8000 Issues · keycloak/keycloak · GitHub

Repository navigation

Issues

Document and add a skill for writing Liquibase changelog entries that work for both automatic and manual migration
keycloak/keycloak#55057 · opened on Nov 11, 2026
Remove deprecated AdapterInstallationClientRegistrationProvider Client Registration Provider
task
keycloak/keycloak#55035 · opened on Nov 11, 2026
Remove the non-atomic default implementations of the credential update methods
eol
keycloak/keycloak#55034 · opened on Nov 11, 2026 · 27.0 Release
persian language is missing font and styling
enhancement
keycloak/keycloak#55023 · opened on Nov 11, 2026
1
CVE-2026-124077 commons-codec:commons-codec
cve
keycloak/keycloak#55022 · opened on Nov 11, 2026
Multiselect user profile attribute chips cannot be cleared when inputOptionLabels differ from option keys
bug
keycloak/keycloak#55020 · opened on Nov 10, 2026
[Test Framework] Migrate OIDCPublicClientTest.java
task
keycloak/keycloak#55017 · opened on Nov 10, 2026 · 27.0 Development Milestone
Skip authentication session expiration for realms without authentication sessions
enhancement
keycloak/keycloak#55015 · opened on Nov 10, 2026
Skip session expiration of buckets until their earliest possible expiration
enhancement
keycloak/keycloak#55012 · opened on Nov 10, 2026
[Test Framework] Migrate OIDCParameterizedScopeTest.java and OIDCScopeTest.java
task
keycloak/keycloak#55009 · opened on Nov 10, 2026 · 27.0 Development Milestone
Emit an admin event when a client update changes the client secret
enhancement
keycloak/keycloak#54993 · opened on Nov 10, 2026
1
[Test Framework] Migrate OIDCBackwardsCompatibilityTest.java
task
keycloak/keycloak#54986 · opened on Nov 10, 2026 · 27.0 Development Milestone
Allow realm-level override of the CIBA HTTP authentication channel URI
enhancement
keycloak/keycloak#54984 · opened on Nov 10, 2026
Vault expressions are not scoped per component, so delegated admins can use other components' secrets
cve
keycloak/keycloak#54979 · opened on Nov 10, 2026
Document security implications of SAML identity-provider metadata cache settings
weakness
keycloak/keycloak#54974 · opened on Nov 10, 2026
Match SAML identity-provider metadata to the configured entity ID
weakness
keycloak/keycloak#54973 · opened on Nov 10, 2026
Support optional signature validation for SAML identity-provider metadata
weakness
keycloak/keycloak#54972 · opened on Nov 10, 2026
Avoid synchronous SAML metadata fetches triggered by inbound key misses in SAML identity providers
weakness
keycloak/keycloak#54971 · opened on Nov 10, 2026
Testing documentation points contributors to the deprecated Arquillian testsuite
bug
keycloak/keycloak#54969 · opened on Nov 10, 2026
Add deterministic tests for clock skew detection with controlled offsets
keycloak/keycloak#54966 · opened on Nov 10, 2026
Ensure clock skew detection works with all Infinispan configurations
keycloak/keycloak#54965 · opened on Nov 10, 2026
1
Provide shared API for calculating conservative retention periods
keycloak/keycloak#54964 · opened on Nov 10, 2026
Define central constants for clock skew thresholds and configuration
keycloak/keycloak#54963 · opened on Nov 10, 2026
Document time synchronization requirements for clustered Keycloak
keycloak/keycloak#54962 · opened on Nov 10, 2026
Clock skew between Keycloak cluster nodes within a cluster
enhancement
keycloak/keycloak#54961 · opened on Nov 10, 2026

0