Instead of defining a list of resources to apply the roles to, the user can now
define a list of default audiences to add. In a new, separate setting, the user
can decide whether the roles given by the login shall be applied to the realm,
all audiences (which double as resources), or both.

This is a breaking API and behavior change!

Signed-off-by: Kai Helbig <[email protected]>
Yes, I know that Keycloak proper has stopped serving the keycloak.js file. But
since I want to stay somewhat backward-compatible regarding old Keycloak
versions, I should still ensure correctness.

Signed-off-by: Kai Helbig <[email protected]>
They have been deprecated for almost 4 years now. Let's drop them.

Signed-off-by: Kai Helbig <[email protected]>
and UI improvements for login page

Signed-off-by: Kai Helbig <[email protected]>
if you are still relying on the shipped js, you probably also want the old
version, as v26 introduced some breaking changes

Signed-off-by: Kai Helbig <[email protected]>
@ostrya ostrya force-pushed the miscellaneous-improvements branch from 3b3f2cc to 05fda28 Compare January 20, 2025 07:38
as there's no useful way of testing this

Signed-off-by: Kai Helbig <[email protected]>
@ostrya ostrya force-pushed the miscellaneous-improvements branch from 05fda28 to 9ac87bb Compare January 20, 2025 07:46
and add support for templated iframe

Signed-off-by: Kai Helbig <[email protected]>
@ostrya ostrya force-pushed the miscellaneous-improvements branch from 4dc22d0 to a737ad1 Compare April 4, 2025 09:24
@ostrya ostrya force-pushed the miscellaneous-improvements branch from a737ad1 to 922c163 Compare April 4, 2025 09:42
Signed-off-by: Kai Helbig <[email protected]>
@@ -145,7 +191,8 @@ void oob_redirect_location_is_generated_correctly() {
String redirectLocation = uut.getRedirectLocation(session, urlConfiguration);

assertThat(redirectLocation)
.isEqualTo("file:///oob-dummy?session_state=session123&state=state123&code=session123");
// converting to URI and back to String seems to drop the superfluous //, but that's OK
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the file protocol a relevant case for redirects? Otherwise the removal of "//" could make a difference ... Probably the parser does ignore the protocol or interprets it as the hostnname?

@ostrya ostrya merged commit 0900534 into main Apr 4, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants