WildFly Proposals

Agroal [agroal]

• Agroal subsystem

Bootable Jar [bootable-jar]

• Ability to execute CLI script at runtime

• WildFly bootable JAR

• Bootable jar support for MicroProfile Quickstarts

• Server components upgrade and Galleon feature-pack dependency update.

Command Line Interface (CLI) [cli]

• Enhance word navigation in CLI

• Compact output for echo-dmr command

• Disable CLI paging with an option

• CLI, new option to enable properties resolution

• Coloured output for CLI

• Auth security commands

• Allow CLI output scrolling

• Search output for CLI

• Add the ability for the CLI SSL security commands to be able to obtain a server certificate from Let’s Encrypt

• Enhance JBoss CLI generic "command" with support for existing resource

Cloud [cloud]

• Transactions propagation and recovery over EJB remoting on OpenShift

• Evolve support for custom Galleon feature-packs usage during s2i.

• WildFly Operator for Kubernetes/OpenShift

• Helm Charts for WildFly

• New WildFly S2I image

• Integrate aws.S3_PING discovery protocol

• Integrate KUBE_PING discovery protocol

• As an user, I want to build and push an application image from the wildfly-maven-plugin

Clustering [clustering]

• Implement new infinispan resources

• Support RemoteCache configuration to Infinispan subsystem

• Add multi-server support to mod_cluster

• Configure session affinity using multiple routes if supported by balancer

• Configure HotRod Session Manager in distributable-web Subsystem

• Singleton service metrics

• Singleton Service Election Listener

• Eager passivation of SFSBs

• Remote cache metrics

• Add a Galleon layer for the Distributable Web subsystem configured with a local web cache

• Add support for Infinispan query, counters, locks, and CDI

• ProtoStream marshalling of web session attributes

• Add support for using Infinispan APIs from a deployment

• Create distributable-ejb subsystem

• Allow configuration of an arbitrary cookie to use for web request affinity

• Distributable Shared Session Configuration

• Distributable Web Subsystem

• HotRod client injection via @Resource JNDI injection

• Ranked routing

• Distributed EJB timers

• HotRod-based distributed session manager

• Integrate aws.S3_PING discovery protocol

• Add security configuration for Infinispan remote cache store

• Integrate KUBE_PING discovery protocol

• Initial state transfer configuration

• Scattered Cache

• Enhance CommandDispatcher API to leverage CompletableFutures

Datasources [datasource]

• Agroal subsystem

• Allow to configure module for custom validation classes

• Get Datasource Class Information

Embedded [embedded]

• Embedded Logging Changes

IIOP [iiop]

• IIOP security configuration and tests refactor

Jakarta Batch [batch]

• Galleon layer for Batch subsystem

• Stop batch job execution from a different node

• Limit number of records loaded by the JDBC job repository

Jakarta CDI / Weld [weld]

• CDI 2.0 Support

Jakarta Concurrency [concurrency]

• Managed Executors Runtime Stats

• EE Concurrency Hung Tasks Termination

Jakarta Connectors [jca]

• Enable configuration of resource adapter validation log directory

• Allow to configure module for custom validation classes

• Get Datasource Class Information

Jakarta EE [ee]

• Enable/disable descriptor based property replacement for files parsed by wildfly-core

• EE Security API

• Replace JavaEE references with corresponding JakartaEE ones

• Jakarta EE based WildFly have to communicate successfully with previous Java EE based WildFly

• WFLY-16793 Support for Identity Propagation within an EAR and across EARs with OIDC

• Add a Galleon Layer for the Jakarta EE 10 Core Profile

• WildFly Preview support for Jakarta MVC 2.1

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

• [PREVIEW]  Standard WildFly support for Jakarta MVC 2.1

• [PREVIEW]  Jakarta Data support in standard WildFly

• JSON-P 1.1 (JSR 374)

• JSON-B 1.0 (JSR 367)

• Support the EE 8 Security API (JSR-375) with WildFly Elytron

• Common Annotations 1.3

Jakarta Enterprise Beans [ejb]

• Transactions propagation and recovery over EJB remoting on OpenShift

• Expose EJB runtime data / statistics

• Configure Global EJB Server Side Interceptors

• EJB subsystem configure max threads and core threads independently

• Eager passivation of SFSBs

• Multiple Delivery Group Support for Message Driven Beans

• EJB over HTTP server-to-server invocation

• Ability to configure default global stateful timeout for Stateful Session Beans

