Set version to 3.4.3.Final

Include Jetty 9.1 in product profile
KEYCLOAK-6108 Remove DROP INDEX in postgres (handled automatically)
2018-01-04 08:16:17 +00:00 · 2018-01-04 09:14:05 +01:00 · 2018-01-04 09:03:57 +01:00 · 2018-01-04 09:03:57 +01:00 · 2018-01-03 08:10:46 +01:00 · 2018-01-02 15:15:47 +01:00
857 changed files with 17954 additions and 3673 deletions
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -206,6 +206,16 @@ public class AdapterDeploymentContext {
        public void setBearerOnly(boolean bearerOnly) {
            delegate.setBearerOnly(bearerOnly);
        }
+        
+        @Override
+        public boolean isAutodetectBearerOnly() {
+            return delegate.isAutodetectBearerOnly();
+        }
+        
+        @Override
+        public void setAutodetectBearerOnly(boolean autodetectBearerOnly) {
+            delegate.setAutodetectBearerOnly(autodetectBearerOnly);
+        }

        @Override
        public boolean isEnableBasicAuth() {
@@ -57,6 +57,8 @@ import java.util.Collections;
 import java.util.Date;
 import java.util.List;
 import java.util.concurrent.TimeUnit;
+import org.apache.http.client.params.ClientPNames;
+import org.apache.http.client.params.CookiePolicy;

 /**
 * Abstraction for creating HttpClients. Allows SSL configuration.
@@ -289,6 +291,7 @@ public class HttpClientBuilder {
                cm = new SingleClientConnManager(registry);
            }
            BasicHttpParams params = new BasicHttpParams();
+            params.setParameter(ClientPNames.COOKIE_POLICY, CookiePolicy.BROWSER_COMPATIBILITY);

            if (proxyHost != null) {
                params.setParameter(ConnRoutePNames.DEFAULT_PROXY, proxyHost);
@@ -154,6 +154,8 @@ public class KeycloakDeployment {
            log.debug("resolveUrls");
        }

+        authServerBaseUrl = authUrlBuilder.build().toString();
+
        String login = authUrlBuilder.clone().path(ServiceUrlConstants.AUTH_PATH).build(getRealm()).toString();
        authUrl = KeycloakUriBuilder.fromUri(login);
        realmInfoUrl = authUrlBuilder.clone().path(ServiceUrlConstants.REALM_INFO_PATH).build(getRealm()).toString();
@@ -390,7 +390,8 @@ public class OAuthRequestAuthenticator {
    protected String stripOauthParametersFromRedirect() {
        KeycloakUriBuilder builder = KeycloakUriBuilder.fromUri(facade.getRequest().getURI())
                .replaceQueryParam(OAuth2Constants.CODE, null)
-                .replaceQueryParam(OAuth2Constants.STATE, null);
+                .replaceQueryParam(OAuth2Constants.STATE, null)
+                .replaceQueryParam(OAuth2Constants.SESSION_STATE, null);
        return builder.build().toString();
    }
    
@@ -17,7 +17,9 @@
 package org.keycloak.adapters;

 import org.junit.Test;
+import org.keycloak.representations.adapters.config.AdapterConfig;

+import static org.junit.Assert.assertEquals;
 import static org.junit.Assert.assertFalse;
 import static org.junit.Assert.assertTrue;

@@ -46,4 +48,21 @@ public class KeycloakDeploymentTest {

        assertTrue(keycloakDeployment.isOAuthQueryParameterEnabled());
    }
+
+    @Test
+    public void stripDefaultPorts() {
+        KeycloakDeployment keycloakDeployment = new KeycloakDeployment();
+        keycloakDeployment.setRealm("test");
+        AdapterConfig config = new AdapterConfig();
+        config.setAuthServerUrl("http://localhost:80/auth");
+        keycloakDeployment.setAuthServerBaseUrl(config);
+
+        assertEquals("http://localhost/auth", keycloakDeployment.getAuthServerBaseUrl());
+
+        config.setAuthServerUrl("https://localhost:443/auth");
+        keycloakDeployment.setAuthServerBaseUrl(config);
+
+        assertEquals("https://localhost/auth", keycloakDeployment.getAuthServerBaseUrl());
+    }
+
 }
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-as7-integration-pom</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-as7-integration-pom</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-as7-integration-pom</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak AS7 / JBoss EAP 6 Integration</name>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak Jetty Integration</name>
@@ -33,6 +33,7 @@
    <modules>
        <module>jetty-core</module>
        <module>jetty8.1</module>
+        <module>jetty9.1</module>
        <module>jetty9.2</module>
        <module>jetty9.3</module>
    </modules>
@@ -46,7 +47,6 @@
                </property>
            </activation>
            <modules>
-                <module>jetty9.1</module>
                <module>jetty9.4</module>
            </modules>
        </profile>
@@ -21,7 +21,7 @@
 	<parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -159,10 +159,12 @@
                var callback = parseCallback(window.location.href);

                if (callback) {
-                    setupCheckLoginIframe();
-                    window.history.replaceState({}, null, callback.newUrl);
-                    processCallback(callback, initPromise);
-                    return;
+                    return setupCheckLoginIframe().success(function() {
+                        window.history.replaceState({}, null, callback.newUrl);
+                        processCallback(callback, initPromise);
+                    }).error(function (e) {
+                        initPromise.setError();
+                    });
                } else if (initOptions) {
                    if (initOptions.token && initOptions.refreshToken) {
                        setToken(initOptions.token, initOptions.refreshToken, initOptions.idToken);
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>
    <name>Keycloak OIDC Client Adapter Modules</name>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -4,7 +4,7 @@
    <parent>
      <artifactId>keycloak-parent</artifactId>
      <groupId>org.keycloak</groupId>
-      <version>3.4.1.Final-SNAPSHOT</version>
+      <version>3.4.3.Final</version>
      <relativePath>../../../pom.xml</relativePath>
    </parent>
    <artifactId>spring-boot-container-bundle</artifactId>
@@ -21,7 +21,7 @@
  <parent>
    <artifactId>keycloak-parent</artifactId>
    <groupId>org.keycloak</groupId>
-    <version>3.4.1.Final-SNAPSHOT</version>
+    <version>3.4.3.Final</version>
    <relativePath>../../../pom.xml</relativePath>
  </parent>
  <modelVersion>4.0.0</modelVersion>
@@ -132,10 +132,8 @@ public class KeycloakAutoConfiguration {
            loginConfig.addFirstAuthMethod("KEYCLOAK");

            deploymentInfo.setLoginConfig(loginConfig);
-
            deploymentInfo.addInitParameter("keycloak.config.resolver", KeycloakSpringBootConfigResolver.class.getName());
            deploymentInfo.addSecurityConstraints(getSecurityConstraints());
-
            deploymentInfo.addServletExtension(new KeycloakServletExtension());
        }

@@ -157,7 +155,6 @@ public class KeycloakAutoConfiguration {
                    undertowSecurityConstraint.addWebResourceCollections(webResourceCollection);

                }
-
                undertowSecurityConstraints.add(undertowSecurityConstraint);
            }
            return undertowSecurityConstraints;
@@ -280,6 +277,11 @@ public class KeycloakAutoConfiguration {

                for (String authRole : constraint.getAuthRoles()) {
                    tomcatConstraint.addAuthRole(authRole);
+                    if(authRole.equals("*") || authRole.equals("**")) {
+                        // For some reasons embed tomcat don't set the auth constraint on true when wildcard is
+                        // used
+                        tomcatConstraint.setAuthConstraint(true);
+                    }
                }

                for (KeycloakSpringBootProperties.SecurityCollection collection : constraint.getSecurityCollections()) {
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak Tomcat Integration</name>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -22,7 +22,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak WildFly Integration</name>
@@ -21,7 +21,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>

