Catalog / Keycloak

26.5.1

8 months agosecurityOriginal notes

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

  • #44863 x-robots HTTP header missing for static Keycloak resources, and REST endpoint responses
  • #45009 Performance improvement: Missing indexes on BROKER_LINK table columns
  • #45182 Allow full managing of realms from master realm without global admin role

Bugs

  • #43975 Test Framework -> Embedded server -> Maven execution failure: Failed to read script file from: scripts/default-policy.js test-framework
  • #44371 403 Forbidden when assigning realm-management client roles despite FGAP disabled (regression in 26.4.0+) admin/fine-grained-permissions
  • #44417 Security issue with Organization feature exposes and fills the account name automatically in user/password form organizations
  • #44783 Create Realm button is missing when user has create-realm role admin/ui
  • #44860 Admin UI: slow response time listing second user page admin/ui
  • #45003 Bug in JWTClientAuthenticator and JWTClientSecretAuthenticator causes NPE authentication
  • #45093 Enable visibility of Role Mapping tab for users with view-users role admin/ui
  • #45107 Failed upgrade to 26.4.7 - sql generated for manual database upgrade contains invalid statements storage
  • #45116 Realm-level admininistrators can no longer use Admin Console since 26.3.0 (UI fails to render) admin/ui
  • #45185 ExternalLinkTest fails due to missing _adding_context_for_log_messages anchor docs
  • #45226 Failure when decrypting SAML Response since 26.5.0 saml
  • #45239 Upgrade to 26.5.0 failing due to FK_ORG_INVITATION_ORG constraint organizations
  • #45257 Creating IdentityProvider with latest java admin-client may fail against Keycloak server 26.4 or older admin/client-java
  • #45307 UI Bug: WebAuthn passkey list is broken in keycloak v2 theme login/ui