8000 AuthZen Evaluations API by ryanemerson · Pull Request #47838 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

AuthZen Evaluations API - #47838

Merged
pedroigor merged 1 commit into
keycloak:mainfrom
ryanemerson:47825/authzen_evaluations_api
May 7, 2026
Merged

pedroigor merged 1 commit into
keycloak:mainfrom
ryanemerson:47825/authzen_evaluations_api

Conversation

@ryanemerson
@ryanemerson ryanemerson commented Apr 8, 2026 •
Copy link
Copy Markdown
Contributor

Closes #47825

@keycloak-github-bot keycloak-github-bot Bot left a comment
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@keycloak-github-bot
Copy link
Copy Markdown

Unreported flaky test detected

If the flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation

Keycloak CI - Store Model Tests

java.lang.AssertionError: 
threads didn't terminate in time: [main (RUNNABLE):
	at java.management@25.0.2/sun.management.ThreadImpl.dumpThreads0(Native Method)
	at java.management@25.0.2/sun.management.ThreadImpl.dumpAllThreads(ThreadImpl.java:505)
	at java.management@25.0.2/sun.management.ThreadImpl.dumpAllThreads(ThreadImpl.java:493)
...

Report flaky test

org.keycloak.testsuite.model.singleUseObject.SingleUseObjectModelTest#testCluster

Keycloak CI - Store Model Tests

java.lang.AssertionError: 
threads didn't terminate in time: [main (RUNNABLE):
	at java.management@25.0.2/sun.management.ThreadImpl.dumpThreads0(Native Method)
	at java.management@25.0.2/sun.management.ThreadImpl.dumpAllThreads(ThreadImpl.java:505)
	at java.management@25.0.2/sun.management.ThreadImpl.dumpAllThreads(ThreadImpl.java:493)
...

Report flaky test

org.keycloak.testsuite.model.session.OfflineSessionPersistenceTest#testLazyOfflineUserSessionFetching

Keycloak CI - Store Model Tests

org.infinispan.remoting.RemoteException: ISPN000217: Received exception from node-29, see cause for remote stack trace
	at org.infinispan.remoting.transport.ResponseCollectors.wrapRemoteException(ResponseCollectors.java:26)
	at org.infinispan.remoting.transport.ValidSingleResponseCollector.withException(ValidSingleResponseCollector.java:37)
	at org.infinispan.remoting.transport.ValidSingleResponseCollector.addResponse(ValidSingleResponseCollector.java:21)
	at org.infinispan.remoting.transport.impl.SingleTargetRequest.addResponse(SingleTargetRequest.java:69)
...

Report flaky test

@ryanemerson
ryanemerson force-pushed the 47825/authzen_evaluations_api branch 3 times, most recently from 054a24f to 4612a7f Compare April 21, 2026 17:08
Closes keycloak#47825

Signed-off-by: Ryan Emerson <remerson@ibm.com>
@ryanemerson
ryanemerson force-pushed the 47825/authzen_evaluations_api branch from 4612a7f to c66f313 Compare May 1, 2026 10:08
@ryanemerson
ryanemerson requested a review from a team May 1, 2026 13:08
@ryanemerson
ryanemerson marked this pull request as ready for review May 1, 2026 13:08
@ryanemerson
ryanemerson requested a review from a team as a code owner May 1, 2026 13:08
List<AuthZen.EvaluationResponse> results = new ArrayList<>(request.evaluations().size());
for (AuthZen.EvaluationItem item : request.evaluations()) {
AuthZen.EvaluationRequest merged = mergeDefaults(request, item);
AuthZen.EvaluationResponse itemResponse = evaluateSingle(merged, token);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FYI, it should be possible to move the evaluation semantic logic to the policy engine. It would be a nice capability to add to authorization services.

@pedroigor
pedroigor merged commit 5811348 into keycloak:main May 7, 2026
85 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement the AuthZen Evaluations API

2 participants

0