Add organization-level session timeout overrides#48376
Open
JerryK73 wants to merge 1 commit intokeycloak:mainfrom
Open
Add organization-level session timeout overrides#48376JerryK73 wants to merge 1 commit intokeycloak:mainfrom
JerryK73 wants to merge 1 commit intokeycloak:mainfrom
Conversation
Allows administrators to configure session idle timeout and max lifespan at the organization level, overriding realm defaults for members of that organization. Includes JPA schema changes, cache layer updates, Admin REST API exposure, frontend UI tab, and unit tests. Closes keycloak#46549 Signed-off-by: JerryK73 <[email protected]> Signed-off-by: Sebastian Capellan <[email protected]>
e459221 to
6c255e3
Compare
Member
|
Adding a "hold" label until the value of this change has been evaluated. Sorry, just too many things in the queue at the moment. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Allows administrators to configure session idle timeout and max lifespan at the organization level, overriding realm defaults for members of that organization. Includes JPA schema changes, cache layer updates, Admin REST API exposure, frontend UI tab, and unit tests.
List of some changes we made:
-First we edited the OrganizationModel interface to add timeout attributes + getter/setter methods
-Added columns into OrganizationEntity for JPA
-Updated Liquibase changelog
-Implemented getter/setters into both instances of OrganizationAdapter
-Also added the getter/setters into KeycloakModelUtilsTest
-Created helper and override methods in SessionExpirationUtils to check for organization timeout (defaults to realm default if no org timeout has been set)
-Made our api calls more accurate by updating representationToModel and modelToRepresentation util files
-Implemented frontend interface (shown in gif)
Note: Used Claude to help with development
Closes #46549