Repository navigation

Commits

History for

on26.5.7

Commits on Apr 2, 2026
- Set version to 26.5.7
  github-actions[bot]
  committed
  97c2dad
Commits on Mar 26, 2026
- Prevent creating policies if they don't reference only the owner resource (#496)
  
  pedroigor
  authored and
  stianst
  committed
  995832f
Commits on Mar 25, 2026
Commits on Mar 23, 2026
- Adding namespaces for single-use cache entries for PAR and OAuth code (#471)
  mposolda
  authored
  9046f20
- Consider path params in the unsafe path for RedirectUtils (#436)
  rmartinc
  authored
  35a71b0
Commits on Mar 17, 2026
- Stricter access control for listing realm and client roles (#47236)
  pedroigor
  authored
  cb0e884
- Check resource server when managing their resources
  pedroigor
  authored
  fc3cb3c
- Stricter access control for managing permission tickets
  pedroigor
  authored
  f1baf25
- Ensure get organizations by member id requires managing realm
  
  vramik
  authored and
  pedroigor
  committed
  daf1a51
Commits on Mar 16, 2026
- Enforce org membership on member organizations endpoint
  
  Oluwatobi-Mustapha
  authored and
  pedroigor
  committed
  55f59b1
Commits on Mar 12, 2026
- Do not return managed attribute as unmanaged if admin has no view permission
  pedroigor
  authored
  4b59ccf
Commits on Mar 9, 2026
- Privilege escalation via manage-clients permission
  
  vramik
  authored and
  pedroigor
  committed
  79ab311
Commits on Mar 6, 2026
- Remove root auth session on first offline_access to prevent cross-user session contamination
  
  federicobartoli
  authored and
  mposolda
  committed
  5136972
- SPIFFE Client assertion throws a NullPointerException if no client is found
  ryanemerson
  authored
  6d85a18
- Do not use offline sessions in the logout endpoint
  
  sschu
  and
  rmartinc
  authored
  c8ad65b
- Executor for client uris pattern validation
  graziang
  authored
  afa8ace
- Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition (#46054) (#46732)
  
  mposolda
  and
  ahus1
  authored
  37bbde1
Commits on Feb 25, 2026
- Enforce disabled checks when processing brokering flows (#367)
  pedroigor
  authored
  4fd5367
Commits on Feb 24, 2026
- Make sure client is enabled when processing responses unsolicited responses (#373)
  pedroigor
  authored
  a4a092d
Commits on Feb 23, 2026
- Ensure that an encrypted assertion is signed if response is not signed (#355)
  rmartinc
  authored
  f8ee90f
Commits on Feb 20, 2026
- Check client is enabled in the docker endpoint (#46468)
  rmartinc
  authored
  3dad921
Commits on Feb 18, 2026
- Limit the inflating size for the SAML redirect binding
  rmartinc
  authored
  c545b08
Commits on Feb 16, 2026
- Make sure disabled organizations are not available from selection
  pedroigor
  authored
  9040284
- Remove admin console public config endpoint (#46361)
  graziang
  authored
  a8d5d1b
Commits on Feb 14, 2026
- fix: adding admin role invalidation when a new realm is found
  
  shawkins
  and
  ahus1
  authored
  f373c59
Commits on Feb 10, 2026
Commits on Jan 30, 2026
- Make sure updates do not allow updating the resource associated with the uma policy
  stianst
  authored
  08ab925
- User validation in JWT Authorization Grant (#346)
  
  stianst
  and
  graziang
  authored
  6742c4b
Commits on Jan 29, 2026
- Make sure registration tokens are verified before processing registration
  stianst
  authored
  b5fb9f9
- Check if the idp is enabled for JWT Authorization Grant and Federated Client Authentication (#315) (#337)
  stianst
  authored
  4764967

Breadcrumbs

User selector

Datepicker

Commit history

Commits on Apr 2, 2026

Commits on Mar 26, 2026

Commits on Mar 25, 2026

Commits on Mar 23, 2026

Commits on Mar 17, 2026

Commits on Mar 16, 2026

Commits on Mar 12, 2026

Commits on Mar 9, 2026

Commits on Mar 6, 2026

Commits on Feb 25, 2026

Commits on Feb 24, 2026

Commits on Feb 23, 2026

Commits on Feb 20, 2026

Commits on Feb 18, 2026

Commits on Feb 16, 2026

Commits on Feb 14, 2026

Commits on Feb 10, 2026

Commits on Jan 30, 2026

Commits on Jan 29, 2026