8000 Commits · ssilvert/keycloak · GitHub

Repository navigation

Commits

Commits on Nov 9, 2026
- Document stored default values for read-only user profile attributes
  
  ssilvert
  authored and
  pedroigor
  committed
  9946744
- Prevent Vault secret resolution and injection in DCR client secrets (#54463)
  jimmychakkalakal
  authored
  df2914e
- Fix typos in messages_de.properties (#54903)
  pascalke
  authored
  98152ee
- Return invalid_request for malformed device authorization requests
  
  shlee1223
  authored and
  mposolda
  committed
  50273e1
- Limit the length of dates and durations
  ahus1
  authored
  6cca86e
- Remove unreachable adminUrl from root-url-client in test realms
  
  ahus1
  and
  Copilot
  authored
  26bad11
- Detect and expose clock skew between Keycloak cluster nodes within a cluster
  
  ruchikajha95
  and
  ahus1
  authored
  69527b1
- Document the provider factory lifecycle and dependsOn() in the Server Developer Guide
  QuellcodeWanderer
  authored
  e649c77
- Name the masthead options toggle shown on narrow screens (#54780)
  atishay-kasliwal
  authored
  83f0b88
- Scan dependencies with Snyk as well as Trivy (#53185)
  stianst
  authored
  744bbf1
Commits on Nov 6, 2026
- Make OIDCIdentityProvider.BROKER_NONCE_PARAM public
  QuellcodeWanderer
  authored
  d4d5554
- fix: clarifying hostname context considerations (#54681)
  shawkins
  authored
  0bc6a62
- Show credentials of disabled users in admin console (#54778)
  
  andy-clapson
  and
  claude
  authored
  62edf99
- Fixes link from Bootstrapping (#54728)
  andymunro
  authored
  74b563f
- Ignore docs.redhat.com in the external links check
  
  ssilvert
  authored and
  pedroigor
  committed
  77d1edc
- Remove ability to set up multivalued issuer for OIDC providers
  
  vramik
  authored and
  pedroigor
  committed
  a9d7e41
- Escape delimiter in federated and composite cache keys to prevent collisions
  
  sguilhen
  authored and
  pedroigor
  committed
  90b3f7e
- Reject a different brokered user on forced re-authentication before creating it
  
  sguilhen
  authored and
  pedroigor
  committed
  6ea53a2
- Reject online refresh tokens for sessions in logout states
  
  lhanusov
  authored and
  mposolda
  committed
  b1182f9
- Fix crash and inconsistent matching in account console linked-accounts search
  
  sguilhen
  authored and
  pedroigor
  committed
  77a8f12
- Validate ECDSA signature length before JWS verification (#53928)
  naruto-lgtm
  authored
  ea78b16
- Always validate post-logout redirect URIs in SecureRedirectUrisEnforcerExecutor (#53038)
  
  jimmychakkalakal
  and
  Copilot
  authored
  baf4aaa
- Update Quarkus JUnit test dependencies (#54734)
  Pepo48
  authored
  3acdf06
- Reject empty SCIM group members on PUT
  
  akasakariko
  authored and
  pedroigor
  committed
  a50ba94
- Document LDAP bind account permissions for recursive group retrieval strategy
  
  sguilhen
  authored and
  pedroigor
  committed
  56ffd6a
- [CVE-2026-116468] Privilege escalation: delegated admin to realm-admin via group move (incomplete fix of CVE-2026-94000)
  
  martin-kanis
  authored and
  pedroigor
  committed
  1316705
Commits on Nov 5, 2026
- Update AGENTS.md with contribution conventions
  
  ahus1
  and
  Copilot
  authored
  30cf683
- Allow any order in Should save several allowed Kerberos realms kerberos test
  rmartinc
  authored
  e19891a
- Add validation for blocked session note names in UserSessionNoteMapper (#53559)
  jimmychakkalakal
  authored
  ae5e730
- Resolve ABCA attester key from x5c JOSE header
  
  adityaanikam
  authored and
  mposolda
  committed
  f2d2da5
- Do not log ABCA client authentication headers
  
  wakqasahmed
  authored and
  mposolda
  committed
  e0b49a7
- Forged authorization code lets any client detach another client's client session
  
  graziang
  authored and
  mposolda
  committed
  98c6275
- Migrating NonceBackwardsCompatibleMapperTest.java to the new test framework
  
  PadzerButch
  authored and
  mposolda
  committed
  3a03330
- Force re-authentication after reset credential by default (#53975)
  vaceksimon
  authored
  c69bfb8
- Fix missing accessible name for attempted-username input in keycloak.v2 login theme (#54660)
  Inf1mum
  authored
  accf2bd

0