Allow changing locale when using action tokens

Closes #37127

Signed-off-by: Pedro Igor <[email protected]>

Author: pedroigor

services/src/main/java/org/keycloak/forms/login/freemarker/FreeMarkerLoginFormsProvider.java

@@ -62,6 +62,7 @@
 import org.keycloak.forms.login.freemarker.model.UrlBean;
 import org.keycloak.forms.login.freemarker.model.VerifyProfileBean;
 import org.keycloak.forms.login.freemarker.model.X509ConfirmBean;
+import org.keycloak.http.HttpRequest;
 import org.keycloak.models.ClientModel;
 import org.keycloak.models.Constants;
 import org.keycloak.models.KeycloakSession;
@@ -548,6 +549,14 @@ protected void createCommonAttributes(Theme theme, Locale locale, Properties mes
 
                 if (authenticationSession != null && authenticationSession.getAuthNote(Constants.KEY) != null) {
                     b.queryParam(Constants.KEY, authenticationSession.getAuthNote(Constants.KEY));
+                } else {
+                    HttpRequest request = session.getContext().getHttpRequest();
+                    MultivaluedMap<String, String> queryParameters = request.getUri().getQueryParameters();
+
+                    if (queryParameters != null && queryParameters.getFirst(Constants.TOKEN) != null) {
+                        // changing locale should forward the action token
+                        b.queryParam(Constants.TOKEN, queryParameters.getFirst(Constants.TOKEN));
+                    }
                 }
 
                 final var localeBean = new LocaleBean(realm, locale, b, messagesBundle);

services/src/main/java/org/keycloak/services/resources/LoginActionsService.java

@@ -760,7 +760,12 @@ public Response registerPage(@QueryParam(AUTH_SESSION_ID) String authSessionId,
                                  @QueryParam(Constants.EXECUTION) String execution,
                                  @QueryParam(Constants.CLIENT_ID) String clientId,
                                  @QueryParam(Constants.CLIENT_DATA) String clientData,
-                                 @QueryParam(Constants.TAB_ID) String tabId) {
+                                 @QueryParam(Constants.TAB_ID) String tabId,
+                                 @QueryParam(Constants.TOKEN) String tokenString) {
+        if (Profile.isFeatureEnabled(Profile.Feature.ORGANIZATION) && tokenString != null) {
+            //this call should extract orgId from token and set the organization to the session context
+            preHandleActionToken(tokenString);
+        }
         return registerRequest(authSessionId, code, execution, clientId,  tabId,clientData);
     }
 

testsuite/integration-arquillian/tests/base/src/main/java/org/keycloak/testsuite/pages/RegisterPage.java

@@ -36,7 +36,8 @@
 /**
  * @author <a href="mailto:[email protected]">Stian Thorgersen</a>
  */
-public class RegisterPage extends AbstractPage {
+public class RegisterPage extends LanguageComboboxAwarePage
+{
 
     @Page
     private AccountFields.AccountErrors accountErrors;

testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/organization/admin/OrganizationInvitationLinkTest.java

@@ -27,6 +27,7 @@
 import java.util.Arrays;
 import java.util.List;
 import java.util.Map;
+import java.util.Set;
 import java.util.concurrent.TimeUnit;
 import java.util.function.Predicate;
 
@@ -239,6 +240,45 @@ public void testRegistrationEnabledWhenInvitingNewUser() throws Exception {
         }
     }
 
+    @Test
+    public void testRegistrationEnabledWhenInvitingNewUserWithLocalization() throws Exception {
+        String email = "inviteduser@email";
+
+        OrganizationResource organization = testRealm().organizations().get(createOrganization().getId());
+        try (
+                RealmAttributeUpdater rau = new RealmAttributeUpdater(testRealm()).setRegistrationAllowed(Boolean.TRUE).update();
+                Response response = organization.members().inviteUser(email, null, null)
+        ) {
+            RealmRepresentation realmRep = testRealm().toRepresentation();
+            Boolean internationalizationEnabled = realmRep.isInternationalizationEnabled();
+            realmRep.setInternationalizationEnabled(true);
+            realmRep.setSupportedLocales(Set.of("en", "pt-BR"));
+            testRealm().update(realmRep);
+            getCleanup().addCleanup(() -> {
+                realmRep.setInternationalizationEnabled(internationalizationEnabled);
+                testRealm().update(realmRep);
+            });
+
+            assertThat(response.getStatus(), equalTo(Response.Status.NO_CONTENT.getStatusCode()));
+
+            String link = getInvitationLinkFromEmail();
+            driver.navigate().to(link);
+            Assert.assertFalse(organization.members().list(-1, -1).stream().anyMatch(actual -> email.equals(actual.getEmail())));
+            registerPage.assertCurrent(organizationName);
+            registerPage.openLanguage("Portuguese");
+            Assert.assertTrue(driver.getPageSource().contains("Campos obrigatórios"));
+            registerPage.register("firstName", "lastName", email,
+                    "invitedUser", "password", "password", null, false, null);
+            // authenticated to the account console
+            Assert.assertTrue(driver.getPageSource().contains("Account Management"));
+            Assert.assertNotNull(driver.manage().getCookieNamed(CookieType.IDENTITY.getName()));
+
+            List<MemberRepresentation> memberByEmail = organization.members().search(email, Boolean.TRUE, null, null);
+            assertThat(memberByEmail, Matchers.hasSize(1));
+            assertThat(memberByEmail.get(0).getMembershipType(), equalTo(MembershipType.MANAGED));
+        }
+    }
+
     @Test
     public void testEmailDoesNotChangeOnRegistration() throws IOException, MessagingException {
         String email = "inviteduser@email";