8000 Commits · bkoragan/keycloak · GitHub

Repository navigation

Commits

Commits on Oct 11, 2026
- Translations update from Hosted Weblate (#53375)
  
  authored
  df42fa2
Commits on Oct 10, 2026
- Fix session-limit denial wrongly triggering brute force
  
  rmartinc
  and
  sabeer02
  authored
  ebde947
Commits on Oct 9, 2026
- Organizations: Invitation link can be used by multiple users due to missing single-use check
  
  martin-kanis
  authored and
  pedroigor
  committed
  eb6d2dd
- Reject workflow expressions with unrecognized characters (#53794)
  erenkan
  authored
  f38eea8
- Avoid caching user data while external storage is unavailable (#51322)
  hkwi
  authored
  057ab72
- Declare null, not undefined, for admin client lookups that tolerate a 404
  
  ybai08
  authored and
  pedroigor
  committed
  27fd923
- Fix concurrent SAML schema validation
  
  atiqur-rahman-pro
  authored and
  mposolda
  committed
  f026b56
- fixes CVE-2026-92358 by removing stale SUO proof (#53418)
  edewit
  authored
  351a4e9
- Use deterministic ROUND time-claim strategy in OID4VCI conformance realm
  
  authored and
  mposolda
  committed
  6a4d53f
- fixes CVE-2026-15943 by dropping when other values are changed (#53411)
  edewit
  authored
  17e1425
- Resolve properties in the notify-user step subject
  
  ltronky
  authored and
  pedroigor
  committed
8539464
Fix obsolete link (#53572)
andymunro
authored
7a4a00a
Correct links that fail or are coded only for upstream

andymunro
authored and
mposolda
committed
19e6f6e
Refer to YAML in the create workflow page subtitle (#53783)
erenkan
authored
c0d9636

Commits on Oct 8, 2026

Fix EntityManager API documentation link

authored and

committed

Let view-realm and manage-realm admins use the Authentication section

authored and

committed

non-imported federated users returned in search results for query-users-only delegated admins

authored and

committed

Move the note about mandatory signature validation for OIDC IdP backchannel logout into `changes-27_0_0.adoc`

authored and

committed

Concurrent link and membership writes can create conflicting managed lifecycle owners

authored and

committed

Decode binary LDAP attributes as UUID using mapped attribute name closes #53608

atiqur-rahman-pro

authored and

committed

Limit the size in CRL and OCSP http responses (#53697)

authored

Username enumeration via empty-password timing

authored and

committed

fix(broker): Allows cross session email validation (#52604) (#52626)

authored

chore(admin client): bump resteasy jackson provider to 1.0.0.Final (#53708)

authored

Commits on Oct 7, 2026

SSF: Emit CAEP session-revoked SET when OAuth2 token revocation ends a session (#51376) (#51386)
thomasdarimont
authored
cf58f2e
Organization API cannot restore an empty domain list from its GET representation

vramik
authored and
pedroigor
committed
f770cbb
Require STARTTLS when SMTP starttls is enabled (#53675)
edewit
authored
a666b23
Stabilize the pause Operator workflow

ahus1
and
shawkins
authored
18443ea
Fix unstable handling for table rows

ahus1
and
Copilot
authored
8474bd5
escape scim filter value in ipatuura user lookup (#53524)
naruto-lgtm
authored
c99eacd
Don't swallow local storage failures in graceful degradation

ssilvert
authored and
pedroigor
committed
597481c
Organization invitation redirectUrl is not validated against the account client allowlist, leaking a new user's authorization code

vramik
authored and
pedroigor
committed
4c746a5
Fix unstable handling for tables
ahus1
authored
094213f

0