Keycloak 26.0.2 released

October 24 2024

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

• #32110 [Documentation] - Configuring trusted certificates - Fully specify truststore path dist/quarkus

Bugs

• #15635 oidc - JavaScript-Adapter LocalStorage#clearExpired does not clear all possible items adapter/javascript
• #19101 Uncaught (in promise): QuotaExceededError adapter/javascript
• #20287 When using `oidcProvider` config url (.well-known) it's not possible to use `silentCheckSsoRedirectUri` adapter/javascript
• #28978 some GUI validation check missing admin/ui
• #30832 Organization API not available from OpenAPI documentation admin/api
• #31724 Logout not working after removing Identity Provider of user identity-brokering
• #33072 Passkeys: Infinite (re-)loading loop on browsers with WebAuthn Conditional UI disabled authentication/webauthn
• #33844 Wrong documentation link in keycloak-js readme docs
• #33902 Not persisted config settings prevent server start dist/quarkus
• #33948 [PERF] OpenTelemetry is initialized even when disabled
• #33968 Not possible to close dialog boxes when clicking buttons or the close icon admin/ui
• #33991 Doc CI - broken links error docs
• #34009 grammatical error in "Managing Organizations" documentation docs
• #34015 Home URL for security-admin-console is broken admin/ui
• #34028 Custom keycloak login theme styles.css return error 404 login/ui
• #34049 Org Invite: `linkExpiration` template variable represents 54 years in minutes organizations
• #34063 Respect the locale set to a user when redering verify email pages user-profile
• #34069 Do not show domain match message in the identity-first login when no login hint is provided organizations
• #34075 Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP_bruteForceEnabled ci
• #34095 Keycloak 26.0.0/26.0.1 Import Issue: Multiple Realms Not Imported, Duplicated Realm Imported Instead import-export
• #34151 JS password validation doesn't work as intended with uppercase and lowercase minimum requirements login/ui
• #34155 cli options starting or ending with ; or containing ;; mangle the cli handling dist/quarkus
• #34224 Deleting a user leads to ISPN marshalling exception