GitHub / keycloak/keycloak issues and pull requests
#41188 - UserResources.addFederatedIdentity is missing OpenApi @Consumes annotation
Issue -
State: open - Opened by FluffyDeluxe 17 days ago
Labels: kind/bug, status/triage
#41186 - Upgrade to Quarkus 3.25.x
Issue -
State: open - Opened by mabartos 17 days ago
Labels: kind/enhancement, impact/medium, area/dist/quarkus, priority/normal
#41184 - CVE-2025-48924 - Uncontrolled Recursion vulnerability in Apache Commons Lang
Issue -
State: open - Opened by rmartinc 17 days ago
Labels: kind/bug, status/triage
#41182 - Flaky test: org.keycloak.testsuite.federation.ldap.LDAPReadOnlyTest#testReadOnlyUserGetsPermanentlyLocked
Issue -
State: open - Opened by keycloak-github-bot[bot] 17 days ago
Labels: kind/bug, area/ci, flaky-test
#41181 - PAR endpoind does not return an appropriate error regarding a request object
Issue -
State: open - Opened by tnorimat 18 days ago
Labels: kind/bug, status/triage
#41180 - Bump @types/node from 24.0.12 to 24.0.14 in /js
Pull Request -
State: open - Opened by dependabot[bot] 18 days ago
Labels: area/dependencies, team/ui
#41178 - Spring reactive webflux and keycloak, postgresql
Issue -
State: closed - Opened by narayanab16 18 days ago
- 1 comment
Labels: kind/bug, status/triage, area/admin/client-java, team/core-shared
#41177 - Skip updating account controls if no control is set when enabling/dis…
Pull Request -
State: open - Opened by vramik 18 days ago
#41176 - Document supported OIDC/OAuth2 standards
Issue -
State: open - Opened by mposolda 18 days ago
Labels: kind/enhancement, status/triage
#41174 - Keeping the same email clears UPDATE_EMAIL required action
Issue -
State: open - Opened by martin-kanis 18 days ago
Labels: kind/bug, status/triage
#41173 - Upgrade to Quarkus 3.24.3
Pull Request -
State: closed - Opened by mabartos 18 days ago
#41172 - Upgrade to Quarkus 3.24.3
Issue -
State: open - Opened by mabartos 18 days ago
Labels: kind/enhancement, team/cloud-native, status/triage
#41167 - Keycloak realm operator acts differently on keycloak available check with hostname v1 versus hostname v2 setup
Issue -
State: closed - Opened by RyanColantuono 18 days ago
- 1 comment
Labels: kind/bug, team/cloud-native, status/triage, area/operator
#41166 - fix: prevent quarkus from persisting logging runtime defaults (#41005)
Pull Request -
State: open - Opened by shawkins 18 days ago
#41165 - Feishu login has been continuously failing as an identity provider
Issue -
State: open - Opened by telnet402 18 days ago
Labels: kind/task
#41164 - Redirection Endpoint should be validated not to include a hash in the URL
Issue -
State: open - Opened by jonkoops 18 days ago
Labels: kind/bug, status/triage
#41162 - Request for Continued Support of Legacy Token Exchange V1 Feature
Issue -
State: open - Opened by sonpb195 18 days ago
Labels: kind/enhancement, status/triage
#41153 - Fix em-dash in SPI options in the docs
Pull Request -
State: open - Opened by ahus1 19 days ago
- 1 comment
#41152 - Docs use em-dashes instead of double dashes for SPI options in regular text
Issue -
State: open - Opened by ahus1 19 days ago
Labels: kind/bug, priority/important, area/docs, backport/26.3
#41151 - Update Traditional Chinese locale to latest version
Issue -
State: closed - Opened by ahus1 19 days ago
Labels: kind/enhancement, release/26.4.0
#41150 - post logout urls and front channel logout
Issue -
State: open - Opened by narayanab16 19 days ago
Labels: kind/enhancement, status/triage
#41149 - Registration with organization invitation fails when user has existing authenticated session
Issue -
State: open - Opened by maxmati 19 days ago
Labels: kind/bug, status/triage, team/core-iam, area/organizations
#41148 - org.keycloak.authentication.forms.RegistrationPassword#validate -> java.lang.UnsupportedOperationException
Issue -
State: open - Opened by fkowal 19 days ago
Labels: area/authorization-services, kind/bug, status/triage, team/core-iam
#41145 - Allow mapping Admin roles to server administrator only
Pull Request -
State: closed - Opened by vramik 19 days ago
#41144 - fix: adding a release note for http-management-scheme
Pull Request -
State: open - Opened by shawkins 19 days ago
- 2 comments
Labels: team/cloud-native
#41144 - fix: adding a release note for http-management-scheme
Pull Request -
State: closed - Opened by shawkins 19 days ago
- 3 comments
Labels: team/cloud-native
#41143 - Bug Fix: Blank Tab in Client Registration Access Policies
Pull Request -
State: closed - Opened by linathedog 19 days ago
- 2 comments
Labels: team/ui
#41143 - Bug Fix: Blank Tab in Client Registration Access Policies
Pull Request -
State: open - Opened by linathedog 19 days ago
- 1 comment
Labels: team/ui
