8000 Commits · keycloak/keycloak · GitHub

Repository navigation

Commits

Commits on Sep 30, 2026
- Set version to 26.7.5
  github-actions[bot]
  committed
  44299f3
- BACKPORT: Truncate certificate CN to 64 characters per RFC 5280 (#51779) (#53360)
  
  authored
  9ac6c30
- Ignore audience for disabled and removed clients (#53244)
  graziang
  authored
  76e0e76
- Update ClientRedirectTest to not use an external webpage (#53342)
  stianst
  authored
  331a259
- Fix broken documentation links (#53345)
  stianst
  authored
  a70289c
- Fix broken documentation links (#53344)
  stianst
  authored
  1a5faa2
- Upgrade to Quarkus 3.33.4 (#53334)
  Pepo48
  authored
  b5b8dfc
Commits on Sep 28, 2026
- fix: Upgrade to 26.7.0 crashes under several tested scenarios. LazyInitializationException on non-deterministic getRealmsStream() order
  
  authored
  71db679
- Cache the maven wrapper when building on GHI
  ahus1
  authored
  092ae63
Commits on Sep 25, 2026
Commits on Sep 24, 2026
- Fix broker client check in admin ui
  
  graziang
  authored and
  mposolda
  committed
  8c08ec3
Commits on Sep 23, 2026
- Fix ordering so it is deterministic
  ahus1
  authored
  39c86c7
- [CVE-2026-18217] SAML Redirect Binding Parameter Pollution (#51861)
  
  pskopek
  authored and
  mposolda
  committed
  0d010e0
- Parse pom.properties as data instead of sourcing it as shell (#53025)
  Pepo48
  authored
  94fefcf
Commits on Sep 22, 2026
- Fix client secret disclosure for view-only users (#52976) (#53014)
  
  mposolda
  and
  himanshu7745
  authored
  fe18fd0
Commits on Sep 21, 2026
- Doc: Admin Permissions filtering is applied to organization lookups during end-user authentication
  
  martin-kanis
  authored and
  pedroigor
  committed
  80f08a0
- Remove azure-cli version pin and simplify VM provisioning (#52463) (#52937)
  Pepo48
  authored
  61121af
- Update to FreeMarker 2.3.35
  
  ahus1
  and
  stianst
  authored
  314199b
Commits on Sep 18, 2026
- Fix Secure-client-uris localhost exception
  
  graziang
  authored and
  mposolda
  committed
  7ac9130
- Fix source-host condition wildcard domains match
  
  graziang
  authored and
  mposolda
  committed
  c3b9cc2
- Event listeners receive the wrong event type when an EventBuilder is reused (e.g. FEDERATED_IDENTITY_LINK is logged and emailed as LOGIN)
  
  ahus1
  and
  andy-clapson
  authored
  81ffc4a
- Disallow protocol change via Registration Access Token (#51419)
  
  msdaly200
  authored and
  rmartinc
  committed
  35d7da6
- Initialize Profiles for ClientAuthPostMethodTest
  rmartinc
  authored
  6f90706
- More graceful leaving of distributed caches
  ahus1
  authored
  c152ea4
- Select EC2 image dynamically for EC2 tests
  ahus1
  authored
  16c43c5
- Adding missing sync point to the WebAuthnPolicyComplianceTest.replayedCredentialRegistration
  ahus1
  authored
  b889039
Commits on Sep 17, 2026
- PAR request URI lifespan is used as a hard cap on interactive login duration (#52852)
  
  committed
  74cd78d
- Stabilize Chrome tests
  ahus1
  authored
  537aa9d
- Fetch surefire dependency for the cache
  ahus1
  authored
  0b66f96
- Fix device authorization grant token redemption bypassing brute force protection
  
  jimmychakkalakal
  authored and
  mposolda
  committed
  5c208d6
- Fix RecoveryAuthnCodesAuthenticatorTest flakiness in Chrome
  ahus1
  authored
  e947a34
- Fix jwt claim in introspection response
  
  graziang
  authored and
  mposolda
  committed
  7c4feb6
- Handle async processing of the brute force detection when counting login failures
  ahus1
  authored
  efae4d5

0