Commits

Branch selector

 main

User selector

mposolda

All time

Commit History

Commits on Apr 7, 2026

• Improve performance of scope processing in TokenManager. Limit for maximum length of OIDC parameters in Token endpoint (#478) (#47799)

  Show description for f29249f
  mposolda

  authored
  f29249f

  Copy full SHA for f29249f

• Adding namespaces for single-use cache entries for PAR and OAuth code (#471) (#47798)

  Show description for 18dbc74
  mposolda

  authored
  18dbc74

  Copy full SHA for 18dbc74

Commits on Apr 1, 2026

• Clarify in FIPS docs that it is still recommended to use Java 21 (#47623)

  Show description for 48b1d0f
  mposolda

  authored
  48b1d0f

  Copy full SHA for 48b1d0f

Commits on Mar 31, 2026

• Clarify at the beginning of legacy-token-exchange section that it needs fgap:v1

  Show description for 30fcb2c
  mposolda

  committed
  30fcb2c

  Copy full SHA for 30fcb2c

Commits on Mar 27, 2026

• Javadoc of Keycloak-admin-client for Keycloak server 26.6 release

  Show description for 4f7be5f
  mposolda

  committed
  4f7be5f

  Copy full SHA for 4f7be5f

Commits on Mar 26, 2026

• Moving identity-broker-api to 'security and standards' section of release notes for 26.6.0

  Show description for 5b82688
  mposolda

  committed
  5b82688

  Copy full SHA for 5b82688

• Inaccuracies in client federation documentation and tooltips

  Show description for 02be20e
  mposolda

  committed
  02be20e

  Copy full SHA for 02be20e

Commits on Mar 24, 2026

• Update authentication section in the Server Admin Guide Features section

  Show description for 3f1567c
  mposolda

  committed
  3f1567c

  Copy full SHA for 3f1567c

• CVE-2026-3429 Improper Access Control for LoA During Credential Deletion for the case of client overriden flow

  Show description for 68f5779
  mposolda

  committed
  68f5779

  Copy full SHA for 68f5779

Commits on Mar 23, 2026

• Make sure to close FileInputStream in Util.readProperties(File) in SSSD code

  Show description for 7f29bc7
  mposolda

  authored
  7f29bc7

  Copy full SHA for 7f29bc7

Commits on Mar 18, 2026

• [OID4VCI] Small inconsistencies in some events

  Show description for 302ff9f
  mposolda

  committed
  302ff9f

  Copy full SHA for 302ff9f

Commits on Mar 17, 2026

• Reduce tightly coupling between client policy contexts and ClientScope condition (#47014)

  Show description for a52a1e7
  mposolda

  authored
  a52a1e7

  Copy full SHA for a52a1e7

• [OID4VCI] User self-issued credential: Issuance initiated from web po… (#46327)

  Show description for c4a630d
  mposolda

  authored
  c4a630d

  Copy full SHA for c4a630d

Commits on Mar 10, 2026

• Migrate RefreshTokenTest to new testsuite (#46886)

  Show description for 7516d80
  mposolda

  authored
  7516d80

  Copy full SHA for 7516d80

Commits on Mar 6, 2026

• Client-scopes client policy condition not triggered during resource-owner-password-credentials grant request

  Show description for 58857c5
  mposolda

  committed
  58857c5

  Copy full SHA for 58857c5

• Add username to BrokeredIdentityContext created from JWTBearer Grant

  Show description for 1b5ebbb
  mposolda

  committed
  1b5ebbb

  Copy full SHA for 1b5ebbb

Commits on Mar 5, 2026

• JWT Authorization grant should use dedicated event type

  Show description for c8428c0
  mposolda

  committed
  c8428c0

  Copy full SHA for c8428c0

Commits on Mar 2, 2026

• Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition (#46054)

  Show description for 2129c91
  

  mposolda

  and

  ahus1

  authored
  2129c91

  Copy full SHA for 2129c91

Commits on Feb 20, 2026

• Make sure persistent userSession not needed in preAuthorized code grant type

  Show description for 2b47045
  mposolda

  committed
  2b47045

  Copy full SHA for 2b47045

Commits on Jan 29, 2026

• Duplicate processing of authorization_details from AuthorizationDetailsProcessorManager

  Show description for 7b36fa1
  mposolda

  committed
  7b36fa1

  Copy full SHA for 7b36fa1

Commits on Jan 26, 2026

• Remove AuthorizationDetailsResponse and make AuthorizationDetailsJSONRepresentation as base of RAR processors

  Show description for e414050
  mposolda

  committed
  e414050

  Copy full SHA for e414050

• Polishing based on PR review. Fix flaky tests

  Show description for 76c4263
  mposolda

  committed
  76c4263

  Copy full SHA for 76c4263

• Make authorizationDetails processing more generic and not tightly coupled to OID4VCI. Fixes

  Show description for 416a601
  mposolda

  committed
  416a601

  Copy full SHA for 416a601

Commits on Jan 16, 2026

• Not able to find key for credential signature if client scope was saved from admin console

  Show description for fcc9ade
  mposolda

  committed
  fcc9ade

  Copy full SHA for fcc9ade

Commits on Jan 12, 2026

• DCR endpoint ignores client's requested token_endpoint_auth_method in case it is client_secret_post

  Show description for 1273c8d
  mposolda

  committed
  1273c8d

  Copy full SHA for 1273c8d

Commits on Jan 8, 2026

• Creating IdentityProvider with latest java admin-client may fail against Keycloak server 26.4 or older

  Show description for 29c15d8
  mposolda

  committed
  29c15d8

  Copy full SHA for 29c15d8

Commits on Jan 7, 2026

• Javadoc of Keycloak-admin-client for Keycloak server 26.5 release

  Show description for bcc8f68
  mposolda

  committed
  bcc8f68

  Copy full SHA for bcc8f68

Commits on Jan 5, 2026

• AdminEvent.getResourcePath() returns paths with duplicated slashes

  Show description for f938d89
  mposolda

  authored
  f938d89

  Copy full SHA for f938d89

Commits on Dec 18, 2025

• Mandatory claims are not enforced for OID4VCI

  Show description for ff1274c
  mposolda

  committed
  ff1274c

  Copy full SHA for ff1274c

• DefaultCryptoSdJwsTest.shouldValidateAgeSinceIssued_IfJwtIsTooOld() sometimes fails in CI

  Show description for 08e9643
  mposolda

  committed
  08e9643

  Copy full SHA for 08e9643

• More capabilities in SdJwtVP API when creating presentations (#44977)

  Show description for 92314bc
  mposolda

  authored
  92314bc

  Copy full SHA for 92314bc

• Release notes update for Keycloak 26.5 with core-clients related contributions (#44986)

  Show description for 4b68f69
  mposolda

  authored
  4b68f69

  Copy full SHA for 4b68f69

Commits on Dec 10, 2025

• CredentialRequest with credentialIdentifier does not work when creden… (#44794)

  Show description for f641269
  mposolda

  authored
  f641269

  Copy full SHA for f641269

Commits on Dec 8, 2025

• Credential offer endpoint has parameter user_id, but expects username

  Show description for 3e001a3
  mposolda

  committed
  3e001a3

  Copy full SHA for 3e001a3

Commits on Dec 6, 2025

• Arquillian tests fails when running from Intellij Idea

  Show description for 1121074
  mposolda

  authored
  1121074

  Copy full SHA for 1121074