added Feature for ui customization

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

common/src/main/java/org/keycloak/common/Profile.java

@@ -105,8 +105,11 @@ public enum Feature {
         MULTI_SITE("Multi-site support", Type.PREVIEW),
 
         OFFLINE_SESSION_PRELOADING("Offline session preloading", Type.DEPRECATED),
+
         HOSTNAME_V1("Hostname Options V1", Type.DEFAULT),
         //HOSTNAME_V2("Hostname Options V2", Type.DEFAULT, 2),
+
+        DECLARATIVE_UI("declarative ui spi", Type.EXPERIMENTAL),
         ;
 
         private final Type type;

common/src/test/java/org/keycloak/common/ProfileTest.java

@@ -78,6 +78,7 @@ public void checkDefaults() {
             Profile.Feature.DYNAMIC_SCOPES,
             Profile.Feature.DOCKER,
             Profile.Feature.MULTI_SITE,
+            Profile.Feature.DECLARATIVE_UI,
             Profile.Feature.RECOVERY_CODES,
             Profile.Feature.SCRIPTS,
             Profile.Feature.TOKEN_EXCHANGE,

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.unix.approved.txt

@@ -64,20 +64,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 HTTP(S):
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testBuildHelp.windows.approved.txt

@@ -64,20 +64,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 HTTP(S):
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelp.unix.approved.txt

@@ -59,20 +59,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Config:
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testExportHelpAll.unix.approved.txt

@@ -59,20 +59,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Config:
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelp.unix.approved.txt

@@ -59,20 +59,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Config:
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testImportHelpAll.unix.approved.txt

@@ -59,20 +59,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Config:
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.unix.approved.txt

@@ -89,20 +89,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation[:v1], js-adapter
-                       [:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
                        offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
                        scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
                        transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Hostname:
 

quarkus/tests/integration/src/test/resources/org/keycloak/it/cli/dist/approvals/cli/help/HelpCommandDistTest.testStartDevHelp.windows.approved.txt

@@ -89,20 +89,21 @@ Feature:
 --features <feature> Enables a set of one or more features. Possible values are: account-api[:v1],
                        account2[:v1], account3[:v1], admin-api[:v1], admin-fine-grained-authz[:v1],
                        admin2[:v1], authorization[:v1], ciba[:v1], client-policies[:v1],
-                       client-secret-rotation[:v1], device-flow[:v1], docker[:v1], dpop[:v1],
-                       dynamic-scopes[:v1], fips[:v1], hostname[:v1],impersonation[:v1], js-adapter[:v1], kerberos
-                       [:v1], linkedin-oauth[:v1], multi-site[:v1], offline-session-preloading[:
-                       v1], par[:v1], preview, recovery-codes[:v1], scripts[:v1],
-                       step-up-authentication[:v1], token-exchange[:v1], transient-users[:v1],
-                       update-email[:v1], web-authn[:v1].
+                       client-secret-rotation[:v1], declarative-ui[:v1], device-flow[:v1], docker[:
+                       v1], dpop[:v1], dynamic-scopes[:v1], fips[:v1], hostname[:v1], impersonation
+                       [:v1], js-adapter[:v1], kerberos[:v1], linkedin-oauth[:v1], multi-site[:v1],
+                       offline-session-preloading[:v1], par[:v1], preview, recovery-codes[:v1],
+                       scripts[:v1], step-up-authentication[:v1], token-exchange[:v1],
+                       transient-users[:v1], update-email[:v1], web-authn[:v1].
 --features-disabled <feature>
                      Disables a set of one or more features. Possible values are: account-api,
                        account2, account3, admin-api, admin-fine-grained-authz, admin2,
-                       authorization, ciba, client-policies, client-secret-rotation, device-flow,
-                       docker, dpop, dynamic-scopes, fips, impersonation, js-adapter, kerberos,
-                       linkedin-oauth, multi-site, offline-session-preloading, par, preview,
-                       recovery-codes, scripts, step-up-authentication, token-exchange,
-                       transient-users, update-email, web-authn.
+                       authorization, ciba, client-policies, client-secret-rotation,
+                       declarative-ui, device-flow, docker, dpop, dynamic-scopes, fips,
+                       impersonation, js-adapter, kerberos, linkedin-oauth, multi-site,
+                       offline-session-preloading, par, preview, recovery-codes, scripts,
+                       step-up-authentication, token-exchange, transient-users, update-email,
+                       web-authn.
 
 Hostname: