Skip to content

fixes from release/20 - #15982

Merged
stianst merged 4 commits into
keycloak:mainfrom
stianst:fixes-from-release/20
Dec 14, 2022
Merged

fixes from release/20#15982
stianst merged 4 commits into
keycloak:mainfrom
stianst:fixes-from-release/20

Conversation

@stianst

@stianst stianst commented Dec 13, 2022 •
edited
Loading

Copy link
Copy Markdown
Contributor
  • Avoid path traversal vis double-url encoding of redirect URI
  • Do not resolve user session if corresponding auth session does not exist
  • Stabilizing the ConcurrentLoginTest when running with JPA map storage by locking user sessions

@stianst stianst added this to the 21.0.0 milestone Dec 13, 2022
ahus1
ahus1 approved these changes Dec 13, 2022
View reviewed changes

@ahus1 ahus1 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for these fixes!

pedroigor
pedroigor approved these changes Dec 13, 2022
View reviewed changes

@pedroigor pedroigor left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 from my side.

@stianst
stianst merged commit 0f2ca3b into keycloak:main Dec 14, 2022
@stianst
stianst deleted the fixes-from-release/20 branch December 14, 2022 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@abstractj abstractj abstractj approved these changes
@pedroigor pedroigor pedroigor approved these changes
@mposolda mposolda mposolda approved these changes
@ahus1 ahus1 ahus1 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

21.0.0

Development

Successfully merging this pull request may close these issues.

5 participants

@stianst @abstractj @pedroigor @mposolda @ahus1