@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>

@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <name>Keycloak Adapters</name>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-saml-eap-integration-pom</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak SAML EAP Integration</name>
@@ -21,7 +21,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-saml-eap-integration-pom</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -56,6 +56,8 @@ import java.util.Collections;
 import java.util.Date;
 import java.util.List;
 import java.util.concurrent.TimeUnit;
+import org.apache.http.client.params.ClientPNames;
+import org.apache.http.client.params.CookiePolicy;

 /**
 * Abstraction for creating HttpClients. Allows SSL configuration.
@@ -288,6 +290,7 @@ public class HttpClientBuilder {
                cm = new SingleClientConnManager(registry);
            }
            BasicHttpParams params = new BasicHttpParams();
+            params.setParameter(ClientPNames.COOKIE_POLICY, CookiePolicy.BROWSER_COMPATIBILITY);

            if (proxyHost != null) {
                params.setParameter(ConnRoutePNames.DEFAULT_PROXY, proxyHost);
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak SAML Jetty Integration</name>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>
    <name>Keycloak SAML Client Adapter Modules</name>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak SAML Tomcat Integration</name>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-saml-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-saml-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-saml-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-saml-tomcat-integration-pom</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <name>Keycloak SAML Wildfly Integration</name>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>

@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
 		<relativePath>../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -20,7 +20,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>
    <name>Keycloak Client Adapter SPI Modules</name>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -7,7 +7,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-authz-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -25,7 +25,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-authz-provider-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -7,7 +7,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-authz-provider-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -21,10 +21,10 @@
        <dependencies>
            <!-- Authorization Drools Policy Provider -->
            <dependency>
-                <groupId>org.drools</groupId>
+                <groupId>org.keycloak</groupId>
                <artifactId>drools-bom</artifactId>
                <type>pom</type>
-                <version>${version.org.drools}</version>
+                <version>${project.version}</version>
                <scope>import</scope>
            </dependency>
        </dependencies>
@@ -60,4 +60,4 @@
        </dependency>
    </dependencies>

-</project>
+</project>
@@ -7,7 +7,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-authz-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -7,7 +7,7 @@
    <parent>
        <groupId>org.keycloak</groupId>
        <artifactId>keycloak-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -22,7 +22,7 @@
    <parent>
        <groupId>org.keycloak.bom</groupId>
        <artifactId>keycloak-bom-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
    </parent>

    <groupId>org.keycloak.bom</groupId>
@@ -37,97 +37,97 @@
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-core</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-adapter-core</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-adapter-spi</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-wildfly-adapter-dist</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-saml-adapter-core</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-saml-adapter-api-public</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-tomcat8-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-tomcat7-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-tomcat6-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-jetty81-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-jetty91-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-jetty92-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-jetty93-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-undertow-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-spring-boot-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>spring-boot-container-bundle</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-spring-security-adapter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-spring-boot-starter</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-authz-client</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
        </dependencies>
    </dependencyManagement>
@@ -26,7 +26,7 @@

    <groupId>org.keycloak.bom</groupId>
    <artifactId>keycloak-bom-parent</artifactId>
-    <version>3.4.1.Final-SNAPSHOT</version>
+    <version>3.4.3.Final</version>

    <packaging>pom</packaging>

@@ -23,7 +23,7 @@
    <parent>
        <groupId>org.keycloak.bom</groupId>
        <artifactId>keycloak-bom-parent</artifactId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
    </parent>

    <groupId>org.keycloak.bom</groupId>
@@ -38,12 +38,12 @@
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-core</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
            <dependency>
                <groupId>org.keycloak</groupId>
                <artifactId>keycloak-server-spi</artifactId>
-                <version>3.4.1.Final-SNAPSHOT</version>
+                <version>3.4.3.Final</version>
            </dependency>
        </dependencies>
    </dependencyManagement>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -36,6 +36,17 @@ public class Profile {
        AUTHORIZATION, IMPERSONATION, SCRIPTS, DOCKER, ACCOUNT2, TOKEN_EXCHANGE
    }

+    private enum ProductValue {
+        KEYCLOAK(),
+        RHSSO(Feature.ACCOUNT2);
+
+        private List<Feature> excluded;
+
+        ProductValue(Feature... excluded) {
+            this.excluded = Arrays.asList(excluded);
+        }
+    }
+
    private enum ProfileValue {
        PRODUCT(Feature.AUTHORIZATION, Feature.SCRIPTS, Feature.DOCKER, Feature.ACCOUNT2, Feature.TOKEN_EXCHANGE),
        PREVIEW(Feature.ACCOUNT2),
@@ -43,10 +54,6 @@ public class Profile {

        private List<Feature> disabled;

-        ProfileValue() {
-            this.disabled = Collections.emptyList();
-        }
-
        ProfileValue(Feature... disabled) {
            this.disabled = Arrays.asList(disabled);
        }
@@ -54,11 +61,15 @@ public class Profile {

    private static final Profile CURRENT = new Profile();

+    private final ProductValue product;
+
    private final ProfileValue profile;

    private final Set<Feature> disabledFeatures = new HashSet<>();

    private Profile() {
+        product = "rh-sso".equals(Version.NAME) ? ProductValue.RHSSO : ProductValue.KEYCLOAK;
+
        try {
            Properties props = new Properties();

@@ -87,6 +98,7 @@ public class Profile {
            }

            disabledFeatures.addAll(profile.disabled);
+            disabledFeatures.removeAll(product.excluded);

            for (String k : props.stringPropertyNames()) {
                if (k.startsWith("feature.")) {
@@ -112,6 +124,9 @@ public class Profile {
    }

    public static boolean isFeatureEnabled(Feature feature) {
+        if (CURRENT.product.excluded.contains(feature)) {
+            return false;
+        }
        return !CURRENT.disabledFeatures.contains(feature);
    }

@@ -10,9 +10,9 @@ package org.keycloak.common.util;
 * <br />
 * <code>byte[] myByteArray = Base64.decode( encoded );</code>
 *
- * <p>The <tt>options</tt> parameter, which appears in a few places, is used to pass 
- * several pieces of information to the encoder. In the "higher level" methods such as 
- * encodeBytes( bytes, options ) the options parameter can be used to indicate such 
+ * <p>The <tt>options</tt> parameter, which appears in a few places, is used to pass
+ * several pieces of information to the encoder. In the "higher level" methods such as
+ * encodeBytes( bytes, options ) the options parameter can be used to indicate such
 * things as first gzipping the bytes before encoding them, not inserting linefeeds,
 * and encoding using the URL-safe and Ordered dialects.</p>
 *
@@ -21,7 +21,7 @@ package org.keycloak.common.util;
 * to do so. I've got Base64 set to this behavior now, although earlier versions
 * broke lines by default.</p>
 *
- * <p>The constants defined in Base64 can be OR-ed together to combine options, so you 
+ * <p>The constants defined in Base64 can be OR-ed together to combine options, so you
 * might make a call like this:</p>
 *
 * <code>String encoded = Base64.encodeBytes( mybytes, Base64.GZIP | Base64.DO_BREAK_LINES );</code>
@@ -68,7 +68,7 @@ package org.keycloak.common.util;
 *  <li>v2.3 - <strong>This is not a drop-in replacement!</strong> This is two years of comments
 *   and bug fixes queued up and finally executed. Thanks to everyone who sent
 *   me stuff, and I'm sorry I wasn't able to distribute your fixes to everyone else.
- *   Much bad coding was cleaned up including throwing exceptions where necessary 
+ *   Much bad coding was cleaned up including throwing exceptions where necessary
 *   instead of returning null values or something similar. Here are some changes
 *   that may affect you:
 *   <ul>
@@ -113,17 +113,17 @@ package org.keycloak.common.util;
 *   with other encodings (like EBCDIC).</li>
 *  <li>v2.0.1 - Fixed an error when decoding a single byte, that is, when the
 *   encoded data was a single byte.</li>
- *  <li>v2.0 - I got rid of methods that used booleans to set options. 
+ *  <li>v2.0 - I got rid of methods that used booleans to set options.
 *   Now everything is more consolidated and cleaner. The code now detects
 *   when data that's being decoded is gzip-compressed and will decompress it
 *   automatically. Generally things are cleaner. You'll probably have to
 *   change some method calls that you were making to support the new
 *   options format (<tt>int</tt>s that you "OR" together).</li>
- *  <li>v1.5.1 - Fixed bug when decompressing and decoding to a             
- *   byte[] using <tt>decode( String s, boolean gzipCompressed )</tt>.      
- *   Added the ability to "suspend" encoding in the Output Stream so        
- *   you can turn on and off the encoding if you need to embed base64       
- *   data in an otherwise "normal" stream (like an XML file).</li>  
+ *  <li>v1.5.1 - Fixed bug when decompressing and decoding to a
+ *   byte[] using <tt>decode( String s, boolean gzipCompressed )</tt>.
+ *   Added the ability to "suspend" encoding in the Output Stream so
+ *   you can turn on and off the encoding if you need to embed base64
+ *   data in an otherwise "normal" stream (like an XML file).</li>
 *  <li>v1.5 - Output stream pases on flush() command but doesn't do anything itself.
 *      This helps when using GZIP streams.
 *      Added the ability to GZip-compress objects before encoding them.</li>
@@ -149,7 +149,7 @@ package org.keycloak.common.util;
 */
 public class Base64
 {
-    
+
 /* ********  P U B L I C   F I E L D S  ******** */


