feat: Adds support for Keycloak 26.1

[maximilian-krauss]

What this PR does / why we need it:

Adds support for Keycloak 26.1.

Which issue this PR fixes: fixes #1253

PR Readiness Checklist:

Complete these before marking the PR as ready to review:

• the CHANGELOG.md release notes have been updated to reflect any significant (and particularly user-facing) changes introduced by this PR

[AssahBismarkabah]

Hi @maximilian-krauss,

Thank you for the fix. , the issue on the ci seems to not be feasible, as we are also experiencing the same failure for those keycloak versions. I would appreciate it if you could look into the root cause.

For the lint-other-files step, ubuntu-latest jumped to ubuntu-24 which did not support python 3.7, you can pin the version to ubuntu-22.04

[maximilian-krauss]

Hi @AssahBismarkabah,
That's a pretty odd behavior. Its pretty hard to reproduce the failing behaviour and it also seems to be different between KC26 and KC26.1 👀

[AssahBismarkabah]

@maximilian-krauss I also noticed that too, but the error below occurs locally using kc-26.1 at ImportAuthenticationFlowsIT. However, I couldn't replicate the other failure at ChecksumServiceCasesIT.

java.lang.AssertionError: 
Expected: a collection with size <2>
     but: collection size was <1>

	at org.hamcrest.MatcherAssert.assertThat(MatcherAssert.java:20)
	at org.hamcrest.MatcherAssert.assertThat(MatcherAssert.java:6)
	at de.adorsys.keycloak.config.service.ImportAuthenticationFlowsIT.shouldUpdateMultipleExecutionsWithSameAuthenticator(ImportAuthenticationFlowsIT.java:764)
	at java.base/java.lang.reflect.Method.invoke(Method.java:580)
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
	at java.b
	```

[maximilian-krauss]

Yes, I also can reproduce the ImportAuthenticationFlowsIT failure, but only if I run it the whole suite via maven. If I execute them via IntelliJ they work just fine

[antikalk]

Yes, I also can reproduce the ImportAuthenticationFlowsIT failure, but only if I run it the whole suite via maven. If I execute them via IntelliJ they work just fine

On my side it also fails when just running the ImportAuthenticationFlowsIT in Intellij. I had a look at the test code, which confuses me:

keycloak-config-cli/src/test/java/de/adorsys/keycloak/config/service/ImportAuthenticationFlowsIT.java

Lines 762 to 764 in 1e3badb

	List<AuthenticatorConfigRepresentation> authConfig;
	authConfig = getAuthenticatorConfig(realm, "id1");
	assertThat(authConfig, hasSize(2));

Why should we find two configs for the same alias?

[maximilian-krauss]

Hey @antikalk,
I can reproduce it here too now. Maybe the behaviour was wrong in the first place and has been fixed recently 🤔

[bohmber]

The ImportClientsIT.shouldRemoveAuthzPoliciesForRealmManagement failure is caused by a new client scope.
See
Migrating to 26.1.0->Notable changes->New client scope service_account for client_credentials grant mappers

[bohmber]

if (VersionUtil.lt(KEYCLOAK_VERSION, "26.1")) {
        assertThat(client.getDefaultClientScopes(), containsInAnyOrder("web-origins", "profile", "roles", "email"));
} else {
        assertThat(client.getDefaultClientScopes(), containsInAnyOrder("web-origins", "profile", "roles", "email", "service_account"));
}

would be enough

[bohmber]

The ImportAuthenticationFlowsIT failures could caused by:
Check alias is unique for authenticator config when it is created

Then the test is no longer correct

[maximilian-krauss]

Hey @bohmber,

thanks for pointing that out. I updated the tests and they are passing now. Seems reasonable why the behavior changed.

Cheers,
Max

[bohmber]

@maximilian-krauss can you merge the latest changes from main into your branch?

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[maximilian-krauss]

Hey @bohmber, done 🙂

[bohmber]

I tested these code changes with our configuration and keycloak 26.1 without problems.

@AssahBismarkabah can you review the changes, please?

[AssahBismarkabah]

It works fine on my end as well @bohmber, thanks @maximilian-krauss .

[antikalk]

@AssahBismarkabah is there an ETA on when a KC 26.1 compatible release will be available? :)

[AssahBismarkabah]

Hi @antikalk, we are currently working on that. The release will be available before the end of today. Thanks!