8000 Issues · keycloak/keycloak · GitHub

Repository navigation

Issues

CVE-2026-124077 commons-codec:commons-codec
cve
keycloak/keycloak#55022 · opened on Nov 11, 2026
Multiselect user profile attribute chips cannot be cleared when inputOptionLabels differ from option keys
keycloak/keycloak#55020 · opened on Nov 10, 2026
[Test Framework] Migrate OIDCPublicClientTest.java
task
keycloak/keycloak#55017 · opened on Nov 10, 2026 · 27.0 Development Milestone
Skip authentication session expiration for realms without authentication sessions
keycloak/keycloak#55015 · opened on Nov 10, 2026
Skip session expiration of buckets until their earliest possible expiration
keycloak/keycloak#55012 · opened on Nov 10, 2026
[Test Framework] Migrate OIDCParameterizedScopeTest.java and OIDCScopeTest.java
task
keycloak/keycloak#55009 · opened on Nov 10, 2026 · 27.0 Development Milestone
Emit an admin event when a client update changes the client secret
enhancement
keycloak/keycloak#54993 · opened on Nov 10, 2026
1
[Test Framework] Migrate OIDCBackwardsCompatibilityTest.java
task
keycloak/keycloak#54986 · opened on Nov 10, 2026 · 27.0 Development Milestone
Allow realm-level override of the CIBA HTTP authentication channel URI
enhancement
keycloak/keycloak#54984 · opened on Nov 10, 2026
Vault expressions are not scoped per component, so delegated admins can use other components' secrets
cve
keycloak/keycloak#54979 · opened on Nov 10, 2026
Document security implications of SAML identity-provider metadata cache settings
weakness
keycloak/keycloak#54974 · opened on Nov 10, 2026
Match SAML identity-provider metadata to the configured entity ID
weakness
keycloak/keycloak#54973 · opened on Nov 10, 2026
Support optional signature validation for SAML identity-provider metadata
weakness
keycloak/keycloak#54972 · opened on Nov 10, 2026
Avoid synchronous SAML metadata fetches triggered by inbound key misses in SAML identity providers
weakness
keycloak/keycloak#54971 · opened on Nov 10, 2026
Testing documentation points contributors to the deprecated Arquillian testsuite
bug
keycloak/keycloak#54969 · opened on Nov 10, 2026
Add deterministic tests for clock skew detection with controlled offsets
keycloak/keycloak#54966 · opened on Nov 10, 2026
Ensure clock skew detection works with all Infinispan configurations
keycloak/keycloak#54965 · opened on Nov 10, 2026
1
Provide shared API for calculating conservative retention periods
keycloak/keycloak#54964 · opened on Nov 10, 2026
Define central constants for clock skew thresholds and configuration
keycloak/keycloak#54963 · opened on Nov 10, 2026
Document time synchronization requirements for clustered Keycloak
keycloak/keycloak#54962 · opened on Nov 10, 2026
Clock skew between Keycloak cluster nodes within a cluster
enhancement
keycloak/keycloak#54961 · opened on Nov 10, 2026
When Keycloak generates a location for a HTTP 302 query parameter auth_session_id is not signed Base64 encoded
bug
keycloak/keycloak#54953 · opened on Nov 10, 2026
ML-DSA for OpenID Connect identity providers
task
keycloak/keycloak#54952 · opened on Nov 10, 2026
ML-DSA support for client assertions
task
keycloak/keycloak#54951 · opened on Nov 10, 2026
Passkey error on the first broker login re-authentication page drops the prefilled username and shows the registration link
bug
keycloak/keycloak#54943 · opened on Nov 9, 2026

0