Commits

Commit history

1. Commits on Nov 12, 2026

   • Upgrade login UI to PatternFly 6 (#52371)

     Show description for 66cf7c9
     

     edewit

     and

     mabartos

     authored
     66cf7c9View commit details

     Copy full SHA for 66cf7c9

     View code at this pointBrowse repository at this point

   • Enforce at least one bearer subject confirmation method and also fail for unsupported methods

     Show description for e1f9a57
     pedroigor

     committed
     e1f9a57View commit details

     Copy full SHA for e1f9a57

     View code at this pointBrowse repository at this point

   • Restrict defaultRoles and full scope via client registration policies (#54887)

     Show description for 8aabe42
     edewit

     authored
     8aabe42View commit details

     Copy full SHA for 8aabe42

     View code at this pointBrowse repository at this point

   • Preserve email_verified from ID token when userinfo omits it. Closes #54245

     Show description for 585294c
     

     msdaly200

     authored and

     rmartinc

     committed
     585294cView commit details

     Copy full SHA for 585294c

     View code at this pointBrowse repository at this point

   • Added check for trusted email

     Show description for affbfb9
     

     msdaly200

     authored and

     rmartinc

     committed
     affbfb9View commit details

     Copy full SHA for affbfb9

     View code at this pointBrowse repository at this point

   • fix: prevent a stale id token from allowing session takeover (#54942)

     Show description for 59cb7ea
     shawkins

     authored
     59cb7eaView commit details

     Copy full SHA for 59cb7ea

     View code at this pointBrowse repository at this point
2. Commits on Nov 11, 2026

   • Assert the stored address in the changed e-mail test

     Show description for 17f0c35
     

     akasakariko

     authored and

     pedroigor

     committed
     17f0c35View commit details

     Copy full SHA for 17f0c35

     View code at this pointBrowse repository at this point

   • Compare the normalized e-mail in isCaseOnlyChange

     Show description for cf5706f
     

     akasakariko

     authored and

     pedroigor

     committed
     cf5706fView commit details

     Copy full SHA for cf5706f

     View code at this pointBrowse repository at this point

   • Apply Trust Email when the IdP email differs only in case

     Show description for 1f2feb2
     

     akasakariko

     authored and

     pedroigor

     committed
     1f2feb2View commit details

     Copy full SHA for 1f2feb2

     View code at this pointBrowse repository at this point

   • Send the reset password email in the background.

     Show description for 46a401d
     

     gaoyikeshuer

     authored and

     rmartinc

     committed
     46a401dView commit details

     Copy full SHA for 46a401d

     View code at this pointBrowse repository at this point

   • Remove redundant EntityManager flushes in JPA realm, client and client scope adapters

     Show description for 40f136b
     

     ahus1

     and

     Copilot

     authored
     40f136bView commit details

     Copy full SHA for 40f136b

     View code at this pointBrowse repository at this point

   • Replace a credential only if unchanged when re-hashing a password

     Show description for e4bcd40
     

     ahus1

     and

     Copilot

     authored
     e4bcd40View commit details

     Copy full SHA for e4bcd40

     View code at this pointBrowse repository at this point

   • [CVE-2026-93998] Validate SAML issuer against configured IdP entity ID (#55011)

     Show description for 02d0c2f
     abstractj

     authored
     02d0c2fView commit details

     Copy full SHA for 02d0c2f

     View code at this pointBrowse repository at this point

   • Use policy iterations in Argon2 policyCheck

     Show description for 8cd27e8
     

     3 peopleauthored
     8cd27e8View commit details

     Copy full SHA for 8cd27e8

     View code at this pointBrowse repository at this point

   • Record existing AES key sizes to prevent key regeneration

     Show description for 08ad72f
     

     choksi2212

     authored and

     mposolda

     committed
     08ad72fView commit details

     Copy full SHA for 08ad72f

     View code at this pointBrowse repository at this point
3. Commits on Nov 10, 2026

   • Reject SAML assertions with an unsupported ProxyRestriction condition (#54948)

     Show description for 13b38f4
     pedroigor

     authored
     13b38f4View commit details

     Copy full SHA for 13b38f4

     View code at this pointBrowse repository at this point

   • Make protocol mappers CRUD to be allowed to realm admins and not allow anything by DCR

     Show description for bec5218
     

     mposolda

     and

     Copilot

     committed
     bec5218View commit details

     Copy full SHA for bec5218

     View code at this pointBrowse repository at this point

   • Checking for admin roles in non-admin composite roles (#54949)

