Commits

Commit history

1. Commits on Nov 12, 2026

   • Remove default implementations of the atomic credential update methods

     Show description for 5bd155f
     

     ahus1

     and

     Copilot

     authored
     5bd155fView commit details

     Copy full SHA for 5bd155f

     View code at this pointBrowse repository at this point

   • fix: prevent a stale id token from allowing session takeover (#54942)

     Show description for 59cb7ea
     shawkins

     authored
     59cb7eaView commit details

     Copy full SHA for 59cb7ea

     View code at this pointBrowse repository at this point
2. Commits on Nov 11, 2026

   • Replace a credential only if unchanged when re-hashing a password

     Show description for e4bcd40
     

     ahus1

     and

     Copilot

     authored
     e4bcd40View commit details

     Copy full SHA for e4bcd40

     View code at this pointBrowse repository at this point
3. Commits on Nov 10, 2026

   • Escape backslashes in jboss logging event message values.

     Show description for 1b78daf
     

     gaoyikeshuer

     authored and

     rmartinc

     committed
     1b78dafView commit details

     Copy full SHA for 1b78daf

     View code at this pointBrowse repository at this point
4. Commits on Nov 9, 2026

   • Verify the SAML redirect binding message that is processed

     Show description for 0685265
     

     ssilvert

     and

     pedroigor

     committed
     0685265View commit details

     Copy full SHA for 0685265

     View code at this pointBrowse repository at this point
5. Commits on Nov 4, 2026

   • Remove Login v1 theme (#54388)

     Show description for 60417e0
     

     edewit

     and

     mabartos

     authored
     60417e0View commit details

     Copy full SHA for 60417e0

     View code at this pointBrowse repository at this point
6. Commits on Nov 3, 2026

   • Scope FGAP query filtering to management operations

     Show description for c612179
     

     martin-kanis

     authored and

     pedroigor

     committed
     c612179View commit details

     Copy full SHA for c612179

     View code at this pointBrowse repository at this point

   • Fix LDAP group resolution for users with limited admin permissions

     Show description for 8ae1053
     

     martin-kanis

     authored and

     pedroigor

     committed
     8ae1053View commit details

     Copy full SHA for 8ae1053

     View code at this pointBrowse repository at this point
7. Commits on Oct 13, 2026

   • Percent-encode spaces in the OTP key URI account name

     Show description for 2682473
     

     amdadulbari

     authored and

     rmartinc

     committed
     2682473View commit details

     Copy full SHA for 2682473

     View code at this pointBrowse repository at this point
8. Commits on Oct 9, 2026

   • fixes CVE-2026-15943 by dropping when other values are changed (#53411)

     Show description for 17e1425
     edewit

     authored
     17e1425View commit details

     Copy full SHA for 17e1425

     View code at this pointBrowse repository at this point
9. Commits on Oct 7, 2026

   • Organization invitation redirectUrl is not validated against the account client allowlist, leaking a new user's authorization code

     Show description for 4c746a5
     

     vramik

     authored and

     pedroigor

     committed
     4c746a5View commit details

     Copy full SHA for 4c746a5

     View code at this pointBrowse repository at this point

   • Emit credential_id on UPDATE_CREDENTIAL events from built-in required actions (#50787)

     Show description for ca24864
     

     3 peopleauthored
     ca24864View commit details

     Copy full SHA for ca24864

     View code at this pointBrowse repository at this point
10. Commits on Oct 6, 2026

    • Organizations: return null from getByDomainName() for a malformed domain

      Show description for 4ea0961
      

      Hakaou

      authored and

      pedroigor

      committed
      4ea0961View commit details

      Copy full SHA for 4ea0961

      View code at this pointBrowse repository at this point
11. Commits on Sep 29, 2026

    • Add an IdP config option to control IdP admin role escalation.

      Show description for 043590b
      

      tkyjovsk

      authored and

      pedroigor

      committed
      043590bView commit details

      Copy full SHA for 043590b

      View code at this pointBrowse repository at this point

    • Securing Client Cluster Node Registration via Client Policy Executor, closes #52167

      Show description for 4a19f6e
      

      msdaly200

      authored and

      rmartinc

      committed
      4a19f6eView commit details

      Copy full SHA for 4a19f6e

      View code at this pointBrowse repository at this point
12. Commits on Sep 28, 2026

    • Restore deprecated getOrganizationId() and setOrganizationId() methods in IdentityProviderModel

      Show description for 4ab9645
      sguilhen

      authored
      4ab9645View commit details

      Copy full SHA for 4ab9645

      View code at this pointBrowse repository at this point
13. Commits on Sep 24, 2026

    • UI and Rest endpoinds for IDP org group mapper selection

      Show description for 8a1b47c
      

      martin-kanis

      authored and

      pedroigor

      committed
      8a1b47cView commit details

      Copy full SHA for 8a1b47c

      View code at this pointBrowse repository at this point
14. Commits on Sep 22, 2026

    • Client policy to reject may_act claim (#52898)

