Open
Description
Describe the bug
Moved from https://issues.redhat.com/browse/KEYCLOAK-16711
At REST endpoint, no validation is done for ssoSessionIdleTimeout, ssoSessionMaxLifespan, offlineSessionIdleTimeout, and offlineSessionMaxLifespan.
At Admin console, these settings are regulated in positive values. Negative values and zero are rejected.
REST endpoint should have data validation check because zero and negative values are inappropriate for these settings.
Version
RH-SSO 7.5.0
Expected behavior
consistent validation between API and Admin Console
Actual behavior
no validation is done for ssoSessionIdleTimeout, ssoSessionMaxLifespan, offlineSessionIdleTimeout, and offlineSessionMaxLifespan.
How to Reproduce?
./kcadm.sh update realms/<your-realm> -s ssoSessionIdleTimeout=-100
Anything else?
No response