e9e38fd77b
chore: Bump to 7.44.0-SNAPSHOT in main ( #252 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-02-02 15:32:01 +02:00
8de18ae530
chore: Bump to 7.43.0-SNAPSHOT in main ( #242 )
...
* chore: Bump to 7.43.0-SNAPSHOT in main
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-01-13 17:49:00 +02:00
79e0bf9966
chore: Update pom.xml license years ( #239 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-01-12 13:56:49 +02:00
f148697f95
chore: Bump to 7.42.0-SNAPSHOT in main ( #220 )
...
merged by API
2021-12-22 13:18:55 -05:00
d38d4391c1
chore: Bump to 7.41.0-SNAPSHOT in main ( #187 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-12-01 17:15:14 +02:00
388a5183be
feat: native auth on Kubernetes ( #171 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-11-25 14:48:55 +01:00
e71e5cff0d
chore: Bump to 7.40.0-SNAPSHOT in main ( #179 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-11-10 13:06:41 -05:00
9c05838b41
chore: Bump to 7.39.0-SNAPSHOT in main ( #169 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-10-20 13:30:29 +03:00
697253e50e
fix: Token validity check ( #136 )
...
Handle missing or expired token with a 401 HTTP status instead of 500
with OpenShift OAuth the same as it is already done with Keycloak.
Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2021-09-30 12:24:51 +02:00
07142c8626
chore: Bump to 7.38.0-SNAPSHOT in main ( #149 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-09-30 10:26:08 +03:00
359ebb32bc
build: Transition from Java EE to Jakarta EE ( #80 )
...
* Upgrade swagger-ui-3.51.2
* Upgrade tomcat 10.0.10
* changed only imports
* changed imports in service loader
* changed swagger jaxrs deployment
* Changed swagger annotations + basic imports
* Changed imports and minimal key length for jsonwebtoken
* Restassured API changes + imports
* Removed trailing slash from CHE_HOME
* Migrate to jakarta schema in web.xml
* Disable tracing
* New artifacts and maven build upgrade
* Removed jackson-jaxrs-json-provider from wsmaster war
* Fixed KeycloakServletModuleTest and forked TracingFilter
* Removed unused dependecies
2021-09-13 08:20:09 +03:00
981c04c41e
chore: Bump to 7.37.0-SNAPSHOT in main ( #96 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-09-09 08:32:24 +03:00
fa87ca0772
chore: Bump to 7.36.0-SNAPSHOT in main ( #87 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-08-19 11:25:35 +03:00
629cc75716
fix: If internal links are not specified, the external one should be used ( #45 )
...
* Don't set public url value to internal url settings.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-08-03 10:23:34 +03:00
ccb8e4b63e
chore: Bump to 7.35.0-SNAPSHOT in main ( #67 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-07-29 08:49:49 +03:00
46ce6a74e5
test: Upgrade of the testing dependencies ( #40 )
2021-07-19 10:56:11 +03:00
2cad39d915
chore: Bump to 7.34.0-SNAPSHOT in main ( #46 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-07-13 11:59:29 +03:00
2c1e47441e
fix: more correct error handling in case of keycloak brokering errors
2021-06-30 19:25:26 +03:00
2b4662c2f8
chore: Bump to 7.33.0-SNAPSHOT in main ( #31 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-06-18 13:46:04 +03:00
d1546baa17
fix: Continue user deletion if user cannot be found in KeyCloak
...
Signed-off-by: David Kwon <dakwon@redhat.com>
2021-06-15 11:12:37 +02:00
de23a6c8b8
feat: New authentication on OpenShift with devworkspaces ( #1 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
Co-authored-by: Max Shaposhnik <mshaposh@redhat.com>
2021-06-04 23:07:40 +02:00
d981eed3ee
[release] Bump to 7.32.0-SNAPSHOT in main
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-05-26 15:33:43 +00:00
6670c6986b
Upgrade license
2021-05-20 17:05:45 +03:00
98b66ff1f6
Upgrade maven plugin configuration. Made pom.xml independent from che-parent
2021-05-20 16:53:16 +03:00
d895267e89
use dynamic port for tests using WireMockServer ( #19791 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-05-12 14:57:39 +02:00
406bc7b164
[release] Bump to 7.31.0-SNAPSHOT in master ( #19760 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-05-10 12:01:20 +03:00
89082a98ad
[release] Bump to 7.30.0-SNAPSHOT in master ( #19592 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-04-16 17:44:31 +03:00
6e958bbd63
[release] Bump to 7.29.0-SNAPSHOT in master ( #19397 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-03-25 14:29:29 +02:00
85f4b135ef
Add documentation to monitoring and openID ( #19285 )
...
