Commits

Commit history

1. Commits on Nov 5, 2026

   • Set version to 26.8.2

     github-actions[bot]

     committed
     e514445View commit details

     Copy full SHA for e514445

     View code at this pointBrowse repository at this point
2. Commits on Oct 29, 2026

   • Move next doc changes to changes-26_8_2 (#1536)

     Show description for 6af360d
     stianst

     authored
     6af360dView commit details

     Copy full SHA for 6af360d

     View code at this pointBrowse repository at this point
3. Commits on Oct 28, 2026

   • Fix SAML11 parsers infinite loops

     Show description for bb4daf3
     pskopek

     authored
     bb4daf3View commit details

     Copy full SHA for bb4daf3

     View code at this pointBrowse repository at this point
4. Commits on Oct 26, 2026

   • Restrict defaultRoles and full scope via client registration policies

     Show description for fcd47b6
     edewit

     authored
     fcd47b6View commit details

     Copy full SHA for fcd47b6

     View code at this pointBrowse repository at this point

   • Prevent a stale id token from allowing session takeover

     Show description for fb15f46
     shawkins

     authored
     fb15f46View commit details

     Copy full SHA for fb15f46

     View code at this pointBrowse repository at this point

   • Fix CIBAAuthReq with deserializing request checking for forged params added into otherClaims

     Show description for 6612bf5
     lhanusov

     authored
     6612bf5View commit details

     Copy full SHA for 6612bf5

     View code at this pointBrowse repository at this point
5. Commits on Oct 22, 2026

   • Enforce scope and audience check in the Admin API

     Show description for b6c0533
     pedroigor

     authored
     b6c0533View commit details

     Copy full SHA for b6c0533

     View code at this pointBrowse repository at this point

   • Limit the expiration of tokens issued by the standard token exchange to the subject token

     Show description for a03107e
     graziang

     authored
     a03107eView commit details

     Copy full SHA for a03107e

     View code at this pointBrowse repository at this point
6. Commits on Oct 21, 2026

   • Make protocol mappers CRUD to be allowed to realm admins and not allow anything by DCR

     Show description for ab59302
     

     mposolda

     and

     Copilot

     authored
     ab59302View commit details

     Copy full SHA for ab59302

     View code at this pointBrowse repository at this point

   • Reject SAML assertions with an unsupported ProxyRestriction condition

     Show description for 266e746
     pedroigor

     authored
     266e746View commit details

     Copy full SHA for 266e746

     View code at this pointBrowse repository at this point
7. Commits on Oct 19, 2026

   • [CVE-2026-93998] Validate SAML issuer against configured IdP entity ID

     Show description for d2acffd
     abstractj

     authored
     d2acffdView commit details

     Copy full SHA for d2acffd

     View code at this pointBrowse repository at this point

   • Limit size of SOAP endpoint InputStream to prevent resources exhaustion. (#1247)

     Show description for d467c4a
     pskopek

     authored
     d467c4aView commit details

     Copy full SHA for d467c4a

     View code at this pointBrowse repository at this point

   • Enforce at least one bearer subject confirmation method and also fail for unsupported methods

     Show description for 0af639b
     pedroigor

     authored
     0af639bView commit details

     Copy full SHA for 0af639b

     View code at this pointBrowse repository at this point

   • Remove TrustSelfSignedStrategy from HttpUtil#setTruststore

     Show description for e8b4bff
     Pepo48

     authored
     e8b4bffView commit details

     Copy full SHA for e8b4bff

     View code at this pointBrowse repository at this point

   • Added check for trusted email

     Show description for 4f36465
     msdaly200

     authored
     4f36465View commit details

     Copy full SHA for 4f36465

     View code at this pointBrowse repository at this point
8. Commits on Oct 16, 2026

   • Warnings about the fact that client administrator can assign any client scope (#54037)

     Show description for 2296fc6
     mposolda

     authored
     2296fc6View commit details

     Copy full SHA for 2296fc6

     View code at this pointBrowse repository at this point
9. Commits on Oct 15, 2026

   • Unverified broker email can satisfy an organization domain gate (#53858)

