Commits

Commit history

1. Commits on Aug 31, 2026

   • Set version to 26.7.3

     github-actions[bot]

     committed
     6d238b6View commit details

     Copy full SHA for 6d238b6

     Browse repository at this point
2. Commits on Aug 28, 2026

   • Update react router dependency (#51764) (#52136)

     Show description for 6afd3d7
     

     edewit

     and

     stianst

     authored
     6afd3d7View commit details

     Copy full SHA for 6afd3d7

     Browse repository at this point

   • Fix-51286:Implemented param stripping for all OIDC response modes (#52022)

     Show description for 0f3f102
     

     jimmychakkalakal

     authored and

     mposolda

     committed
     0f3f102View commit details

     Copy full SHA for 0f3f102

     Browse repository at this point

   • SAML ECP SOAP fault client id disclosure fix.

     Show description for 488ec41
     

     pskopek

     authored and

     mposolda

     committed
     488ec41View commit details

     Copy full SHA for 488ec41

     Browse repository at this point

   • Fix signed-JWT client authentication policy bypass with forged assertion

     Show description for fbad918
     

     graziang

     authored and

     mposolda

     committed
     fbad918View commit details

     Copy full SHA for fbad918

     Browse repository at this point

   • Check consento for JWT Authorization Grant

     Show description for 3aa7902
     

     graziang

     authored and

     mposolda

     committed
     3aa7902View commit details

     Copy full SHA for 3aa7902

     Browse repository at this point

   • Fixes #51712 by improving post-logout redirect URI validation. (#51909)

     Show description for d16bb5b
     

     jimmychakkalakal

     authored and

     mposolda

     committed
     d16bb5bView commit details

     Copy full SHA for d16bb5b

     Browse repository at this point
3. Commits on Aug 27, 2026

   • Do not log MariaDB 1020-HY000 warnings

     Show description for 86601d9
     ahus1

     authored
     86601d9View commit details

     Copy full SHA for 86601d9

     Browse repository at this point

   • [CVE-2026-16089] Authorization codes can be retargeted to another client session closes #51003

     Show description for 48f8661
     mposolda

     committed
     48f8661View commit details

     Copy full SHA for 48f8661

     Browse repository at this point

   • Filter stale role IDs in Infinispan client adapters

     Show description for 28d95cd
     

     ahus1

     and

     PRAHLAD09-dev

     authored
     28d95cdView commit details

     Copy full SHA for 28d95cd

     Browse repository at this point
4. Commits on Aug 26, 2026

   • Persist client session note removals with persistent user sessions

     Show description for 3add94b
     

     3 peopleauthored
     3add94bView commit details

     Copy full SHA for 3add94b

     Browse repository at this point

   • fix client nbf bypass

     Show description for d89dbfb
     

     graziang

     authored and

     mposolda

     committed
     d89dbfbView commit details

     Copy full SHA for d89dbfb

     Browse repository at this point

   • Add initial trivyignore file (#52053)

     Show description for 719643b
     stianst

     authored
     719643bView commit details

     Copy full SHA for 719643b

     Browse repository at this point

   • Fix DistributionKeycloakServer hanging on Windows when server startup is slow

     Show description for e24cf6b
     

     stianst

     and

     Pepo48

     authored
     e24cf6bView commit details

     Copy full SHA for e24cf6b

     Browse repository at this point

   • Remove version override for `org.postgresql:postgresql` (#51140) (#51148)

     Show description for c0c6c3b
     

     vmuzikar

     and

     Copilot

     authored
     c0c6c3bView commit details

     Copy full SHA for c0c6c3b

     Browse repository at this point

   • [Backport 26.7] Skip resolving roles when processing transient tokens on FGAP requests (#51772)

     Show description for 9ed8eb1
     

     pedroigor

     and

     waterWang

     authored
     9ed8eb1View commit details

     Copy full SHA for 9ed8eb1

     Browse repository at this point
5. Commits on Aug 25, 2026

   • Avoid aurora_version() probe on standard PostgreSQL

     Show description for bb1a3a7
     

     ahus1

     and

     kalayciburak

     authored
     bb1a3a7View commit details

     Copy full SHA for bb1a3a7

     Browse repository at this point

   • Chunk parent role ids in JpaRealmProvider#getCompositeRolesStream

     Show description for cceb93c
     thomasdarimont

     authored
     cceb93cView commit details

     Copy full SHA for cceb93c

     Browse repository at this point

   • Full-scope-disabled client policy validation can be bypassed by omitting fullScopeAllowed

