upgraded Keycloak from 22.0.5 to 25.0.5

minimal-setup/keycloak/docker-compose.yml

@@ -132,11 +132,9 @@ services:
 
 
   keycloak:
-    image: orthancteam/orthanc-keycloak:24.7.1
+    image: orthancteam/orthanc-keycloak:24.9.0
     depends_on: [keycloak-db]
     restart: unless-stopped
-#    healthcheck:
-#      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
     environment:
       KEYCLOAK_ADMIN: "admin"
       KEYCLOAK_ADMIN_PASSWORD: "change-me"

release-notes.md

@@ -4,11 +4,18 @@ SPDX-FileCopyrightText: 2022 - 2024 Orthanc Team SRL <[email protected]>
 SPDX-License-Identifier: GPL-3.0-or-later
 -->
 
-Pending changes
+v 24.9.0
 ===============
 
 - Fixed typo in `KEYCLOAK_ADMIN_URI` that was not read correctly.
 - Fixed special characters that were not allowed in API keys.
+- Upgraded Keycloak from 22.0.5 to 25.0.5
+- enabled brut force detection by default in orthanc Keycloak realm
+
+BREAKING CHANGES:
+- Keycloak Docker image env var `KC_HOSTNAME_URL` is replaced by `KC_HOSTNAME`
+- Keycloak Docker image env var `KC_HOSTNAME_ADMIN_URL` is removed (no longer needed)
+
 
 
 v 24.7.2

sources/keycloak/Dockerfile.orthanc-keycloak

@@ -22,16 +22,19 @@ COPY keycloak/realm-export.json /opt/keycloak/data/import/
 ENV KC_HOSTNAME=http://localhost/keycloak
 
 ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]
-CMD ["start", "--optimized", "--import-realm", "--http-enabled", "true"]
+CMD ["start", "--optimized", "--import-realm", "--http-enabled", "true", "--proxy-headers", "xforwarded"]
 
+# to play with UI/themes/css:
 #CMD ["start", "--optimized", "--import-realm", "--http-enabled", "true", "--spi-theme-static-max-age=-1", "--spi-theme-cache-themes=false", "--spi-theme-cache-templates=false"]
 
+# to export the orthanc realm:
+# CMD ["export", "--file", "/usr/tmp/realm-export.json", "--realm", "orthanc"]
 
 ### To export the realm of a working Keycloak to a json file:
 # - stop the setup
 # - bind a volume to /usr/tmp (copose file)
 # - replace the last "CMD" command of current Docker file by the following one:
-#   CMD ["export --file /usr/tmp/realm-export.json --realm orthanc --users realm_file"]
+#   CMD ["export --file /usr/tmp/realm-export.json --realm orthanc"]
 # - rebuild the keycloak image (adapt path for files to copy in current file: lines 13 and 20)
 # - start your setup
 # - then keycloak will start, export the realm and exit. From that moment, your realm