• EJB Timers: Forcing refresh timers in a database-data-store in a clustered environment

• Quickstart for EJB remoting and transaction recovery on OpenShift

• Enable compression on remoting globally for EJB calls

• Galleon layers for the EJB subsystem

• Create distributable-ejb subsystem

• Jakarta EE based WildFly have to communicate successfully with previous Java EE based WildFly

• Expose EJB3 Deployment Information as Runtime Resources

• Ability to add a server-side configured Interceptor for the applications without changing the deployments

• Global EJB Client Side Interceptors Configuration

• Distributed EJB timers

• Return Context Data to EJB Clients

Jakarta Faces [jsf]

• Expose attribute of the JSF subsystem to specify whether or not DOCTYPE declarations in JSF deployments should be disallowed

• Galleon layer for Jakarta Server Faces support

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

• JSF 2.3 Support

Jakarta Mail [mail]

• Galleon layer for the Mail subsystem

• JavaMail 1.6

Jakarta Persistence [jpa]

• Remove EE7 (JPA) mode: default to (EE8) JPA 2.2 spec jar, Hibernate ORM 5.3.x

• Legacy compatibility option for executing queries in non-JTA threads

• Hibernate ORM 6.2

• EE8 preview mode: JPA 2.2 support: ability to enable latest Hibernate ORM

Jakarta Resources [resource-adapter]

• Enable configuration of resource adapter validation log directory

• Allow to configure module for custom validation classes

Jakarta RESTful Web Services [jaxrs]

• Async (NIO) request processing support in RESTEasy ClientHttpEngine

• JAX-RS parameters annotations with default names

• RESTEasy SPI to modify resource metadata

• RESTEasy extended async / reactive support

• RESTEasy extended support for multivalue @*Param

• RESTEasy support for setting HTTP proxy by using JAX-RS API

• REST integration with WildFly Elytron - AuthenticationClient for Authentication / SSL

• Microprofile REST Client 1.3 support

• Add support for injecting Optional<T> parameter types

• Support configuring RESTEasy through Wildfly management model

• Use MicroProfile Config in RESTEasy

• Add JSON Merge Patch support

• Microprofile REST Client 2.0 support

• Upgrade RESTEasy from 3.x to 4.x

• RESTEasy should be able to provide trace information about request

• Upgrade RESTEasy from 4.x to 6.2

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

• Promote MicroProfile REST Client 4.0 from Preview to Default Stability Level

• JAX-RS 2.1 Support

• RESTEasy JDK9 support

• JAX-RS client redirect

• Microprofile REST Client 1.0 support

Jakarta Validation [bean-validation]

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

• Bean Validation 2.0 support

JBoss Diagnostic Reporter [jdr]

• Galleon layer for JBoss Diagnostic Reporting support

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

JBoss MSC [msc]

• MSC Multi-Value Service API

Logging [logging]

• Show logs from logging-profile in log viewer

• Replace 'list-log-files' with using the 'log-file' resource

• Enhanced Audit Logging - RFC support and Configuring Reconnects

• Expose named-formatter Attribute on the syslog-handler Resource

• JSON and XML Formatters

• Logging Socket Handler

• Embedded Logging Changes

• Replace commons-logging implementation with one that can delegate to jboss-logging

• Add named-formatter to the syslog-handler

• Custom Filter

• Event Logger

• Add log4j2 Support to WildFly

• Remove log4j 1.x Module and Support

• JSON Formatted Access Logs

Management [management]

• Custom HTTP Headers for the HTTP Management Interface

• Add option to always sent certificate for LDAPS connections when using Legacy Security Realm (WFCORE-2647)

• Allow registering a custom HTTP handler for management interface

• [COMMUNITY]  Simple config export for a server as an attachment for standalone or domain mode

• [COMMUNITY]  Aliases for standard configuration files

• Check Environment Variables When Resolving Expressions

• As a developer, I want to override management attribute values using environment variables

• [COMMUNITY]  Ability to reload a server to a different stability level

• [COMMUNITY]  Ability to reload a Host Controller to a different stability level

• [COMMUNITY]  [WFCORE-6830] Additional management attributes to contrain HTTP management interface resource utilisation.

