Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jun 4, 2026

• Update dependencies of embedded-ldap

  Show description for 200876d
  

  stianst

  authored and

  pedroigor

  committed
  200876d

  Copy full SHA for 200876d

• Update to Maven 3.9.16

  Show description for 6fce7ae
  stianst

  authored
  6fce7ae

  Copy full SHA for 6fce7ae

• [CVE-2026-9794] SAML ECP faultstring discloses client existence and configuration state

  Show description for dba79eb
  

  pskopek

  authored and

  mposolda

  committed
  dba79eb

  Copy full SHA for dba79eb

• Ability to add parameterized scope type (#49420)

  Show description for e158565
  mabartos

  authored
  e158565

  Copy full SHA for e158565

• [CVE-2026-9791] Organization data exposed in tokens and account API when Organizations feature is disabled at realm level (#49541)

  Show description for f19e1f2
  martin-kanis

  authored
  f19e1f2

  Copy full SHA for f19e1f2

• Add validation for LDAP Connection URL when multiple LDAP URLs are provided.

  Show description for 67368e3
  

  sguilhen

  authored and

  pedroigor

  committed
  67368e3

  Copy full SHA for 67368e3

• Add section about LDAP failover configuration to the documentation

  Show description for 251281d
  

  sguilhen

  authored and

  pedroigor

  committed
  251281d

  Copy full SHA for 251281d

Commits on Jun 3, 2026

• Make jdbc-ping cluster name configurable

  Show description for b55a8bd
  

  pruivo

  and

  ahus1

  authored
  b55a8bd

  Copy full SHA for b55a8bd

• Fix NPE during partial export when a policy provider is not registered

  Show description for dec17c7
  

  Angel-Tornero

  authored and

  pedroigor

  committed
  dec17c7

  Copy full SHA for dec17c7

• Store single use objects in the database

  Show description for f7c442a
  pruivo

  authored
  f7c442a

  Copy full SHA for f7c442a

• Revert authentication attempt before invoking realm resource extensions

  Show description for 997130b
  pedroigor

  committed
  997130b

  Copy full SHA for 997130b

• Reject indefinite-length encoding in ASN1Decoder.readLength()

  Show description for 3bf2eab
  

  sguilhen

  authored and

  pedroigor

  committed
  3bf2eab

  Copy full SHA for 3bf2eab

• Remove custom providers from ExportImportTest

  Show description for 707cc90
  rmartinc

  authored
  707cc90

  Copy full SHA for 707cc90

• Review the permission model when managing group memberships

  Show description for f0f280f
  pedroigor

  authored
  f0f280f

  Copy full SHA for f0f280f

• Create SPI to store revoked tokens

  Show description for c2975de
  pruivo

  authored
  c2975de

  Copy full SHA for c2975de

• Document changes for the Prevent access to the Admin API from external IP addresses

  Show description for d35f60b
  ruchikajha95

  authored
  d35f60b

  Copy full SHA for d35f60b

• Added validation to client_session_host

  Show description for 4b1c114
  msdaly200

  authored
  4b1c114

  Copy full SHA for 4b1c114

• fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)

  Show description for d7dc522
  michalvavrik

  authored
  d7dc522

  Copy full SHA for d7dc522

• ROPC Grant Policy Bypass for reject-ropc-grant

  Show description for 13622ee
  mposolda

  committed
  13622ee

  Copy full SHA for 13622ee

Commits on Jun 2, 2026

• Hide client selection when "Use Realm Roles Mapping" is true. (#49486)

  Show description for 0f60d61
  ssilvert

  authored
  0f60d61

  Copy full SHA for 0f60d61

• cache wirit so that we don't need to create the bindings each build (#49360)

  Show description for 50e7790
  edewit

  authored
  50e7790

  Copy full SHA for 50e7790

• Member's organizations endpoint missing per-org FGAP filtering

  Show description for 269365f
  

  vramik

  authored and

  pedroigor

  committed
  269365f

  Copy full SHA for 269365f

• Organization group members endpoint does not check Users permission

  Show description for 237b20f
  

  vramik

  authored and

  pedroigor

  committed
  237b20f

  Copy full SHA for 237b20f

• [OID4VCI] Default Credential offer lifespan is too short

  Show description for 3575af2
  mposolda

  committed
  3575af2

  Copy full SHA for 3575af2

• fix: allowing the kubernetes jwt test to pass on openshift (#49488)

  Show description for 2e79884
  shawkins

  authored
  2e79884

  Copy full SHA for 2e79884

• Fix by only add Verify_email required action when user has an email. Closes #48634 (#49574)

  Show description for b8f7fec
  gaoyikeshuer

  authored
  b8f7fec

  Copy full SHA for b8f7fec

• New tests cleanup - ExportImport tests use duplicated json objects. (#49591)

  Show description for 5c64e04
  lhanusov

  authored
  5c64e04

  Copy full SHA for 5c64e04

• inherit https settings for managment and add overrides (#49365)

  Show description for 811945b
  

  edewit

  and

  michalvavrik

  authored
  811945b

  Copy full SHA for 811945b

• added db_url_properties to oracle (#49361)

  Show description for ec043f1
  

  edewit

  and

  Pepo48

  authored
  ec043f1

  Copy full SHA for ec043f1

• New tests - fix: fgap AbstractPermissionTest inconsitency. (#49594)

  Show description for 92bd264
  lhanusov

  authored
  92bd264

  Copy full SHA for 92bd264

• Use appropriate HTTP status codes in broker callback error responses

  Show description for f728322
  

  sguilhen

  authored and

  pedroigor

  committed
  f728322

  Copy full SHA for f728322

• [CVE-2026-37977] CORS Access-Control-Allow-Origin reflected from unverified JWT azp claim on UMA token endpoint

  Show description for 461ce79
  pedroigor

  authored
  461ce79

  Copy full SHA for 461ce79

• Validate sequence length against the remaining elements in the buffer

  Show description for 2c4fe42
  pedroigor

  authored
  2c4fe42

  Copy full SHA for 2c4fe42

• External ID should be part of email verification single object key

  Show description for 37dabf5
  pedroigor

  authored
  37dabf5

  Copy full SHA for 37dabf5

• Limit backoff retry to the specified timeout

  Show description for 12f24da
  ahus1

  authored
  12f24da

  Copy full SHA for 12f24da