8000 Commits · keycloak/keycloak · GitHub

Repository navigation

Commits

Commits on Nov 6, 2026
- Make OIDCIdentityProvider.BROKER_NONCE_PARAM public
  QuellcodeWanderer
  authored
  d4d5554
- fix: clarifying hostname context considerations (#54681)
  shawkins
  authored
  0bc6a62
- Show credentials of disabled users in admin console (#54778)
  
  andy-clapson
  and
  claude
  authored
  62edf99
- Fixes link from Bootstrapping (#54728)
  andymunro
  authored
  74b563f
- Ignore docs.redhat.com in the external links check
  
  ssilvert
  authored and
  pedroigor
  committed
  77d1edc
- Remove ability to set up multivalued issuer for OIDC providers
  
  vramik
  authored and
  pedroigor
  committed
  a9d7e41
- Escape delimiter in federated and composite cache keys to prevent collisions
  
  sguilhen
  authored and
  pedroigor
  committed
  90b3f7e
- Reject a different brokered user on forced re-authentication before creating it
  
  sguilhen
  authored and
  pedroigor
  committed
  6ea53a2
- Reject online refresh tokens for sessions in logout states
  
  lhanusov
  authored and
  mposolda
  committed
  b1182f9
- Fix crash and inconsistent matching in account console linked-accounts search
  
  sguilhen
  authored and
  pedroigor
  committed
  77a8f12
- Validate ECDSA signature length before JWS verification (#53928)
  naruto-lgtm
  authored
  ea78b16
- Always validate post-logout redirect URIs in SecureRedirectUrisEnforcerExecutor (#53038)
  
  jimmychakkalakal
  and
  Copilot
  authored
  baf4aaa
- Update Quarkus JUnit test dependencies (#54734)
  Pepo48
  authored
  3acdf06
- Reject empty SCIM group members on PUT
  
  akasakariko
  authored and
  pedroigor
  committed
  a50ba94
- Document LDAP bind account permissions for recursive group retrieval strategy
  
  sguilhen
  authored and
  pedroigor
  committed
  56ffd6a
- [CVE-2026-116468] Privilege escalation: delegated admin to realm-admin via group move (incomplete fix of CVE-2026-94000)
  
  martin-kanis
  authored and
  pedroigor
  committed
  1316705
Commits on Nov 5, 2026
- Update AGENTS.md with contribution conventions
  
  ahus1
  and
  Copilot
  authored
  30cf683
- Allow any order in Should save several allowed Kerberos realms kerberos test
  rmartinc
  authored
  e19891a
- Add validation for blocked session note names in UserSessionNoteMapper (#53559)
  jimmychakkalakal
  authored
  ae5e730
- Resolve ABCA attester key from x5c JOSE header
  
  adityaanikam
  authored and
  mposolda
  committed
  f2d2da5
- Do not log ABCA client authentication headers
  
  wakqasahmed
  authored and
  mposolda
  committed
  e0b49a7
- Forged authorization code lets any client detach another client's client session
  
  graziang
  authored and
  mposolda
  committed
  98c6275
- Migrating NonceBackwardsCompatibleMapperTest.java to the new test framework
  
  PadzerButch
  authored and
  mposolda
  committed
  3a03330
- Force re-authentication after reset credential by default (#53975)
  vaceksimon
  authored
  c69bfb8
- Fix missing accessible name for attempted-username input in keycloak.v2 login theme (#54660)
  Inf1mum
  authored
  accf2bd
- Restrict Kerberos password authentication to allowed realms
  
  michalvavrik
  authored and
  rmartinc
  committed
  ca650c6
- Add a Cancel button to the authorization scope edit form (#54170)
  
  ivandrofly
  and
  claude
  authored
  3e1ce51
- Retry Weblate pull and push on HTTP 423
  
  ahus1
  and
  Copilot
  authored
  94f852d
Commits on Nov 4, 2026
- Cache getGroupByName and group paths per request
  pedroigor
  authored
  970b7c7
- Fixing NPE for lazy loading when a role was removed
  
  ahus1
  and
  Copilot
  authored
  8da1df6
- Fixing inconsistenicies in the new test framework test suites - Clusterless, Multisite, Volatile, Stateless
  lhanusov
  authored
  27de89b
- Fail assigning an ID when creating resources
  pedroigor
  authored
  b1a872a
- Upgrade Node.js used for the JS build to 24.22.2
  
  ahus1
  and
  Copilot
  authored
  a447cf4
- Require specifying IdPs when requesting external tokens in V1 Brokering (#53752)
  vmuzikar
  authored
  c5e857e
- Enforce per-resource view permission on SCIM listings
  
  sguilhen
  authored and
  pedroigor
  committed
  0cbbed9

0