• Simple config export for a server as an attachment for standalone or domain mode

Maven [maven]

• WildFly Maven Plugin to produce fully configured WildFly server

• WFLY-18428 - Improve the "Get Started" Experience with WildFly

• [COMMUNITY]  Publish WildFly channel manifest

• As an user, I want to build and push an application image from the wildfly-maven-plugin

Messaging [messaging]

• Add support to several messaging-activemq resources

• Support runtime operations for messaging servers

• Provide complete QuickStart and documentation for connecting to a remote AMQ broker

• Configure Messaging Clusters behind HTTP load balancers

• Make journal-file-open-timeout Attribute Configurable for Messaging Server Resource

• Configure enable-amq1-prefix Attribute

• Support pause for JMS topics

• Replace 'discovery-group' and 'broadcast-group' resources

• Add Setting to Control Global Resources Usage for Messaging Servers

• Support JMS Java EE resources definition for remote Artemis-based broker

• Connections to remote Artemis broker must not require local Artemis instance

• Add attribute to model which will indicate that backup is synchronized with live server

• Add journal-file-open-timeout attribute to the Artemis messaging server resource

• Multiple Delivery Group Support for Message Driven Beans

• Support messaging clusters (Artemis Clusters) behind http load balancers

• Expose the enable1Prefixes configuration on external (pooled) connection factories

• Monitor Artemis resource adapter thread pools

• Artemis network health check feature not configurable from WildFly

• Galleon layer for remote ActiveMQ Artemis broker integration support

• Galleon layer for embedded broker messaging

• Provide a WildFly Management API operation to configure the critical analyzer

• Keep corrupted Journal files in Artemis.

• Document how to configure a datasource to take advantage of new Artemis pool support

• Add call-timeout attribute to the Artemis core bridge resource

• Add an attribute to be able to define the address_queue_scan period.

• Provide CLI operation which returns used journal type -NIOxASYNCIO.

• Allow to dump Artemis journal to file using WildfFly Management API

• JMS Bridge should display statistics about messages that have been processed.

• Add support for Elytron provided SSLContexts in Artemis

• Implement the Pause method for a Topic via Management APIs

• Support Messaging JDBC HA Shared Store

MicroProfile [microprofile]

• Support 'microprofile-platform' Galleon layer in S2i workflow

• Support Eclipse MicroProfile Config in Web Console

• Make "Expose EAP Metrics" configurable

• Display microprofile health checks on HAL

• Support Eclipse MicroProfile Config

• Support Eclipse MicroProfile OpenTracing

• Support Eclipse MicroProfile Health

• Support Eclipse MicroProfile Metrics

• Expose WildFly Metrics

• Microprofile REST Client 1.3 support

• Add MicroProfile Config TCK to the WildFly integration test suite

• Upgrade MicroProfile Health 2.0.1.

• Upgrade MicroProfile Metrics 2.0.1

• Transition OpenTracing to Microprofile 3.0

• Integrate MicroProfile OpenAPI 1.1

• Integrate server probes in MP Health readiness check

• Integrate MicroProfile Fault Tolerance 2.0

• MicroProfile JWT 1.1 Support

• Provide a 'microprofile-platform' Galleon layer

• Upgrade MicroProfile Health to 2.1

• Upgrade MicroProfile Metrics to 2.2.0

• Quickstart for MP Health 2.2

• Integrate Microprofile OpenTracing 1.3

• Create quickstart for MicroProfile Fault Tolerance

• Use MicroProfile Config in RESTEasy

• Quickstart for MP Config 1.4

• Quickstart for MP Metrics 2.3

• Quickstart for MP REST-client 1.4

• Quickstart for MP OpenTracing 1.3

• MicroProfile JWT Quickstart

• Upgrade MicroProfile Metrics to 2.3

• Upgrade MicroProfile Config to 1.4

• Integrate MicroProfile Fault Tolerance 2.1

• Upgrade MicroProfile Health to 2.2

• Microprofile REST Client 1.4 support

• MicroProfile OpenAPI quickstart

• Microprofile BOM

• MicroProfile Reactive Messaging with Focus on Apache Kafka

• Bootable jar support for MicroProfile Quickstarts

• Remove MicroProfile Opentracing from WildFly EE

• Upgrade MicroProfile Config to 2.0

• Integrate MP Metrics 3.0 into EAP

• Integrate MP OpenTracing 2.0 into EAP

• Integrate MicroProfile OpenAPI 2.0

• Upgrade MicroProfile Health to 3.0

• Upgrade to support MicroProfile JWT 1.2

• Integrate MP Fault Tolerance 3.0 into EAP

• Microprofile REST Client 2.0 support

• Quickstart for MicroProfile Reactive Messaging 1.0 with Kafka

• Upgrade MicroProfile Reactive Streams Operators to 2.0

• MicroProfile Reactive Messaging 2.0

• Modernise Reactive Messaging QuickStart for MicroProfile Reactive Messaging 2.0