@@ -176,9 +176,9 @@ public class Base64

    /**
     * Encode using Base64-like encoding that is URL- and Filename-safe as described
-     * in Section 4 of RFC3548: 
+     * in Section 4 of RFC3548:
     * <a href="http://www.faqs.org/rfcs/rfc3548.html">http://www.faqs.org/rfcs/rfc3548.html</a>.
-     * It is important to note that data encoded this way is <em>not</em> officially valid Base64, 
+     * It is important to note that data encoded this way is <em>not</em> officially valid Base64,
     * or at the very least should not be called Base64 without also specifying that is
     * was encoded using the URL- and Filename-safe dialect.
     */
@@ -190,8 +190,8 @@ public class Base64
     * <a href="http://www.faqs.org/qa/rfcc-1940.html">http://www.faqs.org/qa/rfcc-1940.html</a>.
     */
    public final static int ORDERED = 32;
-    
-    
+
+
 /* ********  P R I V A T E   F I E L D S  ******** */


@@ -213,8 +213,8 @@ public class Base64

    private final static byte WHITE_SPACE_ENC = -5; // Indicates white space in encoding
    private final static byte EQUALS_SIGN_ENC = -1; // Indicates equals sign in encoding
-	
-	
+
+
 /* ********  S T A N D A R D   B A S E 6 4   A L P H A B E T  ******** */

    /** The 64 valid Base64 values. */
@@ -270,12 +270,12 @@ public class Base64
            -9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9,     // Decimal 231 - 243
            -9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9         // Decimal 244 - 255
    };
-	
-	
+
+
 /* ********  U R L   S A F E   B A S E 6 4   A L P H A B E T  ******** */

    /**
-     * Used in the URL- and Filename-safe dialect described in Section 4 of RFC3548: 
+     * Used in the URL- and Filename-safe dialect described in Section 4 of RFC3548:
     * <a href="http://www.faqs.org/rfcs/rfc3548.html">http://www.faqs.org/rfcs/rfc3548.html</a>.
     * Notice that the last two bytes become "hyphen" and "underscore" instead of "plus" and "slash."
     */
@@ -398,7 +398,7 @@ public class Base64
            -9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9,-9         // Decimal 244 - 255
    };

-	
+
 /* ********  D E T E R M I N E   W H I C H   A L H A B E T  ******** */


@@ -441,10 +441,10 @@ public class Base64

    /** Defeats instantiation. */
    private Base64(){}
-    

-    
-    
+
+
+
 /* ********  E N C O D I N G   M E T H O D S  ******** */


@@ -473,7 +473,7 @@ public class Base64
     * <p>Encodes up to three bytes of the array <var>source</var>
     * and writes the resulting four Base64 bytes to <var>destination</var>.
     * The source and destination arrays can be manipulated
-     * anywhere along their length by specifying 
+     * anywhere along their length by specifying
     * <var>srcOffset</var> and <var>destOffset</var>.
     * This method does not check to make sure your arrays
     * are large enough to accomodate <var>srcOffset</var> + 3 for
@@ -498,7 +498,7 @@ public class Base64

        byte[] ALPHABET = getAlphabet( options );

-        //           1         2         3  
+        //           1         2         3
        // 01234567890123456789012345678901 Bit position
        // --------000000001111111122222222 Array position from threeBytes
        // --------|    ||    ||    ||    | Six bit groups to index ALPHABET
@@ -597,7 +597,7 @@ public class Base64

    /**
     * Serializes an object and returns the Base64-encoded
-     * version of that serialized object.  
+     * version of that serialized object.
     *
     * <p>As of v 2.3, if the object
     * cannot be serialized or there is another error,
@@ -991,11 +991,11 @@ public class Base64
        }   // end else: don't compress

    }   // end encodeBytesToBytes
-    

-    
-    
-    
+
+
+
+
 /* ********  D E C O D I N G   M E T H O D S  ******** */


@@ -1004,13 +1004,13 @@ public class Base64
     * and writes the resulting bytes (up to three of them)
     * to <var>destination</var>.
     * The source and destination arrays can be manipulated
-     * anywhere along their length by specifying 
+     * anywhere along their length by specifying
     * <var>srcOffset</var> and <var>destOffset</var>.
     * This method does not check to make sure your arrays
     * are large enough to accomodate <var>srcOffset</var> + 4 for
     * the <var>source</var> array or <var>destOffset</var> + 3 for
     * the <var>destination</var> array.
-     * This method returns the actual number of bytes that 
+     * This method returns the actual number of bytes that
     * were converted from the Base64 encoding.
     * <p>This is the lowest level of the decoding methods with
     * all possible parameters.</p>
@@ -1200,7 +1200,7 @@ public class Base64
                // There's a bad input character in the Base64 stream.
                throw new java.io.IOException( String.format(
                        "Bad Base64 input character decimal %d in array position %d", ((int)source[i])&0xFF, i ) );
-            }   // end else: 
+            }   // end else:
        }   // each input character

        byte[] out = new byte[ outBuffPosn ];
@@ -1302,94 +1302,6 @@ public class Base64
        return bytes;
    }   // end decode

