Commits

Commit history

1. Commits on Sep 1, 2026

   • Fix CIBA token redemption bypassing brute force protection

     Show description for 4565a32
     

     jimmychakkalakal

     authored and

     mposolda

     committed
     4565a32View commit details

     Copy full SHA for 4565a32

     View code at this pointBrowse repository at this point
2. Commits on Aug 31, 2026

   • Null-check audience array in ResourceIndicatorsPostProcessor (#49081)

     Show description for 78b8b29
     lukebfox

     authored
     78b8b29View commit details

     Copy full SHA for 78b8b29

     View code at this pointBrowse repository at this point
3. Commits on Aug 28, 2026

   • Check CA Subject DN in X509 user authenticators too

     Show description for e075692
     

     rmartinc

     authored and

     pedroigor

     committed
     e075692View commit details

     Copy full SHA for e075692

     View code at this pointBrowse repository at this point
4. Commits on Aug 27, 2026

   • Fix signed-JWT client authentication policy bypass with forged assertion

     Show description for 0a48bb7
     

     graziang

     authored and

     mposolda

     committed
     0a48bb7View commit details

     Copy full SHA for 0a48bb7

     View code at this pointBrowse repository at this point

   • Auto-create delegation client scopes as Optional for all realms

     Show description for 2f46dd7
     

     mabartos

     authored and

     rmartinc

     committed
     2f46dd7View commit details

     Copy full SHA for 2f46dd7

     View code at this pointBrowse repository at this point

   • Add client identity to delegation audit events

     Show description for 63582ae
     

     mabartos

     authored and

     rmartinc

     committed
     63582aeView commit details

     Copy full SHA for 63582ae

     View code at this pointBrowse repository at this point
5. Commits on Aug 26, 2026

   • refactor: migrating more logic to the type provider (#51910)

     Show description for c45e451
     shawkins

     authored
     c45e451View commit details

     Copy full SHA for c45e451

     View code at this pointBrowse repository at this point

   • Make sure group claims referencing a name match only top-level groups

     Show description for d92b9af
     

     4nass

     and

     pedroigor

     committed
     d92b9afView commit details

     Copy full SHA for d92b9af

     View code at this pointBrowse repository at this point

   • Check consento for JWT Authorization Grant

     Show description for 99da283
     

     graziang

     authored and

     mposolda

     committed
     99da283View commit details

     Copy full SHA for 99da283

     View code at this pointBrowse repository at this point

   • Fix-51286:Implemented param stripping for all OIDC response modes (#52022)

     Show description for 7e6bd23
     jimmychakkalakal

     authored
     7e6bd23View commit details

     Copy full SHA for 7e6bd23

     View code at this pointBrowse repository at this point

   • [CVE-2026-16089] Authorization codes can be retargeted to another client session

     Show description for 6eb0a6c
     mposolda

     committed
     6eb0a6cView commit details

     Copy full SHA for 6eb0a6c

     View code at this pointBrowse repository at this point

   • Add briefRepresentation parameter for organization group-by-path endpoint

     Show description for 80d099b
     

     kota65535

     authored and

     pedroigor

     committed
     80d099bView commit details

     Copy full SHA for 80d099b

     View code at this pointBrowse repository at this point

   • Honor configured admin realm in ClientManager.isInternalClient

     Show description for 140df27
     

     gaurav0107

     authored and

     rmartinc

     committed
     140df27View commit details

     Copy full SHA for 140df27

     View code at this pointBrowse repository at this point

   • Fix for #51328 Client-type bypass for fullScopeAllowed, nodeReRegistrationTimeout, and authorizationServicesEnabled (#52003)

     Show description for 9c2abca
     jimmychakkalakal

     authored
     9c2abcaView commit details

     Copy full SHA for 9c2abca

     View code at this pointBrowse repository at this point

   • SAML ECP SOAP fault client id disclosure fix.

     Show description for 6d625e4
     

     pskopek

     authored and

     mposolda

     committed
     6d625e4View commit details

     Copy full SHA for 6d625e4

     View code at this pointBrowse repository at this point

   • Fix: preserve parent-group role inheritance for group endpoint; fix test fixtures per review

     Show description for 100c6af
     

     PRAHLAD09-dev

     authored and

     pedroigor

     committed
     100c6afView commit details

     Copy full SHA for 100c6af

     View code at this pointBrowse repository at this point

   • Fix composite realm role mappings performance

     Show description for b0e2db8
     

     PRAHLAD09-dev

     authored and

     pedroigor

     committed
     b0e2db8View commit details

     Copy full SHA for b0e2db8

     View code at this pointBrowse repository at this point
6. Commits on Aug 25, 2026

