[PR #11197/379db770 backport][stable-12] keycloak_realm: add webAuthnPolicyPasswordlessPasskeysEnabled param (#11228)

keycloak_realm: add webAuthnPolicyPasswordlessPasskeysEnabled param (#11197)

* keycloak_realm: add webAuthnPolicyPasswordlessPasskeysEnabled param

* Changelog Fragment - 11197

* Apply suggestions from code review



* Fix typo in changelog fragment filename

---------


(cherry picked from commit 379db770c5)

Co-authored-by: Christer Warén <cwchristerw@gmail.com>
Co-authored-by: Felix Fontein <felix@fontein.de>

changelogs/fragments/11197-keycloak-realm-webauthnpolicypasswordlesspasskeysenabled.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - keycloak_realm - add ``webAuthnPolicyPasswordlessPasskeysEnabled`` parameter (https://github.com/ansible-collections/community.general/pull/11197).

plugins/modules/keycloak_realm.py

@@ -732,6 +732,13 @@ options:
     type: list
     version_added: 11.3.0
     elements: str
+  web_authn_policy_passwordless_passkeys_enabled:
+    description:
+      - Enable passkeys (conditional UI) authentication in the username forms.
+    aliases:
+      - webAuthnPolicyPasswordlessPasskeysEnabled
+    type: bool
+    version_added: 12.1.0
 
 extends_documentation_fragment:
   - community.general.keycloak
@@ -1005,6 +1012,9 @@ def main():
         web_authn_policy_passwordless_extra_origins=dict(
             type="list", elements="str", aliases=["webAuthnPolicyPasswordlessExtraOrigins"], no_log=False
         ),
+        web_authn_policy_passwordless_passkeys_enabled=dict(
+            type="bool", aliases=["webAuthnPolicyPasswordlessPasskeysEnabled"]
+        ),
     )
 
     argument_spec.update(meta_args)