Keycloak is an open source Identity and Access Management solution
aimed at modern applications and services. It makes it easy to
secure applications and services with little to no code.
===> The following configuration options are available for keycloak-26.8.2:
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
Reason:
The flavors -mysql and -postgres were removed, the necessary configuration
for those database backends was rolled into the base release by upstream.
The configuration files changed completely, so they need to be rebuilt from
scratch.
Mk/**java.mk: Convert bsd.java.mk to USES
The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
USES=java:build,run if NO_BUILD is undefined. Else it defaults to
USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>
Approved by: mat (portmgr), glewis
Differential Revision: https://reviews.freebsd.org/D48201
net/keycloak: Update 25.0.5 → 25.0.6 (fix CVE-2024-8698 CVE-2024-8883)
Changelog:
https://www.keycloak.org/2024/09/keycloak-2506-released.html
CVE-2024-8883 Vulnerable Redirect URI Validation Results in Open
Redirect
CVE-2024-8698 Improper Verification of SAML Responses Leading to
Privilege Escalation in Keycloak
PR: 281602
MFH: 2024Q3
net/keycloak: Update to 24.0.4
ChangeLog: https://www.keycloak.org/2024/05/keycloak-2404-released.html
Enhancements
#27508 Use new remote-store options in HA guides
#28429 Add details to error messages, especially around refresh tokens
#28729 Emphasize the need for setting container limit docs
#28880 Upgrade to Quarkus 3.8.4 dist/quarkus
#29183 Minor corrections to High Availability Guide docs
Bugs
#16345 Unable to delete realm names with invalid URL characters admin/api
(Only the first 15 lines of the commit message are shown above )
net/keycloak: update to 23.0.6
- Update to 23.0.6
- Add keycloak user and group
- Add pkg-message
- Add support for development(start-dev) and production (start) mode at rc
script
- Export JAVA_HOME from rc script
- Add keycloak build function into rc script
PR: 275658276859
Approved by: maintainer timeout (2 weeks)
net/keycloak: Update to 23.0.5
ChangeLog: https://www.keycloak.org/2024/01/keycloak-2305-released.html
New features
* Update Route53 HA guide to be compatible with ROSA and Openshift 4.14.x
* Remove conditional statements about Windows / Linux from the docs docs
Enhancements
* Role mapping tab no longer visible when using fine grained permissions after
upgrade from 20.0.3 to 21.0.2 admin/ui
* Clarification needed of use of containers
* Change RHDG references to Infinispan
(Only the first 15 lines of the commit message are shown above )
net/keycloak: Update to 20.0.5
ChangeLog: https://www.keycloak.org/2023/02/keycloak-2005-released.html
Bugs:
* Fine-grained authorization behavior for management of groups differs between
version 18.0.3 and 19.03, 20.0 keycloak-ui section/other
* Not able to see the events UI keycloak-ui section/events
* Keycloak 20.0.2-1 OutOfMemoryError in admin ui keycloak-ui section/clients
* SAML client import cert pem file for "Encryption keys config" broken
keycloak-ui section/clients
* Default value of `NameID policy format` is not correct in SAML Identity
Provider keycloak-ui section/identity providers
* Escape character in SAML response keycloak saml
* OfflineSessionPersistenceTest times out with session preloading keycloak
storage
PR: 269736
Reported by: freebsd@rheinwolf.de (maintainer)
MFH: 2023Q1 (bugfix release)
net/keycloak: Update to 20.0.3
ChangeLog: https://www.keycloak.org/2023/01/keycloak-2003-released.html
* User role mapping tab: Show effective client roles for a user keycloak-ui
section/users
* ProviderConfigProperty.MAP_TYPE error in new UI keycloak-ui section/identity
providers
* Unable to turn on "Bypass identity confirmation" keycloak-ui
section/authentication
* Adding Form sub-flow broken on admin v2 keycloak-ui section/authentication
* Custom User Provider SPI: There are no settings to configure the periodically
synchronization of users keycloak-ui section/user federation
* Assign roles to account - paging doesn't work keycloak-ui section/users
* Realm selector requires two clicks to select something keycloak-ui
(Only the first 15 lines of the commit message are shown above )
net/keycloak: Update to 20.0.2
ChangeLog: https://www.keycloak.org/2022/12/keycloak-2002-released.html
Enhancements
* Expiration for Admin Events
Bugs
* KC Operator Test WatchedSecretsTest.testSecretsAreWatched is unstable
* Error in Core? ( Clients Client details Dedicated scopes): Cannot read
properties of undefined (reading 'helpText')
* NPE in theme.getName() via getMainPage
* Failed to run scheduled task ClearExpiredAdminEvents Oracle
* Flaky test:
OpenshiftClientStorageTest.testCodeGrantFlowWithServiceAccountUsingOAuthRedirectReference
* SAMLFilterServletAdapterTest fails on Oracle
* Internal pipelines don't tests run for OracleDB or other database
* clientID are base64 encoded in state uri param with non URI friendly base64
PR: 268369
Reported by: freebsd@rheinwolf.de (maintainer)
net/keycloak: Update to 19.0.3
ChangeLog: https://www.keycloak.org/2022/10/keycloak-1903-released.html
* AdminV2 not using admin hostname keycloak-ui admin/ui
* Clear expired events errors keycloak storage
* CryptoIntegration fails to init on WebSphere Liberty keycloak
* keycloak 19 legacy: unable to deploy war-packaged user storage provider
keycloak storage
* Missing variable declaration in AuthZ JS keycloak adapter/javascript
* Browser-based flows not working properly due to 3rd party cookie policies on
Firefox
PR: 266939
Reported by: freebsd@rheinwolf.de (maintainer)
net/keycloak: Reduce pkg-plist future updates impact
- Use PLIST_SUB to reduce pkg-plist changes on future updates
- Not bumping PORTREVISION
Reported by: osa
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Fix CONFLICTS entries of multiple ports
There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.
This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.
Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
(Only the first 15 lines of the commit message are shown above )
