Commits

Commits on Sep 24, 2026

Documentation for the Client TE Delegation (#51999)

authored
b21e6f0

Commits on Sep 23, 2026

Pin resolved identity to prevent consent transfer on user recreation (#52842)
mabartos
authored
c075401
Concurrent completion of one WebAuthn registration ceremony persists multiple passwordless credentials

mabartos
authored and
rmartinc
committed
dc3352b

Commits on Sep 18, 2026

Cache parsed AuthorizationRequestContext per request for parameterized scopes

mabartos
authored and
rmartinc
committed
7b891ab

Commits on Sep 16, 2026

Reject service account users in user-delegation scope

mabartos
authored and
rmartinc
committed
55a0da1

Commits on Aug 27, 2026

Auto-create delegation client scopes as Optional for all realms

mabartos
authored and
rmartinc
committed
2f46dd7
Add client identity to delegation audit events

mabartos
authored and
rmartinc
committed
63582ae

Commits on Aug 25, 2026

Rename 'delegation' scope to better reflect the intent (#51907)

mabartos
and
Copilot
authored
a416f8d

Commits on Aug 24, 2026

Token Exchange Delegation for Clients (#51306)
mabartos
authored
bd3a12c

Commits on Aug 21, 2026

Mark the Client Secret Rotation feature as supported (#51891)

mabartos
and
rmartinc
authored
f4e620e

Commits on Aug 19, 2026

Introduce dedicated delegation permission for token exchange delegation (#51520)
mabartos
authored
ddeeb25

Commits on Aug 11, 2026

Improve help text for admin permissions (FGAP) fields (#51538)

mabartos
and
tomatotomata
authored
898fea0

Commits on Aug 10, 2026

Skip unnecessary provider initialization for non-server commands (#51511)
mabartos
authored
bc4b813

Commits on Aug 7, 2026

Add actor to impersonation tokens and details to event logs (#51492)
mabartos
authored
87b7d66

Commits on Aug 6, 2026

Commits on Jul 30, 2026

[CVE-2026-17048] Keycloak Admin REST API Leaks Vault-Resolved Rotated Client Secrets (#51209)
mabartos
authored
4e1c2ad

Commits on Jul 29, 2026

Document protocol mappers and 'Allow access to user data' switch (#51226)
mabartos
authored
b34d015

Commits on Jul 27, 2026

Parameterized UserPropertyMapper exposes target user attributes without permission check (#51063)
mabartos
authored
208d763

Commits on Jul 24, 2026

Ensure consistent transaction rollback across all error response paths (#50943)
mabartos
authored
ac85144

Commits on Jul 23, 2026

Commits on Jul 21, 2026

Invalid redirect URI on logout from pages with sub-tab hash fragments (#51055)
mabartos
authored
36a8741

Commits on Jul 20, 2026

Rotated client secret remains valid when the feature is disabled (#50910)

mabartos
and
rmartinc
authored
12a37e4

Commits on Jul 17, 2026

Flaky Admin UI E2E test: initial-access.spec.ts (#50947)

mabartos
and
Copilot
authored
471f276
Admin UI E2E test failures - SSF Stream
mabartos
authored
2993984

Commits on Jul 15, 2026

NPE in executor configuration validation (#50858)

mabartos
and
Copilot
authored
04cc053

Commits on Jul 10, 2026

WebAuthn authenticator attachment policy is bypassed when the client omits the attachment field (#50729)
mabartos
authored
be8d1da

Commits on Jul 9, 2026

Commits on Jul 7, 2026

Enable passkeys configuration does not follow best UX (#50593)
mabartos
authored
9ebce0e