moved login screen to patternfly 5 (keycloak#25340)

* moved login screen to patternfly 5 Signed-off-by: Erik Jan de Wit <[email protected]> * added Feature flag to enable login v2 Signed-off-by: Erik Jan de Wit <[email protected]> * removed the old css and only include logo and background styles Signed-off-by: Erik Jan de Wit <[email protected]> * changed to experimental Signed-off-by: Erik Jan de Wit <[email protected]> * added login2 Signed-off-by: Erik Jan de Wit <[email protected]> * added windows help texts Signed-off-by: Erik Jan de Wit <[email protected]> --------- Signed-off-by: Erik Jan de Wit <[email protected]>
tnorimat · Jan 25, 2024 · 28c9f98 · 28c9f98
1 parent b58f35f
commit 28c9f98
Show file tree

Hide file tree

Showing 26 changed files with 557 additions and 88 deletions.
diff --git a/common/src/main/java/org/keycloak/common/Profile.java b/common/src/main/java/org/keycloak/common/Profile.java
@@ -60,6 +60,8 @@ public enum Feature {
 
         ADMIN2("New Admin Console", Type.DEFAULT, Feature.ADMIN_API),
 
+        LOGIN2("New Login Theme", Type.EXPERIMENTAL),
+
         DOCKER("Docker Registry protocol", Type.DISABLED_BY_DEFAULT),
 
         IMPERSONATION("Ability for admins to impersonate users", Type.DEFAULT),

diff --git a/common/src/test/java/org/keycloak/common/ProfileTest.java b/common/src/test/java/org/keycloak/common/ProfileTest.java
@@ -77,6 +77,7 @@ public void checkDefaults() {
             Profile.Feature.ADMIN_FINE_GRAINED_AUTHZ,
             Profile.Feature.DYNAMIC_SCOPES,
             Profile.Feature.DOCKER,
+            Profile.Feature.LOGIN2,
             Profile.Feature.MULTI_SITE,
             Profile.Feature.DECLARATIVE_UI,
             Profile.Feature.RECOVERY_CODES,

diff --git a/...ycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.unix.approved.txt b/...ycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.unix.approved.txt
@@ -67,16 +67,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.

diff --git a/...oak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.windows.approved.txt b/...oak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.windows.approved.txt
@@ -64,21 +64,22 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
-                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
-                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
-                       offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
-                       scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
-                       transient-users[:v1], update-email[:v1], web-authn[:v1].
+                       client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
+                       device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
+                       hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation,
+                       authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
-                       offline-session-preloading, oid4vc-vci, par, preview, recovery-codes, scripts,
-                       step-up-authentication, token-exchange, transient-users, update-email,
-                       web-authn.
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
+                       offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
+                       scripts, step-up-authentication, token-exchange, transient-users,
+                       update-email, web-authn.
 
 HTTP(S):
 

diff --git a/...cloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelp.unix.approved.txt b/...cloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelp.unix.approved.txt
@@ -62,16 +62,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -156,4 +156,4 @@ Export:
 --users-per-file <number>
                      Set the number of users per file. It is used only if 'users' is set to
                        'different_files'. Increasing this number leads to exponentially increasing
-                       export times. Default: 50.
+                       export times. Default: 50.
diff --git a/...ak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelpAll.unix.approved.txt b/...ak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelpAll.unix.approved.txt
@@ -62,16 +62,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -156,4 +156,4 @@ Export:
 --users-per-file <number>
                      Set the number of users per file. It is used only if 'users' is set to
                        'different_files'. Increasing this number leads to exponentially increasing
-                       export times. Default: 50.
+                       export times. Default: 50.
diff --git a/...cloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelp.unix.approved.txt b/...cloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelp.unix.approved.txt
@@ -62,16 +62,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -150,4 +150,4 @@ Import:
 --file <file>        Set the path to a file that will be read.
 --override <true|false>
                      Set if existing data should be overwritten. If set to false, data will be
-                       ignored. Default: true.
+                       ignored. Default: true.
diff --git a/...ak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelpAll.unix.approved.txt b/...ak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelpAll.unix.approved.txt
@@ -62,16 +62,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -150,4 +150,4 @@ Import:
 --file <file>        Set the path to a file that will be read.
 --override <true|false>
                      Set if existing data should be overwritten. If set to false, data will be
-                       ignored. Default: true.
+                       ignored. Default: true.
diff --git a/...oak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.unix.approved.txt b/...oak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.unix.approved.txt
@@ -92,16 +92,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -293,4 +293,4 @@ Security:
 Do NOT start the server using this command when deploying to production.
 
 Use 'kc.sh start-dev --help-all' to list all available options, including build
-options.
+options.
diff --git a/.../it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.windows.approved.txt b/.../it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.windows.approved.txt
@@ -92,19 +92,19 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1], par[:
-                       v1], preview, recovery-codes[:v1], scripts[:v1], step-up-authentication[:
-                       v1], token-exchange[:v1], transient-users[:v1], update-email[:v1], web-authn
-                       [:v1].
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
-                       offline-session-preloading, oid4vc-vci, par, preview, recovery-codes, scripts,
-                       step-up-authentication, token-exchange, transient-users, update-email,
-                       web-authn.
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
+                       offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
+                       scripts, step-up-authentication, token-exchange, transient-users,
+                       update-email, web-authn.
 
 Hostname:
 

diff --git a/.../it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelpAll.unix.approved.txt b/.../it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelpAll.unix.approved.txt
@@ -92,16 +92,16 @@ Feature:
                        client-secret-rotation[:v1], client-types[:v1], declarative-ui[:v1],
                        device-flow[:v1], docker[:v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1],
                        hostname[:v1], impersonation[:v1], js-adapter[:v1], kerberos[:v1],
-                       linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:v1],
-                       oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
+                       linkedin-oauth[:v1], login2[:v1], multi-site[:v1], offline-session-preloading
+                       [:v1], oid4vc-vci[:v1], par[:v1], preview, recovery-codes[:v1], scripts[:
+                       v1], step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
                        update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
                        authorization, ciba, client-policies, client-secret-rotation, client-types,
                        declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
-                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, login2, multi-site,
                        offline-session-preloading, oid4vc-vci, par, preview, recovery-codes,
                        scripts, step-up-authentication, token-exchange, transient-users,
                        update-email, web-authn.
@@ -293,4 +293,4 @@ Security:
 Do NOT start the server using this command when deploying to production.
 
 Use 'kc.sh start-dev --help-all' to list all available options, including build
-options.
+options.