#41142 - fix: using unversioned key in docs
Pull Request -
State: closed - Opened by shawkins 19 days ago
- 1 comment
Labels: team/cloud-native
#41141 - added myself as maintainer dutch language
Pull Request -
State: closed - Opened by edewit 19 days ago
#41140 - Blank Tab in Client Registration Access Policies
Issue -
State: open - Opened by linathedog 19 days ago
Labels: kind/bug, priority/important, area/admin/ui, team/ui
#41138 - Implement CompatibilityMetadataProvider for Cache CLI args
Issue -
State: open - Opened by ryanemerson 19 days ago
Labels: kind/enhancement, status/triage
#41137 - FGAPv2: Names for Permissions and Policies are not scoped
Issue -
State: open - Opened by stranljip 19 days ago
- 3 comments
Labels: kind/bug, area/admin/fine-grained-permissions, team/core-iam, priority/low
#41136 - Provisioning based on x509 certificates
Issue -
State: open - Opened by jonaskuske 19 days ago
Labels: kind/feature, status/triage
#41135 - Admin UI Redirect Broken in Keycloak ≥ 26.2.0
Issue -
State: open - Opened by viktorgt 19 days ago
Labels: kind/bug, area/admin/ui, team/cloud-native, status/triage
#41133 - FAPI 2.0 Final - only accept its issuer identifier value as a string in the aud claim received in client authentication assertions
Pull Request -
State: open - Opened by tnorimat 19 days ago
- 2 comments
Labels: team/cloud-native, team/core-clients, team/core-iam
#41132 - Bump eslint from 9.30.1 to 9.31.0 in /js
Pull Request -
State: open - Opened by dependabot[bot] 20 days ago
Labels: area/dependencies, team/ui
#41131 - Bump @playwright/test from 1.53.2 to 1.54.1 in /js
Pull Request -
State: open - Opened by dependabot[bot] 20 days ago
Labels: area/dependencies, team/ui
#41130 - Bump rollup from 4.44.2 to 4.45.0 in /js
Pull Request -
State: open - Opened by dependabot[bot] 20 days ago
Labels: area/dependencies, team/ui
#41129 - Bump @eslint/js from 9.30.1 to 9.31.0 in /js
Pull Request -
State: open - Opened by dependabot[bot] 20 days ago
Labels: area/dependencies, team/ui
#41128 - [Admin API v2] PoC for a field projection mechanism
Pull Request -
State: open - Opened by thomasdarimont 20 days ago
- 1 comment
#41127 - KeyCloak Organizations Bug - Multiple Organizations Missing in JWT Token
Issue -
State: open - Opened by Lord-KalEl 20 days ago
Labels: kind/bug, area/token-exchange, status/triage, team/core-clients
#41126 - Translations update from Hosted Weblate
Pull Request -
State: open - Opened by weblate 20 days ago
Labels: team/ui
#41125 - Authorization Policy Import allows non-JSON files to be uploaded in Admin UI
Issue -
State: open - Opened by HesamSe 20 days ago
Labels: kind/bug, area/admin/ui, status/triage, team/core-shared
#41123 - keycloak 26.3.1 - no claims included in the access token
Issue -
State: open - Opened by narayanab16 21 days ago
#41122 - UI missing critical client secret length configuration in Keycloak 24+
Issue -
State: open - Opened by Lord-KalEl 21 days ago
Labels: kind/enhancement, status/triage
#41121 - FAPI 2.0 Final - Documentation
Issue -
State: open - Opened by tnorimat 21 days ago
Labels: kind/enhancement, status/triage
#41120 - FAPI 2.0 Final - Add FAPI 2.0 Final security profile as default profile of client policies
Issue -
State: open - Opened by tnorimat 21 days ago
Labels: kind/enhancement, status/triage
#41119 - FAPI 2.0 Final - only accept its issuer identifier value as a string in the aud claim received in client authentication assertions
Issue -
State: open - Opened by tnorimat 21 days ago
Labels: kind/enhancement, status/triage
#41118 - Add a global filter which throws bad request if a query parameter value has a control character
Pull Request -
State: open - Opened by knutz3n 22 days ago
Labels: team/cloud-native, team/core-clients, team/core-iam
#41117 - NUL byte characters are sent from query parameters to the database causing SQL exception
Issue -
State: open - Opened by knutz3n 22 days ago
- 1 comment
Labels: kind/bug, area/core, status/triage, team/core-shared
#41115 - Check if PK for DATABASECHANGELOG already exists (26.3)
Pull Request -
State: closed - Opened by rmartinc 22 days ago
#41114 - Add option 'Requires short state parameter' to OIDC IDP
Pull Request -
State: closed - Opened by mposolda 22 days ago
- 1 comment
Labels: team/cloud-native, team/ui, flaky-test, team/core-clients, team/core-iam
#41113 - Add option 'Requires short state parameter' to OIDC IDP
Pull Request -
State: closed - Opened by mposolda 22 days ago
Labels: team/cloud-native, team/ui, team/core-clients, team/core-iam
#41112 - Add option 'Requires short state parameter' to OIDC IDP
Pull Request -
State: closed - Opened by mposolda 22 days ago
Labels: team/cloud-native, team/ui, team/core-clients, team/core-iam