     Show description for d7427ce
     mposolda

     committed
     d7427ceView commit details

     Copy full SHA for d7427ce

     Browse repository at this point

   • Regression in UI in JS keycloak-admin-client (#51985)

     Show description for 45c4d47
     mposolda

     committed
     45c4d47View commit details

     Copy full SHA for 45c4d47

     Browse repository at this point
6. Commits on Aug 24, 2026

   • Only check links in documentation in main repository

     Show description for ec9c9a9
     stianst

     authored
     ec9c9a9View commit details

     Copy full SHA for ec9c9a9

     Browse repository at this point

   • Apply modifySql to the logged SQL statements

     Show description for 1b88563
     ahus1

     authored
     1b88563View commit details

     Copy full SHA for 1b88563

     Browse repository at this point

   • Client access-type condition evaluates updates against the old client type

     Show description for 1812b4b
     mposolda

     committed
     1812b4bView commit details

     Copy full SHA for 1812b4b

     Browse repository at this point

   • Update old testsuite to commons-configuration2

     Show description for 47d8dd2
     stianst

     authored
     47d8dd2View commit details

     Copy full SHA for 47d8dd2

     Browse repository at this point

   • Fix CVEs inherited from ApacheDS/Kerby dependencies (#51899) (#51951)

     Show description for 0b09695
     sguilhen

     authored
     0b09695View commit details

     Copy full SHA for 0b09695

     Browse repository at this point
7. Commits on Aug 21, 2026

   • Client-protocol condition can be bypassed on admin client creation by omitting protocol

     Show description for f7df458
     mposolda

     committed
     f7df458View commit details

     Copy full SHA for f7df458

     Browse repository at this point

   • Normalize again in JavaKeystoreKeyProviderFactory validation of the path

     Show description for 1d0af52
     rmartinc

     authored
     1d0af52View commit details

     Copy full SHA for 1d0af52

     Browse repository at this point
8. Commits on Aug 20, 2026

   • Generic identity-provider creation can bind brokers to organizations without manage-organizations (#51817)

     Show description for aa3224e
     

     pedroigor

     and

     vramik

     authored
     aa3224eView commit details

     Copy full SHA for aa3224e

     Browse repository at this point

   • GET /roles/{role}/users returns user PII without the per-user view filter with FGAP V1 (#51823)

     Show description for cc84bb0
     

     pedroigor

     and

     vramik

     authored
     cc84bb0View commit details

     Copy full SHA for cc84bb0

     Browse repository at this point

   • Incorrect authorization in admin role-composite deletion - delegated admin removes privileged child roles it cannot map (#51825)

     Show description for d711d63
     

     pedroigor

     and

     vramik

     authored
     d711d63View commit details

     Copy full SHA for d711d63

     Browse repository at this point

   • Authenticator config surfaces expose raw reCAPTCHA secrets (#51827)

     Show description for 643cb8a
     

     pedroigor

     and

     vramik

     authored
     643cb8aView commit details

     Copy full SHA for 643cb8a

     Browse repository at this point

   • Partial evaluation misses ancestor group policies with extendChildren

     Show description for 04027da
     

     pedroigor

     and

     vramik

     authored
     04027daView commit details

     Copy full SHA for 04027da

     Browse repository at this point

   • Make sure interal claims are filtered out from claim_token and claims from tickets have precedence

     Show description for eb0ff46
     pedroigor

     authored
     eb0ff46View commit details

     Copy full SHA for eb0ff46

     Browse repository at this point

   • Admin API: Composite role endpoints do not filter child roles by FGAP v2 view permission

     Show description for 6a7ef71
     

     martin-kanis

     authored and

     pedroigor

     committed
     6a7ef71View commit details

     Copy full SHA for 6a7ef71

     Browse repository at this point

   • Enforce membership permission when creating users

     Show description for bc9a9f3
     pedroigor

     authored
     bc9a9f3View commit details

     Copy full SHA for bc9a9f3

     Browse repository at this point