• API for more information and configuration of Kafka messages

• Upgrade MicroProfile Health to 3.1

• Configure Reactive Messaging Kafka connector to use SSLContext from the Elytron subsystem and allow SASL_PLAINTEXT and SASL_SSL protocols

• MicroProfile Reactive Messaging Integration with RHOSAK

• Add support for AMQP Connector in MicroProfile Reactive Messaging

• MP Config: Ability to specify root config source directory

• MicroProfile aligned with Jakarta EE 10 (MicroProfile 6.1 versions)

• MicroProfile aligned with Jakarta EE 10 (MicroProfile 6.0 versions)

• Quickstart for MicroProfile LRA 2.0

• MicroProfile Platform 7.0

• MicroProfile OpenAPI 4.0

• WFLY-19592 [MP Platform 7] MicroProfile Fault Tolerance 4.1

• Integrate OpenTelemetry with the MP Reactive Messaging Kafka connector

• Integrate OpenTelemetry with the MP Reactive Messaging AMQP connector

• [Default] Promote MicroProfile Telemetry 2.0 to WildFly Standard

• Promote MicroProfile REST Client 4.0 from Preview to Default Stability Level

• [PREVIEW]  Add the vertx extension/subsystem from wildfly-vertx-feature-pack to WildFly Preview Feature Pack

• Microprofile REST Client 1.0 support

• Example CLI script to evolve standalone configurations with microprofile

Migration [migration]

• JBoss EAP 7.3 Server Migration Tool

• JBoss EAP 7.2 Server Migration Tool

• Jakarta EE based WildFly have to communicate successfully with previous Java EE based WildFly

Mod_cluster [mod_cluster]

• Update Modcluster view for new resources load-provider

• Add multi-server support to mod_cluster

• Integrate mod_cluster ramp-up mechanism when starting new nodes

• Add multi-server support to mod_cluster

Modules [modules]

• Java Platform Module Support

• Provide ability to list modules which are on deployment’s classpath via a Management Operation.

• Expose Module Options

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

Observability [observability]

• Add OpenTelemetry Tracing Support to WildFly

• Implement Observability Policy for Metrics

• [Default] Promote MicroProfile Telemetry 2.0 to WildFly Standard

OpenShift [openshift]

• Evolve support for custom Galleon feature-packs usage during s2i.

• WildFly Operator for Kubernetes/OpenShift

• Quickstart for EJB remoting and transaction recovery on OpenShift

• Include Openshift Instructions in EAP non-CD Quickstarts READMEs

• Helm Charts for WildFly

• todo-backend Quickstart

• New WildFly S2I image

• Integrate KUBE_PING discovery protocol

POJO [pojo]

• Galleon layer for the Pojo subsystem

Quickstarts [quickstarts]

• Provide complete QuickStart and documentation for connecting to a remote AMQ broker

• EAP8 Beta Quickstarts

• Quickstart for MP Health 2.2

• Create quickstart for MicroProfile Fault Tolerance

• Quickstart for MP Config 1.4

• Quickstart for MP REST-client 1.4

• Quickstart for MP OpenTracing 1.3

• MicroProfile JWT Quickstart

• Quickstart for EJB remoting and transaction recovery on OpenShift

• Include Openshift Instructions in EAP non-CD Quickstarts READMEs

• MicroProfile OpenAPI quickstart

• Bootable jar support for MicroProfile Quickstarts

• todo-backend Quickstart

• Modernise Reactive Messaging QuickStart for MicroProfile Reactive Messaging 2.0

• Remove Outdated Quickstarts

Scripts [scripts]

• Add Common Script Configuration File

• [default] Improve systemd service units

Security [security]