#41111 - Add SRE team as code owners
Issue -
State: closed - Opened by ahus1 22 days ago
Labels: kind/task, release/26.4.0
#41110 - [admin-v2] Provide simple validation with Jakarta/Hibernate Validation
Pull Request -
State: open - Opened by mabartos 22 days ago
- 1 comment
Labels: flaky-test
#41109 - Resolution of admin-cli's composite roles for lightweight token fails upon concurrent realm deletion
Issue -
State: open - Opened by sebastianh6r 22 days ago
Labels: kind/bug, area/admin/api, status/triage, team/core-shared
#41108 - Unreachable branch in DBusMatchRule. SAST
Issue -
State: open - Opened by Babaijan 22 days ago
Labels: kind/enhancement, status/triage
#41107 - Unused function result in ProtocolMappersResource. SAST
Issue -
State: open - Opened by Babaijan 22 days ago
Labels: kind/enhancement, status/triage
#41106 - Unused function result in SAML11ParserUtil. SAST
Issue -
State: open - Opened by Babaijan 22 days ago
Labels: kind/enhancement, status/triage
#41105 - Unknown relation when removing realm role with --db-schema configured
Issue -
State: open - Opened by ryanemerson 22 days ago
Labels: kind/bug, area/storage, team/core-shared
#41104 - [Keycloak CI] - SSSD - SSSDUserProfileTest
Issue -
State: open - Opened by ikhomyn 22 days ago
Labels: kind/bug, area/ci, status/triage, flaky-job, team/core-clients
#41103 - Service Account users now showing in the User List
Issue -
State: open - Opened by Esurnir 22 days ago
- 3 comments
Labels: kind/bug, priority/blocker, area/admin/ui, team/ui, kind/regression
#41102 - Add SRE maintainers team to CODEOWNERS
Pull Request -
State: closed - Opened by pruivo 22 days ago
- 1 comment
#41101 - Check if PK for DATABASECHANGELOG already exists
Pull Request -
State: closed - Opened by rmartinc 22 days ago
- 3 comments
#41100 - Increase timeout when publishing to Maven Central (#41051)
Pull Request -
State: closed - Opened by stianst 22 days ago
#41099 - Allow Language Selection for Organization User Invitations
Issue -
State: open - Opened by maxmati 22 days ago
Labels: kind/enhancement, status/triage
#41098 - Locked out after upgrade to 26.3.1 due to missing sub in lightweight access token
Issue -
State: open - Opened by mmelvin0 22 days ago
- 1 comment
Labels: kind/bug, area/core, area/admin/ui, status/triage, team/core-iam, team/core-shared
#41097 - Bump vite from 7.0.3 to 7.0.4 in /js
Pull Request -
State: open - Opened by dependabot[bot] 23 days ago
Labels: area/dependencies, team/ui
#41096 - Bump @playwright/test from 1.53.2 to 1.54.0 in /js
Pull Request -
State: closed - Opened by dependabot[bot] 23 days ago
- 1 comment
Labels: area/dependencies, team/ui
#41095 - Bump @types/node from 24.0.12 to 24.0.13 in /js
Pull Request -
State: closed - Opened by dependabot[bot] 23 days ago
- 1 comment
Labels: area/dependencies, team/ui
#41095 - Bump @types/node from 24.0.12 to 24.0.13 in /js
Pull Request -
State: open - Opened by dependabot[bot] 23 days ago
Labels: area/dependencies, team/ui
#41094 - [26.3] Skip computing lifespan for read-only sessions
Pull Request -
State: closed - Opened by pruivo 23 days ago
#41093 - [26.2] Skip computing lifespan for read-only sessions
Pull Request -
State: closed - Opened by pruivo 23 days ago
#41090 - Selected client ID is a string and not an array
Pull Request -
State: closed - Opened by pedroigor 23 days ago
Labels: team/ui
#41089 - fix: providing a single property to declare management interface as http
Pull Request -
State: closed - Opened by shawkins 23 days ago
- 3 comments
Labels: team/cloud-native, flaky-test
#41085 - Newly added OAuth2 Identity Provider feature in 26.3.0 doesn't refresh external access tokens automatically
Issue -
State: open - Opened by K0ppai 23 days ago
- 1 comment
Labels: kind/bug, area/token-exchange, help wanted, team/core-clients, status/auto-expire, status/auto-bump, priority/normal
#41084 - Skip computing lifespan for read-only sessions
Pull Request -
State: closed - Opened by pruivo 23 days ago
- 1 comment
#41083 - Missing users on wrong federation provider configuration
Issue -
State: open - Opened by djoho 23 days ago
- 1 comment
Labels: kind/bug, area/admin/ui, status/triage, team/ui
#41082 - Multiple primary key defined when attempting to upgrade after 26.3.0
Issue -
State: closed - Opened by rmartinc 23 days ago
- 2 comments
Labels: kind/bug, area/core, team/core-shared, release/26.4.0, release/26.3.2
#41080 - Permission evaluatio for resource type Clients broken
Issue -
State: closed - Opened by Xulunix 23 days ago
Labels: kind/bug, priority/important, area/admin/fine-grained-permissions, team/core-iam, release/26.4.0
#41079 - pods do not have app.kubernetes.io/name label set on pods.