     Show description for 44f3ae9
     

     martin-kanis

     authored and

     pedroigor

     committed
     44f3ae9View commit details

     Copy full SHA for 44f3ae9

     View code at this pointBrowse repository at this point

   • Treat the admin-permissions client as an internal client

     Show description for 46b8d96
     

     vramik

     authored and

     pedroigor

     committed
     46b8d96View commit details

     Copy full SHA for 46b8d96

     View code at this pointBrowse repository at this point

   • Require client signature for SAML SessionIndex back-channel SLO (#53658)

     Show description for ea39b56
     

     edewit

     authored and

     mposolda

     committed
     ea39b56View commit details

     Copy full SHA for ea39b56

     View code at this pointBrowse repository at this point

   • Record the start of a periodic user-storage sync run as lastSync (#53983)

     Show description for 6f88398
     

     pedroigor

     and

     choksi2212

     authored
     6f88398View commit details

     Copy full SHA for 6f88398

     View code at this pointBrowse repository at this point
10. Commits on Oct 14, 2026

    • Conditionalize reference to github to only be upstream (#53976)

      Show description for ccc95d4
      andymunro

      authored
      ccc95d4View commit details

      Copy full SHA for ccc95d4

      View code at this pointBrowse repository at this point

    • Realm client-session stats disclose hidden clients under FGAP v2

      Show description for f41e255
      

      martin-kanis

      authored and

      pedroigor

      committed
      f41e255View commit details

      Copy full SHA for f41e255

      View code at this pointBrowse repository at this point

    • Adjust links to upstream/downstream for the upcoming 26.8 release

      Show description for 7b7b71e
      

      ahus1

      and

      andymunro

      authored
      7b7b71eView commit details

      Copy full SHA for 7b7b71e

      View code at this pointBrowse repository at this point

    • Fix callout numbering for nested blocks

      Show description for 3d6674f
      ahus1

      authored
      3d6674fView commit details

      Copy full SHA for 3d6674f

      View code at this pointBrowse repository at this point

    • Conditionalize enhancement request suggestion (#53919)

      Show description for b8ad85c
      andymunro

      authored
      b8ad85cView commit details

      Copy full SHA for b8ad85c

      View code at this pointBrowse repository at this point
11. Commits on Oct 13, 2026

    • Normalize proxy-trusted-addresses to CIDR notation to prevent UDP socket leak

      Show description for 4574dd5
      

      ruchikajha95

      and

      ahus1

      authored
      4574dd5View commit details

      Copy full SHA for 4574dd5

      View code at this pointBrowse repository at this point

    • Fix broken vault link for downstream (#53880)

      Show description for 371caae
      andymunro

      authored
      371caaeView commit details

      Copy full SHA for 371caae

      View code at this pointBrowse repository at this point

    • Fix link to database documentation (#53884)

      Show description for 2c4311b
      andymunro

      authored
      2c4311bView commit details

      Copy full SHA for 2c4311b

      View code at this pointBrowse repository at this point
12. Commits on Oct 9, 2026

    • fixes CVE-2026-15943 by dropping when other values are changed (#53411) (#53803)

      Show description for 8f29692
      edewit

      authored
      8f29692View commit details

      Copy full SHA for 8f29692

      View code at this pointBrowse repository at this point

    • Fix obsolete link (#53799)

      Show description for 9f1529c
      andymunro

      authored
      9f1529cView commit details

      Copy full SHA for 9f1529c

      View code at this pointBrowse repository at this point

    • Correct links that fail or are coded only for upstream (#53796)

      Show description for afb36ce
      andymunro

      authored
      afb36ceView commit details

      Copy full SHA for afb36ce

      View code at this pointBrowse repository at this point

    • Fix EntityManager API documentation link (#53775)

      Show description for 8df1064
      

      3 peopleauthored
      8df1064View commit details

      Copy full SHA for 8df1064

      View code at this pointBrowse repository at this point

    • non-imported federated users returned in search results for query-users-only delegated admins (#53777)

      Show description for 4caecf1
      vramik

      authored
      4caecf1View commit details

      Copy full SHA for 4caecf1

      View code at this pointBrowse repository at this point

    • Remove duplicated section from changes-26_8_1.adoc (#53788)

      Show description for 2053126
      stianst

      authored
      2053126View commit details

      Copy full SHA for 2053126

      View code at this pointBrowse repository at this point

    • Limit the size in CRL and OCSP http responses (#53697) (#53750)

      Show description for 12bd9e3
      rmartinc

      authored
      12bd9e3View commit details

      Copy full SHA for 12bd9e3

      View code at this pointBrowse repository at this point