8000 History for server-spi - iingawal/keycloak · GitHub

Repository navigation

Commits

History for

Commits on Aug 28, 2026
- Preserve configured order when evaluating password policies (#51840)
  adityaanikam
  authored
  11dfd45
Commits on Aug 25, 2026
- Fix refresh token same-second replay vulnerability (#51885)
  jimmychakkalakal
  authored
  2270912
Commits on Aug 18, 2026
- Invalidate in progress authentication sessions on credential reset (#50702)
  gaoyikeshuer
  authored
  412f8bb
Commits on Aug 12, 2026
- fix: smaller scope of an initial refactoring to bridge scim and admin v2 (#51456)
  shawkins
  authored
  207b657
Commits on Aug 11, 2026
- Prevent SCIM user writes from bypassing user-profile edit permissions
  
  sguilhen
  authored and
  pedroigor
  committed
  89294dd
Commits on Aug 7, 2026
- [OID4VCI]: Enforce ownership validation when deleting issued verifiable credentials via the account API (#51418)
  Awambeng
  authored
  d60cebd
Commits on Aug 3, 2026
- Deprecate HttpResponse getStatus/setStatus for JAX-RS endpoint usage (#51334)
  Copilot
  authored
  59fc5b3
Commits on Jul 30, 2026
- [OID4VCI] Ensure credential configuration IDs are unique (#51272)
  forkimenjeckayang
  authored
  1550152
- [OID4VCI] User-editable did attribute used as credential subject with realm-local uniqueness only
  
  tdiesler
  authored and
  mposolda
  committed
  0ac222f
Commits on Jul 27, 2026
- Parameterized UserPropertyMapper exposes target user attributes without permission check (#51063)
  mabartos
  authored
  208d763
Commits on Jul 17, 2026
- Localize workflow error messages via server-side i18n resolution (#50348)
  sguilhen
  authored
  3369540
Commits on Jul 10, 2026
- [OID4VP] Initial verifier implementation (#50430)
  dominikschlosser
  authored
  7c03f32
Commits on Jul 6, 2026
- Harden removeRootAuthenticationSession to check the realm ID (#50639)
  pruivo
  authored
  3e6a7c1
Commits on Jul 2, 2026
- Fix: JpaSingleUseObjectProvider.putIfAbsent() missing lifespan validation present in put()
  pruivo
  authored
  7608a20
- Control repeatability of parameterized client scopes (#50433)
  mabartos
  authored
  46ad7bd
Commits on Jul 1, 2026
- Deprecate the ClientModel.getDynamicClientScope() method (#50497)
  mabartos
  authored
  5bdd363
Commits on Jun 30, 2026
- Batch composite-role expansion to avoid an N+1 of getChildRoles on the cache-miss path
  
  authored
  5d2008e
Commits on Jun 29, 2026
- added created and last modified timestamps (#49867)
  
  edewit
  and
  Copilot
  authored
  10ca767
Commits on Jun 26, 2026
- NumberFormatException for PAR request URI lifespan (#50309)
  mabartos
  authored
  74beeb8
Commits on Jun 24, 2026
- use constant-time comparison when validating otp codes
  naruto-lgtm
  authored
  ecb3abb
- fix: normalizing logic when context is not available (#49138)
  
  shawkins
  and
  Pepo48
  authored
  e733440
- SCIM: Prevent admin users to be modified (#49892)
  martin-kanis
  authored
  d2fe07f
Commits on Jun 23, 2026
- [OID4VCI-FAPI2] Pass fapi2-security-profile-final-ensure-holder-of-key-required
  
  tdiesler
  authored and
  mposolda
  committed
  41b7562
Commits on Jun 22, 2026
- Use exact match in InvitationManager for email, firstName, lastName
  
  martin-kanis
  authored and
  pedroigor
  committed
  3033b3c
- Update vc and vci to reference credential scopes by ID
  
  graziang
  authored and
  mposolda
  committed
  bb9a986
Commits on Jun 18, 2026
- Automatic purge of expired issued verifiable credentials (#50072)
  graziang
  authored
  dc2cb20
Commits on Jun 16, 2026
- Eliminate OrganizationProvider.count() calls and full-table-scans when existence check is enough
  
  authored
  05edeb5
Commits on Jun 15, 2026
Commits on Jun 11, 2026
- Add attribute to always consent in parameterized scopes
  rmartinc
  authored
  ae0097c
Commits on Jun 8, 2026
- Fix log injection vulnerability in OIDC endpoints
  
  jimmychakkalakal
  authored and
  mposolda
  committed
  b1162bc
Commits on Jun 4, 2026
- Ability to add parameterized scope type (#49420)
  mabartos
  authored
  e158565
Commits on Jun 3, 2026
- Create SPI to store revoked tokens
  pruivo
  authored
  c2975de
Commits on Jun 2, 2026
- Rename 'Dynamic scopes' feature to 'Parameterized scopes' (#49015)
  mabartos
  authored
  10edb76

0