-
-
-    /**
-     * Attempts to decode Base64 data and deserialize a Java
-     * Object within. Returns <tt>null</tt> if there was an error.
-     *
-     * @param encodedObject The Base64 data to decode
-     * @return The decoded and deserialized object
-     * @throws NullPointerException if encodedObject is null
-     * @throws java.io.IOException if there is a general error
-     * @throws ClassNotFoundException if the decoded object is of a
-     *         class that cannot be found by the JVM
-     * @since 1.5
-     */
-    public static Object decodeToObject( String encodedObject )
-            throws java.io.IOException, java.lang.ClassNotFoundException {
-        return decodeToObject(encodedObject,NO_OPTIONS,null);
-    }
-
-
-    /**
-     * Attempts to decode Base64 data and deserialize a Java
-     * Object within. Returns <tt>null</tt> if there was an error.
-     * If <tt>loader</tt> is not null, it will be the class loader
-     * used when deserializing.
-     *
-     * @param encodedObject The Base64 data to decode
-     * @param options Various parameters related to decoding
-     * @param loader Optional class loader to use in deserializing classes.
-     * @return The decoded and deserialized object
-     * @throws NullPointerException if encodedObject is null
-     * @throws java.io.IOException if there is a general error
-     * @throws ClassNotFoundException if the decoded object is of a 
-     *         class that cannot be found by the JVM
-     * @since 2.3.4
-     */
-    public static Object decodeToObject(
-            String encodedObject, int options, final ClassLoader loader )
-            throws java.io.IOException, java.lang.ClassNotFoundException {
-
-        // Decode and gunzip if necessary
-        byte[] objBytes = decode( encodedObject, options );
-
-        java.io.ByteArrayInputStream  bais = null;
-        java.io.ObjectInputStream     ois  = null;
-        Object obj = null;
-
-        try {
-            bais = new java.io.ByteArrayInputStream( objBytes );
-
-            // If no custom class loader is provided, use Java's builtin OIS.
-            if( loader == null ){
-                ois  = new java.io.ObjectInputStream( bais );
-            }   // end if: no loader provided
-
-            // Else make a customized object input stream that uses
-            // the provided class loader.
-            else {
-                ois = new java.io.ObjectInputStream(bais){
-                    @Override
-                    public Class<?> resolveClass(java.io.ObjectStreamClass streamClass)
-                            throws java.io.IOException, ClassNotFoundException {
-                        Class c = Class.forName(streamClass.getName(), false, loader);
-                        if( c == null ){
-                            return super.resolveClass(streamClass);
-                        } else {
-                            return c;   // Class loader knows of this class.
-                        }   // end else: not null
-                    }   // end resolveClass
-                };  // end ois
-            }   // end else: no custom class loader
-
-            obj = ois.readObject();
-        }   // end try
-        catch( java.io.IOException e ) {
-            throw e;    // Catch and throw in order to execute finally{}
-        }   // end catch
-        catch( java.lang.ClassNotFoundException e ) {
-            throw e;    // Catch and throw in order to execute finally{}
-        }   // end catch
-        finally {
-            try{ bais.close(); } catch( Exception e ){}
-            try{ ois.close();  } catch( Exception e ){}
-        }   // end finally
-
-        return obj;
-    }   // end decodeObject
-
    /* ********  I N N E R   C L A S S   I N P U T S T R E A M  ******** */

    /**
@@ -1522,7 +1434,7 @@ public class Base64
                    else {
                        // Must have broken out from above.
                        throw new java.io.IOException( "Improperly padded Base64 input." );
-                    }   // end 
+                    }   // end

                }   // end else: decode
            }   // end else: get data
@@ -1595,12 +1507,12 @@ public class Base64
        }   // end read

    }   // end inner class InputStream
-    
-    
-    
-    
-    
-    
+
+
+
+
+
+
    /* ********  I N N E R   C L A S S   O U T P U T S T R E A M  ******** */


@@ -1730,7 +1642,7 @@ public class Base64


        /**
-         * Calls {@link #write(int)} repeatedly until <var>len</var> 
+         * Calls {@link #write(int)} repeatedly until <var>len</var>
         * bytes are written.
         *
         * @param theBytes array from which to read bytes
@@ -1775,7 +1687,7 @@ public class Base64


        /**
-         * Flushes and closes (I think, in the superclass) the stream. 
+         * Flushes and closes (I think, in the superclass) the stream.
         *
         * @since 1.3
         */
@@ -429,7 +429,9 @@ public class KeycloakUriBuilder {
                if ("".equals(host)) throw new RuntimeException("empty host name");
                replaceParameter(paramMap, fromEncodedMap, isTemplate, host, buffer, encodeSlash);
            }
-            if (port != -1) buffer.append(":").append(Integer.toString(port));
+            if (port != -1 && (scheme == null || (scheme.equals("http") && port != 80) || (scheme.equals("https") && port != 443)) ) {
+                buffer.append(":").append(Integer.toString(port));
+            }
        } else if (authority != null) {
            buffer.append("//");
            replaceParameter(paramMap, fromEncodedMap, isTemplate, authority, buffer, encodeSlash);
@@ -43,9 +43,21 @@ public class KeystoreUtil {

    public static KeyStore loadKeyStore(String filename, String password) throws Exception {
        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
-        InputStream trustStream = (filename.startsWith(GenericConstants.PROTOCOL_CLASSPATH))
-                ?KeystoreUtil.class.getResourceAsStream(filename.replace(GenericConstants.PROTOCOL_CLASSPATH, ""))
-                :new FileInputStream(new File(filename));
+        InputStream trustStream = null;
+        if (filename.startsWith(GenericConstants.PROTOCOL_CLASSPATH)) {
+            String resourcePath = filename.replace(GenericConstants.PROTOCOL_CLASSPATH, "");
+            if (Thread.currentThread().getContextClassLoader() != null) {
+                trustStream = Thread.currentThread().getContextClassLoader().getResourceAsStream(resourcePath);
+            }
+            if (trustStream == null) {
+                trustStream = KeystoreUtil.class.getResourceAsStream(resourcePath);
+            }
+            if (trustStream == null) {
+                throw new RuntimeException("Unable to find key store in classpath");
+            }
+        } else {
+            trustStream = new FileInputStream(new File(filename));
+        }
        trustStore.load(trustStream, password.toCharArray());
        trustStream.close();
        return trustStore;
@@ -149,7 +149,7 @@ public final class PemUtils {
        return Base64.decode(pem);
    }

-    private static String removeBeginEnd(String pem) {
+    public static String removeBeginEnd(String pem) {
        pem = pem.replaceAll("-----BEGIN (.*)-----", "");
        pem = pem.replaceAll("-----END (.*)----", "");
        pem = pem.replaceAll("\r\n", "");
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>
    <modelVersion>4.0.0</modelVersion>
@@ -83,6 +83,9 @@ public interface OAuth2Constants {

    String MAX_AGE = "max_age";

+    // OIDC Session Management
+    String SESSION_STATE = "session_state";
+
    String JWT = "JWT";

    // https://tools.ietf.org/html/rfc7636#section-6.1
@@ -99,6 +99,7 @@ public class RealmRepresentation {
    protected Integer otpPolicyDigits;
    protected Integer otpPolicyLookAheadWindow;
    protected Integer otpPolicyPeriod;
+    protected List<String> otpSupportedApplications;

    protected List<UserRepresentation> users;
    protected List<UserRepresentation> federatedUsers;
@@ -854,6 +855,14 @@ public class RealmRepresentation {
        this.otpPolicyPeriod = otpPolicyPeriod;
    }