Issue -
State: open - Opened by rafal11ck 23 days ago
- 4 comments
Labels: kind/enhancement, status/triage, action/priority-low
#41076 - Navigating group breadcrumb is not reflected in group navigation tree/browser
Issue -
State: open - Opened by kunterbunt-edv 23 days ago
- 2 comments
Labels: kind/bug, area/admin/ui, help wanted, team/ui, status/auto-expire, status/auto-bump, priority/normal
#41075 - Admin Console: Creating a child group reverts tree navigation to root
Issue -
State: open - Opened by kunterbunt-edv 23 days ago
- 2 comments
Labels: kind/bug, area/admin/ui, help wanted, team/ui, status/auto-expire, status/auto-bump, priority/normal
#41068 - Add pagination to user idp links.
Pull Request -
State: open - Opened by ssilvert 23 days ago
Labels: team/ui
#41066 - [26.2] Improve logging for client sessions load
Pull Request -
State: closed - Opened by pruivo 23 days ago
#41061 - DOC: Partial import/export insufficiently documented
Issue -
State: open - Opened by Download 23 days ago
Labels: kind/bug, area/docs, team/cloud-native, status/triage
#41060 - Some executions don't show up in the execution menu
Issue -
State: open - Opened by SamyMeghari 23 days ago
Labels: area/authentication, kind/bug, status/triage, team/core-clients
#41059 - Add option 'Requires short state parameter' to OIDC IDP
Pull Request -
State: closed - Opened by mposolda 23 days ago
Labels: team/cloud-native, team/ui, team/core-clients, team/core-iam
#41058 - Enhance migration utility
Issue -
State: open - Opened by vaceksimon 23 days ago
Labels: kind/task
#41053 - saml-idp: Draft support for extended SAML identity provider configuration in Admin Console
Pull Request -
State: open - Opened by Bosmonster 23 days ago
Labels: team/core-clients
#41051 - Increase timeout when publishing to Maven Central
Pull Request -
State: closed - Opened by stianst 23 days ago
Labels: flaky-test
#41050 - 502 Error from Keycloak
Issue -
State: open - Opened by Harishkanagvel 23 days ago
- 5 comments
Labels: area/authentication, kind/bug, team/core-clients, status/auto-expire, status/missing-information
#41048 - Lack of coordination in database creation in 26.3.0 causes deployment failures
Issue -
State: open - Opened by mvk37 24 days ago
- 5 comments
Labels: kind/bug, area/core, status/triage, team/core-shared
#41046 - Update email feature only enabled if the required action is enabled at the realm
Pull Request -
State: closed - Opened by pedroigor 24 days ago
- 2 comments
Labels: team/cloud-native, team/ui, flaky-test, team/core-clients, team/core-iam
#41045 - Update email feature only enabled if the required action is enabled at the realm
Issue -
State: closed - Opened by pedroigor 24 days ago
Labels: kind/enhancement, release/26.4.0
#41042 - Mark user session for removal when the user bound to cannot be resolved
Pull Request -
State: closed - Opened by pedroigor 24 days ago
- 1 comment
#41041 - Able to create a client without entering Client ID
Issue -
State: open - Opened by fvales 24 days ago
- 1 comment
Labels: kind/bug, priority/important, area/admin/ui, team/ui
#41029 - DOC: 'Running Keycloak in a Container' inconsistent
Issue -
State: open - Opened by Download 24 days ago
- 4 comments
Labels: kind/bug, area/docs, help wanted, team/cloud-native, priority/low, status/auto-expire, status/auto-bump