chore: upgrade to Keycloak 26

Author: vincentchalamon

api/src/Security/Http/Protection/ResourceResourceHandler.php

@@ -38,7 +38,7 @@ public function create(object $resource, UserInterface $owner, array $context =
         );
 
         // create resource_set on OIDC server
-        $response = $this->securityAuthorizationClient->request('POST', 'authz/protection/resource_set', [
+        $this->securityAuthorizationClient->request('POST', 'authz/protection/resource_set', [
             'auth_bearer' => $this->getPAT(),
             'json' => [
                 'name' => \sprintf('%s_%s', $shortName, $resource->getId()->__toString()),
@@ -48,9 +48,6 @@ public function create(object $resource, UserInterface $owner, array $context =
                 'owner' => $owner->getUserIdentifier(),
             ],
         ]);
-        if (200 !== $response->getStatusCode()) {
-            dump($response->toArray(false));
-        }
     }
 
     public function delete(object $resource, UserInterface $owner, array $context = []): void

compose.e2e.yaml

@@ -3,10 +3,9 @@ services:
     environment:
       KEYCLOAK_ENABLE_HTTPS: "true"
       KEYCLOAK_HTTPS_USE_PEM: "true"
-      KC_LOG_LEVEL: "debug"
       KEYCLOAK_HTTPS_CERTIFICATE_FILE: /opt/bitnami/keycloak/certs/tls.crt
       KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE: /opt/bitnami/keycloak/certs/tls.key
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true --import-realm"
+      KEYCLOAK_EXTRA_ARGS: "--import-realm"
     volumes:
       - ./helm/api-platform/keycloak/certs/tls.crt:/opt/bitnami/keycloak/certs/tls.crt:ro
       - ./helm/api-platform/keycloak/certs/tls.pem:/opt/bitnami/keycloak/certs/tls.key:ro

compose.override.yaml

@@ -57,7 +57,7 @@ services:
       context: ./helm/api-platform/keycloak/
       target: keycloak
     environment:
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true --import-realm"
+      KEYCLOAK_EXTRA_ARGS: "--import-realm"
     volumes:
       - ./helm/api-platform/keycloak/themes/api-platform-demo:/opt/bitnami/keycloak/themes/api-platform-demo
       - ./helm/api-platform/keycloak/config:/opt/bitnami/keycloak/data/import

compose.yaml

@@ -105,7 +105,7 @@ services:
       KEYCLOAK_HOSTNAME: https://${SERVER_NAME:-localhost}/oidc/
       KEYCLOAK_HOSTNAME_ADMIN: https://${SERVER_NAME:-localhost}/oidc/
       KEYCLOAK_ENABLE_HEALTH_ENDPOINTS: "true"
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true"
+      KEYCLOAK_PROXY_HEADERS: xforwarded
     # https://www.keycloak.org/server/all-config#category-health
     healthcheck:
       test: [ "CMD-SHELL", "curl http://127.0.0.1:8080/oidc/health || exit 1"]

helm/api-platform/values.yaml

@@ -116,8 +116,6 @@ keycloak:
       value: "https://chart-example.local/oidc/"
     - name: KEYCLOAK_PRODUCTION
       value: "true"
-    - name: KEYCLOAK_EXTRA_ARGS
-      value: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true"
   # must finish with a trailing slash (https://github.com/bitnami/charts/issues/10885#issuecomment-1414279144)
   httpRelativePath: /oidc/
   proxy: edge