     Show description for 559c69c
     pedroigor

     authored
     559c69cView commit details

     Copy full SHA for 559c69c

     View code at this pointBrowse repository at this point

   • Limit the expiration of tokens issued by the standard token exchange to the subject token

     Show description for cbe2bc8
     

     graziang

     authored and

     mposolda

     committed
     cbe2bc8View commit details

     Copy full SHA for cbe2bc8

     View code at this pointBrowse repository at this point

   • Stateless token preferred_username fallback enables identity rebinding after client recreation (#1265)

     Show description for bc9b1db
     mposolda

     committed
     bc9b1dbView commit details

     Copy full SHA for bc9b1db

     View code at this pointBrowse repository at this point

   • Make sure SSO_AUTH checks map the user authenticating (#54950)

     Show description for 6fc1beb
     pedroigor

     authored
     6fc1bebView commit details

     Copy full SHA for 6fc1beb

     View code at this pointBrowse repository at this point
4. Commits on Nov 9, 2026

   • Organization isolation bypass - nested organization groups can be re-parented under realm groups

     Show description for dc27efd
     

     vramik

     authored and

     pedroigor

     committed
     dc27efdView commit details

     Copy full SHA for dc27efd

     View code at this pointBrowse repository at this point

   • Cancel periodic user storage sync tasks when the realm is removed (#54774)

     Show description for f323cd4
     

     Inf1mum

     and

     pedroigor

     authored
     f323cd4View commit details

     Copy full SHA for f323cd4

     View code at this pointBrowse repository at this point

   • Verify the SAML redirect binding message that is processed

     Show description for 0685265
     

     ssilvert

     and

     pedroigor

     committed
     0685265View commit details

     Copy full SHA for 0685265

     View code at this pointBrowse repository at this point

   • Group-admin DENY bypass via top-level move

     Show description for 1a29685
     

     martin-kanis

     authored and

     pedroigor

     committed
     1a29685View commit details

     Copy full SHA for 1a29685

     View code at this pointBrowse repository at this point

   • Fix Login-failure upsert MySQL/MariaDB affected-row count

     Show description for 10ce11e
     ahus1

     authored
     10ce11eView commit details

     Copy full SHA for 10ce11e

     View code at this pointBrowse repository at this point

   • Enforce scope and audience check in the Admin API

     Show description for 01b32ce
     pedroigor

     committed
     01b32ceView commit details

     Copy full SHA for 01b32ce

     View code at this pointBrowse repository at this point

   • Prevent Vault secret resolution and injection in DCR client secrets (#54463)

     Show description for df2914e
     jimmychakkalakal

     authored
     df2914eView commit details

     Copy full SHA for df2914e

     View code at this pointBrowse repository at this point

   • Remove unreachable adminUrl from root-url-client in test realms

     Show description for 26bad11
     

     ahus1

     and

     Copilot

     authored
     26bad11View commit details

     Copy full SHA for 26bad11

     View code at this pointBrowse repository at this point

   • Detect and expose clock skew between Keycloak cluster nodes within a cluster

     Show description for 69527b1
     

     ruchikajha95

     and

     ahus1

     authored
     69527b1View commit details

     Copy full SHA for 69527b1

     View code at this pointBrowse repository at this point
5. Commits on Nov 6, 2026

   • Remove ability to set up multivalued issuer for OIDC providers

     Show description for a9d7e41
     

     vramik

     authored and

     pedroigor

     committed
     a9d7e41View commit details

     Copy full SHA for a9d7e41

     View code at this pointBrowse repository at this point

   • Escape delimiter in federated and composite cache keys to prevent collisions

     Show description for 90b3f7e
     

     sguilhen

     authored and

     pedroigor

     committed
     90b3f7eView commit details

     Copy full SHA for 90b3f7e

     View code at this pointBrowse repository at this point

   • Reject a different brokered user on forced re-authentication before creating it

     Show description for 6ea53a2
     

     sguilhen

     authored and

     pedroigor

     committed
     6ea53a2View commit details

     Copy full SHA for 6ea53a2

     View code at this pointBrowse repository at this point

   • Reject online refresh tokens for sessions in logout states

     Show description for b1182f9
     

     lhanusov

     authored and

     mposolda

     committed
     b1182f9View commit details

     Copy full SHA for b1182f9

     View code at this pointBrowse repository at this point

   • Fix crash and inconsistent matching in account console linked-accounts search

     Show description for 77a8f12
     

     sguilhen

     authored and

     pedroigor

     committed
     77a8f12View commit details

     Copy full SHA for 77a8f12

     View code at this pointBrowse repository at this point