8000 Commits · keycloak/keycloak · GitHub

Repository navigation

Commits

< 8000 div class="timelineRowBadge__zkHfIu prc-Timeline-TimelineBadge-u0qSm">

Commits on Mar 19, 2026

Set version to 26.5.6
github-actions[bot]
committed
7f8be2d

Commits on Mar 17, 2026

Stricter access control for listing realm and client roles (#47236)
pedroigor
authored
cb0e884
Check resource server when managing their resources
pedroigor
authored
fc3cb3c
Make sure time sync are respected and component config updated within a separate transaction
pedroigor
committed
e54a993
Stricter access control for managing permission tickets
pedroigor
authored
f1baf25
Brief user representation should not return attributes
pedroigor
authored
15106e1
Ensure get organizations by member id requires managing realm

vramik
authored and
pedroigor
committed
daf1a51

Commits on Mar 16, 2026

Enforce org membership on member organizations endpoint

Oluwatobi-Mustapha
authored and
pedroigor
committed
55f59b1
Change links from issues.redhat.com to redhat.atlassian.net (#47181)

rmartinc
authored and
mposolda
committed
c498e84

Commits on Mar 13, 2026

Em-Hyphens in SPI options on cache configuration page
pruivo
authored
5ac12be< 8000 span class="prc-TooltipV2-Tooltip-tLeuB" data-direction="s" data-component="Tooltip" role="tooltip" aria-hidden="true" id="_R_5rnukij6l85_">View commit details

Commits on Mar 12, 2026

Commits on Mar 9, 2026

Privilege escalation via manage-clients permission

vramik
authored and
pedroigor
committed
79ab311

Commits on Mar 6, 2026

Remove root auth session on first offline_access to prevent cross-user session contamination

federicobartoli
authored and
mposolda
committed
5136972
Invalid links in logging guides
mabartos
authored
9884a29
SPIFFE Client assertion throws a NullPointerException if no client is found
ryanemerson
authored
6d85a18
JGroups bind port configuration ignored when --cache-embedded-network-bind-port set
ryanemerson
authored
8e88f39
Do not use offline sessions in the logout endpoint

sschu
and
rmartinc
authored
c8ad65b
Executor for client uris pattern validation
graziang
authored
afa8ace
Mask certain HTTP headers in the HTTP access log
mabartos
authored
9622f55
fix: allowing targetServerType to always be used
shawkins
authored
d4fcf40
Avoid having N+1 database calls when fetching composite roles

ahus1
and
shawkins
authored
36cab89
Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition (#46054) (#46732)

mposolda
and
ahus1
authored
37bbde1

Commits on Feb 25, 2026

Enforce disabled checks when processing brokering flows (#367)
pedroigor
authored
4fd5367

Commits on Feb 24, 2026

Make sure client is enabled when processing responses unsolicited responses (#373)
pedroigor
authored
a4a092d

Commits on Feb 23, 2026

Ensure that an encrypted assertion is signed if response is not signed (#355)
rmartinc
authored
f8ee90f

Commits on Feb 20, 2026

Check client is enabled in the docker endpoint (#46468)
rmartinc
authored
3dad921

Commits on Feb 18, 2026

Limit the inflating size for the SAML redirect binding
rmartinc
authored
c545b08

Commits on Feb 17, 2026

Fix max expiration id in jwt authorization grant idp config
graziang
authored
f80a448

Commits on Feb 16, 2026

Commits on Feb 14, 2026

fix: adding admin role invalidation when a new realm is found

shawkins
and
ahus1
authored
f373c59

Commits on Feb 13, 2026

Upgrade santuario to 3.0.6 to fix SANTUARIO-617
rmartinc
authored
76505fa

0