Commits

History for

Commits on Jun 26, 2026

Set version to 26.6.4
github-actions[bot]
committed
dc1bfc5

Commits on Jun 11, 2026

CVE-2026-11800 Remove support for symmetric algorithms in JWT public key validators (26.6) (#740)
graziang
authored
6d61885
Consider case-sensitivity when validating prohibited schemes of client URIs (#694)
mposolda
authored
32cdceb

Commits on Jun 9, 2026

Restrict java keystore files to a realm folder (#703)
rmartinc
authored
1bc0dd3
GroupResource.addChild missing requireManage(child) (#707)
vramik
authored
11b83fc
[26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedClientResource (#721)
sguilhen
authored
e5507d9

Commits on Jun 4, 2026

fix: enforce user profile attribute permissions on group and organization members endpoints (#49555)

pedroigor
and
hoaian412003
authored
20e56d1

Commits on Jun 2, 2026

Add validation on Authorization Header with Bearer for client registration

graziang
authored and
mposolda
committed
3fc0690

Commits on May 29, 2026

[CVE-2026-8830] Missing server-side WebAuthn validations during credential registration (#49344) (#49478)
mabartos
authored
d3da77e

Commits on May 28, 2026

Ensure workflows can't be managed through the Component API. (#49358)
sguilhen
authored
51077f1

Commits on May 27, 2026

Add startup check for missing database indexes

pruivo
and
ahus1
authored
507a343
Simplifying session context handling, ensuring an always started transaction

ahus1
and
shawkins
committed
b49cb4f

Commits on May 26, 2026

[26.6] Disable the Account UI when the ACCOUNT feature is disabled (#49303)
mabartos
authored
f6cca68

Commits on May 19, 2026

Commits on May 6, 2026

CVE-2026-37979 audience check for introspection endpoint (26.6) (#600)
graziang
authored
afb43d3

Commits on May 4, 2026

Enforce access check when resolving users during client scope evaluation (#539)
pedroigor
authored
ba9a187

Commits on Apr 30, 2026

Make all required actions one time action by default (#542)
rmartinc
authored
50f9ec2

Commits on Apr 28, 2026

Commits on Apr 27, 2026

Escape expressions in JS blocks in FTL pages
mabartos
authored
46ed88f
fix: correctly handle duplicate values in setAttribute()

ahus1
and
dasniko
authored
a2a6748

Commits on Apr 16, 2026

Handle resource IDs matching the resource type for "Enforce access to" -> "All"

martin-kanis
and
Davide Piva
authored
3511c65

Commits on Apr 15, 2026

Use the correct resource in ClientResourceTypeWorkflowProvider#resolveResource
sguilhen
authored
ac0b3fd

Commits on Apr 14, 2026

Fixing organization flow migration

authored
f5cf15d

Commits on Apr 10, 2026

Fix session type of access token in offline access refresh token flow

mposolda
and
cgeorgilakis-grnet
authored
ec04706

Commits on Apr 8, 2026

Keycloak user enumeration via identity-first login
vramik
authored
b4558a8

Commits on Apr 7, 2026

NPE when using HttpClient and enabled tracing (#47687)
mabartos
authored
daf9e69
Persist kid for java keystore key providers
pedroigor
authored
049569b

Commits on Apr 6, 2026

Add createdAfter/createdBefore filter to GET /admin/realms/{realm}/users

RafaelWO
authored and
pedroigor
committed
b6743de

Commits on Apr 2, 2026

Display Javascript policy description and code in admin UI

ryanemerson
authored and
pedroigor
committed
00c0dee

Commits on Apr 1, 2026