Commits

Commit history

1. Commits on Nov 10, 2026

   • Fix missing start command in the example of using --spi-login-protocol--saml--max-soap-message-request-size option.

     Show description for fa260bf
     

     pskopek

     authored and

     mposolda

     committed
     fa260bfView commit details

     Copy full SHA for fa260bf

     Browse repository at this point

   • Fix SAML11 parsers infinite loops

     Show description for d732f58
     

     pskopek

     authored and

     mposolda

     committed
     d732f58View commit details

     Copy full SHA for d732f58

     Browse repository at this point

   • Limit size of SOAP endpoint InputStream to prevent resources exhaustion. (#1247)

     Show description for 58ea6b6
     

     pskopek

     authored and

     mposolda

     committed
     58ea6b6View commit details

     Copy full SHA for 58ea6b6

     Browse repository at this point

   • Reject SAML assertions with an unsupported ProxyRestriction condition (#54948)

     Show description for 13b38f4
     pedroigor

     authored
     13b38f4View commit details

     Copy full SHA for 13b38f4

     Browse repository at this point

   • Make protocol mappers CRUD to be allowed to realm admins and not allow anything by DCR

     Show description for bec5218
     

     mposolda

     and

     Copilot

     committed
     bec5218View commit details

     Copy full SHA for bec5218

     Browse repository at this point

   • Checking for admin roles in non-admin composite roles (#54949)

     Show description for 559c69c
     pedroigor

     authored
     559c69cView commit details

     Copy full SHA for 559c69c

     Browse repository at this point

   • Limit the expiration of tokens issued by the standard token exchange to the subject token

     Show description for cbe2bc8
     

     graziang

     authored and

     mposolda

     committed
     cbe2bc8View commit details

     Copy full SHA for cbe2bc8

     Browse repository at this point

   • Check the passed execution belongs to the flow being executed

     Show description for 8334a4a
     rmartinc

     authored
     8334a4aView commit details

     Copy full SHA for 8334a4a

     Browse repository at this point

   • Stateless token preferred_username fallback enables identity rebinding after client recreation (#1265)

     Show description for bc9b1db
     mposolda

     committed
     bc9b1dbView commit details

     Copy full SHA for bc9b1db

     Browse repository at this point

   • Make sure SSO_AUTH checks map the user authenticating (#54950)

     Show description for 6fc1beb
     pedroigor

     authored
     6fc1bebView commit details

     Copy full SHA for 6fc1beb

     Browse repository at this point
2. Commits on Nov 9, 2026

   • Organization isolation bypass - nested organization groups can be re-parented under realm groups

     Show description for dc27efd
     

     vramik

     authored and

     pedroigor

     committed
     dc27efdView commit details

     Copy full SHA for dc27efd

     Browse repository at this point

   • Cancel periodic user storage sync tasks when the realm is removed (#54774)

     Show description for f323cd4
     

     Inf1mum

     and

     pedroigor

     authored
     f323cd4View commit details

     Copy full SHA for f323cd4

     Browse repository at this point

   • Verify the SAML redirect binding message that is processed

     Show description for 0685265
     

     ssilvert

     and

     pedroigor

     committed
     0685265View commit details

     Copy full SHA for 0685265

     Browse repository at this point

   • Fix sqlcmd installation on Ubuntu 26.04 runners (#54898)

     Show description for 9854d1b
     Pepo48

     authored
     9854d1bView commit details

     Copy full SHA for 9854d1b

     Browse repository at this point

   • Group-admin DENY bypass via top-level move

     Show description for 1a29685
     

     martin-kanis

     authored and

     pedroigor

     committed
     1a29685View commit details

     Copy full SHA for 1a29685

     Browse repository at this point

   • Fix CIBAAuthReq with deserializing request checking for forged params added into otherClaims. Add DISABLED_REQ_PARAMS in BackchannelAuthenticationEndpointRequestParser.

