8000 Commits · rahulsai143/keycloak · GitHub

Repository navigation

Commits

Commits on Aug 2, 2026
Commits on Jul 31, 2026
ad690c7

Commits on Jul 30, 2026

Adding predicate for realm groups, aligning direct auth and partial evaluator outcome, more tests, and documentation
pedroigor
committed
a0c6618
User partial filters ignore ancestor group membership denies

vramik
authored and
pedroigor
committed
4f88adb
Gracefully handle disabled or removed IdP during logout

andrew2k4
authored and
pedroigor
committed
031fbe2
Upgrade to Infinispan 16.0.14

ruchikajha95
authored and
ryanemerson
committed
82a3ad9
[OID4VCI] Ensure credential configuration IDs are unique (#51272)
forkimenjeckayang
authored
1550152
fix: namespace OID4VCI credential offer cache keys by realm

Awambeng
authored and
mposolda
committed
c0395ab
[OID4VCI] User-editable did attribute used as credential subject with realm-local uniqueness only

tdiesler
authored and
mposolda
committed
0ac222f
[CVE-2026-17048] Keycloak Admin REST API Leaks Vault-Resolved Rotated Client Secrets (#51209)
mabartos
authored
4e1c2ad

Commits on Jul 29, 2026

Migrate Organization OIDC Mapper tests into new testsuite

vramik
authored and
pedroigor
committed
809081c
Fix spotless error on main branch

sguilhen
authored and
pedroigor
committed
61b27ca
Do not pass the client for Delegation parameterized scope type
rmartinc
authored
4e321b8
[CVE-2026-16105] Missing per-role authorization on RoleContainerResource composite endpoints

martin-kanis
authored and
pedroigor
committed
81ada68
[OID4VCI] Fix credential request decryption alg downgrade vulnerability (#50960)
dominikschlosser
authored
be92c2b
[OID4VCI] Issuance with Authorization Code Flow assumes same client_id for offer creation and redemption

tdiesler
authored and
mposolda
committed
b39de11
remove credential offer feature from OID4VCRefreshCredentialTest

graziang
authored and
mposolda
committed
a382051
[OID4VCI]: Fix `getAttestationRequirements()` for non-JWT proof types (#50724)
Awambeng
authored
9b7ee21
fix: removing the message about missing proactive closure (#51251)
shawkins
authored
1376942
Sorting Applications in Account Console #50948 (#51245)

authored
65cd64a
Document protocol mappers and 'Allow access to user data' switch (#51226)
mabartos
authored
b34d015
Flush auto-created roles during user import to avoid duplicate role inserts in batch mode

theohh0
and
wilmerdooley
authored
73526cd

Commits on Jul 28, 2026

Group hierarchy search discloses hidden parent groups under FGAP v2

vramik
authored and
pedroigor
committed
55b56bc
Authenticator config surfaces expose raw reCAPTCHA secrets

vramik
authored and
pedroigor
committed
9f2853c
fix: allows verify email working in incognito browser tab after Keycloak restart (#51089)
pchorus
authored
ce44984
GET /roles/{role}/users returns user PII without the per-user view filter with FGAP V1

vramik
authored and
pedroigor
committed
29b7324

0