Search results

Create SSF UI Tests in Playwright

area/admin/ui

kind/task

team/core-shared

Status: Open.

task

#49981 In keycloak/keycloak;

· ssilvert opened on Jun 12, 2026

Kubernetes identity provider does not use documented default issuer

area/identity-brokering

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

status/triage

team/core-iam

Status: Open.

bug

#49978 In keycloak/keycloak;

· chance-coleman opened on Jun 12, 2026

Add ssf to admin UI development server

area/admin/ui

kind/task

team/core-shared

Status: Open.

task

#49977 In keycloak/keycloak;

· ssilvert opened on Jun 12, 2026

SCIM endpoint returns 500 instead of 401 for unauthenticated requests

area/scim

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/normal

team/core-iam

Status: Open.

bug

#49973 In keycloak/keycloak;

· sguilhen opened on Jun 12, 2026

SSF Stream empty state shows extra text and refresh button

area/admin/ui

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

status/triage

team/core-shared

Status: Open.

bug

#49972 In keycloak/keycloak;

· ssilvert opened on Jun 12, 2026

UserInfoEndpoint throws NullPointerException (HTTP 500) for JWTs with null or missing alg header

area/oidcIndicates an issue on OIDC areaIndicates an issue on OIDC area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

status/triage

team/core-protocols

Status: Open.

bug

#49969 In keycloak/keycloak;

· Allen-wick opened on Jun 12, 2026

Switch internal HTTP client from Apache to Vert.x/Netty

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

status/triage

team/cloud-native

Status: Open.

enhancement

#49968 In keycloak/keycloak;

· vmuzikar opened on Jun 12, 2026

Do not reflect an untrusted Host header into the token iss claim when a fixed hostname is not configured

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

status/triage

Status: Open.

enhancement

#49967 In keycloak/keycloak;

· Allen-wick opened on Jun 12, 2026

[OID4VCI] Make sure that only optional client scopes set on client can be used in pre-authorization grant

area/oid4vcIssue related to OpenID for Verifiable CredentialsIssue related to OpenID for Verifiable Credentials

kind/task

team/core-protocols

Status: Open.

task

#49965 In keycloak/keycloak;

· mposolda opened on Jun 12, 2026

Malformed Content-Type header causes HTTP 500 on token endpoints instead of RFC 6749 §5.2 compliant 400

area/authorization-servicesIndicates an issue on Authorization areaIndicates an issue on Authorization area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

status/triage

team/core-protocols

Status: Open.

bug

#49964 In keycloak/keycloak;

· Allen-wick opened on Jun 12, 2026

Themes: FolderTheme.getTemplate() missing path-containment check

area/account/ui

area/admin/ui

area/login/ui

area/welcome/ui

kind/weakness

priority/importantMust be worked on very soonMust be worked on very soon

team/cloud-native

team/core-authn

team/core-shared

Status: Open.

weakness

#49961 In keycloak/keycloak;

· abstractj opened on Jun 12, 2026

Brute-force detection: Authenticated session token refresh resets lockout counter

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/importantMust be worked on very soonMust be worked on very soon

team/core-authn

Status: Open.

bug

#49960 In keycloak/keycloak;

· abstractj opened on Jun 12, 2026