     Show description for 5909f29
     

     lhanusov

     authored and

     mposolda

     committed
     5909f29View commit details

     Copy full SHA for 5909f29

     Browse repository at this point

   • Fix Login-failure upsert MySQL/MariaDB affected-row count

     Show description for 10ce11e
     ahus1

     authored
     10ce11eView commit details

     Copy full SHA for 10ce11e

     Browse repository at this point

   • Enforce scope and audience check in the Admin API

     Show description for 01b32ce
     pedroigor

     committed
     01b32ceView commit details

     Copy full SHA for 01b32ce

     Browse repository at this point

   • Document stored default values for read-only user profile attributes

     Show description for 9946744
     

     ssilvert

     authored and

     pedroigor

     committed
     9946744View commit details

     Copy full SHA for 9946744

     Browse repository at this point

   • Prevent Vault secret resolution and injection in DCR client secrets (#54463)

     Show description for df2914e
     jimmychakkalakal

     authored
     df2914eView commit details

     Copy full SHA for df2914e

     Browse repository at this point

   • Fix typos in messages_de.properties (#54903)

     Show description for 98152ee
     pascalke

     authored
     98152eeView commit details

     Copy full SHA for 98152ee

     Browse repository at this point

   • Return invalid_request for malformed device authorization requests

     Show description for 50273e1
     

     shlee1223

     authored and

     mposolda

     committed
     50273e1View commit details

     Copy full SHA for 50273e1

     Browse repository at this point

   • Limit the length of dates and durations

     Show description for 6cca86e
     ahus1

     authored
     6cca86eView commit details

     Copy full SHA for 6cca86e

     Browse repository at this point

   • Remove unreachable adminUrl from root-url-client in test realms

     Show description for 26bad11
     

     ahus1

     and

     Copilot

     authored
     26bad11View commit details

     Copy full SHA for 26bad11

     Browse repository at this point

   • Detect and expose clock skew between Keycloak cluster nodes within a cluster

     Show description for 69527b1
     

     ruchikajha95

     and

     ahus1

     authored
     69527b1View commit details

     Copy full SHA for 69527b1

     Browse repository at this point

   • Document the provider factory lifecycle and dependsOn() in the Server Developer Guide

     Show description for e649c77
     QuellcodeWanderer

     authored
     e649c77View commit details

     Copy full SHA for e649c77

     Browse repository at this point

   • Name the masthead options toggle shown on narrow screens (#54780)

     Show description for 83f0b88
     atishay-kasliwal

     authored
     83f0b88View commit details

     Copy full SHA for 83f0b88

     Browse repository at this point

   • Scan dependencies with Snyk as well as Trivy (#53185)

     Show description for 744bbf1
     stianst

     authored
     744bbf1View commit details

     Copy full SHA for 744bbf1

     Browse repository at this point
3. Commits on Nov 6, 2026

   • Make OIDCIdentityProvider.BROKER_NONCE_PARAM public

     Show description for d4d5554
     QuellcodeWanderer

     authored
     d4d5554View commit details

     Copy full SHA for d4d5554

     Browse repository at this point

   • fix: clarifying hostname context considerations (#54681)

     Show description for 0bc6a62
     shawkins

     authored
     0bc6a62View commit details

     Copy full SHA for 0bc6a62

     Browse repository at this point

   • Show credentials of disabled users in admin console (#54778)

     Show description for 62edf99
     

     andy-clapson

     and

     claude

     authored
     62edf99View commit details

     Copy full SHA for 62edf99

     Browse repository at this point

   • Fixes link from Bootstrapping (#54728)

     Show description for 74b563f
     andymunro

     authored
     74b563fView commit details

     Copy full SHA for 74b563f

     Browse repository at this point

   • Ignore docs.redhat.com in the external links check

     Show description for 77d1edc
     

     ssilvert

     authored and

     pedroigor

     committed
     77d1edcView commit details

     Copy full SHA for 77d1edc

     Browse repository at this point

   • Remove ability to set up multivalued issuer for OIDC providers

     Show description for a9d7e41
     

     vramik

     authored and

     pedroigor

     committed
     a9d7e41View commit details

     Copy full SHA for a9d7e41

     Browse repository at this point

   • Escape delimiter in federated and composite cache keys to prevent collisions

     Show description for 90b3f7e
     

     sguilhen

     authored and

     pedroigor

     committed
     90b3f7eView commit details

     Copy full SHA for 90b3f7e

     Browse repository at this point