• Add new Elytron resources

• Add support for JASPI as added to the WildFly Elytron Subsystem

• Expose CA management operations for key-store and certificate-authority-account

• Add support for server-ssl-sni-context

• Provide web console (GUI) full support for Security Manager configuration

• Auth security commands

• ELY-2538 Provide a possibility for a caching realm to authenticate users with underlying realm when credential verification with cached credential fails

• Support for Keycloak SSO

• Enhance the SSL Wizard to add support to LetsEncrypt CA

• Enhance Password Mappers

• Update Passwords in Credential Store

• Legacy security clean up

• SNI Support

• Add support for TLS 1.3

• Add the ability for the CLI SSL security commands to be able to obtain a server certificate from Let’s Encrypt

• Enchance read-alias and read-aliases keystore commands

• Add support for TLS 1.3 using the OpenSSL TLS provider with Elytron

• Remove Legacy Security Realms

• EE Security API

• Reference WildFly Elytron SecurityDomain from Undertow’s application-security-domain resource.

• <HTTP Basic Authentication - Silent Mode>

• Keycloak Galleon Feature Pack

• [COMMUNITY]  SSLContext to support delegation to alternate instances based on peer information

• Make WildFly able to use latest OpenSSL 3.0.0 libraries

• WFLY-16306: Keycloak Galleon Feature Pack

• [PREVIEW]  Adding the ability to configure additional scope value for an authentication request

• WFLY-16793 Support for Identity Propagation within an EAR and across EARs with OIDC

• [PREVIEW]  Add the ability to specify that the OIDC Authentication Request should include request and request_uri parameters

• Add security configuration for Infinispan remote cache store

Service Archive (SAR) [sar]

• Galleon layer for SAR subsystem

Transactions [transactions]

• Transactions propagation and recovery over EJB remoting on OpenShift

• Introduce a maximum-timeout management model attribute

• WS-AT Integration with .NET

Undertow [undertow]

• Add support for undertow session operations

• Secure Cookie Handling

• Session Manager Operations

• Add support for Underotw’s proxy-protocol attribute

• Highest Session Count Metric

• Support for the PROXY protocol

• Reference WildFly Elytron SecurityDomain from Undertow’s application-security-domain resource.

• JSON Formatted Access Logs

• Make return value of HttpServletRequest.getServletPath/getRequestURI/getRequestURL configurable (DeploymentInfo.setPreservePathOnForward)

• Obfuscate session-route

• Support SameSite Cookie Attribute

• [PREVIEW]  Make ReuseXForwarded and RewriteHost configurable

• [PREVIEW]  Modify ajp-listener to allow specifying pattern for ajp request attributes

• Servlet 4.0 Support

• Don’t handle web requests until the server is started

• Undertow Buffer Pools

• Allow unescaped characters in URL

• Forwarded Header Handling

• Default Cookie Version

User Experience [user-experience]

• Enhance word navigation in CLI

• Compact output for echo-dmr command

• Migrate & Update Guided Tour

• Disable CLI paging with an option

• Show notification of non progressing operations

• CLI, new option to enable properties resolution

• Coloured output for CLI

• Allow CLI output scrolling

• Search output for CLI

• Provide datasource properties as suggestions

• Enhance the SSL Wizard to add support to LetsEncrypt CA

• Customise Browser Title

• Adjust naming in console "master/slave" → "primary/secondary"

• Add the ability for the CLI SSL security commands to be able to obtain a server certificate from Let’s Encrypt

• Check Environment Variables When Resolving Expressions

• As a developer, I want to override management attribute values using environment variables

• Microprofile BOM

• WildFly Maven Plugin to produce fully configured WildFly server

• New WildFly S2I image

• WFLY-18428 - Improve the "Get Started" Experience with WildFly

• As an user, I want to build and push an application image from the wildfly-maven-plugin

Web Console [console]

• Support Eclipse MicroProfile Config in Web Console

• Add support for undertow session operations

• Implement new infinispan resources

• Make "Expose EAP Metrics" configurable

• Display microprofile health checks on HAL

• Add new Elytron resources

• Migrate & Update Guided Tour

• Add support for JASPI as added to the WildFly Elytron Subsystem

• Add support to several messaging-activemq resources

• Show logs from logging-profile in log viewer

• Replace 'list-log-files' with using the 'log-file' resource

• Add "init" runtime operation to trust-manager

• Update Modcluster view for new resources load-provider

• Expose CA management operations for key-store and certificate-authority-account