+    public List<String> getOtpSupportedApplications() {
+        return otpSupportedApplications;
+    }
+
+    public void setOtpSupportedApplications(List<String> otpSupportedApplications) {
+        this.otpSupportedApplications = otpSupportedApplications;
+    }
+
    public String getBrowserFlow() {
        return browserFlow;
    }
@@ -0,0 +1,259 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+    <parent>
+        <groupId>org.keycloak</groupId>
+        <artifactId>keycloak-parent</artifactId>
+        <version>3.4.3.Final</version>
+        <relativePath>../../pom.xml</relativePath>
+    </parent>
+    <modelVersion>4.0.0</modelVersion>
+
+    <artifactId>drools-bom</artifactId>
+    <packaging>pom</packaging>
+    <name>Keycloak Drools BOM</name>
+    <description>
+        Import this BOM in your dependencyManagement if you want to depend on multiple Drools artifacts.
+    </description>
+
+    <properties>
+        <aopalliance.version>1.0</aopalliance.version>
+        <xstream.version>1.4.9</xstream.version>
+        <antlr-runtime.version>3.5</antlr-runtime.version>
+        <ant.version>1.8.3</ant.version>
+        <maven.version>3.2.5</maven.version>
+        <wagon.version>2.6</wagon.version>
+        <plexus-classworlds.version>2.5.2</plexus-classworlds.version>
+        <plexus-component-annotations.version>1.5.5</plexus-component-annotations.version>
+        <plexus-interpolation.version>1.21</plexus-interpolation.version>
+        <plexus-utils.version>3.0.20</plexus-utils.version>
+        <aether.version>1.0.0.v20140518</aether.version>
+        <sisu.version>0.3.0.M1</sisu.version>
+        <mvel2.version>2.2.8.Final</mvel2.version>
+        <plexus-cipher.version>1.7</plexus-cipher.version>
+        <plexus-sec-dispatcher.version>1.3</plexus-sec-dispatcher.version>
+        <sisu-guice.version>3.2.3</sisu-guice.version>
+        <ecj.version>4.4.2</ecj.version>
+        <itext.version>2.1.2</itext.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>org.drools</groupId>
+                <artifactId>drools-bom</artifactId>
+                <type>pom</type>
+                <version>${version.org.drools}</version>
+                <scope>import</scope>
+            </dependency>
+
+            <dependency>
+                <groupId>aopalliance</groupId>
+                <artifactId>aopalliance</artifactId>
+                <version>${aopalliance.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.thoughtworks.xstream</groupId>
+                <artifactId>xstream</artifactId>
+                <version>${xstream.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.antlr</groupId>
+                <artifactId>antlr-runtime</artifactId>
+                <version>${antlr-runtime.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.ant</groupId>
+                <artifactId>ant</artifactId>
+                <version>${ant.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.ant</groupId>
+                <artifactId>ant-launcher</artifactId>
+                <version>${ant.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-aether-provider</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-artifact</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-compat</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-core</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-model</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-model-builder</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-plugin-api</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-repository-metadata</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-settings</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven</groupId>
+                <artifactId>maven-settings-builder</artifactId>
+                <version>${maven.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven.wagon</groupId>
+                <artifactId>wagon-http</artifactId>
+                <version>${wagon.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven.wagon</groupId>
+                <artifactId>wagon-http-shared</artifactId>
+                <version>${wagon.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.maven.wagon</groupId>
+                <artifactId>wagon-provider-api</artifactId>
+                <version>${wagon.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.codehaus.plexus</groupId>
+                <artifactId>plexus-classworlds</artifactId>
+                <version>${plexus-classworlds.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.codehaus.plexus</groupId>
+                <artifactId>plexus-component-annotations</artifactId>
+                <version>${plexus-component-annotations.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.codehaus.plexus</groupId>
+                <artifactId>plexus-interpolation</artifactId>
+                <version>${plexus-interpolation.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.codehaus.plexus</groupId>
+                <artifactId>plexus-utils</artifactId>
+                <version>${plexus-utils.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-api</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-connector-basic</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-impl</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-spi</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-transport-file</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-transport-http</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-transport-wagon</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.aether</groupId>
+                <artifactId>aether-util</artifactId>
+                <version>${aether.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.sisu</groupId>
+                <artifactId>org.eclipse.sisu.inject</artifactId>
+                <version>${sisu.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.sisu</groupId>
+                <artifactId>org.eclipse.sisu.plexus</artifactId>
+                <version>${sisu.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.mvel</groupId>
+                <artifactId>mvel2</artifactId>
+                <version>${mvel2.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.sonatype.plexus</groupId>
+                <artifactId>plexus-cipher</artifactId>
+                <version>${plexus-cipher.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.sonatype.plexus</groupId>
+                <artifactId>plexus-sec-dispatcher</artifactId>
+                <version>${plexus-sec-dispatcher.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.sonatype.sisu.inject</groupId>
+                <artifactId>guice-servlet</artifactId>
+                <version>${sisu-guice.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.sonatype.sisu</groupId>
+                <artifactId>sisu-guice</artifactId>
+                <classifier>no_aop</classifier>
+                <version>${sisu-guice.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.jdt.core.compiler</groupId>
+                <artifactId>ecj</artifactId>
+                <version>${ecj.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.lowagie</groupId>
+                <artifactId>itext</artifactId>
+                <version>${itext.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>bouncycastle</groupId>
+                        <artifactId>bcmail-jdk14</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>bouncycastle</groupId>
+                        <artifactId>bcprov-jdk14</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+</project>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
    </parent>

    <modelVersion>4.0.0</modelVersion>
@@ -31,6 +31,7 @@
    <description/>

    <modules>
+        <module>drools-bom</module>
        <module>server-min</module>
        <module>server-all</module>
    </modules>
@@ -21,7 +21,7 @@
 	<parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -33,20 +33,12 @@

    <dependencyManagement>
        <dependencies>
-            <dependency>
-                <groupId>org.jboss.integration-platform</groupId>
-                <artifactId>jboss-integration-platform-bom</artifactId>
-                <type>pom</type>
-                <scope>import</scope>
-                <version>${version.jboss-integration-platform}</version>
-            </dependency>
-
            <!-- Authorization Drools Policy Provider -->
            <dependency>
-                <groupId>org.drools</groupId>
+                <groupId>org.keycloak</groupId>
                <artifactId>drools-bom</artifactId>
                <type>pom</type>
-                <version>${version.org.drools}</version>
+                <version>${project.version}</version>
                <scope>import</scope>
            </dependency>
        </dependencies>
@@ -21,7 +21,7 @@
 	<parent>
 		<artifactId>keycloak-parent</artifactId>
 		<groupId>org.keycloak</groupId>
-		<version>3.4.1.Final-SNAPSHOT</version>
+		<version>3.4.3.Final</version>
 		<relativePath>../../pom.xml</relativePath>
 	</parent>
 	<modelVersion>4.0.0</modelVersion>
@@ -27,26 +27,12 @@

    <fileSets>
        <fileSet>
-            <directory>${project.build.directory}/unpacked</directory>
+            <directory>${project.build.directory}/unpacked/modules</directory>
            <includes>
                <include>com/fasterxml/jackson/**</include>
                <include>org/bouncycastle/**</include>
-                <include>org/keycloak/keycloak-common/**</include>
-                <include>org/keycloak/keycloak-core/**</include>
-                <include>org/keycloak/keycloak-adapter-spi/**</include>
-                <include>org/keycloak/keycloak-adapter-core/**</include>
-                <include>org/keycloak/keycloak-jboss-adapter-core/**</include>
-                <include>org/keycloak/keycloak-as7-adapter/**</include>
-                <include>org/keycloak/keycloak-as7-subsystem/**</include>
-                <include>org/keycloak/keycloak-adapter-subsystem/**</include>
-                <include>org/keycloak/keycloak-servlet-oauth-client/**</include>
-
-                <!-- Authorization -->
-                <include>org/keycloak/keycloak-authz-client/**</include>
+                <include>org/keycloak/keycloak-*/**</include>
            </includes>
-            <excludes>
-                <exclude>**/*.war</exclude>
-            </excludes>
            <outputDirectory>modules</outputDirectory>
        </fileSet>
    </fileSets>
@@ -21,7 +21,7 @@
    <parent>
        <artifactId>keycloak-parent</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../../../../pom.xml</relativePath>
    </parent>

@@ -25,15 +25,19 @@

    <fileSets>
        <fileSet>
-            <directory>../../</directory>
-            <includes>
-                <include>License.html</include>
-            </includes>
-            <outputDirectory></outputDirectory>
+            <directory>src/main/resources/licenses/${product.slot}</directory>
+            <outputDirectory>licenses</outputDirectory>
+            <excludes>
+                <exclude>licenses.xml</exclude>
+            </excludes>
+        </fileSet>
+        <fileSet>
+            <directory>${project.build.directory}/licenses</directory>
+            <outputDirectory>licenses</outputDirectory>
        </fileSet>
        <fileSet>
            <directory>${project.build.directory}/modules</directory>
-            <outputDirectory></outputDirectory>
+            <outputDirectory>modules</outputDirectory>
        </fileSet>
    </fileSets>
 </assembly>
@@ -25,7 +25,7 @@
    <parent>
        <artifactId>keycloak-as7-eap6-adapter-dist-pom</artifactId>
        <groupId>org.keycloak</groupId>
-        <version>3.4.1.Final-SNAPSHOT</version>
+        <version>3.4.3.Final</version>
        <relativePath>../pom.xml</relativePath>
    </parent>

