Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 31, 2026

• [OID4VCI] Make key attestations configurable in Admin Console (#51261)

  Show description for 7b00e85
  forkimenjeckayang

  authored
  7b00e85

  Copy full SHA for 7b00e85

• [OID4VCI] Harden key attestation x5c certificate validation (#51042)

  Show description for ee444fb
  forkimenjeckayang

  authored
  ee444fb

  Copy full SHA for ee444fb

• Upgrade to Quarkus 3.37.4 (#51289)

  Show description for deb18b8
  Pepo48

  authored
  deb18b8

  Copy full SHA for deb18b8

• Translations update from Hosted Weblate (#50962)

  Show description for eef7785
  

  12 peopleauthored
  eef7785

  Copy full SHA for eef7785

• Fix warning when loading pre-computed password denylist with duplicates

  Show description for 0e942b6
  kfaseela

  authored
  0e942b6

  Copy full SHA for 0e942b6

• Generic identity-provider creation can bind brokers to organizations without manage-organizations

  Show description for 7f858c0
  

  vramik

  authored and

  pedroigor

  committed
  7f858c0

  Copy full SHA for 7f858c0

• Add missing Korean (ko) translations for account, email, and admin themes

  Show description for dea9a7f
  

  silano08

  and

  soulee-dev

  authored
  dea9a7f

  Copy full SHA for dea9a7f

• Remove unnecessary clone operations when building user representations (#51215)

  Show description for ad690c7
  pedroigor

  authored
  ad690c7

  Copy full SHA for ad690c7

Commits on Jul 30, 2026

• Adding predicate for realm groups, aligning direct auth and partial evaluator outcome, more tests, and documentation

  Show description for a0c6618
  pedroigor

  committed
  a0c6618

  Copy full SHA for a0c6618

• User partial filters ignore ancestor group membership denies

  Show description for 4f88adb
  

  vramik

  authored and

  pedroigor

  committed
  4f88adb

  Copy full SHA for 4f88adb

• Gracefully handle disabled or removed IdP during logout

  Show description for 031fbe2
  

  andrew2k4

  authored and

  pedroigor

  committed
  031fbe2

  Copy full SHA for 031fbe2

• Upgrade to Infinispan 16.0.14

  Show description for 82a3ad9
  

  ruchikajha95

  authored and

  ryanemerson

  committed
  82a3ad9

  Copy full SHA for 82a3ad9

• [OID4VCI] Ensure credential configuration IDs are unique (#51272)

  Show description for 1550152
  forkimenjeckayang

  authored
  1550152

  Copy full SHA for 1550152

• fix: namespace OID4VCI credential offer cache keys by realm

  Show description for c0395ab
  

  Awambeng

  authored and

  mposolda

  committed
  c0395ab

  Copy full SHA for c0395ab

• [OID4VCI] User-editable did attribute used as credential subject with realm-local uniqueness only

  Show description for 0ac222f
  

  tdiesler

  authored and

  mposolda

  committed
  0ac222f

  Copy full SHA for 0ac222f

• [CVE-2026-17048] Keycloak Admin REST API Leaks Vault-Resolved Rotated Client Secrets (#51209)

  Show description for 4e1c2ad
  mabartos

  authored
  4e1c2ad

  Copy full SHA for 4e1c2ad

Commits on Jul 29, 2026

• Migrate Organization OIDC Mapper tests into new testsuite

  Show description for 809081c
  

  vramik

  authored and

  pedroigor

  committed
  809081c

  Copy full SHA for 809081c

• Fix spotless error on main branch

  Show description for 61b27ca
  

  sguilhen

  authored and

  pedroigor

  committed
  61b27ca

  Copy full SHA for 61b27ca

• Do not pass the client for Delegation parameterized scope type

  Show description for 4e321b8
  rmartinc

  authored
  4e321b8

  Copy full SHA for 4e321b8

• [CVE-2026-16105] Missing per-role authorization on RoleContainerResource composite endpoints

  Show description for 81ada68
  

  martin-kanis

  authored and

  pedroigor

  committed
  81ada68

  Copy full SHA for 81ada68

• [OID4VCI] Fix credential request decryption alg downgrade vulnerability (#50960)

  Show description for be92c2b
  dominikschlosser

  authored
  be92c2b

  Copy full SHA for be92c2b

• [OID4VCI] Issuance with Authorization Code Flow assumes same client_id for offer creation and redemption

  Show description for b39de11
  

  tdiesler

  authored and

  mposolda

  committed
  b39de11

  Copy full SHA for b39de11

• remove credential offer feature from OID4VCRefreshCredentialTest

  Show description for a382051
  

  graziang

  authored and

  mposolda

  committed
  a382051

  Copy full SHA for a382051

• [OID4VCI]: Fix `getAttestationRequirements()` for non-JWT proof types (#50724)

  Show description for 9b7ee21
  Awambeng

  authored
  9b7ee21

  Copy full SHA for 9b7ee21

• fix: removing the message about missing proactive closure (#51251)

  Show description for 1376942
  shawkins

  authored
  1376942

  Copy full SHA for 1376942

• Sorting Applications in Account Console #50948 (#51245)

  Show description for 65cd64a
  

  3 peopleauthored
  65cd64a

  Copy full SHA for 65cd64a

• Document protocol mappers and 'Allow access to user data' switch (#51226)

  Show description for b34d015
  mabartos

  authored
  b34d015

  Copy full SHA for b34d015

• Flush auto-created roles during user import to avoid duplicate role inserts in batch mode

  Show description for 73526cd
  

  theohh0

  and

  wilmerdooley

  authored
  73526cd

  Copy full SHA for 73526cd

Commits on Jul 28, 2026

• Group hierarchy search discloses hidden parent groups under FGAP v2

  Show description for 55b56bc
  

  vramik

  authored and

  pedroigor

  committed
  55b56bc

  Copy full SHA for 55b56bc

• Authenticator config surfaces expose raw reCAPTCHA secrets

  Show description for 9f2853c
  

  vramik

  authored and

  pedroigor

  committed
  9f2853c

  Copy full SHA for 9f2853c

• fix: allows verify email working in incognito browser tab after Keycloak restart (#51089)

  Show description for ce44984
  pchorus

  authored
  ce44984

  Copy full SHA for ce44984

• GET /roles/{role}/users returns user PII without the per-user view filter with FGAP V1

  Show description for 29b7324
  

  vramik

  authored and

  pedroigor

  committed
  29b7324

  Copy full SHA for 29b7324

Commits on Jul 27, 2026

• Incorrect authorization in admin role-composite deletion - delegated admin removes privileged child roles it cannot map

  Show description for 7f98425
  

  vramik

  authored and

  pedroigor

  committed
  7f98425

  Copy full SHA for 7f98425

• [CVE-2026-16108] Realm default-group reads disclose hidden groups under FGAP v2

  Show description for 073d2e8
  

  martin-kanis

  authored and

  pedroigor

  committed
  073d2e8

  Copy full SHA for 073d2e8

• scim prototype (#50324)

  Show description for cd0b33e
  edewit

  authored
  cd0b33e

  Copy full SHA for cd0b33e