Commits

History for

Commits on Sep 23, 2026

Resolve the organization when an invitation is confirmed

SferaDev
authored and
pedroigor
committed
8009a55
Pass login_hint on attempted Organization authentication (#52585)
vaceksimon
authored
1952197
Pin resolved identity to prevent consent transfer on user recreation (#52842)
mabartos
authored
c075401
Reorder auth checks and add test cleanup for GroupResource

SatvikPrabhu
authored and
pedroigor
committed
14ca8ad
Add null checks and integration tests for GroupResource updateGroup and addChild endpoints

SatvikPrabhu
authored and
pedroigor
committed
deb6185
Handle null representation in GroupsResource

SatvikPrabhu
authored and
pedroigor
committed
f0ee0ec
Fix flow stepping back on locale change or page refresh fixes: keycloak#41394

devysf
authored and
rmartinc
committed
ad4c9a0
Caching the parsing of theme keys to reduce memory pressure
ahus1
authored
2dc9ad4
Concurrent completion of one WebAuthn registration ceremony persists multiple passwordless credentials

mabartos
authored and
rmartinc
committed
dc3352b
Resolve Kubernetes IdP issuer from discovery
chance-coleman
authored
ce5f9ce

Commits on Sep 22, 2026

contain classpath theme getTemplate path resolution (#50266)
naruto-lgtm
authored
7a375c7
Fix refresh token introspection when token_type_hint is omitted

authored and
mposolda
committed
ea83ab9
Client policy to reject may_act claim (#52898)
rmartinc
authored
fc9cce1
Avoid building the WebAuthn trust verifier on every login (#52995)

authored
3c4bbfd
Fix #51276: Restrict subcomponent type resolution to registered SPI providers (#52865)
SatvikPrabhu
authored
8bf5670

Commits on Sep 21, 2026

chore: drop workaround for upstream NPE from device endpoint (#52782)
michalvavrik
authored
33ee7c0
Fix client secret disclosure for view-only users (#52976)
himanshu7745
authored
1bd92d9
Trigger client policies for admin protocol mapper changes (#50205)
slaskawi
authored
1ac9f92
Device flow throw error if scope parameter contains a scope not permitted for client

cgeorgilakis-grnet
authored and
mposolda
committed
efc768a
Fix: OID4VCI credential endpoint unauthenticated RSA1_5 padding oracle

hagerm98
authored and
mposolda
committed
b6401d5
fix(admin/api): handle disabled email sender provider gracefully

alehhu
authored and
mposolda
committed
8f1e7da
[CIMD] Resource Indicators with CIMD

tnorimat
authored and
mposolda
committed
49f5056
[CIMD] Claude Desktop authentication rejected by Keycloak: jwt-bearer grant type incompatible with public client

tnorimat
authored and
mposolda
committed
69f9969

Commits on Sep 18, 2026

refactor: remove clientdefaultservice / move logic to the type provider (#52304)
shawkins
authored
8ccf388
Fix Secure-client-uris localhost exception

graziang
authored and
mposolda
committed
d3ec5d6
Deprecate full scope allowed switch (#52924)

mposolda
and
Copilot
authored
06e82d6
Fix source-host condition wildcard domains match

graziang
authored and
mposolda
committed
065388d
Fixing SAML client metadata key cache invalidation.

lhanusov
authored and
mposolda
committed
43dadf4
OID4VCI: Preventing memory leak when decompressing
ahus1
authored
373dbe3
[OID4VCI] Prevent mappings of user-controlled data to sensitive claims (#52784)
IngridPuppet
authored
1b536ef
Cache parsed AuthorizationRequestContext per request for parameterized scopes

mabartos
authored and
rmartinc
committed
7b891ab
Event listeners receive the wrong event type when an EventBuilder is reused (e.g. FEDERATED_IDENTITY_LINK is logged and emailed as LOGIN)

andy-clapson
and
ahus1
authored
55f47f8

Commits on Sep 17, 2026