[PLAN] openid_connect 3.x compatibility (D10)

Fixed issues for the keycloak groups. Some keys in the config file changed names, so did the config file itself. There are still others that need to be changed. But keycloak group mapping is working with this patch.

I worked a bit on the following issues, which should improve openid_connect 3.x support:
✨ Stop manually removing config of keycloak on uninstall Fixed
🐛 Keycloak config form stopped working correctly since openid_connect 3.x Fixed
📌 [openid_connect 3.x] Support role mapping Fixed

The above issues contain improvements to the config schema, config form and role mapping (which currently doesn't work).

I also created ✨ [Openid_connect 3.x] - Support session check Active .
We don't use the session check functionality in our project, but I believe it doesn't work right now with openid_connect 3.x.

because config is no longer stored in openid_connect.settings.keycloak, but in openid_connect.client.keycloak

Yeah, that's one of the biggest breaking changes in openid_connect 3.x. There might still be some other leftovers here an there.

Again thank you for your work Jeroen!

The patch which was added here is covered in 📌 [openid_connect 3.x] Support role mapping Fixed

is anyone successfully using openid_connect 3.x ? I'm considering upgrading to D10 shortly.
I'd like to have a D10 upgrade done by friday but I think this is about the one module that might stop us from achieving that. Wondering how much work is left?

Hey @joseph.olstad we are using it on a few D10 projects. The largest chunk of functionality is working. It's only a few things like single-sign-out (if you sign out of keycloak you sign out of drupal or vice versa, can't remember exactly).

ok thanks for that, sounds good, I'll upgrade to D10 and deal with the remaining issues later
btw, on your sites that have single signout issues, are they by chance using varnish?

We use Varnish on most of our projects yes.

The issue 3390391 (Add keycloak support for multple instances from openid_connect 3.x) 📌 Add keycloak support for multple instances from openid_connect 3.x Needs review aims to integrate this keycloak module in a way that support multiple clients. In issue 3390391 the functionality for single sign in ( 3382665 🐛 Replace Drupal login with Keycloak single sign-on (SSO) is not working Active ) and single sign out ( 3365872 ✨ [Openid_connect 3.x] - Support session check Active , 3107127 🐛 Can't get SingleSignOut to work Active ) is handled as well.

Is that approach something that could be considered a good path to reaching a stable keycoak module?

That is indeed one big hurdle that we still need to fix! Thanks for your effort by the way 😉

I think indeed if the multiple instances, and sign in/out issues are fixed we have most of it ready. At least for an RC I think!

I think, 📌 Add keycloak support for multple instances from openid_connect 3.x Needs review should be part of this.

Indeed, it was mentioned in #18 as well.

Adding it to the issue description.

Wondering if we should also drop D8 & D9 Support on the 2.2.x branch.