Keycloak 26.0.1 released

October 17 2024

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

• #32152 Clarify the behaviour of multiple Operator versions installed in the same cluster operator
• #33275 Better logging when error happens during transaction commit storage

Bugs

• #8935 keycloak.js example from the documentation leads to error path adapter/javascript
• #19358 Issue with concurrent user & group delete, unable to cleanup resource server user-policy & group-policy authorization-services
• #31848 Repeated email verifications while logging in through IDP caused by email case sensitivity authentication
• #32266 LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and user already exists ldap
• #32617 Nightly Cypress tests for the Admin Console are failing on Firefox admin/ui
• #32844 Login V2: Missing "dir" attributes login/ui
• #32847 Admin UI defaults to master realm even without permissions to it admin/ui
• #32962 Possible issue with unavailable CryptoIntegration when using keycloak-authz-client with private_key_jwt and ECDSA algorithm oidc
• #33513 Can get authorization code on a non verified user with some specific kc_action (AIA) oidc
• #33539 Keycloak In Docker: ERROR: Strict hostname resolution configured but no hostname setting provided docs
• #33549 Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP_bruteForceEnabled ci
• #33557 Unable to submit forms in Safari account/ui
• #33576 Broken links / anchors after KC26 release docs
• #33578 In imported realms, the ability to use environment variables has disappeared import-export
• #33585 Fix runaway asterisk formatting in TLS documentation docs
• #33638 Non-optimized start command gives erroneous warnings for runtime spi options dist/quarkus
• #33642 RTL not working on keycloak.v2 login template login/ui
• #33645 keycloak-js register broken: createRegisterUrl not awaited adapter/javascript
• #33699 Failure to redirect to organization IdP when the organization scope is included organizations
• #33735 Organizations section is shown in account console if organizations is not enabled for a realm. account/ui
• #33776 [Regression] 26.0.0 return empty "access: []" JWT for Docker-v2 Auth provider, resulting in "access denied" authentication
• #33777 Error when adding or removing a user from an organisation when there are 2 or more Keycloak servers in a cluster organizations
• #33780 Upgrade to 26 fails with 'ERROR: index "idx_us_sess_id_on_cl_sess" does not exist' core
• #33814 NPE when device representation cannot be parsed authentication
• #33817 NEP when Default Role is not present on CachedRealm infinispan
• #33874 [Keycloak CI] - AuroraDB IT - Error creating EC2 runner instance
• #33875 [Keycloak CI] - FIPS IT - Failed to fetch maven
• #33883 Auth not possible for auth session where user was enabled in the meantime authentication
• #33907 NPE thrown in whoami endpoint admin/ui
• #33967 password is a required field admin/ui