Commits

Commit history

1. Commits on Aug 31, 2026

   • Set version to 26.7.3

     github-actions[bot]

     committed
     6d238b6View commit details

     Copy full SHA for 6d238b6

     View code at this pointBrowse repository at this point
2. Commits on Aug 28, 2026

   • Fixes #51712 by improving post-logout redirect URI validation. (#51909)

     Show description for d16bb5b
     

     jimmychakkalakal

     authored and

     mposolda

     committed
     d16bb5bView commit details

     Copy full SHA for d16bb5b

     View code at this pointBrowse repository at this point
3. Commits on Aug 26, 2026

   • [Backport 26.7] Skip resolving roles when processing transient tokens on FGAP requests (#51772)

     Show description for 9ed8eb1
     

     pedroigor

     and

     waterWang

     authored
     9ed8eb1View commit details

     Copy full SHA for 9ed8eb1

     View code at this pointBrowse repository at this point
4. Commits on Aug 20, 2026

   • Partial evaluation misses ancestor group policies with extendChildren

     Show description for 04027da
     

     pedroigor

     and

     vramik

     authored
     04027daView commit details

     Copy full SHA for 04027da

     View code at this pointBrowse repository at this point

   • Make sure interal claims are filtered out from claim_token and claims from tickets have precedence

     Show description for eb0ff46
     pedroigor

     authored
     eb0ff46View commit details

     Copy full SHA for eb0ff46

     View code at this pointBrowse repository at this point
5. Commits on Aug 19, 2026

   • [CVE-2026-16072] Organization managers can create managed members through stored registration links without manage-users

     Show description for 9fa9171
     

     martin-kanis

     and

     ahus1

     authored
     9fa9171View commit details

     Copy full SHA for 9fa9171

     View code at this pointBrowse repository at this point

   • New link to RH-SSO product page: http://access.redhat.com/products/single-sign-on/

     Show description for b759af7
     rmartinc

     committed
     b759af7View commit details

     Copy full SHA for b759af7

     View code at this pointBrowse repository at this point

   • New link to RH-SSO product page: http://access.redhat.com/products/single-sign/

     Show description for d6a4ad2
     rmartinc

     committed
     d6a4ad2View commit details

     Copy full SHA for d6a4ad2

     View code at this pointBrowse repository at this point

   • doc update for dpop and token exchange

     Show description for 8a0f7b8
     

     graziang

     authored and

     mposolda

     committed
     8a0f7b8View commit details

     Copy full SHA for 8a0f7b8

     View code at this pointBrowse repository at this point
6. Commits on Aug 11, 2026

   • CVE-2026-15571 Disable legacy client-initiated account linking (26.7) (#955)

     Show description for 8d465ac
     graziang

     authored
     8d465acView commit details

     Copy full SHA for 8d465ac

     View code at this pointBrowse repository at this point
7. Commits on Aug 6, 2026

   • Change rfc4559 link to datatracker as other links

     Show description for 9163d2f
     rmartinc

     authored
     9163d2fView commit details

     Copy full SHA for 9163d2f

     View code at this pointBrowse repository at this point

   • MCP Authorization specification 2026-07-28

     Show description for 9bcc875
     tnorimat

     authored
     9bcc875View commit details

     Copy full SHA for 9bcc875

     View code at this pointBrowse repository at this point

   • Group hierarchy search discloses hidden parent groups under FGAP v2

     Show description for fbb3184
     

     pedroigor

     and

     vramik

     authored
     fbb3184View commit details

     Copy full SHA for fbb3184

     View code at this pointBrowse repository at this point

   • Document protocol mappers and 'Allow access to user data' switch

     Show description for 02b6a1a
     mabartos

     authored
     02b6a1aView commit details

     Copy full SHA for 02b6a1a

     View code at this pointBrowse repository at this point

   • Upgrade to Infinispan 16.0.14

     Show description for 1c0d9a4
     ruchikajha95

     authored
     1c0d9a4View commit details

     Copy full SHA for 1c0d9a4

     View code at this pointBrowse repository at this point
8. Commits on Jul 23, 2026

   • CVE-2026-16100 Prevent OOM via request-controlled error text metrics explosion (26.7) (#946)

     Show description for 9ede910
     ahus1

     authored
     9ede910View commit details

     Copy full SHA for 9ede910

     View code at this pointBrowse repository at this point
9. Commits on Jul 17, 2026

   • Make sure admin role checks are based on the actual roles granted to the user

     Show description for 200e655
     

     sguilhen

     and

     pedroigor

     authored
     200e655View commit details

     Copy full SHA for 200e655

     View code at this pointBrowse repository at this point
10. Commits on Jul 16, 2026