@@ -37,75 +37,203 @@
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-common</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-core</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-adapter-spi</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-as7-adapter-spi</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-tomcat-adapter-spi</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-adapter-core</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-jboss-adapter-core</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-as7-adapter</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-tomcat-core-adapter</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-as7-subsystem</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-servlet-oauth-client</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.bouncycastle</groupId>
            <artifactId>bcprov-jdk15on</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.bouncycastle</groupId>
            <artifactId>bcpkix-jdk15on</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-core</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-databind</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-annotations</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.jaxrs</groupId>
            <artifactId>jackson-jaxrs-json-provider</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.jaxrs</groupId>
+            <artifactId>jackson-jaxrs-base</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.module</groupId>
+            <artifactId>jackson-module-jaxb-annotations</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
        <!-- Authorization -->
        <dependency>
            <groupId>org.keycloak</groupId>
            <artifactId>keycloak-authz-client</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
        </dependency>
    </dependencies>

@@ -212,6 +340,10 @@
                    </execution>
                </executions>
            </plugin>
+            <plugin>
+                <groupId>org.keycloak</groupId>
+                <artifactId>keycloak-distribution-licenses-maven-plugin</artifactId>
+            </plugin>
        </plugins>
    </build>
 </project>
Author	SHA1	Message	Date
keycloak-bot	517588ecca	Set version to 3.4.3.Final	2018-01-04 08:16:17 +00:00
stianst	74fbe3ff6d	Include Jetty 9.1 in product profile	2018-01-04 09:14:05 +01:00
Hynek Mlnarik	1c7fff0e92	KEYCLOAK-6108 Remove DROP INDEX in postgres (handled automatically) (cherry picked from commit 2bb39911edaa911e4e03179349e454ba440bf48d)	2018-01-04 09:03:57 +01:00
Hynek Mlnarik	c724a25a77	KEYCLOAK-6095 Include schema in custom SQL (cherry picked from commit 2b4cbe9b0447d19f1e0fbe87f8fae44a94156dd9)	2018-01-04 09:03:57 +01:00
Hynek Mlnarik	c2a20cbd34	KEYCLOAK-6106 Put dotless ids first in identity broker state (cherry picked from commit 6a44edcc918ed04f360afee89a410f12f6cc103d)	2018-01-03 08:10:46 +01:00
stianst	d40dac5e40	KEYCLOAK-6079	2018-01-02 15:15:47 +01:00
stianst	ecc08b9c09	KEYCLOAK-6090 Add missing cors headers with invalid username/password and resource owner grant	2018-01-02 15:15:17 +01:00
keycloak-bot	ec5616b96d	Set version to 3.4.3.Final-SNAPSHOT	2017-12-21 13:44:06 +00:00
keycloak-bot	4bbd603a0e	Set version to 3.4.2.Final	2017-12-21 12:57:58 +00:00
Marko Strukelj	23d0afbfd8	KEYCLOAK-6058 Partial import should ignore built-in clients	2017-12-21 13:52:58 +01:00
stianst	e3995c0154	KEYCLOAK-6079	2017-12-21 12:18:12 +01:00
stianst	e4185496fd	KEYCLOAK-6078 Account2 is listed as disabled feature in product even though it's not included at all	2017-12-21 11:45:00 +01:00
stianst	c7ce279aef	KEYCLOAK-6076 Exclude transitive dependencies in Fuse ZIP	2017-12-21 09:03:21 +01:00
John Ament	156ce0c0ea	KEYCLOAK-4853 Introduce dedicated utility for parsing ID from URI	2017-12-20 15:00:07 +01:00
Hynek Mlnarik	0f047ac9f5	KEYCLOAK-6067 Allow http for performance testsuite realms	2017-12-20 14:56:42 +01:00
stianst	f0c5752ef9	KEYCLOAK-5443 Fix update user account when both email as username and edit username are enabled	2017-12-20 14:40:03 +01:00
Martin Kanis	351dbffaf2	KEYCLOAK-5172 Set oidc as default protocol to clients	2017-12-20 13:38:12 +01:00
Bruno Oliveira	811cd3a04a	KEYCLOAK-6011	2017-12-20 13:37:11 +01:00
Marko Strukelj	ae573f4814	KEYCLOAK-5617 KEYCLOAK-5993 Race condition putting new user in user cache	2017-12-20 13:35:35 +01:00
Pedro Igor	7e072abf74	Merge pull request #4873 from pedroigor/master [KEYCLOAK-5806] - Returning from child policy not restoring state	2017-12-20 08:53:50 -02:00
stianst	e96c6a4bcb	KEYCLOAK-6068 Fix preflight request on admin endpoints	2017-12-20 10:19:34 +01:00
stianst	7d2d7e41d9	KEYCLOAK-6065 Prevent password managers from saving credentials in admin console	2017-12-20 06:46:54 +01:00
Hynek Mlnarik	626004e782	KEYCLOAK-6066 Be less strict when handling cookies	2017-12-19 21:39:41 +01:00
pedroigor	3846cfdb4f	[KEYCLOAK-5806] - Changing apply policy component and more tests	2017-12-19 17:28:46 -02:00
stianst	902b799bdf	KEYCLOAK-6064 Fix identity providers page when realm has no configured providers	2017-12-19 17:56:48 +01:00
stianst	465675ac28	KEYCLOAK-5019 Fixes for password managers	2017-12-19 16:13:16 +01:00
pedroigor	2ace312501	[KEYCLOAK-5806] - More UI tests for parent/child policy flow	2017-12-19 12:13:04 -02:00
pedroigor	c00d89aec3	[KEYCLOAK-5806] - Returning from child policy not restoring state	2017-12-19 10:00:14 -02:00
stianst	61fe554617	KEYCLOAK-6051 Fix licenses	2017-12-19 08:20:29 +01:00
mposolda	5a66f577eb	KEYCLOAK-5982 Fix NPEs when client 'account' was renamed/removed	2017-12-18 21:47:17 +01:00
pskopek	e29ccebc21	KEYCLOAK-5666 removed not needed decodeToObject methods	2017-12-18 19:19:00 +01:00
stianst	27b5e1aae2	KEYCLOAK-6050 Fix export doesn't export internal realm rep	2017-12-18 13:15:42 +01:00
stianst	71e6f52f7d	KEYCLOAK-6022	2017-12-18 11:48:39 +01:00
stianst	b303acaaba	KEYCLOAK-2120 Added manual setup page for OTP	2017-12-18 11:20:20 +01:00
Bill Burke	118e998570	Merge pull request #4834 from pedroigor/KEYCLOAK-5806 [KEYCLOAK-5806] - Create policy button to associated policies	2017-12-16 23:44:35 -05:00
