Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 29, 2026

• Do not pass the client for Delegation parameterized scope type

  Show description for 4e321b8
  rmartinc

  authored
  4e321b8

  Copy full SHA for 4e321b8

• [CVE-2026-16105] Missing per-role authorization on RoleContainerResource composite endpoints

  Show description for 81ada68
  

  martin-kanis

  authored and

  pedroigor

  committed
  81ada68

  Copy full SHA for 81ada68

• [OID4VCI] Fix credential request decryption alg downgrade vulnerability (#50960)

  Show description for be92c2b
  dominikschlosser

  authored
  be92c2b

  Copy full SHA for be92c2b

• [OID4VCI] Issuance with Authorization Code Flow assumes same client_id for offer creation and redemption

  Show description for b39de11
  

  tdiesler

  authored and

  mposolda

  committed
  b39de11

  Copy full SHA for b39de11

• remove credential offer feature from OID4VCRefreshCredentialTest

  Show description for a382051
  

  graziang

  authored and

  mposolda

  committed
  a382051

  Copy full SHA for a382051

• [OID4VCI]: Fix `getAttestationRequirements()` for non-JWT proof types (#50724)

  Show description for 9b7ee21
  Awambeng

  authored
  9b7ee21

  Copy full SHA for 9b7ee21

• fix: removing the message about missing proactive closure (#51251)

  Show description for 1376942
  shawkins

  authored
  1376942

  Copy full SHA for 1376942

• Sorting Applications in Account Console #50948 (#51245)

  Show description for 65cd64a
  

  3 peopleauthored
  65cd64a

  Copy full SHA for 65cd64a

• Document protocol mappers and 'Allow access to user data' switch (#51226)

  Show description for b34d015
  mabartos

  authored
  b34d015

  Copy full SHA for b34d015

• Flush auto-created roles during user import to avoid duplicate role inserts in batch mode

  Show description for 73526cd
  

  theohh0

  and

  wilmerdooley

  authored
  73526cd

  Copy full SHA for 73526cd

Commits on Jul 28, 2026

• Group hierarchy search discloses hidden parent groups under FGAP v2

  Show description for 55b56bc
  

  vramik

  authored and

  pedroigor

  committed
  55b56bc

  Copy full SHA for 55b56bc

• Authenticator config surfaces expose raw reCAPTCHA secrets

  Show description for 9f2853c
  

  vramik

  authored and

  pedroigor

  committed
  9f2853c

  Copy full SHA for 9f2853c

• fix: allows verify email working in incognito browser tab after Keycloak restart (#51089)

  Show description for ce44984
  pchorus

  authored
  ce44984

  Copy full SHA for ce44984

• GET /roles/{role}/users returns user PII without the per-user view filter with FGAP V1

  Show description for 29b7324
  

  vramik

  authored and

  pedroigor

  committed
  29b7324

  Copy full SHA for 29b7324

Commits on Jul 27, 2026

• Incorrect authorization in admin role-composite deletion - delegated admin removes privileged child roles it cannot map

  Show description for 7f98425
  

  vramik

  authored and

  pedroigor

  committed
  7f98425

  Copy full SHA for 7f98425

• [CVE-2026-16108] Realm default-group reads disclose hidden groups under FGAP v2

  Show description for 073d2e8
  

  martin-kanis

  authored and

  pedroigor

  committed
  073d2e8

  Copy full SHA for 073d2e8

• scim prototype (#50324)

  Show description for cd0b33e
  edewit

  authored
  cd0b33e

  Copy full SHA for cd0b33e

• Generate ES256 verifier key ready for HAIP rules (#51200)

  Show description for fa440ad
  rmartinc

  authored
  fa440ad

  Copy full SHA for fa440ad

• [OID4VCI] Document SD-JWT credential signing key setup (#51197)

  Show description for 70e4d1d
  forkimenjeckayang

  authored
  70e4d1d

  Copy full SHA for 70e4d1d

• Parameterized UserPropertyMapper exposes target user attributes without permission check (#51063)

  Show description for 208d763
  mabartos

  authored
  208d763

  Copy full SHA for 208d763

• Fix label workflow failing on fork PRs with actions/checkout v7

  Show description for 0e2e2a9
  Copilot

  authored
  0e2e2a9

  Copy full SHA for 0e2e2a9

• Added a guide to deploy on bare-metal/VMs

  Show description for 8a328f9
  ruchikajha95

  authored
  8a328f9

  Copy full SHA for 8a328f9

• Fix typo in MCP authorization server guide

  Show description for f1111ef
  ryotaro612

  authored
  f1111ef

  Copy full SHA for f1111ef

• Wait for AUTH_RESPONSE page in MultipleTabsLoginTest

  Show description for c294ca9
  rmartinc

  authored
  c294ca9

  Copy full SHA for c294ca9

• Migrate ClientSecretRotationTest to the new CI

  Show description for 1e27812
  rmartinc

  authored
  1e27812

  Copy full SHA for 1e27812

• [OID4VCI] Reject mismatched signature algorithms during SD-JWT verification (#51133)

  Show description for ef25265
  forkimenjeckayang

  authored
  ef25265

  Copy full SHA for ef25265

• [OID4VCI] Fix unbounded OID4VCI credential offer expiration (#50957)

  Show description for cf652cd
  forkimenjeckayang

  authored
  cf652cd

  Copy full SHA for cf652cd

• OID4VCI: Enforce key_attestations_required when proof JWT omits key_attestation

  Show description for da79957
  

  Awambeng

  authored and

  mposolda

  committed
  da79957

  Copy full SHA for da79957

• [OID4VCI] Enforce HAIP x5c rules for SD-JWT issuance (#48528)

  Show description for 901b343
  forkimenjeckayang

  authored
  901b343

  Copy full SHA for 901b343

Commits on Jul 25, 2026

• Link authentication flow UsedBy clients to client settings (#48841)

  Show description for cab9b92
  singhvishalkr

  authored
  cab9b92

  Copy full SHA for cab9b92

• Use text input instead of numeric for recovery codes (#50829)

  Show description for 5c1b58e
  am9zZWY

  authored
  5c1b58e

  Copy full SHA for 5c1b58e

Commits on Jul 24, 2026

• Generate BCFKS truststore in strict FIPS (#50149)

  Show description for 1c8445f
  

  3 peopleauthored
  1c8445f

  Copy full SHA for 1c8445f

• Remove version override for `org.postgresql:postgresql` (#51140)

  Show description for da4fde7
  Copilot

  authored
  da4fde7

  Copy full SHA for da4fde7

• Mask vault password in show-config (#51013)

  Show description for 39c424e
  

  AkashKumar7902

  and

  shawkins

  authored
  39c424e

  Copy full SHA for 39c424e

• [OID4VCI] Implement Key-Binding for jwt-credentials and fix it for SD-JWT (#49895)

  Show description for db820b2
  

  3 peopleauthored
  db820b2

  Copy full SHA for db820b2