* added documentation files
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-03-19 14:52:14 +02:00
f889e0399e
[release] bump to 7.28.0-SNAPSHOT version ( #19290 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-03-16 09:48:14 -04:00
a61b82f0e3
Set public url for public keycloak endpoints ( #19096 )
...
* Set public url for public keycloak endpoints
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-02-19 12:44:03 +02:00
0d0a68fc00
Obtain and persist Bitbucket personal access token as k8s secret ( #18726 )
...
* Obtain and persist Bitbucket personal access token as k8s secret
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-02-11 16:17:13 +02:00
d51e1d0edf
[release] Bump to 7.27.0-SNAPSHOT in master ( #19042 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-02-11 15:28:53 +02:00
f09d3b7356
[release] Bump to 7.26.0-SNAPSHOT in master ( #18882 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-01-26 15:05:14 +02:00
9461a5dabe
Fix account linking url for frontend. ( #18815 )
...
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-01-18 14:46:21 +02:00
bd3d5eae49
Merge branch 'pr-master-to-7.25.0-SNAPSHOT' of github.com:eclipse/che into pr-master-to-7.25.0-SNAPSHOT ( #18760 )
...
* [release] Bump to 7.25.0-SNAPSHOT in master
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
* [release] Bump to 7.25.0-SNAPSHOT in master
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-01-11 09:25:22 +02:00
7ee6ef3d42
Fix che-server when used external oidc provider. ( #18563 )
...
* Fix che-server when used external oidc provider. Refactor code related to internal network. Add more tests, java docs.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-12-16 18:02:10 +02:00
46dc9ac8ad
[release] Bump to 7.24.0-SNAPSHOT in master ( #18595 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-12-14 08:55:15 -05:00
6d19631635
Fixing NPE in the 'KeycloakSettings'
...
Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>
2020-12-04 15:43:43 +01:00
84f83abfc7
Allow to replace backslash in usernames during first login ( #18425 )
...
* Allow replacing backslash in usernames during the first login
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-12-02 16:25:26 +02:00
4100db3053
Add ability to use internal network for keycloak. ( #18225 )
...
* Add ability to use internal network for keycloak.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-11-26 17:27:18 +02:00
60aa069746
[release] Bump to 7.23.0-SNAPSHOT in master ( #18418 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-11-23 14:20:16 +02:00
0af5ef8954
[release] Bump to 7.22.0-SNAPSHOT in master ( #18246 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-10-30 12:26:31 +02:00
577bf2955c
[release] Bump to 7.21.0-SNAPSHOT in master ( #18091 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-10-13 02:55:44 +03:00
fb8c94a614
Remove user from keycloak server on BeforeUserRemovedEvent ( #17858 )
...
* Remove user from Keycloak server on BeforeUserRemovedEvent
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2020-10-01 15:01:38 +03:00
ee55d0e66e
[release] Bump to 7.20.0-SNAPSHOT in master ( #17900 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-09-24 15:27:20 +03:00
cc302641fe
[release] Bump to 7.19.0-SNAPSHOT in master ( #17708 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-08-27 16:04:22 +03:00
90548b2d33
[release] Bump to 7.18.0-SNAPSHOT in master
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-08-07 18:24:10 +02:00
14aaa7530f
[release] Bump to 7.17.0-SNAPSHOT in master ( #17422 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-07-16 13:20:27 +03:00
5d51b28d83
Use proxy authenticator on Keycloak Settings retrieval;
2020-07-10 13:55:51 +03:00
9bbb5eab8e
[release] Bump to 7.16.0-SNAPSHOT in master ( #17249 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-06-26 18:10:09 +03:00
5c580b1875
[release] Bump to 7.15.0-SNAPSHOT in master ( #17085 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-06-04 13:24:48 +03:00
0419084717
[release] Bump to 7.14.0-SNAPSHOT in master ( #16931 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-05-18 12:41:27 +03:00
93ba5ef2f3
Rebalancing maven module execution order ( #16497 )
...
