8000 History for server-spi - hakdogan/keycloak · GitHub

Repository navigation

Commits

History for

Commits on Oct 13, 2026
- Percent-encode spaces in the OTP key URI account name
  
  amdadulbari
  authored and
  rmartinc
  committed
  2682473
Commits on Oct 9, 2026
- fixes CVE-2026-15943 by dropping when other values are changed (#53411)
  edewit
  authored
  17e1425
Commits on Oct 7, 2026
- Organization invitation redirectUrl is not validated against the account client allowlist, leaking a new user's authorization code
  
  vramik
  authored and
  pedroigor
  committed
  4c746a5
- Emit credential_id on UPDATE_CREDENTIAL events from built-in required actions (#50787)
  
  authored
  ca24864
Commits on Oct 6, 2026
- Organizations: return null from getByDomainName() for a malformed domain
  
  Hakaou
  authored and
  pedroigor
  committed
  4ea0961
Commits on Sep 29, 2026
- Add an IdP config option to control IdP admin role escalation.
  
  tkyjovsk
  authored and
  pedroigor
  committed
  043590b
- Securing Client Cluster Node Registration via Client Policy Executor, closes #52167
  
  msdaly200
  authored and
  rmartinc
  committed
  4a19f6e
Commits on Sep 28, 2026
- Restore deprecated getOrganizationId() and setOrganizationId() methods in IdentityProviderModel
  sguilhen
  authored
  4ab9645
Commits on Sep 24, 2026
- UI and Rest endpoinds for IDP org group mapper selection
  
  martin-kanis
  authored and
  pedroigor
  committed
  8a1b47c
Commits on Sep 22, 2026
- Client policy to reject may_act claim (#52898)
  rmartinc
  authored
  fc9cce1
Commits on Sep 21, 2026
- Trigger client policies for admin protocol mapper changes (#50205)
  slaskawi
  authored
  1ac9f92
Commits on Sep 18, 2026
- Prevent managing service account via groups and more test coverage
  pedroigor
  committed
  dd4ae31
Commits on Sep 9, 2026
- Admin Permissions filtering is applied to organization lookups during end-user authentication
  
  martin-kanis
  authored and
  pedroigor
  committed
  13d2808
- Introduce a capability allowing to change current membershipType for existing organization members
  
  martin-kanis
  authored and
  pedroigor
  committed
  2c0fd93
Commits on Sep 8, 2026
- Improve retrieval of large read-only resources via admin API
  
  martin-kanis
  authored and
  pedroigor
  committed
  68ff311
- Mutli-idp for orgs: Per-Association Config
  
  vramik
  authored and
  pedroigor
  committed
  45f25cc
- JpaOrganizationProvider and IdentityProviderStorageProvider support for idp-org relationship
  
  vramik
  authored and
  pedroigor
  committed
  932cee4
Commits on Sep 7, 2026
- Multi-IdP for orgs: Data Model
  
  vramik
  authored and
  pedroigor
  committed
  8fb918b
Commits on Aug 28, 2026
- Preserve configured order when evaluating password policies (#51840)
  adityaanikam
  authored
  11dfd45
Commits on Aug 25, 2026
- Fix refresh token same-second replay vulnerability (#51885)
  jimmychakkalakal
  authored
  2270912
Commits on Aug 18, 2026
- Invalidate in progress authentication sessions on credential reset (#50702)
  gaoyikeshuer
  authored
  412f8bb
Commits on Aug 12, 2026
- fix: smaller scope of an initial refactoring to bridge scim and admin v2 (#51456)
  shawkins
  authored
  207b657
Commits on Aug 11, 2026
- Prevent SCIM user writes from bypassing user-profile edit permissions
  
  sguilhen
  authored and
  pedroigor
  committed
  89294dd
Commits on Aug 7, 2026
- [OID4VCI]: Enforce ownership validation when deleting issued verifiable credentials via the account API (#51418)
  Awambeng
  authored
  d60cebd
Commits on Aug 3, 2026
- Deprecate HttpResponse getStatus/setStatus for JAX-RS endpoint usage (#51334)
  Copilot
  authored
  59fc5b3
Commits on Jul 30, 2026
- [OID4VCI] Ensure credential configuration IDs are unique (#51272)
  forkimenjeckayang
  authored
  1550152
- [OID4VCI] User-editable did attribute used as credential subject with realm-local uniqueness only
  
  tdiesler
  authored and
  mposolda
  committed
  0ac222f
Commits on Jul 27, 2026
- Parameterized UserPropertyMapper exposes target user attributes without permission check (#51063)
  mabartos
  authored
  208d763
Commits on Jul 17, 2026
- Localize workflow error messages via server-side i18n resolution (#50348)
  sguilhen
  authored
  3369540
Commits on Jul 10, 2026
- [OID4VP] Initial verifier implementation (#50430)
  dominikschlosser
  authored
  7c03f32
Commits on Jul 6, 2026
- Harden removeRootAuthenticationSession to check the realm ID (#50639)
  pruivo
  authored
  3e6a7c1
Commits on Jul 2, 2026
- Fix: JpaSingleUseObjectProvider.putIfAbsent() missing lifespan validation present in put()
  pruivo
  authored
  7608a20
- Control repeatability of parameterized client scopes (#50433)
  mabartos
  authored
  46ad7bd
Commits on Jul 1, 2026
- Deprecate the ClientModel.getDynamicClientScope() method (#50497)
  mabartos
  authored
  5bdd363
Commits on Jun 30, 2026
- Batch composite-role expansion to avoid an N+1 of getChildRoles on the cache-miss path
  
  authored
  5d2008e

0