1c6524e4db
fix: check client existence based on clientId
Remove the necessity for supplying client name for create a new client
request, also don't check existing clients based on client name as those
can be duplicate
BREAKING CHANGE: Renamed parameter client_name to client_id in get_client_id method
Closes #351
2 years ago
25f1f68705
style: fix docstring for docs pages
2 years ago
5e6c775735
style: fixed docstrings everywhere
2 years ago
81b3cc80db
docs: add timeout to docstring
2 years ago
bead0aff2b
fix: raise correct exceptions
2 years ago
e7152e5c74
build: use poetry for package management
2 years ago
d2a6262d61
feat: Ability to set custom timeout for KCOpenId and KCAdmin
2 years ago
2f212c1350
feat: Allow fetching existing policies before calling create_client_authz_client_policy()
2 years ago
667d1e088e
feat: support token exchange config via admin API
This adds support for the basic endpoints necessary to configure client-to-client token exchange.
The /authz API is lacking official documentation. Basic docs added to docstrings instead.
2 years ago
bcdf1b825b
feat: Add update_idp
2 years ago
f3de47e1b3
feat: Add update_mapper_in_idp
2 years ago
9a13f67fea
feat: Add get_idp_mappers, fix #329
2 years ago
e95649a93c
fix: fixed bugs in events methods
2 years ago
e56889e5db
fix: fixed components bugs
2 years ago
8c8c0e8141
fix: use param for update client mapper
2 years ago
1029e46a68
feat: added new methods for client scopes
2 years ago
d9c3326fd1
fix: allow query parameters for users count
2 years ago
fe160531f4
fix: allow client_credentials token if username and password not specified
2 years ago
960af199b4
fix: escape when get role fails
2 years ago
54beb51fba
chore: move source files into src folder
Moved all of the source files into the src folder
2 years ago
fa9e56ef42
feat: added authenticator providers getters
2 years ago
6cce29f26b
fix: full tox fix ready
2 years ago
b911d94db9
feat: fixed admin client to pass the tests
2 years ago
8d19ea8180
fix: raise correct errors
2 years ago
cc82e6a874
feat: initial setup of CICD and linting
2 years ago
25b9097fd1
Add 202 expected return code when update flow #288
3 years ago
64d74be6af
Add support of TOTP to KeycloakAdmin
3 years ago
17b507427f
Bugfix get_group_members
3 years ago
b57d884718
Fix the issue of the token getting expire for some functions in the keycloak admin
3 years ago
7cef48f725
Fix get_groups() so that it returns groups and not users
3 years ago
28c82d1051
Removed unsed import.
3 years ago
4ba3007e41
Reverted connection deepcopy on KeycloakAdmin
3 years ago
738e9ecc70
Add methods to get available and composite realm roles of a user
3 years ago
a29f282c69
#262 Added three functions to get all the client's authorization scopes, permissions, policies using Keycloak Admin
3 years ago
9abbf559ac
add client session stats
Signed-off-by: modularTaco <37046961+modularTaco@users.noreply.github.com>
3 years ago
9777a85fa0
fixed typo in URL pattern
3 years ago
95c4a7ee2d
added delete_authentication_flow(flow_id)
3 years ago
76b6798429
added get/delete authentication_flow_execution(execution_id)
3 years ago
c538d8fb32
added get/add/delete default (default/optional) client scopes
3 years ago
a6ad87d62c
fix invalid credential error and refresh_code not exist error
3 years ago
7ee625d063
Enable Keycloak Admin for Non-master Realms
Allow the 'KeycloakAdmin' class to instantiate against non-master realms using
an Authorization header for a non-admin user that is granted permissions to
inspect or manage Keycloak admin resources.
Example:
kca = KeycloakAdmin(
'https://auth.keycloak.local/auth/ ',
realm_name='my-realm',
client_id='admin',
custom_headers=auth_headers
)
3 years ago
80bb7a56b5
Fix invalid permission type
A permission associates the object being protected and the policies that must be evaluated to decide whether access should be granted.
Permissions can be created to protect two main types of objects:
1. Resources
2. Scopes
3 years ago
10c212cce5
Refine comments
3 years ago
656de1c466
Add more comments
3 years ago
3b93754d27
Add new AuthZ API support
NOTE: These are private API, will be changed later.
3 years ago
a37bf45c77
Add delete_user_social_login
This makes it possible to delete federated identities without having
to use raw requests.
3 years ago
d0894d4352
Don't force realm name when using secret key
Using other realms can be useful, for example, to manage realm users with restricted rights.
3 years ago
69d60d430a
Add remove and update methods for client protocol mappers
3 years ago
5b202e71cb
fix: handle refresh_token error "Session not active"
3 years ago
50354e6108
Add feature to list and delete user credentials
3 years ago
Richard Nemeth
Fredrik Lindner
Chuma Umenze
Erik Cederstrand
Bruno Bonfils
Jackson Kwok
maxnoto
Salem Wafi
carlos
Marcos Pereira Jr
Konstantin Köhring
Salem Wafi
modularTaco
ggallard
robsonyeg
Ryan Gard
lcgkm
Tobias Henkel
Nikolay Amiantov
Ankur Saxena
Nicklas Sedlock
Md Minhazul Haque