Commits

Branch selector

 26.5.7

User selector

All users

All time

Commit History

Commits on Apr 2, 2026

• Set version to 26.5.7

  github-actions[bot]

  committed
  97c2dad

  Copy full SHA for 97c2dad

Commits on Mar 26, 2026

• Fix upgrade changes for 26.5.7 (#517)

  Show description for 5ff0150
  stianst

  authored
  5ff0150

  Copy full SHA for 5ff0150

• Upgrade to Quarkus 3.27.3 (#499)

  Show description for 4cfbe25
  

  stianst

  and

  vmuzikar

  authored
  4cfbe25

  Copy full SHA for 4cfbe25

• Prevent creating policies if they don't reference only the owner resource (#496)

  Show description for 995832f
  

  pedroigor

  authored and

  stianst

  committed
  995832f

  Copy full SHA for 995832f

Commits on Mar 25, 2026

• Stricter access control when fetching user profile configuration and metadata (#493)

  Show description for aaae635
  

  stianst

  and

  pedroigor

  authored
  aaae635

  Copy full SHA for aaae635

• CVE-2026-3429 Improper Access Control for LoA During Credential Deletion for the case of client overriden flow (#491)

  Show description for fe1deb7
  

  stianst

  and

  mposolda

  authored
  fe1deb7

  Copy full SHA for fe1deb7

• Improve performance of scope processing in TokenManager. Limit for maximum length of OIDC parameters in Token endpoint (#478)

  Show description for b455ee4
  mposolda

  authored
  b455ee4

  Copy full SHA for b455ee4

• Fix link to Facebook docs (#47422)

  Show description for 4ba4a17
  stianst

  committed
  4ba4a17

  Copy full SHA for 4ba4a17

Commits on Mar 23, 2026

• Adding namespaces for single-use cache entries for PAR and OAuth code (#471)

  Show description for 9046f20
  mposolda

  authored
  9046f20

  Copy full SHA for 9046f20

• Consider path params in the unsafe path for RedirectUtils (#436)

  Show description for 35a71b0
  rmartinc

  authored
  35a71b0

  Copy full SHA for 35a71b0

• Increase timeout for Store IT and Store Model tests as these timeout on keycloak-private (#47323)

  Show description for 049ad52
  stianst

  authored
  049ad52

  Copy full SHA for 049ad52

Commits on Mar 17, 2026

• Stricter access control for listing realm and client roles (#47236)

  Show description for cb0e884
  pedroigor

  authored
  cb0e884

  Copy full SHA for cb0e884

• Check resource server when managing their resources

  Show description for fc3cb3c
  pedroigor

  authored
  fc3cb3c

  Copy full SHA for fc3cb3c

• Make sure time sync are respected and component config updated within a separate transaction

  Show description for e54a993
  pedroigor

  committed
  e54a993

  Copy full SHA for e54a993

• Stricter access control for managing permission tickets

  Show description for f1baf25
  pedroigor

  authored
  f1baf25

  Copy full SHA for f1baf25

• Brief user representation should not return attributes

  Show description for 15106e1
  pedroigor

  authored
  15106e1

  Copy full SHA for 15106e1

• Ensure get organizations by member id requires managing realm

  Show description for daf1a51
  

  vramik

  authored and

  pedroigor

  committed
  daf1a51

  Copy full SHA for daf1a51

Commits on Mar 16, 2026

• Enforce org membership on member organizations endpoint

  Show description for 55f59b1
  

  Oluwatobi-Mustapha

  authored and

  pedroigor

  committed
  55f59b1

  Copy full SHA for 55f59b1

• Change links from issues.redhat.com to redhat.atlassian.net (#47181)

  Show description for c498e84
  

  rmartinc

  authored and

  mposolda

  committed
  c498e84

  Copy full SHA for c498e84

Commits on Mar 13, 2026

• Em-Hyphens in SPI options on cache configuration page

  Show description for 5ac12be
  pruivo

  authored
  5ac12be

  Copy full SHA for 5ac12be

Commits on Mar 12, 2026

• Do not return managed attribute as unmanaged if admin has no view permission

  Show description for 4b59ccf
  pedroigor

  authored
  4b59ccf

  Copy full SHA for 4b59ccf

• Do not cache users when failing validations from their storage providers

  Show description for 6e7c72c
  pedroigor

  authored
  6e7c72c

  Copy full SHA for 6e7c72c

Commits on Mar 9, 2026

• Privilege escalation via manage-clients permission

  Show description for 79ab311
  

  vramik

  authored and

  pedroigor

  committed
  79ab311

  Copy full SHA for 79ab311

Commits on Mar 6, 2026

• Remove root auth session on first offline_access to prevent cross-user session contamination

  Show description for 5136972
  

  federicobartoli

  authored and

  mposolda

  committed
  5136972

  Copy full SHA for 5136972

• Invalid links in logging guides

  Show description for 9884a29
  mabartos

  authored
  9884a29

  Copy full SHA for 9884a29

• SPIFFE Client assertion throws a NullPointerException if no client is found

  Show description for 6d85a18
  ryanemerson

  authored
  6d85a18

  Copy full SHA for 6d85a18

• JGroups bind port configuration ignored when --cache-embedded-network-bind-port set

  Show description for 8e88f39
  ryanemerson

  authored
  8e88f39

  Copy full SHA for 8e88f39

• Do not use offline sessions in the logout endpoint

  Show description for c8ad65b
  

  sschu

  and

  rmartinc

  authored
  c8ad65b

  Copy full SHA for c8ad65b

• Executor for client uris pattern validation

  Show description for afa8ace
  graziang

  authored
  afa8ace

  Copy full SHA for afa8ace

• Mask certain HTTP headers in the HTTP access log

  Show description for 9622f55
  mabartos

  authored
  9622f55

  Copy full SHA for 9622f55

• fix: allowing targetServerType to always be used

  Show description for d4fcf40
  shawkins

  authored
  d4fcf40

  Copy full SHA for d4fcf40

• Avoid having N+1 database calls when fetching composite roles

  Show description for 36cab89
  

  ahus1

  and

  shawkins

  authored
  36cab89

  Copy full SHA for 36cab89

• Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition (#46054) (#46732)

  Show description for 37bbde1
  

  mposolda

  and

  ahus1

  authored
  37bbde1

  Copy full SHA for 37bbde1

Commits on Feb 25, 2026

• Enforce disabled checks when processing brokering flows (#367)

  Show description for 4fd5367
  pedroigor

  authored
  4fd5367

  Copy full SHA for 4fd5367

Commits on Feb 24, 2026

• Make sure client is enabled when processing responses unsolicited responses (#373)

  Show description for a4a092d
  pedroigor

  authored
  a4a092d

  Copy full SHA for a4a092d