   • Deprecate initiating_idp parameter

     Show description for 4f69a23
     

     graziang

     authored and

     mposolda

     committed
     4f69a23View commit details

     Copy full SHA for 4f69a23

     View code at this pointBrowse repository at this point

   • [OpenID4VCI] Add support for mDoc format (#48095) (#48582)

     Show description for 6033aa3
     dominikschlosser

     authored
     6033aa3View commit details

     Copy full SHA for 6033aa3

     View code at this pointBrowse repository at this point

   • Remove default namespace in SAML writers for better signature compatibility

     Show description for 145ffec
     

     rmartinc

     and

     pskopek

     authored
     145ffecView commit details

     Copy full SHA for 145ffec

     View code at this pointBrowse repository at this point

   • [OID4VP] Delegate trust material to an external trust IdP by alias

     Show description for 0c54fe8
     

     dominikschlosser

     authored and

     rmartinc

     committed
     0c54fe8View commit details

     Copy full SHA for 0c54fe8

     View code at this pointBrowse repository at this point

   • Rename 'delegation' scope to better reflect the intent (#51907)

     Show description for a416f8d
     

     mabartos

     and

     Copilot

     authored
     a416f8dView commit details

     Copy full SHA for a416f8d

     View code at this pointBrowse repository at this point

   • Fixes #51712 by improving post-logout redirect URI validation. (#51909)

     Show description for 6f54553
     jimmychakkalakal

     authored
     6f54553View commit details

     Copy full SHA for 6f54553

     View code at this pointBrowse repository at this point

   • Fix refresh token same-second replay vulnerability (#51885)

     Show description for 2270912
     jimmychakkalakal

     authored
     2270912View commit details

     Copy full SHA for 2270912

     View code at this pointBrowse repository at this point
7. Commits on Aug 24, 2026

   • Client scope boundary bypassed when resolving admin roles via KeycloakIdentity

     Show description for 9022409
     pedroigor

     committed
     9022409View commit details

     Copy full SHA for 9022409

     View code at this pointBrowse repository at this point

   • Token Exchange Delegation for Clients (#51306)

     Show description for bd3a12c
     mabartos

     authored
     bd3a12cView commit details

     Copy full SHA for bd3a12c

     View code at this pointBrowse repository at this point

   • [OID4VP] Introduce SD-JWT User Attribute / Session mappers (#51632)

     Show description for 97ae0a6
     dominikschlosser

     authored
     97ae0a6View commit details

     Copy full SHA for 97ae0a6

     View code at this pointBrowse repository at this point

   • feat(org): add client_id param to invite-user endpoint (#48535)

     Show description for 11458a3
     

     hemmerlein

     and

     pedroigor

     authored
     11458a3View commit details

     Copy full SHA for 11458a3

     View code at this pointBrowse repository at this point
8. Commits on Aug 21, 2026

   • Full-scope-disabled client policy validation can be bypassed by omitting fullScopeAllowed

     Show description for 10ffa4a
     mposolda

     committed
     10ffa4aView commit details

     Copy full SHA for 10ffa4a

     View code at this pointBrowse repository at this point

   • Client access-type condition evaluates updates against the old client type

     Show description for ca0b006
     mposolda

     committed
     ca0b006View commit details

     Copy full SHA for ca0b006

     View code at this pointBrowse repository at this point

   • Deprecate legacy OIDC client switches from 'OpenID Connect Compatibility Modes'

     Show description for 7db8d86
     mposolda

     committed
     7db8d86View commit details

     Copy full SHA for 7db8d86

     View code at this pointBrowse repository at this point
9. Commits on Aug 20, 2026

   • Enforce signature verification on SAML LogoutResponse for clients with requiresClientSignature (#51777)

     Show description for 7cfe9e0
     jimmychakkalakal

     authored
     7cfe9e0View commit details

     Copy full SHA for 7cfe9e0

     View code at this pointBrowse repository at this point

   • fix client nbf bypass

     Show description for dc2f7d8
     

     graziang

     authored and

     mposolda

     committed
     dc2f7d8View commit details

     Copy full SHA for dc2f7d8

     View code at this pointBrowse repository at this point

   • [OID4VCI]: Harden JSON-LD context loading for LD-VC signing (#51448)

     Show description for 62aba6f
     Awambeng

     authored
     62aba6fView commit details

     Copy full SHA for 62aba6f

     View code at this pointBrowse repository at this point

   • Support multivalued user attributes in SCIM

     Show description for 00e2b7e
     

     pedroigor

     and

     cgeorgilakis-grnet

     authored
     00e2b7eView commit details

     Copy full SHA for 00e2b7e

     View code at this pointBrowse repository at this point