List view

Denial of service via excessive response size from identity provider

action/priority-normal

area/weakness

release/25.0.0

team/core-shared

Status: Closed (completed).

#27293 In keycloak/keycloak;

· by abstractj was closed on Mar 13, 2024

Restrict the access to 'whoami' endpoint for tokens issued for the admin console client

area/admin/api

area/admin/ui

area/weakness

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/normal

release/25.0.0

team/core-clients

Status: Closed (completed).

#25219 In keycloak/keycloak;

· by abstractj was closed on May 15, 2024

Revoked Token may be valid for a short time after expiring

area/oidcIndicates an issue on OIDC areaIndicates an issue on OIDC area

area/weakness

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/importantMust be worked on very soonMust be worked on very soon

release/22.0.12

release/24.0.6

release/25.0.0

team/core-clients

Status: Closed (completed).

#26113 In keycloak/keycloak;

· by abstractj was closed on Mar 7, 2024

Realm improper input sanitization

area/core

area/weakness

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

release/25.0.0

team/core-clients

team/core-shared

Status: Closed (completed).

#26108 In keycloak/keycloak;

· by abstractj was closed on May 2, 2024

Device verification flow does not require consent under certain circumstances

area/oidcIndicates an issue on OIDC areaIndicates an issue on OIDC area

area/weakness

help wanted

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/normal

release/25.0.0

status/auto-bump

status/auto-expire

team/core-clients

Status: Closed (completed).

#26100 In keycloak/keycloak;

· by abstractj was closed on Mar 5, 2024

Authentication improvements for the "You are already logged-in"

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

release/25.0.0

team/core-clients

Status: Closed (completed).

#23879 In keycloak/keycloak;

· by mposolda was closed on Apr 12, 2024

Keycloak 24.0.2 - Enlisted connection used without active transaction

area/dist/quarkus

area/storageIndicates an issue that touches storage (change in data layout or data manipulation)Indicates an issue that touches storage (change in data layout or data manipulation)

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/blockerHighest Priority. Has a deadline and it blocks other tasksHighest Priority. Has a deadline and it blocks other tasks

release/24.0.6

release/25.0.0

status/blocked-externalUsed for marking Issues/PRs as blocked by some external factors like a bug in QuarkusUsed for marking Issues/PRs as blocked by some external factors like a bug in Quarkus

team/cloud-native

Status: Closed (completed).

#28725 In keycloak/keycloak;

· by nicolabeghin was closed on Jun 6, 2024

Information not displayed when a logged in user reset his password

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

release/25.0.0

team/core-clients

Status: Closed (completed).

#8887 In keycloak/keycloak;

· by AntoineBvn was closed on May 6, 2024

local user login not possible after LDAP connection problem

area/ldap

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/blockerHighest Priority. Has a deadline and it blocks other tasksHighest Priority. Has a deadline and it blocks other tasks

release/24.0.4

release/25.0.0

team/core-iam

Status: Closed (completed).

#29147 In keycloak/keycloak;

· by go-ma123 was closed on Apr 30, 2024

Preflight request with OPTIONS method for token introspection endpoint not working.

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/normal

team/core-clients

Status: Not planned (skipped).

#29039 In keycloak/keycloak;

· by syadhunandan was closed on May 13, 2024

Security bug: Timing Oracle @ Authorization Grant Request , CWE 208

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/importantMust be worked on very soonMust be worked on very soon

release/25.0.0

team/core-clients

Status: Closed (completed).

#12298 In keycloak/keycloak;

· by drwetter was closed on May 13, 2024

DefaultBruteForceProtector leverages a single thread to write success/failed events

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/importantMust be worked on very soonMust be worked on very soon

release/25.0.0

team/core-clients

Status: Closed (completed).

#14084 In keycloak/keycloak;

· by stianst was closed on Apr 12, 2024

Conditionally enable and disable CLI options

area/dist/quarkus

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/cloud-native

Status: Closed (completed).

#13113 In keycloak/keycloak;

· by pedroigor was closed on Mar 7, 2024

Support management port for health and metrics in Quarkus 3

area/dist/quarkus

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/cloud-native

Status: Closed (completed).

#19334 In keycloak/keycloak;

· by ahus1 was closed on Apr 3, 2024

Remove Account Console v2

area/account/ui

kind/eol

release/25.0.0

team/ui

Status: Closed (completed).

#19664 In keycloak/keycloak;

· by jonkoops was closed on Mar 27, 2024

Upgrade account theme to PatternFly 5

area/account/ui

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/ui

Status: Closed (completed).

#21344 In keycloak/keycloak;

· by jonkoops was closed on Apr 5, 2024

Upgrade admin theme to PatternFly 5

area/admin/ui

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/ui

Status: Closed (completed).

#21345 In keycloak/keycloak;

· by jonkoops was closed on Apr 5, 2024

Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow

area/authenticationIndicates an issue on Authentication areaIndicates an issue on Authentication area

kind/bugCategorizes a PR related to a bugCategorizes a PR related to a bug

priority/importantMust be worked on very soonMust be worked on very soon

release/24.0.2

release/25.0.0

team/core-clients

team/rh-iam

Status: Closed (completed).

#20637 In keycloak/keycloak;

· by ynojima was closed on Mar 12, 2024

uma-ticket returns 403 even though user has access, when User Realm Role isn't present in access Token

area/authorization-servicesIndicates an issue on Authorization areaIndicates an issue on Authorization area

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/core-iam

Status: Closed (completed).

#20736 In keycloak/keycloak;

· by malopez16 was closed on Mar 5, 2024

Make it clear that <code>Client Offline Token Max</code> should not be set when <code>Offline Session Max Limited</code> is disabled for realm

area/admin/ui

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/core-clients

team/ui

Status: Closed (completed).

#20792 In keycloak/keycloak;

· by mposolda was closed on Mar 5, 2024

Remove Wildfly and EAP OIDC adapters

area/adapter/jee

kind/eol

release/25.0.0

team/core-clients

Status: Closed (completed).

#23381 In keycloak/keycloak;

· by mposolda was closed on May 2, 2024

Enable theme caches by default in start-dev

area/dist/quarkus

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

team/cloud-native

Status: Not planned (skipped).

#22711 In keycloak/keycloak;

· by stianst was closed on Feb 13, 2024

Remove depecrated LinkedIn social identity provider

area/core

kind/task

release/25.0.0

team/core-iam

Status: Closed (completed).

#23127 In keycloak/keycloak;

· by rmartinc was closed on Apr 18, 2024

Passkeys: Supporting WebAuthn Conditional UI

area/authentication/webauthn

kind/enhancementCategorizes a PR related to an enhancementCategorizes a PR related to an enhancement

release/25.0.0

team/core-clients

Status: Closed (completed).

#24264 In keycloak/keycloak;

· by tnorimat was closed on May 16, 2024

Refine hostname verification support

kind/task

release/25.0.0

team/cloud-native

Status: Closed (completed).

#24893 In keycloak/keycloak;

· by shawkins was closed on Mar 21, 2024