GitLab

Nameless certificates are now included for signature validation
in the SAML adapter when the certificate is downloaded from
metadataUrl.

[KEYCLOAK-14653] Changed operation type to UPDATE when updating client scopes in a client and added representation.

KEYCLOAK-16428 Move certificate timestamp validation configuration to CertificateValidatorBuilder (#7634)

Signed-off-by: Jan Lieskovsky <[email protected]>

Co-authored-by: Hryhorii Hevorkian <[email protected]>

of records

KEYCLOAK-14202 Client Policy - Executor : Enforce secure signature algorithm for Signed JWT client authentication
Co-authored-by: Andrii Murashkin <[email protected]>

* KEYCLOAK-13923 - Support PKCE for Identity Provider

We now support usage of PKCE for OIDC based Identity Providers.

* KEYCLOAK-13923 Warn if PKCE information cannot be found code-to-token request in OIDCIdentityProvider

* KEYCLOAK-13923 Pull up PKCE handling from OIDC to OAuth IdentityProvider infrastructure

* KEYCLOAK-13923 Adding test for PKCE support for OAuth Identity providers

* KEYCLOAK-13923 Use URI from KeycloakContext instead of HttpRequest
Co-authored-by: Pedro Igor <[email protected]>
Co-authored-by: Pedro Igor <[email protected]>

KEYCLOAK-16652 New Account Console: When langage is not english, no user name displayed at the upper right

When no client cert is present the variable clientCert is null. In this
case the log statement leads to a NPE which then gets logged as an
error.

The label refers to the list 'permissions' dependent on the 'policy'.

The regex has a typo that prevents correct splitting of parameter values containing multiple OIDs.