8000 History for server-spi-private - keycloak/keycloak · GitHub

Repository navigation

Commits

History for

Commits on Nov 6, 2026
- Remove ability to set up multivalued issuer for OIDC providers
  
  vramik
  authored and
  pedroigor
  committed
  a9d7e41
Commits on Nov 5, 2026
- Add validation for blocked session note names in UserSessionNoteMapper (#53559)
  jimmychakkalakal
  authored
  ae5e730
Commits on Nov 3, 2026
- Centralize FGAP admin identity and preserve unfiltered authorization lookups
  pedroigor
  committed
  244ec89
- Scope FGAP query filtering to management operations
  
  martin-kanis
  authored and
  pedroigor
  committed
  c612179
- Fix LDAP group resolution for users with limited admin permissions
  
  martin-kanis
  authored and
  pedroigor
  committed
  8ae1053
Commits on Nov 2, 2026
- fix: return OAuth error codes in authorization endpoint JSON responses (#54194)
  atiqur-rahman-pro
  authored
  f9e0f8e
Commits on Oct 30, 2026
- Apply browser security headers on SP-initiated SAML endpoints (#54159)
  edewit
  authored
  42a3b96
Commits on Oct 29, 2026
- Preserve missing secrets when updating existing bearer-only clients
  
  rirze
  and
  Sourabh Cheedella
  authored
  7a35df3
Commits on Oct 28, 2026
- Persist default values of read-only user profile attributes on user creation
  
  ssilvert
  authored and
  pedroigor
  committed
  ef10c1d
Commits on Oct 26, 2026
- fix: enforce the essential acr level when the flow finishes without a step-up
  
  michalvavrik
  authored and
  rmartinc
  committed
  791b93e
Commits on Oct 20, 2026
- Service account user ID available on client representation instead of exposing separate endpoint returning whole user representation
  
  vramik
  authored and
  pedroigor
  committed
  e203767
Commits on Oct 19, 2026
- Account linking should fire specific event codes
  
  ahus1
  and
  Copilot
  authored
  8099be0
- Mask secrets in client installations when view-only permissions are used (#53758)
  vmuzikar
  authored
  32d8958
- Deleted required client scope is removed from mixed client-scope policies
  
  martin-kanis
  authored and
  pedroigor
  committed
  e61e1e4
- Reject moving a group under itself or one of its descendants in the Admin API
  
  choksi2212
  authored and
  pedroigor
  committed
  00c1091
Commits on Oct 16, 2026
- Filter user session and consent client data by client view permission
  
  ssilvert
  and
  tkyjovsk
  authored
  c409798
Commits on Oct 15, 2026
- CertificateRepresentation stripping in StripSecretsUtils
  
  vramik
  authored and
  pedroigor
  committed
  28e4208
- Only apply a resource-type deny to the scopes it covers
  
  Santoshkumarpuppala
  authored and
  pedroigor
  committed
  eb3ac9a
- Set default Bearer token_type in broker token responses
  
  atiqur-rahman-pro
  authored and
  pedroigor
  committed
  9ad98e7
Commits on Oct 14, 2026
- Unverified broker email can satisfy an organization domain gate (#53858)
  martin-kanis
  authored
  77b0ffa
Commits on Oct 13, 2026
- Emit CaepSessionRevoked when an admin deletes a single user session (#53627) (#53630)
  thomasdarimont
  authored
  da800c3
Commits on Oct 8, 2026
- non-imported federated users returned in search results for query-users-only delegated admins
  
  vramik
  authored and
  pedroigor
  committed
  85cb6f1
- Limit the size in CRL and OCSP http responses (#53697)
  rmartinc
  authored
  8d330a0
Commits on Oct 7, 2026
- Organization API cannot restore an empty domain list from its GET representation
  
  vramik
  authored and
  pedroigor
  committed
  f770cbb
- Authenticator reference incorrectly masked in authenticator config (#53361)
  
  kidager
  and
  mabartos
  authored
  7d37ea9
- Close HTTP responses with illegal charsets
  ahus1
  authored
  7976013
- Enforce PAR single-use across all authentication paths (#53365)
  abstractj
  authored
  8d56019
- Emit credential_id on UPDATE_CREDENTIAL events from built-in required actions (#50787)
  
  authored
  ca24864
Commits on Oct 5, 2026
- Fixed CVE 2FA setup bypass endpoint issue.
  
  gaoyikeshuer
  authored and
  rmartinc
  committed
  1de2f06
Commits on Oct 1, 2026
- Allow OAuth scope characters in organization alias
  
  martin-kanis
  and
  Tamara556
  authored
  fff5ffb
- Close SimpleHttpResponse and HttpResponse on all code paths
  
  authored
  5f35e1d
Commits on Sep 30, 2026
- Generic user create/update endpoints bypasses denied reset-password permission
  
  vramik
  authored and
  pedroigor
  committed
  e6bd2f1
Commits on Sep 29, 2026
- Add an IdP config option to control IdP admin role escalation.
  
  tkyjovsk
  authored and
  pedroigor
  committed
  043590b
- Securing Client Cluster Node Registration via Client Policy Executor, closes #52167
  
  msdaly200
  authored and
  rmartinc
  committed
  4a19f6e
- Make sure denies only apply for policies referencing the same resource type (#53225)
  pedroigor
  authored
  5c37573

0