Keycloak 24.0.2 release notes

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

#25057 Inconsistent behaviour on getting user permissions using authorization authorization-services
#27433 Clarify format of keys in `additionalOptions` field in the Keycloak CR docs
#27481 Edit High Availability guide
#27484 Edit 23.0 changes part of Upgrading Guide
#27632 Integrate downstream Upgrading Guide changes into upstream
#27696 Upgrade to Quarkus 3.8.2 dist/quarkus
#27867 Corrections to Securing Apps Guide
#27871 Upgrade to Infinispan 14.0.26 core
#27953 Address feedback to Keycloak Server guide docs
#27955 Address term Keycloak in Server Administration Guide docs
#28009 Address edits to the Operator Guide
#28033 Upgrade Infinispan to 14.0.27.Final
#28084 Upgrade to Quarkus 3.8.3 dist/quarkus

Bugs

#14501 Getting failed to initialize js message if consent is rejected by user account/ui
#15403 No email send on TOTP/Authenticator app removal core
#20637 Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow authentication
#22644 Flaky test: org.keycloak.testsuite.forms.BrowserFlowTest#testAlternativeNonInteractiveExecutorInSubflow core
#23701 Attribute search does not work with federated users with ldap. admin/ui
#23980 Keycloak Operator fails to install realm authentication flow because "flow is null" import-export
#25490 Partial export/import is not mentioned in Keycloak's Server Administration Guide docs
#25687 A java.lang.NullPointerException occurs when sending a Multipart/form-data request to any file upload interface. admin/api
#26396 How do you update a custom user storage provider jar that includes a version number? dist/quarkus
#27117 user sessions not accessible in all cluster nodes infinispan
#27180 Grant type "urn:ietf:params:oauth:grant-type:uma-ticket" openid-connect/token service endpoint is returning refresh token with invalid Expiration authorization-services
#27228 Lowercased "terms_and_conditions" is not migrated in fed_user_required_action table core
#27245 Account console does not correctly treat link / unlink account account/ui
#27269 mvnw clean install -Pdistribution on Windows deletes necessary files during clean of org.keycloak:keycloak-admin-ui admin/ui
#27275 Invalidating offline token is not working from client sessions tab authentication
#27366 Social login - test failures with unexpected status code testsuite
#27483 Authz-client AuthorizationResource.getPermissions() ClassCastException authorization-services
#27504 Cpu and memory sizing typo docs
#27529 LegacyUserCredentialManager class not found storage
#27540 URL change for liquibase docs docs
#27548 Custom Browser Flow not working anymore admin/ui
#27573 Release notes from 24.0.0 miss that multi-site active-passive deployments are supported docs
#27597 dropping KC_PROXY=edge causes startup error core
#27611 Cannot modify realm email settings since keycloak 24 user-profile
#27653 Admin tests: Flaky realm_settings_user_profile_enabled test admin/ui
#27701 MTLS Cache options should be runtime options, not build time options dist/quarkus
#27719 Wrong Welcome page image in the documentation docs
#27745 Registration template in login2 is broken login/ui
#27761 Snyk workflow failure ci
#27779 Broken Migration "MigrateTo24_0_0" core
#27780 Fixing downstream documentation build docs
#27797 User profile fields cannot be set empty once they have a non-empty value (in Login Theme) user-profile
#27820 Account console confusing with WebAuthn account/ui
#27841 ES translation causes FreeMarker rendering issues translations
#27852 VerifyUserProfile invalidates user cache on every login core
#27878 Error when executing refresh grant, with scope param, without offline_access scope specified oidc
#27882 Incorrect version of bctls-fips in the docs docs
#27892 Truststore handling for the Operator is not documented operator
#27894 Multi datasource configuration does not work in Keycloak 24.0.1 dist/quarkus
#27900 Performance impact in changed hashing measured wrong authentication
#27925 Keycloak docs state that there are http metrics, but they are disabled docs
#27954 Hibernate Dialect detection does not work anymore for Oracle DBs storage
#27966 🍺 instead of dot: Attributes in account UI are not loaded user-profile
#27967 ORA-01450 when updating keycloak 23 -> 24 storage
#27981 User Profile: Inconsistent ordering of attributes between account and login themes user-profile
#28001 MySQL connector artifact should be ignored dist/quarkus
#28012 Keycloak CR Truststore should not have a name operator
#28113 WebAuthN registration broken after upgrading to 24.0.1 authentication/webauthn