Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 16, 2026

• PR for 50807 Dynamic Client Registration Create Scope Error (#50842)

  Show description for 174b3de
  jimmychakkalakal

  authored
  174b3de

  Copy full SHA for 174b3de

• fix IllegalFormatConversionException and wrong time conversion

  Show description for ce31452
  

  rd-jens-mahlke

  and

  ahus1

  authored
  ce31452

  Copy full SHA for ce31452

• Add a section on Blind SSRF via DNS rebinding to the docs

  Show description for 5f1aef7
  

  3 peopleauthored
  5f1aef7

  Copy full SHA for 5f1aef7

Commits on Jul 15, 2026

• Add lower-bound validation on SCIM count parameter (#50887)

  Show description for def1097
  sguilhen

  authored
  def1097

  Copy full SHA for def1097

• Add admin events for Workflows admin API operations (#50417)

  Show description for 8a42418
  sguilhen

  authored
  8a42418

  Copy full SHA for 8a42418

• Replace ClientSelect typeahead dropdown with modal-based picker (#50339)

  Show description for a411f1e
  sguilhen

  authored
  a411f1e

  Copy full SHA for a411f1e

• Throw exception and rollback when token verification fails in reset credentials

  Show description for 0f8222e
  rmartinc

  authored
  0f8222e

  Copy full SHA for 0f8222e

• fix: kcw script version retrieval (#50908)

  Show description for 46749f0
  vaceksimon

  authored
  46749f0

  Copy full SHA for 46749f0

• Scope UnmatchedArgsBinding to leaf commands that support property mappers (#50846)

  Show description for f5eb2f5
  Pepo48

  authored
  f5eb2f5

  Copy full SHA for f5eb2f5

• NPE in executor configuration validation (#50858)

  Show description for 04cc053
  

  mabartos

  and

  Copilot

  authored
  04cc053

  Copy full SHA for 04cc053

Commits on Jul 14, 2026

• Skip returning user sessions when the caller does not have permissions to view the user

  Show description for 5ede0ad
  

  Angel-Tornero

  and

  ahus1

  authored
  5ede0ad

  Copy full SHA for 5ede0ad

• adding an initial copilot-instructions for pr generation and review (#50090)

  Show description for 4040efa
  

  shawkins

  and

  Copilot

  authored
  4040efa

  Copy full SHA for 4040efa

• PR #50341:Revoke credential when OID4VCI refresh token is revoked (#50626)

  Show description for 6c0e404
  jimmychakkalakal

  authored
  6c0e404

  Copy full SHA for 6c0e404

• PR for Support refresh token scenarios for the scenarios with credential offer #50340 (#50599)

  Show description for 4e4caa5
  jimmychakkalakal

  authored
  4e4caa5

  Copy full SHA for 4e4caa5

• Add idp alias to store federated tokens in user session notes (#50592)

  Show description for f5249f4
  graziang

  authored
  f5249f4

  Copy full SHA for f5249f4

• Manage OIDC broker email verification (#50699)

  Show description for a40e61e
  graziang

  authored
  a40e61e

  Copy full SHA for a40e61e

• Fix JWE request object signature bypass (#50565)

  Show description for 959a48d
  graziang

  authored
  959a48d

  Copy full SHA for 959a48d

• fix: correcting cluster-wide mode permissions (#50843)

  Show description for 20b0901
  shawkins

  authored
  20b0901

  Copy full SHA for 20b0901

• [CVE-2026-14614] Keycloak 26.6.3 Fine-Grained Admin Permissions Bypass in Client Scope Assignment

  Show description for 95aa8ce
  martin-kanis

  authored
  95aa8ce

  Copy full SHA for 95aa8ce

• FGAP v2 parent group children endpoint bypasses per-child view permission filter

  Show description for 77c2a92
  vramik

  authored
  77c2a92

  Copy full SHA for 77c2a92

• Keycloak Admin UI Extension brute-force-user User Disclosure via search=id: under FGAP v2

  Show description for e6efeab
  vramik

  authored
  e6efeab

  Copy full SHA for e6efeab

• Migrate organization member package to the new testsuite

  Show description for 69d75a0
  vramik

  authored
  69d75a0

  Copy full SHA for 69d75a0

• Initial implementation for Token Exchange Delegation provider

  Show description for cfa7106
  rmartinc

  authored
  cfa7106

  Copy full SHA for cfa7106

• Fix ConcurrentModificationException updating organization attributes (#50641)

  Show description for 2133baf
  apoorva-01

  authored
  2133baf

  Copy full SHA for 2133baf

Commits on Jul 13, 2026

• Apply connection timeout when Oracle runs in XA Mode

  Show description for 248b665
  michalvavrik

  authored
  248b665

  Copy full SHA for 248b665

• Imp for counting the successful and non successful LDAP requests in metrics

  Show description for 1ecbb5d
  

  ruchikajha95

  and

  ahus1

  authored
  1ecbb5d

  Copy full SHA for 1ecbb5d

• Prevent AuthZEN requests with user tokens

  Show description for 73d5f11
  

  ryanemerson

  and

  ahus1

  authored
  73d5f11

  Copy full SHA for 73d5f11

• Stateless: use preview instead of experimental in the introduction

  Show description for fe35ab1
  pruivo

  authored
  fe35ab1

  Copy full SHA for fe35ab1

• fix: removing temporary client creation in favor of a simple clientmodel (#50744)

  Show description for c3a7902
  shawkins

  authored
  c3a7902

  Copy full SHA for c3a7902

Commits on Jul 10, 2026

• Fix clustering test

  Show description for ba4dd68
  pruivo

  authored
  ba4dd68

  Copy full SHA for ba4dd68

• Improve JFR scrub section in the Observability guide

  Show description for 148467c
  

  tkyjovsk

  and

  ahus1

  authored
  148467c

  Copy full SHA for 148467c

• Add a JFR section to the Observability guide (#50507)

  Show description for f9171ff
  

  3 peopleauthored
  f9171ff

  Copy full SHA for f9171ff

• Tolerate a null username and stop broker mappers from blanking it (#50425)

  Show description for 374fa7d
  gaoyikeshuer

  authored
  374fa7d

  Copy full SHA for 374fa7d

• [OID4VP] Initial verifier implementation (#50430)

  Show description for 7c03f32
  dominikschlosser

  authored
  7c03f32

  Copy full SHA for 7c03f32

• WebAuthn authenticator attachment policy is bypassed when the client omits the attachment field (#50729)

  Show description for be8d1da
  mabartos

  authored
  be8d1da

  Copy full SHA for be8d1da