mirror of https://github.com/jacekkow/keycloak-protocol-cas
first | « prev | next »
Jacek Kowalski
6 hours ago 7c8f7992f07a99aebfdef12455c4526763b32a84
6 hours ago Jacek Kowalski
Merge RedirectUtils.java from Keycloak repo
tree@ 7c8f79 commitdiff
2026-07-09 github-actions
Update to Keycloak 26.7.0
tree@ a78160 commitdiff
2026-06-18 jimmychakkalakal
Reject redirect URIs containing pre-loaded OIDC response parameters (#49959)
tree@ e44df4 commitdiff
2026-05-21 Kosiorkosa47
Tighten UNSAFE_PATH_PATTERN against encoded path-traversal terminators (#49...
tree@ 6f46fb commitdiff
2026-05-20 Ricardo Martin
Wildcards should not be allowed if authority cannot be parsed (#607) (#49130)
tree@ 368d47 commitdiff
2026-05-12 Ricardo Martin
Do not allow wildcards in the hostname for Valid Redirect Address (#48793)
tree@ 5e0093 commitdiff
2026-04-07 Ricardo Martin
Consider path params in the unsafe path for RedirectUtils (#436) (#47788)
tree@ 9b78be commitdiff
2026-02-10 Marie Daly
Redirect Wildcard changes and more https checks to secure-client-executor (...
tree@ 7bc9d9 commitdiff
2025-11-14 Stian Thorgersen
Proposed import order (#43432)
tree@ 1a850e commitdiff
2024-09-23 Stian Thorgersen
Improve handling for loopback redirect-uri validation (#195) (#33189)
tree@ 512bcc commitdiff
2024-08-30 Jon Koops
Remove `redirect_uri` support from OIDC logout endpoint
tree@ 91f764 commitdiff
2024-04-18 Ricardo Martin
Perform exact string match if redirect URI contains userinfo, encoded slash...
tree@ 9aa92e commitdiff
2024-02-16 Marek Posolda
Remove random redirect after password reset (#27076)
tree@ 758ec0 commitdiff
2024-01-09 Ricardo Martin
Escape action in the form_post.jwt and only decode path in RedirectUtils (#...
tree@ 760bd7 commitdiff
2023-12-06 Ricardo Martin
Strip off user-info from redirect URI when validating using wildcard (#61) ...
tree@ 994c30 commitdiff
2023-11-29 rmartinc
Remove lowercase for the hostname as recommended/advised by OAuth spec Clos...
tree@ 660195 commitdiff
2023-11-29 rmartinc
Revert "Fix lowerCaseHostname to lower-case scheme and host properly"
tree@ 20ca96 commitdiff
2023-11-17 rmartinc
Fix lowerCaseHostname to lower-case scheme and host properly Closes https:/...
tree@ 065acd commitdiff
2023-09-19 rmartinc
verifyRedirectUri should return null when the passed redirectUri is invalid...
tree@ d5bdcb commitdiff
2023-08-16 rmartinc
RedirectUtils needs to use KeycloakUriBuilder with no parameter parsing Clo...
tree@ 7b53ca commitdiff
2023-06-01 Ricardo Martin
Check the redirect URI is http(s) when used for a form Post (#22)
tree@ b3661a commitdiff
2023-03-29 mposolda
Regressions in redirect URL verification when redirect_uri has encoded path...
tree@ 0eef2d commitdiff
2022-12-14 Stian Thorgersen
fixes from release/20 (#15982)
tree@ 226dd1 commitdiff
2022-02-18 Hynek Mlnarik
Move realms, clients, groups, roles, clientscopes into legacy module
tree@ d99b4e commitdiff
2022-03-30 Marek Posolda
OIDC RP-Initiated logout endpoint (#10887)
tree@ 8f62c5 commitdiff
2021-04-13 Hynek Mlnarik
KEYCLOAK-17748 Optimize validation of redirect URIs in logout endpoint
tree@ f3adcc commitdiff
2021-02-10 mposolda
KEYCLOAK-16517 Make sure that just real clients with standardFlow or implic...
tree@ 2532c4 commitdiff
2021-01-07 mposolda
KEYCLOAK-14019 Improvements for request_uri parameter
tree@ 8fbf16 commitdiff
2020-11-20 st
KEYCLOAK-11699 add support for 127.0.0.1 for native app
tree@ bb79a3 commitdiff
2020-07-29 Martin Kanis
KEYCLOAK-14901 Replace deprecated ClientProvider related methods across Key...
tree@ b290c2 commitdiff
2020-06-08 Martin Bartos
[KEYCLOAK-13202] Reset password redirects to account client
tree@ c85cab commitdiff
2020-02-20 Pedro Igor
[KEYCLOAK-11576] - Properly handling redirect_uri parser errors
tree@ edac0c commitdiff
2019-10-16 stianst
KEYCLOAK-11728 New default hostname provider
tree@ 10c4c9 commitdiff
2018-09-17 vramik
KEYCLOAK-7707
tree@ 02417b commitdiff
2018-09-13 Bruno Oliveira da Silva
Redirect URLs are not normalized
tree@ d0daeb commitdiff
2017-06-20 mposolda
KEYCLOAK-3316 Fixes for OAuth2 requests without 'scope=openid'
tree@ 4535e9 commitdiff
2016-09-19 Bruno Oliveira
[KEYCLOAK-3086] - NPE when accessing Account with invalid clientId set as ...
tree@ b81acf commitdiff
2016-10-19 Stian Thorgersen
KEYCLOAK-3364 Fix for dns that ends with digit
tree@ 737535 commitdiff
2016-10-17 Stian Thorgersen
KEYCLOAK-3635 Not possible to filter debug/trace logging
tree@ 9d783e commitdiff
2016-09-28 Bill Burke
refactor mongo entities, optimize imports
tree@ 117c91 commitdiff
2016-08-12 Vaclav Muzikar
KEYCLOAK-3429 Fix behaviour of redirect_uri parameter with query components
tree@ bf2a84 commitdiff
2016-07-07 mposolda
KEYCLOAK-3147 Don't allow authRequest without redirect_uri parameter
tree@ fd2f33 commitdiff
2016-02-03 Stian Thorgersen
KEYCLOAK-1524 Source code headers
tree@ 939ce1 commitdiff
2016-01-26 Stian Thorgersen
KEYCLOAK-2390 Relative redirect uri is broken
tree@ c74f79 commitdiff
2016-01-19 Stan Silvert
KEYCLOAK-1280: i18n logging for org.keycloak.protocol.oidc.utils
tree@ 6e9b1a commitdiff
2016-01-08 Stian Thorgersen
KEYCLOAK-2259 Redirect URIs and token domains are matched case-sensitively
tree@ 925a19 commitdiff
2015-09-22 Stian Thorgersen
KEYCLOAK-1868 Import clients through admin console KEYCLOAK-1869 Add root u...
tree@ 7c5f9e commitdiff
2015-04-15 Stian Thorgersen
KEYCLOAK-1109 Added KeycloakContext KEYCLOAK-1042 Access to Cookies within ...
tree@ e294a7 commitdiff
2015-04-09 Stian Thorgersen
KEYCLOAK-1187 First round: Combined ApplicationModel and OAuthClientModel i...
tree@ bfc819 commitdiff
2015-03-09 Stian Thorgersen
KEYCLOAK-571 OpenID Connect Discovery KEYCLOAK-1091 JSON Web Key Set endpoi...
tree@ cf555c commitdiff
first | « prev | next »