Bug 57452 – Fix create_legacy_authentication_flow for keycloak v25

Bug 57452 - Fix create_legacy_authentication_flow for keycloak v25


Summary:	Fix create_legacy_authentication_flow for keycloak v25

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Keycloak
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 5.0-8-errata
Assigned To:	Felix Botner
QA Contact:	Julia Bremer

URL:	https://git.knut.univention.de/univen...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2024-07-16 15:05 CEST by Felix Botner
Modified:	2024-08-14 16:48 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Felix Botner

2024-07-16 15:05:52 CEST

With keycloak version 25 `create_legacy_authentication_flow` sometime creates the flows in the wrong order

"displayName": "Univention App Authenticator",
        "level": 0,
        "index": 0,
        "priority": 0
"displayName": "Normal Login (browser legacy app authorization)",
        "level": 0,
        "index": 1,
        "priority": 0


but it should be

"displayName": "Normal Login (browser legacy app authorization)",
        "level": 0,
        "index": 0,
        "priority": 0
"displayName": "Univention App Authenticator",
        "level": 0,
        "index": 1,
        "priority": 0

turns out with keycloak version 25 we can and need to set the priority for the flow we want to create for the correct order

https://github.com/keycloak/keycloak/issues/20747

Comment 1 Felix Botner

2024-07-18 15:20:52 CEST

See https://git.knut.univention.de/univention/ucs/-/merge_requests/1227/diffs

Comment 2 Julia Bremer

2024-08-09 10:47:05 CEST

OK: Priority parameter has been added to the create_legacy_authentication_flow function.
OK: Tests in jenkins confirm that the priority always results in the correct flow order

OK: YAML
Verified.

Comment 3 Arvid Requate

2024-08-14 16:48:25 CEST

<https://errata.software-univention.de/#/?erratum=5.0x1099>