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-05-06 14:54:38 +02:00
fa9f6d5eba
[release] bump master to 7.13.0-SNAPSHOT ( #16739 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-04-24 14:40:41 +03:00
07eafb32a3
[release] Bump to 7.12.0-SNAPSHOT in master ( #16562 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-04-08 13:13:48 +03:00
55ac5964dd
Set next development version ( #16309 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2020-03-13 21:34:45 +02:00
c3f09baac0
[release] Bump to 7.10.0-SNAPSHOT in master branch ( #16081 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-02-20 12:28:58 +02:00
987e484c06
Set new development version in master branch ( #15880 )
2020-01-30 15:38:59 +02:00
dcf2e1ee5f
RELEASE: Set next development version ( #15632 )
2020-01-09 13:51:20 +02:00
fce1fe9e2c
RELEASE: Set next development version ( #15528 )
2019-12-19 11:07:35 +02:00
ce64b1966e
Restructurize auth modules and remove reduntant one
2019-12-11 11:19:54 +02:00
6cabdeff4d
RELEASE: Set next development version ( #15360 )
2019-11-29 10:27:33 +02:00
11bbcf0c10
Use cached sessions behind any of the login filters
2019-11-09 09:50:54 +02:00
e5d31ff913
RELEASE: Set next development version ( #15141 )
2019-11-07 17:14:27 +02:00
41d48bf2de
RELEASE: Set next development version ( #14904 )
2019-10-17 15:45:06 +03:00
4e1492b08f
RELEASE: Set next development version ( #14690 )
2019-09-27 22:52:26 +03:00
87056fe29e
RELEASE: Set next development version
2019-09-05 14:54:52 +02:00
ae8fedc411
RELEASE: Set next development version ( #14238 )
2019-08-14 19:32:18 +03:00
03da1e24e4
RELEASE: Set next development version ( #14026 )
2019-07-25 15:43:30 +03:00
79c6ec0703
Initial cleanup of che6 legacy code ( #13788 )
...
cleanup of che6 legacy code
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
* Remove/disable GWT-related code in Java selenium E2E tests (#13829 )
Signed-off-by: Dmytro Nochevnov <dnochevn@redhat.com>
2019-07-23 15:12:27 +02:00
939dfbe016
fix #13660 - Replace mentions of 'oAuth', by more accurate 'OAuth'. (See https://oauth.net/ ) ( #13664 )
...
Signed-off-by: Fabrice Flore-Thébault <ffloreth@redhat.com>
2019-07-10 11:31:09 +02:00
ccc8e38823
RELEASE: Set next development version ( #13711 )
2019-07-05 13:08:59 +03:00
385c21284d
Set version 7.0.0-rc-3.0-SNAPSHOT (rc in lowercase) ( #13655 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-07-01 17:40:14 +03:00
65bb7943a0
Set new version 7.0.0-RC-3.0-SNAPSHOT ( #13651 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-07-01 14:02:19 +03:00
70c3e5b091
RELEASE: Set next development version ( #13564 )
2019-06-19 12:55:16 +03:00
64129a8d44
RELEASE: Set next development version ( #13460 )
2019-06-03 16:28:42 +03:00
dd1d9b5a58
switch to RC version scheme ( #13424 )
2019-05-28 13:52:49 +03:00
c90a52941a
Restore account linking on newest keycloak versions
...
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2019-05-23 10:32:57 +03:00
ffb8a3e013
RELEASE: Set next development version ( #13377 )
2019-05-22 09:52:28 +03:00
53cb2c53fa
RELEASE: Set next development version ( #13264 )
2019-05-05 12:24:42 -04:00
e60598bdaf
RELEASE: Set next development version ( #13102 )
2019-04-10 17:13:01 +03:00
f95947ad5d
Move master related code out of plugins ( #13004 )
...