    • [CVE-2026-14614] Keycloak 26.6.3 Fine-Grained Admin Permissions Bypass in Client Scope Assignment

      Show description for 85d10ee
      martin-kanis

      authored
      85d10eeView commit details

      Copy full SHA for 85d10ee

      View code at this pointBrowse repository at this point
11. Commits on Jul 15, 2026

    • fix: correcting cluster-wide mode permissions (#50843) (#50890)

      Show description for a3592e5
      shawkins

      authored
      a3592e5View commit details

      Copy full SHA for a3592e5

      View code at this pointBrowse repository at this point
12. Commits on Jul 13, 2026

    • Stateless: use preview instead of experimental in the introduction

      Show description for ac604bf
      pruivo

      authored
      ac604bfView commit details

      Copy full SHA for ac604bf

      View code at this pointBrowse repository at this point
13. Commits on Jul 9, 2026

    • Stateless: fix release notes to be preview

      Show description for b098e62
      pruivo

      authored
      b098e62View commit details

      Copy full SHA for b098e62

      View code at this pointBrowse repository at this point
14. Commits on Jul 8, 2026

    • fix: expanding the warning about CRs to all (#50624)

      Show description for 2fe86e2
      

      3 peopleauthored
      2fe86e2View commit details

      Copy full SHA for 2fe86e2

      View code at this pointBrowse repository at this point

    • Add ID-JAG acronym to guide summary to improve searchability

      Show description for f139a08
      ryanemerson

      authored
      f139a08View commit details

      Copy full SHA for f139a08

      View code at this pointBrowse repository at this point
15. Commits on Jul 7, 2026

    • Enable passkeys configuration does not follow best UX (#50593)

      Show description for 9ebce0e
      mabartos

      authored
      9ebce0eView commit details

      Copy full SHA for 9ebce0e

      View code at this pointBrowse repository at this point

    • Add OID4VCI credential refresh interval configuration (#50424)

      Show description for 73fc9be
      jimmychakkalakal

      authored
      73fc9beView commit details

      Copy full SHA for 73fc9be

      View code at this pointBrowse repository at this point

    • Create mapper for Token Exchange Delegation to create the may_act claim (#50427)

      Show description for 7937224
      

      mabartos

      and

      rmartinc

      authored
      7937224View commit details

      Copy full SHA for 7937224

      View code at this pointBrowse repository at this point

    • Reverse proxy docs: should not proxy master realm : Aligned

      Show description for 0bbc0d8
      

      3 peopleauthored
      0bbc0d8View commit details

      Copy full SHA for 0bbc0d8

      View code at this pointBrowse repository at this point

    • Docs for Traefik client certificate setup in kc repo

      Show description for e28c83f
      ruchikajha95

      authored
      e28c83fView commit details

      Copy full SHA for e28c83f

      View code at this pointBrowse repository at this point
16. Commits on Jul 6, 2026

    • Rename and make cacheless feature Preview

      Show description for 81e30cc
      

      3 peopleauthored
      81e30ccView commit details

      Copy full SHA for 81e30cc

      View code at this pointBrowse repository at this point

    • Rename and make cacheless feature Preview

      Show description for 8160276
      

      pruivo

      and

      ahus1

      authored
      8160276View commit details

      Copy full SHA for 8160276

      View code at this pointBrowse repository at this point

    • Adding release highlights for 26.7

      Show description for 878eb21
      ahus1

      authored
      878eb21View commit details

      Copy full SHA for 878eb21

      View code at this pointBrowse repository at this point

    • Clarify experimental support for ID-JAG in documentation (#50614)

      Show description for 4a8e12a
      

      VinodAnandan

      and

      ahus1

      authored
      4a8e12aView commit details

      Copy full SHA for 4a8e12a

      View code at this pointBrowse repository at this point
17. Commits on Jul 3, 2026

    • Move step-up authentication for saml feature to supported

      Show description for 9553d89
      rmartinc

      authored
      9553d89View commit details

      Copy full SHA for 9553d89

      View code at this pointBrowse repository at this point

    • Stricter path matching and validation of template URLs for resource access

      Show description for 5670eb7
      

      vasiliy-mikhailov

      and

      ahus1

      authored
      5670eb7View commit details

      Copy full SHA for 5670eb7

      View code at this pointBrowse repository at this point

    • Adding lb-check endpoint for cachless in multi-cluster v2

      Show description for 480080f
      

      ahus1

      and

      Copilot

      authored
      480080fView commit details

      Copy full SHA for 480080f

      View code at this pointBrowse repository at this point