v18.0.0

• [deps] Update Keycloak dependencies to 18.0.0

• [compatibility] Dropping compatibility support for Keycloak versions before 18.0.0

  This means I will no longer check if this extension is compatible with versions before 18.0.0.

⚠️ Compatibility issues:

Due to a refactoring of Keycloak's ResourceStore API this extension will no longer be backwards compatible with Keycloak versions < 18.x.

For details please see keycloak/keycloak@99c06d1 and keycloak/keycloak#10447

v17.0.0

• [deps] Update Keycloak dependencies to 17.0.0

• [compatibility] Dropping compatibility support for Keycloak versions before 15.1.1

  This means I will no longer check if this extension is compatible with versions before 15.1.1. Though any future versions may be compatible, I will no longer ensure such compatibility.

• [deprecation] Deprecating support for Wildfly-based Keycloak distro

  This means that from now on new features may not be compatible with the Wildfly-based distro. However, I will try to keep this extension compatible with the Wildfly-based Keycloak distro until the Keycloak team fully drops support.

v16.0.1

• [deps] Update Keycloak dependencies to 16.1.0
• [bug] NullpointerException when authenticator is not configured (#53)

v16.0.0

• Update Keycloak dependencies to 16.0.0

v15.2.0

• Update Keycloak dependencies to 15.1.0
• Support policy-based access restrictions to leverage Keycloak's resources, permissions, and policies.
  This is only supported for confidential OIDC clients with authorization enabled.
• Support adding additional mechanisms to enable and evaluate client access restrictions by a custom SPI.
  The SPI is marked internal for now and may change or even be removed anytime without prior notice.
• Tested to support Quarkus-based Keycloak.X distribution.

⚠️ Configuration changes:

• The way to configure a custom client role name has changed. It needs to be configured via the newly introduced custom SPI.
• The way to install the authenticator has changed. It needs to be deployed as a provider/module now instead as a deployment.

Please check the README of this release version for installation and configuration instructions.

v15.1.0

• Update Keycloak dependencies from version 15.0.0 to 15.0.2
• Support policy-based access restrictions to leverage Keycloak's resources, permissions, and policies.
  This only works on confidential OIDC clients with authorization enabled.
• Support adding additional mechanisms to enable and evaluate client access restrictions by a custom SPI.
  The SPI is marked internal for now and may change or even be removed anytime without prior notice.

⚠️ Configuration changes:

• The way to configure a custom client role name has changed. It needs to be configured via the newly introduced custom SPI.
• The way to install the authenticator has changed. It needs to be deployed as a provider/module now instead as a deployment.

Please check the README of this release version for installation and configuration instructions.

v15.0.0

• Update Keycloak dependencies from version 14.0.0 to 15.0.0

⚠️ Installation/Configuration changes:

With the next version (probably 15.1.0) the way to install and configure the authenticator will be changed. Please make sure you are using the installation instructions for this version and not latest from the main branch.

v14.0.2

• Support configuration of custom error message when access is restricted

v14.0.1

• Support HTML error page instead of OAuht2 error message (JSON) when request is an HTML request (e.g. in Browser Flow instead of Direct Grant)

v14.0.0

• Update Keycloak dependencies from version 13.0.1 to 14.0.0