* Move master related code out of plugins
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2019-03-29 14:05:31 +02:00
0abdc77ea0
RELEASE: Set next development version ( #12922 )
2019-03-19 15:56:30 +02:00
315767ea5d
NopTracer is used if tracing is not enabled ( #12897 )
...
* NopTracer is used in tracing is not enabled
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2019-03-19 09:44:49 +02:00
0881493644
RELEASE: Set next development version ( #12777 )
2019-02-27 16:02:33 +02:00
3778f01220
RELEASE: Set next development version ( #12768 )
2019-02-27 11:50:40 +02:00
3bef71020f
Adding tracing tags to workspace related operations ( #12652 )
...
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2019-02-25 12:11:25 +02:00
a694c4f971
RELEASE: Set next development version ( #12596 )
2019-02-06 18:22:35 +02:00
4ad10f2218
RELEASE: Set next development version ( #12441 )
2019-01-16 11:51:02 +02:00
b872b317cb
RELEASE: Set next development version ( #12277 )
2018-12-26 13:04:51 +02:00
45490d2a3b
RELEASE: Set next development version ( #12115 )
2018-12-05 18:33:02 +02:00
99afaef87f
RELEASE: Set next development version ( #11930 )
2018-11-14 12:29:03 +02:00
365d25f275
RELEASE: Set next development version ( #11710 )
2018-10-24 16:38:03 +03:00
534a961e84
Provide better compatibility with alternate OIDC providers ( #11090 )
...
Currently in Che there are still a number of requirements in upstream that are not required by the OIDC specification, so that Che still cannot be used with a number of OIDC compliant providers.
For example, in order to have Che working with the [`node-oidc-provider`](https://github.com/panva/node-oidc-provider ), the following changes were necessary:
- Remove the requirement to have the email as a claim in the JWT access
token: this is not required the specification and is not supported by a
number of OIDC providers. Normally, the Id token contains such claims.
So now if the email is not in the JWT token the first time the user connects to Che, ten the email is retrieved from the OIDC provider through its `user-profile` endpoint.
- Explicitely specify the the `openid email profile` scope when requesting the access token. Because OIDC providers, when answering to the `userInfo` endpoint, are expected to return claims that corresponds to the scopes of the access token. So if an access token has the `openid` scope only, the `userinfo` might return no claim at all (according to the specification).
Until now it was working since keycloak allows adding claims to the returned tokens anyway.
- Allow supporting fixed redirect Uris: most OIDC providers support having a list of redirect URIs to come back to after the authorization step. But these authorized Uris don't necessarily support wildcards or prefix. Che doesn't support this currently, and these changes introduce 2 fixed callback HTML pages that redirect to the Dashboard / IDE URL of the final page we want to come back to after authentication. This makes Che compatible with more OIDC providers
We introduced a new boolean property to enable / disable fixed redirect URLs:
`che.keycloak.use_fixed_redirect_urls`
whose default value is `false`
- The previous points required some light changes in the Keycloak Javascript adapter file, that we will submit as a PR to the Keycloak project. I, the meantime the `OIDCKeycloak.js` file is still used, but has been updated to be now based on the `keycloak.js` file of the last `4.5.0-final` Keycloak release. This will make this Keycloak PR easier to get accepted.
Please keep in mind that this version upgrade only impacts the alternate OIDC provider case: when using a real Keycloak server, Che *always uses the `keycloak.js` file provided by the Keycloak server*.
Signed-off-by: David Festal <dfestal@redhat.com>
2018-10-10 20:52:35 +02:00
65bd65e23b
Upgrade to new dependency mockito-testng ( #10647 )
2018-10-10 13:58:33 +03:00
63b389c2fe
RELEASE: Set next development version ( #11434 )
...
* RELEASE: Set next development version
2018-10-04 18:25:39 +03:00
f838ea5a60
Add extra workspace existence check before creating keypair
2018-09-19 16:59:22 +03:00
ea410c3340
RELEASE: Set next development version ( #11169 )
2018-09-12 11:53:42 +03:00
6a55994f07
Fix scope of test dependencies
...
It allows to build a project without tests compiling
2018-09-04 11:07:00 +03:00
che-bot