Bill Burke	f3fcac2d8d	Merge pull request #4865 from patriot1burke/master KEYCLOAK-5420	2017-12-16 14:31:37 -05:00
Bill Burke	b5ae7e836d	smaller times	2017-12-16 13:18:41 -05:00
Bill Burke	a27097e9ef	reset defaults	2017-12-16 11:28:15 -05:00
Bill Burke	003f27e9bd	fix more	2017-12-16 08:31:33 -05:00
Bill Burke	76cccc3f2b	fix more	2017-12-16 08:29:58 -05:00
Bill Burke	80be4c9dbc	fix more	2017-12-16 07:12:32 -05:00
pedroigor	5d7ba39e0c	[KEYCLOAK-5806] - Create policy component to permission pages	2017-12-15 23:41:52 -02:00
pedroigor	e2118856ca	[KEYCLOAK-5806] - Adding table of selected policies	2017-12-15 22:04:37 -02:00
pedroigor	3ee760ed23	[KEYCLOAK-5806] - More tests asserting creation of child policies	2017-12-15 22:04:37 -02:00
pedroigor	eba47b3c89	[KEYCLOAK-5806] - Create policy button to Aggregated Policies	2017-12-15 22:04:37 -02:00
Pavel Drozd	b121306749	Merge pull request #4866 from pdrozd/KEYCLOAK-6054 KEYCLOAK-6054 Fuse adapter tests - add httpclient dependency	2017-12-15 23:44:33 +01:00
Pavel Drozd	4097a81142	Merge pull request #4860 from pdrozd/KEYCLOAK-6047 KEYCLOAK-6047 Added ide time window to mellon test	2017-12-15 22:23:19 +01:00
Pavel Drozd	ce6f73ce74	KEYCLOAK-6054 Fuse adapter tests - add httpclient dependency	2017-12-15 22:22:16 +01:00
Bill Burke	1eec2747ef	fix stupidity	2017-12-15 15:31:14 -05:00
Pedro Igor	6bfdc9451d	Merge pull request #4861 from pedroigor/KEYCLOAK-6023 [KEYCLOAK-6023] - Upgrading Drools to 6.5.0.Final	2017-12-15 15:46:28 -02:00
Pedro Igor	a66fe003d3	Merge pull request #4863 from pedroigor/KEYCLOAK-5877 [KEYCLOAK-5877] - Allow save permissions without policies	2017-12-15 15:45:38 -02:00
Bill Burke	7cb39c2dfc	KEYCLOAK-5420	2017-12-15 12:16:24 -05:00
Bill Burke	90b5dd60fd	Merge pull request #4864 from patriot1burke/master KEYCLOAK-4427	2017-12-15 11:44:16 -05:00
Stan Silvert	a719b73808	KEYCLOAK-5935: No success msg on client role add/remove	2017-12-15 10:54:43 -05:00
Bill Burke	1c38cec10f	KEYCLOAK-4427	2017-12-15 10:53:13 -05:00
Bill Burke	e7c25f76a7	KEYCLOAK-4427	2017-12-15 10:49:51 -05:00
pedroigor	94928323ee	[KEYCLOAK-5877] - Allow saving permissions without policies	2017-12-15 12:55:07 -02:00
Hynek Mlnarik	e4a91c0706	KEYCLOAK-6042 Encode user ID before storing in auth session	2017-12-15 15:16:26 +01:00
Pavel Drozd	a7c6eb4999	KEYCLOAK-6047 Added ide time window to mellon test	2017-12-15 14:57:26 +01:00
Pavel Drozd	1b14f9e73e	Merge pull request #4847 from vramik/KEYCLOAK-4793 KEYCLOAK-4793 moved profile a lever lower due to migration test	2017-12-15 14:52:04 +01:00
pedroigor	569378b446	[KEYCLOAK-6023] - Upgrading Drools to 6.5.0.Final	2017-12-15 10:22:05 -02:00
stianst	a8943fb323	KEYCLOAK-6043 Use same urls for get and posts in account	2017-12-15 08:31:04 +01:00
Bruno Oliveira	1a541889f4	[KEYCLOAK-6015] replyTo can be empty string in DB	2017-12-15 07:01:15 +01:00
stianst	b672229efc	KEYCLOAK-6032 Fix error page when internationalization is enabled	2017-12-15 06:32:00 +01:00
Stan Silvert	2b11938084	KEYCLOAK-5932: Remove social idp from dropdown if already defined	2017-12-14 20:18:56 -05:00
Stan Silvert	97e3b26a5c	KEYCLOAK-5934: Event filters allowing free values in select2 inputs	2017-12-14 16:38:02 -05:00
Vlastimil Elias	7e20a65989	KEYCLOAK-6040 AuthenticationSessionModel pushing into EmailTemplateProvider	2017-12-14 15:51:04 +01:00
Martin Kanis	47721957b7	KEYCLOAK-6018 Create BOM for Drools dependencies	2017-12-14 14:51:25 +01:00
Stan Silvert	068785f227	KEYCLOAK-6042: Remove keycloak-preview from product build.	2017-12-14 14:09:04 +01:00
sebastienblanc	a96c9d34c9	set auth contraint to true when wildcard is used	2017-12-14 14:00:03 +01:00
Hisanobu Okuda	3d0512efd8	KEYCLOAK-3842 SPNEGO: Support for multiple kerberos realms	2017-12-14 12:54:20 +01:00
vramik	abea430802	KEYCLOAK-4793	2017-12-14 11:30:28 +01:00
Hynek Mlnarik	2a2e6c839b	KEYCLOAK-5635	2017-12-13 21:07:46 +01:00
mposolda	6696c0f0b2	KEYCLOAK-5245 Restart failures when deleting a client with existing sessions/offline_tokens	2017-12-13 15:53:10 +01:00
Hynek Mlnarik	958185ec51	KEYCLOAK-4809 Support for SAML AttributeAuthorityDescriptor.Attribute elements	2017-12-13 11:55:40 +01:00
Hynek Mlnarik	e6a64e234b	KEYCLOAK-5644 Skip Advice tag in SAML messages	2017-12-13 11:55:40 +01:00
mposolda	b793e42c53	KEYCLOAK-5017 Adding user to newly created group caused sync all groups to LDAP	2017-12-13 09:15:47 +01:00
Bill Burke	f80811a065	Merge pull request #4841 from patriot1burke/master KEYCLOAK-5923	2017-12-12 16:07:52 -05:00
Bill Burke	ea3417253f	KEYCLOAK-5923	2017-12-12 16:07:09 -05:00
Hynek Mlnarik	7174c0b4ec	KEYCLOAK-6025 Simplify easy access to current session in action token handlers	2017-12-12 17:53:44 +01:00
Bruno Oliveira	0a9055e112	[KEYCLOAK-5175] Importing certificate to saml client takes too long	2017-12-12 14:45:24 +01:00
stianst	f939818252	KEYCLOAK-5907 Use client manager to delete clients in client registration services	2017-12-12 14:25:05 +01:00
mposolda	b8416dfa3e	KEYCLOAK-5981 Test Impersonation works when authenticationSession exists	2017-12-12 09:43:34 +01:00
mposolda	63efee6e15	KEYCLOAK-5938 Authentication sessions: Support for logins of multiple tabs of same client	2017-12-12 08:01:02 +01:00
Pavel Drozd	c3855510ef	Merge pull request #4822 from vmuzikar/fix-nodejs-test KEYCLOAK-6007 Fix failing integration Node.js adapter test	2017-12-12 00:10:37 +01:00
Pavel Drozd	20f8e5e572	Merge pull request #4821 from mhajas/KEYCLOAK-6005 KEYCLOAK-6005 Fail build when adapters installation fails	2017-12-12 00:09:45 +01:00
Pavel Drozd	047fdb55a2	Merge pull request #4803 from mhajas/KEYCLOAK-5896 KEYCLOAK-5896 Run localization test only in community	2017-12-12 00:09:02 +01:00
Pavel Drozd	be36f5358c	Merge pull request #4802 from mhajas/KEYCLOAK-5986 KEYCLOAK-5986 Fix token javacsript tests	2017-12-12 00:07:16 +01:00
Pavel Drozd	21dcea87c5	Merge pull request #4795 from mhajas/KEYCLOAK-4995 KEYCLOAK-4995 Fix Cluster tests on product and wildfly 10	2017-12-12 00:06:35 +01:00
Bruno Oliveira	79c4d3e7cf	[KEYCLOAK-6002] - keycloak-test-helper should use the same resteasy dependency version as the parent	2017-12-11 14:34:28 +01:00
