8000 Commits · geico/keycloak · GitHub

Repository navigation

Commits

Commits on Nov 11, 2026
- task: add a spotless profile (#54723)
  shawkins
  authored
  9c36ed1
- Log multi-line output of the managed Keycloak server as a single record (#54830)
  
  ahus1
  and
  Copilot
  authored
  55c0fe1
- Fix typo in client registration warning message
  
  mposolda
  and
  Copilot
  committed
  d69120f
- Warning that not all OIDC Dynamic client options are supported by Keycloak
  mposolda
  committed
  93864a0
- Update outdated CacheManager revision comment
  
  ahus1
  and
  Copilot
  authored
  4680f24
- Record existing AES key sizes to prevent key regeneration
  
  choksi2212
  authored and
  mposolda
  committed
  08ad72f
Commits on Nov 10, 2026
- Check if provider implements OnUserCache for the user model
  redmitry
  authored
  d052236
- Wait for Kerberos provider to load before filling allowed realms
  
  ahus1
  and
  Copilot
  authored
  ae77487
- Escape backslashes in jboss logging event message values.
  
  gaoyikeshuer
  authored and
  rmartinc
  committed
  1b78daf
- Render every login page and the layout from the Base theme
  
  authored and
  rmartinc
  committed
  945216c
- Fix missing start command in the example of using --spi-login-protocol--saml--max-soap-message-request-size option.
  
  pskopek
  authored and
  mposolda
  committed
  fa260bf
- Fix SAML11 parsers infinite loops
  
  pskopek
  authored and
  mposolda
  committed
  d732f58
- Limit size of SOAP endpoint InputStream to prevent resources exhaustion. (#1247)
  
  pskopek
  authored and
  mposolda
  committed
  58ea6b6
- Reject SAML assertions with an unsupported ProxyRestriction condition (#54948)
  pedroigor
  authored
  13b38f4
- Make protocol mappers CRUD to be allowed to realm admins and not allow anything by DCR
  
  mposolda
  and
  Copilot
  committed
  bec5218
- Checking for admin roles in non-admin composite roles (#54949)
  pedroigor
  authored
  559c69c
- Limit the expiration of tokens issued by the standard token exchange to the subject token
  
  graziang
  authored and
  mposolda
  committed
  cbe2bc8
- Check the passed execution belongs to the flow being executed
  rmartinc
  authored
  8334a4a
- Stateless token preferred_username fallback enables identity rebinding after client recreation (#1265)
  mposolda
  committed
  bc9b1db
- Make sure SSO_AUTH checks map the user authenticating (#54950)
  pedroigor
  authored
  6fc1beb
Commits on Nov 9, 2026
- Organization isolation bypass - nested organization groups can be re-parented under realm groups
  
  vramik
  authored and
  pedroigor
  committed
  dc27efd
- Cancel periodic user storage sync tasks when the realm is removed (#54774)
  
  Inf1mum
  and
  pedroigor
  authored
  f323cd4
- Verify the SAML redirect binding message that is processed
  
  ssilvert
  and
  pedroigor
  committed
  0685265
- Fix sqlcmd installation on Ubuntu 26.04 runners (#54898)
  Pepo48
  authored
  9854d1b
- Group-admin DENY bypass via top-level move
  
  martin-kanis
  authored and
  pedroigor
  committed
  1a29685
- Fix CIBAAuthReq with deserializing request checking for forged params added into otherClaims. Add DISABLED_REQ_PARAMS in BackchannelAuthenticationEndpointRequestParser.
  
  lhanusov
  authored and
  mposolda
  committed
  5909f29
- Fix Login-failure upsert MySQL/MariaDB affected-row count
  ahus1
  authored
  10ce11e
- Enforce scope and audience check in the Admin API
  pedroigor
  committed
  01b32ce
- Document stored default values for read-only user profile attributes
  
  ssilvert
  authored and
  pedroigor
  committed
  9946744
- Prevent Vault secret resolution and injection in DCR client secrets (#54463)
  jimmychakkalakal
  authored
  df2914e
- Fix typos in messages_de.properties (#54903)
  pascalke
  authored
  98152ee
- Return invalid_request for malformed device authorization requests
  
  shlee1223
  authored and
  mposolda
  committed
  50273e1
- Limit the length of dates and durations
  ahus1
  authored
  6cca86e
- Remove unreachable adminUrl from root-url-client in test realms
  
  ahus1
  and
  Copilot
  authored
  26bad11
- Detect and expose clock skew between Keycloak cluster nodes within a cluster
  
  ruchikajha95
  and
  ahus1
  authored
  69527b1

0