keycloak
https://github.com/keycloak/keycloak
Java
Open Source Identity and Access Management For Modern Applications and Services
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Java not yet supported109 Subscribers
Add a CodeTriage badge to keycloak
Help out
- Issues
- ECDSA JWS signatures with trailing bytes are accepted as valid
- Periodic user storage sync runs at twice the configured period when a sync takes longer than ~1 second
- partialImport throws NullPointerException / HTTP 500 on a group name containing a slash (Keycloak 26.8.0)
- Moving a group under its own descendant causes StackOverflowError / HTTP 500 (Keycloak 26.8.0)
- [CVE-2026-109082] [SECURITY] CIBA confidential-only contract not enforced — public clients obtain user access tokens end-to-end
- Add histogram support to LDAP metrics
- Secure client URI executors do not re-validate stored URIs on partial client update
- Workflows depending on Keycloak realm settings
- [OID4VCI] Add a GraphQL protocol mapper that can resolve claim values from external sources
- [LDAP] User-Federation search breaks UI, when pagination is enabled
- Docs
- Java not yet supported