• Display open network ports for a managed server

• Add support for server-ssl-sni-context

• Support runtime operations for messaging servers

• Show active management operation from hosts and servers in a central place

• Show notification of non progressing operations

• Provide web console (GUI) full support for Security Manager configuration

• Expose EJB runtime data / statistics

• Expose IO worker runtime data / statistics

• Support kill and destroy operations for server-groups

• Support socket log handler

• Expose attribute of the JSF subsystem to specify whether or not DOCTYPE declarations in JSF deployments should be disallowed

• Unify wording for deployment operations

• Support RemoteCache configuration to Infinispan subsystem

• Add multi-server support to mod_cluster

• Show Disconnected Hosts

• Specify Custom Server URLs

• New Features in HAL 3.x

• Add support for Underotw’s proxy-protocol attribute

• Support for Keycloak SSO

• Provide datasource properties as suggestions

• Enhance the SSL Wizard to add support to LetsEncrypt CA

• Customise Browser Title

• Configure Global EJB Server Side Interceptors

• Configure session affinity using multiple routes if supported by balancer

• Expose named-formatter Attribute on the syslog-handler Resource

• Configure Messaging Clusters behind HTTP load balancers

• Make journal-file-open-timeout Attribute Configurable for Messaging Server Resource

• Configure HotRod Session Manager in distributable-web Subsystem

• Configure enable-amq1-prefix Attribute

• Enhance Password Mappers

• Support pause for JMS topics

• Support adding of HTTP headers to management console responses

• Update Passwords in Credential Store

• Show non-heap-memory-usage in server preview

• Display content hash in deployment panel

• Legacy security clean up

• Replace 'discovery-group' and 'broadcast-group' resources

• Adjust naming in console "master/slave" → "primary/secondary"

• Galleon layer for the Web Management Console

Web Services [webservices]

• JBossWS JDK9 support

• Propagate authenticated subject in ElytronSecurityDomainContextImpl

• Add WebServices Galleon layer

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

WildFly Core [core]

• read-config-as-features management operation

• Display open network ports for a managed server

• Show active management operation from hosts and servers in a central place

• Convenient declaration of server suspend timeouts

• Add the ability to resolve standard server system properties to configure the managed server JVMs

• Use Galleon for the WildFly and WildFly Core build

• Support for read only server configuration directory

• Provide ability to list modules which are on deployment’s classpath via a Management Operation.

• Restore legacy (not "graceful") startup mode

• Enchance read-alias and read-aliases keystore commands

• Adding support for Git backend for configuration files

• Support SSH authentication for Git persistence

• Expose Module Options

• [COMMUNITY]  Simple config export for a server as an attachment for standalone or domain mode

• Controller boot CLI Script execution

• [COMMUNITY]  Aliases for standard configuration files

• [COMMUNITY]  Ability to reload a server to a different stability level

• [PREVIEW]  Scan for usage of API elements annotated with annotations indicating unstable API

• [COMMUNITY]  Ability to reload a Host Controller to a different stability level

• Simple config export for a server as an attachment for standalone or domain mode

• Provide ability to easily apply certain JBoss module libraries to all deployments running in a server

• Migrate WildFly to JDK JAXP (Java API for XML Processing) Version 1.6

WildFly Elytron [elytron]

• Add new Elytron resources

• Add support for JASPI as added to the WildFly Elytron Subsystem

• Add "init" runtime operation to trust-manager

• Expose CA management operations for key-store and certificate-authority-account

• Add support for server-ssl-sni-context

• Add ability to FileAuditEndpoint to allow file encoding to be overridden.

• ELY-1686 Add utility to port legacy properties files into a FileSystemRealm

• Enhanced Audit Logging - RFC support and Configuring Reconnects

• HTTP External Mechanism Support in Elytron

• Add encryption and integrity support to FilesystemSecurityRealm

• Add integrity support to FilesystemSecurityRealm

• ELY-2538 Provide a possibility for a caching realm to authenticate users with underlying realm when credential verification with cached credential fails

• WFLY-18163 Make it possible to use JaasSecurityRealm via a custom-realm resource

• Support for masked passwords in client XML config

• Enhance the SSL Wizard to add support to LetsEncrypt CA

• Enhance Password Mappers

• Separate stream flushing and file syncing in file-audit-endpoint

• JDBC Security Realm mod_crypt and HEX encoding support.