Stan Silvert	a60fdcedcd	KEYCLOAK-5929: Submit buttons in wrong position	2017-12-11 08:27:39 -05:00
stianst	dac6c6bd7e	KEYCLOAK-6000 Fix output in execute actions email	2017-12-11 14:24:37 +01:00
stianst	867de9de50	KEYCLOAK-6010 Add CORS headers to keycloak.js	2017-12-11 14:24:12 +01:00
stianst	74442ae820	Added script to check Java version in JARs within ZIPs	2017-12-11 13:15:24 +01:00
k-tamura	d7a90817f2	KEYCLOAK-6009 Fix incorrect String.format usage	2017-12-10 20:56:36 +01:00
Bill Burke	c9b218db71	Merge pull request #4823 from patriot1burke/master KEYCLOAK-5724	2017-12-08 20:03:05 -05:00
Bill Burke	7c031505e2	add test	2017-12-08 17:38:00 -05:00
Tomas Kyjovsky	03e43f8964	KEYCLOAK-5966 Adjust defaults for performance testsuite provisioning	2017-12-08 21:06:12 +01:00
Tomas Kyjovsky	b5c7be574b	KEYCLOAK-5967 Move configuration of load-balancer from Dockerfile to maven	2017-12-08 21:05:26 +01:00
Bill Burke	eea315a83b	KEYCLOAK-5724	2017-12-08 10:26:28 -05:00
Bill Burke	ce9f4bf97a	KEYCLOAK-5724	2017-12-08 10:25:30 -05:00
Bill Burke	5d5a200413	Merge pull request #4818 from patriot1burke/master KEYCLOAK-5926	2017-12-08 09:59:32 -05:00
vmuzikar	874dbcb3e1	KEYCLOAK-6007 Fix failing integration Node.js adapter test	2017-12-08 15:46:17 +01:00
mhajas	10219c1157	KEYCLOAK-6005 Fail build when adapters installation fails	2017-12-08 13:32:44 +01:00
Hynek Mlnarik	00fb36437d	KEYCLOAK-5861 Remove AUTH_SESSION_ID when END_AFTER_REQUIRED_ACTIONS set	2017-12-08 09:52:14 +01:00
Hynek Mlnarik	4a012b73ea	KEYCLOAK-4998 Fix NPE in AttributeToRoleMapper	2017-12-08 09:21:21 +01:00
Bill Burke	fce16fe030	last fix	2017-12-08 02:30:48 -05:00
Bill Burke	67149ce3c3	fix test	2017-12-08 02:23:41 -05:00
Bill Burke	49ba71fd8f	add logic for sync	2017-12-07 20:03:10 -05:00
Bill Burke	0dee393071	KEYCLOAK-5926	2017-12-07 19:49:10 -05:00
Bill Burke	464535ac81	Merge pull request #4815 from abstractj/KEYCLOAK-5467-i18-buttons KEYCLOAK-5467 X.509 Auth - missing internationalization support	2017-12-07 10:08:11 -05:00
Bill Burke	efa5949f69	Merge pull request #4814 from patriot1burke/master KEYCLOAK-5350	2017-12-07 10:07:35 -05:00
Bruno Oliveira	3f3d50b9ad	KEYCLOAK-5467 X.509 Auth - missing internationalization support This adds the missing i18n support for login buttons	2017-12-07 08:52:16 -02:00
Pavel Drozd	e567dcb888	Merge pull request #4809 from vramik/KEYCLOAK-4641 KEYCLOAK-4641 migrate remaining Adapter tests from old testsuite	2017-12-07 11:06:47 +01:00
stianst	f2ba699520	Update RH-SSO target version	2017-12-07 10:46:13 +01:00
stianst	c055ffb083	KEYCLOAK-4215 Consider session expiration when setting token timeouts	2017-12-07 10:45:02 +01:00
stianst	5fd3c9161d	KEYCLOAK-5868	2017-12-07 10:42:21 +01:00
Tomas Kyjovsky	5fd00a0def	KEYCLOAK-5971 Replace "numOfIterations" parameter with "steadyLoadPeriod"	2017-12-06 22:46:53 +01:00
Bill Burke	64f8d7ce25	KEYCLOAK-5350	2017-12-06 16:00:23 -05:00
Stan Silvert	b8da95e901	KEYCLOAK-5930: Submit button on cred screen should start as disabled	2017-12-06 15:35:00 -05:00
stianst	cccddebfd0	KEYCLOAK-5984 Fix error message in client initiated	2017-12-06 19:46:11 +01:00
vramik	5a8ff72cb6	KEYCLOAK-4641 migrate remaining Adapter tests from old testsuite	2017-12-06 15:12:37 +01:00
stianst	ecfabe4ebe	KEYCLOAK-5913 Move Chinese translations into resources-community	2017-12-06 13:58:52 +01:00
mposolda	8a0fa521c4	KEYCLOAK-5915 Support for sticky sessions managed by loadbalancer. Support for KeyAffinityService	2017-12-06 13:06:54 +01:00
mhajas	09348b2aff	KEYCLOAK-5896 Run localization test only in community	2017-12-06 10:09:46 +01:00
mhajas	896e216f99	KEYCLOAK-5986 Fix token javacsript tests	2017-12-06 10:08:32 +01:00
stianst	35e60e0aa4	KEYCLOAK-5957	2017-12-06 08:59:40 +01:00
stianst	6d1c33ccdc	KEYCLOAK-5667	2017-12-06 06:45:23 +01:00
Bill Burke	f669fdf0df	Merge pull request #4797 from stianst/KEYCLOAK-5734 KEYCLOAK-5734	2017-12-05 17:31:36 -05:00
Stan Silvert	30ad2899b8	KEYCLOAK-5933: Configure TOTP to Configure OTP	2017-12-05 17:24:54 -05:00
stianst	94ce97b972	KEYCLOAK-5734	2017-12-05 21:22:47 +01:00
Tomas Kyjovsky	3a7fd9e732	KEYCLOAK-5980 Dataset properties not loaded properly before test run - fix	2017-12-05 20:56:31 +01:00
Tomas Kyjovsky	503ad712dc	KEYCLOAK-5955 Add ability to remotely monitor Infinispan and load balancer	2017-12-05 13:36:23 +01:00
mposolda	f9e40326c1	KEYCLOAK-5961 Remove CrossDataCenter README file from codebase	2017-12-05 12:15:36 +01:00
mhajas	76029c7006	KEYCLOAK-4995 Fix Cluster tests on product and wildfly 10	2017-12-05 10:29:55 +01:00
James Stapleton	92cce7a6d4	[KEYCLOAK-5912] Add better improper SAML assertion error handling	2017-12-05 09:48:48 +01:00
Tomas Kyjovsky	916ba573bc	KEYCLOAK-5965 fix	2017-12-05 09:21:56 +01:00
mposolda	6c34b4c418	KEYCLOAK-5914 Periodic clean of detached client sessions	2017-12-05 08:25:30 +01:00
stianst	5467d67c91	KEYCLOAK-5945 Strip default ports from urls	2017-12-04 19:56:01 +01:00
stianst	c3d9f4704e	KEYCLOAK-5946 Make sure wildcard origin is never returned	2017-12-04 19:55:34 +01:00
stianst	4541acc628	KEYCLOAK-5176 Strip headers from PEM when uploading to client	2017-12-04 19:54:15 +01:00
Stan Silvert	19cfbbf7ff	KEYCLOAK-5972: i18n broken on keycloak-preview acct mgt	2017-12-04 13:44:16 -05:00
mposolda	ff6fcd30d9	KEYCLOAK-4478 OIDC auth response lacks session_state in some cases	2017-12-04 16:13:22 +01:00
Samuel Mendenhall	d69fe27cf9	set error instead of throw	2017-12-04 16:03:47 +01:00
Samuel Mendenhall	ca324c29e8	processInit should return a promise for setupCheckLoginIframe and should only call processCallback if that setupCheckLoginIframe is successful	2017-12-04 16:03:47 +01:00
Hynek Mlnarik	b4532ec629	KEYCLOAK-5964 Fix keycloak-install-base.cli client session caches	2017-12-04 12:15:07 +01:00
stianst	3ee269da87	Align dependencies	2017-12-04 10:14:30 +01:00
pedroigor	b1127ffafe	[KEYCLOAK-5953] - Making elytron dependencies optional	2017-12-04 10:13:55 +01:00
stianst	37de8e9f69	Bump version to 3.4.2.Final-SNAPSHOT	2017-12-01 09:34:48 +01:00
Stan Silvert	4d4ee33d1d	KEYCLOAK-5937: Not possible to select role w/ hardocded LDAP role mapper	2017-11-30 15:29:36 -05:00