8000 History for tests - keycloak/keycloak · GitHub

Repository navigation

Commits

History for

Commits on Oct 13, 2026
- Set version to 26.8.1
  github-actions[bot]
  committed
  24ed1da
Commits on Oct 12, 2026
- Update realm certificates
  ahus1
  authored
  a4c24f9
- Organizations: Invitation link can be used by multiple users due to missing single-use check
  martin-kanis
  authored
  8d35579
Commits on Oct 9, 2026
Commits on Oct 8, 2026
Commits on Oct 7, 2026
- Enforce view permission on users and clients when resolving them during policy evaluation
  
  sguilhen
  authored and
  pedroigor
  committed
  d10560f
- Authenticator reference incorrectly masked in authenticator config (#53361)
  
  authored and
  rmartinc
  committed
  c757a90
- Do not chek critical status for key usage validations (#53109) (#53641)
  rmartinc
  authored
  e7d3693
- Verify realm/resource-server ownership before returning per-request cached entities
  
  sguilhen
  authored and
  pedroigor
  committed
  6bbbbb2
- Generic user create/update endpoints bypasses denied reset-password permission
  
  vramik
  authored and
  pedroigor
  committed
  935eebc
- Fixed CVE 2FA setup bypass endpoint issue.
  
  gaoyikeshuer
  authored and
  rmartinc
  committed
  89cec23
- [26.8] Don't use semicolon as query parameter (#53621)
  michalvavrik
  authored
  dd7aa73
Commits on Oct 6, 2026
- Regression with Trust Email when the userinfo endpoint is used
  
  martin-kanis
  authored and
  pedroigor
  committed
  1027d78
- Serialize token revocation against concurrent refreshes
  
  authored and
  mposolda
  committed
  a001789
Commits on Oct 5, 2026
- Admin credential DELETE bypasses denied reset-password permission
  
  vramik
  authored and
  pedroigor
  committed
  01703d6
- Prevent privilege escalation via group membership to admin-role groups
  
  vramik
  authored and
  pedroigor
  committed
  175ef07
- FGAP v2 custom role injection via oidc-hardcoded-role-mapper bypasses removeTransientAdminRoles
  
  vramik
  authored and
  pedroigor
  committed
  e4ba13f
- Reject malformed requests in the docker auth endpoint (#53042)
  
  authored and
  mposolda
  committed
  b5546a6
Commits on Oct 2, 2026
- Limit metric series creation via idp tag on broker login endpoint
  
  ahus1
  and
  Copilot
  authored
  c4e48c0
- Avoid orphaned offline client sessions for V1 token exchange
  ahus1
  authored
  0682684
Commits on Sep 30, 2026
- Keeping existing validations and more test coverage
  pedroigor
  committed
  f906286
- Add CI test suite and documentation for HTTP_CLIENT_V2 (#52981)
  Pepo48
  authored
  81d8b1b
- Update ClientRedirectTest to not use an external webpage (#53341)
  stianst
  authored
  ec2af8d
- Exclude self-signed roots from signed issuer metadata
  
  Ogenbertrand
  authored and
  mposolda
  committed
  e075639
- Fix DPoP bind enforcer to exempt public clients using refresh-token-only binding
  
  remcojansen
  authored and
  mposolda
  committed
  186430c
- [OID4VCI]: Add issuer_info support to OID4VCI metadata (#53330)
  Awambeng
  authored
  6d2c039

0