• Add support for named permission sets to the Elytron subsystem configuration

• Provide Elytron alternative to RoleMappingLoginModule

• Add Elytron subsystem component to use a custom security event listener

• Make implementing Configurable interface optional for configurable components

• OCSP certificate revocation

• JwtValidator jku and kid header parameters

• Add support for Elytron’s trust-manager to be dynamically reloaded

• Automatic detection of file based KeyStore types.

• Default SSLContext Registration (Within Application Server)

• Support automatically adding and updating credentials in a credential store

• Add support for TLS 1.3

• Enchance read-alias and read-aliases keystore commands

• CredentialStore Backed Expression Resolution

• Enhanced mapping of an X509Certificate to the underlying identity

• Make the certificate authority used by a certificate-authority-account configurable

• Aggregation of SecurityRealms for Attribute Loading

• Support SSH authentication for Git persistence

• Support for multiple security realms - Distributed Identities

• Support for multiple security realms - Failover

• Adding principal-transformer in aggregate-realm

• Making additional attributes available for authorization decisions

• Introduce regex mapper for security roles in Elytron

• Add support for TLS 1.3 using the OpenSSL TLS provider with Elytron

• Add the ability to adjust the case of a user name using an Elytron principal transformer

• Security Realms should support specifying the charset and encoding for credentials

• Add the ability to make use of an automatically generated self-signed certificate with Elytron

• Automatic registration of client side / JVM wide default SSLContext

• Elytron server-ssl-context allowed protocols

• Certificate Revocation Lists

• Native support for OpenID Connect

• Provide a LoginModule compatible security realm.

• Add the ability to ignore unavailable realms for a distributed-realm

• Reference WildFly Elytron SecurityDomain from Undertow’s application-security-domain resource.

• WildFly Elytron JASPI (JSR-196) Servlet Profile Suport

• WS integration with WildFly Elytron - AuthenticationClient for Authentication / SSL

• REST integration with WildFly Elytron - AuthenticationClient for Authentication / SSL

• Keycloak Galleon Feature Pack

• [COMMUNITY]  SSLContext to support delegation to alternate instances based on peer information

• Normalize principal propagation/injection across elytron and legacy

• Securing the management console with OIDC

• Make WildFly able to use latest OpenSSL 3.0.0 libraries

• [PREVIEW]  Adding the ability to configure additional scope value for an authentication request

• WFLY-16793 Support for Identity Propagation within an EAR and across EARs with OIDC

• [PREVIEW]  Add the ability to specify that the OIDC Authentication Request should include request and request_uri parameters

• Support the EE 8 Security API (JSR-375) with WildFly Elytron

WildFly Galleon [wf-galleon]

• Support 'microprofile-platform' Galleon layer in S2i workflow

• Evolve support for custom Galleon feature-packs usage during s2i.

• Tooling for end user creation of Galleon feature packs

• Use Galleon for the WildFly and WildFly Core build

• [PREVIEW]  Scan for usage of API elements annotated with annotations indicating unstable API

• wildfly-dist should generate and deploy a zipped maven repo for galleon

• Provide a 'microprofile-platform' Galleon layer

• Galleon layer for Batch subsystem

• Add a Galleon layer for the Distributable Web subsystem configured with a local web cache

• Galleon layer for Jakarta Server Faces support

• Galleon layer for the Mail subsystem

• Galleon layer for SAR subsystem

• Galleon layer for the Pojo subsystem

• Galleon layers for the EJB subsystem

• Add WebServices Galleon layer

• Galleon layer for the Web Management Console

• Galleon layer for JBoss Diagnostic Reporting support

• Galleon layer for JSON-P support

• Galleon layer for JSON Binding support

• Keycloak Galleon Feature Pack

• Galleon layer for remote ActiveMQ Artemis broker integration support

• Galleon layer for embedded broker messaging

• Server components upgrade and Galleon feature-pack dependency update.

• Add a Galleon Layer for the Jakarta EE 10 Core Profile

• [COMMUNITY]  WildFly provisioning to support WildFly stability

• [COMMUNITY]  Publish WildFly channel manifest

• [COMMUNITY]  [community] WildFly Glow, introduce spaces to structure discovered Galleon feature-packs