      Show description for fc9cce1
      rmartinc

      authored
      fc9cce1View commit details

      Copy full SHA for fc9cce1

      View code at this pointBrowse repository at this point
15. Commits on Sep 21, 2026

    • Trigger client policies for admin protocol mapper changes (#50205)

      Show description for 1ac9f92
      slaskawi

      authored
      1ac9f92View commit details

      Copy full SHA for 1ac9f92

      View code at this pointBrowse repository at this point
16. Commits on Sep 18, 2026

    • Prevent managing service account via groups and more test coverage

      Show description for dd4ae31
      pedroigor

      committed
      dd4ae31View commit details

      Copy full SHA for dd4ae31

      View code at this pointBrowse repository at this point
17. Commits on Sep 9, 2026

    • Admin Permissions filtering is applied to organization lookups during end-user authentication

      Show description for 13d2808
      

      martin-kanis

      authored and

      pedroigor

      committed
      13d2808View commit details

      Copy full SHA for 13d2808

      View code at this pointBrowse repository at this point

    • Introduce a capability allowing to change current membershipType for existing organization members

      Show description for 2c0fd93
      

      martin-kanis

      authored and

      pedroigor

      committed
      2c0fd93View commit details

      Copy full SHA for 2c0fd93

      View code at this pointBrowse repository at this point
18. Commits on Sep 8, 2026

    • Improve retrieval of large read-only resources via admin API

      Show description for 68ff311
      

      martin-kanis

      authored and

      pedroigor

      committed
      68ff311View commit details

      Copy full SHA for 68ff311

      View code at this pointBrowse repository at this point

    • Mutli-idp for orgs: Per-Association Config

      Show description for 45f25cc
      

      vramik

      authored and

      pedroigor

      committed
      45f25ccView commit details

      Copy full SHA for 45f25cc

      View code at this pointBrowse repository at this point

    • JpaOrganizationProvider and IdentityProviderStorageProvider support for idp-org relationship

      Show description for 932cee4
      

      vramik

      authored and

      pedroigor

      committed
      932cee4View commit details

      Copy full SHA for 932cee4

      View code at this pointBrowse repository at this point
19. Commits on Sep 7, 2026

    • Multi-IdP for orgs: Data Model

      Show description for 8fb918b
      

      vramik

      authored and

      pedroigor

      committed
      8fb918bView commit details

      Copy full SHA for 8fb918b

      View code at this pointBrowse repository at this point
20. Commits on Aug 28, 2026

    • Preserve configured order when evaluating password policies (#51840)

      Show description for 11dfd45
      adityaanikam

      authored
      11dfd45View commit details

      Copy full SHA for 11dfd45

      View code at this pointBrowse repository at this point
21. Commits on Aug 25, 2026

    • Fix refresh token same-second replay vulnerability (#51885)

      Show description for 2270912
      jimmychakkalakal

      authored
      2270912View commit details

      Copy full SHA for 2270912

      View code at this pointBrowse repository at this point
22. Commits on Aug 18, 2026

    • Invalidate in progress authentication sessions on credential reset (#50702)

      Show description for 412f8bb
      gaoyikeshuer

      authored
      412f8bbView commit details

      Copy full SHA for 412f8bb

      View code at this pointBrowse repository at this point
23. Commits on Aug 12, 2026

    • fix: smaller scope of an initial refactoring to bridge scim and admin v2 (#51456)

      Show description for 207b657
      shawkins

      authored
      207b657View commit details

      Copy full SHA for 207b657

      View code at this pointBrowse repository at this point
24. Commits on Aug 11, 2026

    • Prevent SCIM user writes from bypassing user-profile edit permissions

      Show description for 89294dd
      

      sguilhen

      authored and

      pedroigor

      committed
      89294ddView commit details

      Copy full SHA for 89294dd

      View code at this pointBrowse repository at this point
25. Commits on Aug 7, 2026

    • [OID4VCI]: Enforce ownership validation when deleting issued verifiable credentials via the account API (#51418)

      Show description for d60cebd
      Awambeng

      authored
      d60cebdView commit details

      Copy full SHA for d60cebd

      View code at this pointBrowse repository at this point
26. Commits on Aug 3, 2026

    • Deprecate HttpResponse getStatus/setStatus for JAX-RS endpoint usage (#51334)

      Show description for 59fc5b3
      Copilot

      authored
      59fc5b3View commit details

      Copy full SHA for 59fc5b3

      View code at this pointBrowse repository at this point
27. Commits on Jul 30, 2026

    • [OID4VCI] Ensure credential configuration IDs are unique (#51272)

      Show description for 1550152
      forkimenjeckayang

      authored
      1550152View commit details

      Copy full SHA for 1550152

      View code at this pointBrowse repository at this point

    • [OID4VCI] User-editable did attribute used as credential subject with realm-local uniqueness only

      Show description for 0ac222f
      

      tdiesler

      authored and

      mposolda

      committed
      0ac222fView commit details

      Copy full SHA for 0ac222f

      View code at this pointBrowse repository at this point