Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 27, 2026

• Incorrect authorization in admin role-composite deletion - delegated admin removes privileged child roles it cannot map

  Show description for 7f98425
  

  vramik

  authored and

  pedroigor

  committed
  7f98425

  Copy full SHA for 7f98425

• [CVE-2026-16108] Realm default-group reads disclose hidden groups under FGAP v2

  Show description for 073d2e8
  

  martin-kanis

  authored and

  pedroigor

  committed
  073d2e8

  Copy full SHA for 073d2e8

• scim prototype (#50324)

  Show description for cd0b33e
  edewit

  authored
  cd0b33e

  Copy full SHA for cd0b33e

• Generate ES256 verifier key ready for HAIP rules (#51200)

  Show description for fa440ad
  rmartinc

  authored
  fa440ad

  Copy full SHA for fa440ad

• [OID4VCI] Document SD-JWT credential signing key setup (#51197)

  Show description for 70e4d1d
  forkimenjeckayang

  authored
  70e4d1d

  Copy full SHA for 70e4d1d

• Parameterized UserPropertyMapper exposes target user attributes without permission check (#51063)

  Show description for 208d763
  mabartos

  authored
  208d763

  Copy full SHA for 208d763

• Fix label workflow failing on fork PRs with actions/checkout v7

  Show description for 0e2e2a9
  Copilot

  authored
  0e2e2a9

  Copy full SHA for 0e2e2a9

• Added a guide to deploy on bare-metal/VMs

  Show description for 8a328f9
  ruchikajha95

  authored
  8a328f9

  Copy full SHA for 8a328f9

• Fix typo in MCP authorization server guide

  Show description for f1111ef
  ryotaro612

  authored
  f1111ef

  Copy full SHA for f1111ef

• Wait for AUTH_RESPONSE page in MultipleTabsLoginTest

  Show description for c294ca9
  rmartinc

  authored
  c294ca9

  Copy full SHA for c294ca9

• Migrate ClientSecretRotationTest to the new CI

  Show description for 1e27812
  rmartinc

  authored
  1e27812

  Copy full SHA for 1e27812

• [OID4VCI] Reject mismatched signature algorithms during SD-JWT verification (#51133)

  Show description for ef25265
  forkimenjeckayang

  authored
  ef25265

  Copy full SHA for ef25265

• [OID4VCI] Fix unbounded OID4VCI credential offer expiration (#50957)

  Show description for cf652cd
  forkimenjeckayang

  authored
  cf652cd

  Copy full SHA for cf652cd

• OID4VCI: Enforce key_attestations_required when proof JWT omits key_attestation

  Show description for da79957
  

  Awambeng

  authored and

  mposolda

  committed
  da79957

  Copy full SHA for da79957

• [OID4VCI] Enforce HAIP x5c rules for SD-JWT issuance (#48528)

  Show description for 901b343
  forkimenjeckayang

  authored
  901b343

  Copy full SHA for 901b343

Commits on Jul 25, 2026

• Link authentication flow UsedBy clients to client settings (#48841)

  Show description for cab9b92
  singhvishalkr

  authored
  cab9b92

  Copy full SHA for cab9b92

• Use text input instead of numeric for recovery codes (#50829)

  Show description for 5c1b58e
  am9zZWY

  authored
  5c1b58e

  Copy full SHA for 5c1b58e

Commits on Jul 24, 2026

• Generate BCFKS truststore in strict FIPS (#50149)

  Show description for 1c8445f
  

  3 peopleauthored
  1c8445f

  Copy full SHA for 1c8445f

• Remove version override for `org.postgresql:postgresql` (#51140)

  Show description for da4fde7
  Copilot

  authored
  da4fde7

  Copy full SHA for da4fde7

• Mask vault password in show-config (#51013)

  Show description for 39c424e
  

  AkashKumar7902

  and

  shawkins

  authored
  39c424e

  Copy full SHA for 39c424e

• [OID4VCI] Implement Key-Binding for jwt-credentials and fix it for SD-JWT (#49895)

  Show description for db820b2
  

  3 peopleauthored
  db820b2

  Copy full SHA for db820b2

• Fix c_nonce replay protection

  Show description for d5756ef
  

  IngridPuppet

  authored and

  mposolda

  committed
  d5756ef

  Copy full SHA for d5756ef

• Configure OTP policy as default but with code reusable to true in BrowserFlowTest

  Show description for c84f10a
  rmartinc

  authored
  c84f10a

  Copy full SHA for c84f10a

• Ensure consistent transaction rollback across all error response paths (#50943)

  Show description for ac85144
  mabartos

  authored
  ac85144

  Copy full SHA for ac85144

• Adding and improving WebAuthn error messages (#50654)

  Show description for 2bbce40
  uzmamansoor09

  authored
  2bbce40

  Copy full SHA for 2bbce40

Commits on Jul 23, 2026

• fix: moving waiting into the assertMessage method (#51096)

  Show description for 2be1709
  shawkins

  authored
  2be1709

  Copy full SHA for 2be1709

• Passkey icons use wrong color variant when realm disables dark mode (#51091)

  Show description for c50bfbd
  mabartos

  authored
  c50bfbd

  Copy full SHA for c50bfbd

• Redesign identity provider buttons on the login page (#50993)

  Show description for 388b0db
  mabartos

  authored
  388b0db

  Copy full SHA for 388b0db

• Initialize Profiles for ClientAuthPostMethodTest (#51092)

  Show description for ec83bc6
  rmartinc

  authored
  ec83bc6

  Copy full SHA for ec83bc6

• [OID4VP] Add support for direct_post.jwt response mode (#50932)

  Show description for 798dc35
  dominikschlosser

  authored
  798dc35

  Copy full SHA for 798dc35

Commits on Jul 22, 2026

• CVE-2026-45292: size-limiting baggage propagator wrapper (#50869)

  Show description for 9bb7a95
  Pepo48

  authored
  9bb7a95

  Copy full SHA for 9bb7a95

• fix: enables sni for tls passthrough to determine misdirected requests (#50607)

  Show description for fe335cf
  shawkins

  authored
  fe335cf

  Copy full SHA for fe335cf

Commits on Jul 21, 2026

• fix: removing defaultBackend from Ingress (#50896)

  Show description for 5743ad6
  shawkins

  authored
  5743ad6

  Copy full SHA for 5743ad6

• added more test coverage for client v2 (#50557)

  Show description for 7a9b036
  edewit

  authored
  7a9b036

  Copy full SHA for 7a9b036

• #50798 Apply protocol defaults when creating clients through Admin AP… (#50801)

  Show description for 1aac3fe
  arnabnandy7

  authored
  1aac3fe

  Copy full SHA for 1aac3fe