Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Jun 12, 2026

• fix(client-registration): return 401 instead of 500 on invalid token (#49930)

  Show description for 6a86e81
  wilmerdooley

  authored
  6a86e81

  Copy full SHA for 6a86e81

• DefaultLocaleUpdaterProvider: KEYCLOAK_LOCALE cookie not set for READ_ONLY federated users

  Show description for 77c398e
  

  2 peopleauthored and

  pedroigor

  committed
  77c398e

  Copy full SHA for 77c398e

Commits on Jun 11, 2026

• Add attribute to always consent in parameterized scopes

  Show description for ae0097c
  rmartinc

  authored
  ae0097c

  Copy full SHA for ae0097c

• fix: refining quarkus based session threadlocal management (#49315)

  Show description for b8b5589
  shawkins

  authored
  b8b5589

  Copy full SHA for b8b5589

• NPE in MgmtPermissions.isRealmAdmin() when using AdminPermissions.evaluator() with FGAP V2 enabled

  Show description for 4ea4f0f
  

  martin-kanis

  authored and

  pedroigor

  committed
  4ea4f0f

  Copy full SHA for 4ea4f0f

• Fix CIBA bypassing brute force protection (#49791)

  Show description for 11c2695
  jimmychakkalakal

  authored
  11c2695

  Copy full SHA for 11c2695

Commits on Jun 10, 2026

• Add idp admin role check for linking/unlinking IdP to/from an org

  Show description for 23690eb
  vramik

  authored
  23690eb

  Copy full SHA for 23690eb

• Use credential config ID in account console UI (#49863)

  Show description for f9178c3
  jimmychakkalakal

  authored
  f9178c3

  Copy full SHA for f9178c3

• Skip creation of broker client

  Show description for c8482b7
  

  graziang

  authored and

  mposolda

  committed
  c8482b7

  Copy full SHA for c8482b7

• Save Remember Me authNote when an organization scope is set

  Show description for 45bfe0a
  Esurnir

  authored
  45bfe0a

  Copy full SHA for 45bfe0a

• Do not allow updates on the realm-management client

  Show description for 39cb8de
  pedroigor

  authored
  39cb8de

  Copy full SHA for 39cb8de

Commits on Jun 9, 2026

• [OID4VCI-FAPI2] Pass fapi2-security-profile-final-state-only-outside-request-object-not-used (#49788)

  Show description for 9b6cb28
  tdiesler

  authored
  9b6cb28

  Copy full SHA for 9b6cb28

• Missing disabled client check in pre authorized code grant type (#49661)

  Show description for c3a1152
  TEE0207

  authored
  c3a1152

  Copy full SHA for c3a1152

• [OID4VCI] Include VerifiableCredential in credential definition type (#47559)

  Show description for df2b38d
  officialasishkumar

  authored
  df2b38d

  Copy full SHA for df2b38d

• Add kid to CLIENT_LOGIN event of Signed JWT auth

  Show description for 146e52e
  timhallmann

  authored
  146e52e

  Copy full SHA for 146e52e

• Fix duplicate Chinese locale labels

  Show description for 73a845a
  Lexachoc

  authored
  73a845a

  Copy full SHA for 73a845a

• Fix FreeMarkerLoginFormsProvider calling handleThemeResources twice per render (#49719)

  Show description for 7dd3fc8
  maeventer

  authored
  7dd3fc8

  Copy full SHA for 7dd3fc8

• Add Issued Verifiable Credentials UI to Account Console (#49507)

  Show description for 6df20c2
  jimmychakkalakal

  authored
  6df20c2

  Copy full SHA for 6df20c2

• Filter credential's attributes snapshot with user profile

  Show description for 2bb5439
  

  graziang

  authored and

  mposolda

  committed
  2bb5439

  Copy full SHA for 2bb5439

Commits on Jun 8, 2026

• Add SAML response inspection for clients with scope mappings (#30328)

  Show description for 5668590
  

  thomasdarimont

  authored and

  mposolda

  committed
  5668590

  Copy full SHA for 5668590

• Fix log injection vulnerability in OIDC endpoints

  Show description for b1162bc
  

  jimmychakkalakal

  authored and

  mposolda

  committed
  b1162bc

  Copy full SHA for b1162bc

• More flexibility for client policies in identity-broker-api:v2 (#49695)

  Show description for e1b9acf
  mposolda

  authored
  e1b9acf

  Copy full SHA for e1b9acf

Commits on Jun 5, 2026

• Check CA subject DN in X.509 client authenticator (#48550)

  Show description for af717f7
  rmartinc

  authored
  af717f7

  Copy full SHA for af717f7

Commits on Jun 4, 2026

• Organization member read endpoints should document parent-gated org-level authorization contract

  Show description for aa5623e
  

  vramik

  authored and

  pedroigor

  committed
  aa5623e

  Copy full SHA for aa5623e

• [CVE-2026-9794] SAML ECP faultstring discloses client existence and configuration state

  Show description for dba79eb
  

  pskopek

  authored and

  mposolda

  committed
  dba79eb

  Copy full SHA for dba79eb

• Ability to add parameterized scope type (#49420)

  Show description for e158565
  mabartos

  authored
  e158565

  Copy full SHA for e158565

• [CVE-2026-9791] Organization data exposed in tokens and account API when Organizations feature is disabled at realm level (#49541)

  Show description for f19e1f2
  martin-kanis

  authored
  f19e1f2

  Copy full SHA for f19e1f2

Commits on Jun 3, 2026

• Revert authentication attempt before invoking realm resource extensions

  Show description for 997130b
  pedroigor

  committed
  997130b

  Copy full SHA for 997130b

• Review the permission model when managing group memberships

  Show description for f0f280f
  pedroigor

  authored
  f0f280f

  Copy full SHA for f0f280f

• Create SPI to store revoked tokens

  Show description for c2975de
  pruivo

  authored
  c2975de

  Copy full SHA for c2975de

• Added validation to client_session_host

  Show description for 4b1c114
  msdaly200

  authored
  4b1c114

  Copy full SHA for 4b1c114

• ROPC Grant Policy Bypass for reject-ropc-grant

  Show description for 13622ee
  mposolda

  committed
  13622ee

  Copy full SHA for 13622ee

Commits on Jun 2, 2026

• Member's organizations endpoint missing per-org FGAP filtering

  Show description for 269365f
  

  vramik

  authored and

  pedroigor

  committed
  269365f

  Copy full SHA for 269365f

• Organization group members endpoint does not check Users permission

  Show description for 237b20f
  

  vramik

  authored and

  pedroigor

  committed
  237b20f

  Copy full SHA for 237b20f

• [OID4VCI] Default Credential offer lifespan is too short

  Show description for 3575af2
  mposolda

  committed
  3575af2

  Copy full SHA for 3575af2