Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| Remove clearing of JGroups table | ahus1 | S | No | 66.5h | 51.3h | Oct 06, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fixing docs CI and links | ahus1 | XS | No | 111.3h | 1.7h | Oct 06, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| use the user realm to query | edewit | XS | No | 356.9h | 0.3h | Oct 06, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Admin credential DELETE bypasses denied reset-password permission | vramik | L | No | 12.1h | 11.2h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Document admin client organizations.findOne breaking change for 27.0 | ssilvert | S | AI | 118.8h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Bind first broker login verification proof to the brokered identity id | michalvavrik | S | No | 77.7h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Prevent privilege escalation via group membership to admin-role groups | vramik | L | No | 103.3h | 103.3h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Admin credential DELETE bypasses denied reset-password permission | vramik | L | No | 10.9h | 10.9h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] FGAP v2 custom role injection via oidc-hardcoded-role-mapper bypasses… | vramik | M | No | 10.5h | 10.5h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] FGAP v2 custom role injection via oidc-hardcoded-role-mapper bypasses… | vramik | M | No | 10.7h | 10.7h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Backport-Fix-26.8 Reject malformed requests in the docker auth endpoint (#53042) | jimmychakkalakal | L | No | 9.0h | 9.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| keep the enforced authentication flow after a login restart | gaoyikeshuer | M | No | 142.8h | 22.8h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Lock SMTP OAuth token refresh per realm | prasanna164-code | L | No | 279.6h | 0.1h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Send the response headers HttpServerUtil is given | ahus1 | M | No | 46.7h | 19.6h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Migrate ConditionalSubFlowExecutedAuthenticatorTest | vaceksimon | L | No | 3.1h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix FIPS link | andymunro | XS | No | 19.1h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Verify realm/resource-server ownership before returning per-request c… | sguilhen | M | No | 93.0h | 0.1h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Upgrade webauthn4j to 0.30.3 | mabartos | S | No | 1.5h | 0.6h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Update Registry to use FatalTestClassException | vaceksimon | XS | No | 123.2h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Add explicit EC point-on-curve validation in ECDH-ES providers | abstractj | M | No | 157.1h | 0.0h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| When selecting an option in the UI, wait for the UI to settle | ahus1 | M | No | 65.9h | 0.1h | Oct 05, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| FGAP v2 custom role injection via oidc-hardcoded-role-mapper bypasses… | vramik | M | No | 22.2h | 0.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not merge granted scopes across resources sharing the same name | sguilhen | M | No | 3.7h | 0.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Serialize token revocation against concurrent refreshes | jimmychakkalakal | M | No | 25.5h | 0.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Cache the maven wrapper when building on GHI | ahus1 | S | No | 170.1h | 1.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Reject malformed requests in the docker auth endpoint | jimmychakkalakal | L | No | 244.0h | 214.8h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [OID4VCI] Add UI tests for verifiable credentials | forkimenjeckayang | L | No | 2.1h | 0.0h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Migrate AbstractOIDCScopeTest + Fix LoginTotp pages in the new test-f… | lhanusov | XL | No | 46.0h | 5.9h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.4] Fix certificate generation for long and special-character client IDs | Pepo48 | L | No | 19.5h | 0.5h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not sanitize the plain-text organization invitation email | martin-kanis | XS | No | 3.2h | 1.6h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Clear CRL and public key storage within the cluster | ahus1 | S | No | 1.3h | 1.0h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Clear CRL and public key storage within the cluster | ahus1 | S | No | 1.4h | 1.3h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Clear CRL and public key storage within the cluster | ahus1 | S | No | 1.4h | 1.3h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit metric series creation via idp tag on broker login endpoint | ahus1 | M | No | 4.9h | 4.9h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Avoid orphaned offline client sessions for V1 token exchange | ahus1 | L | No | 3.9h | 3.9h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit metric series creation via idp tag on broker login endpoint | ahus1 | M | No | 4.9h | 4.9h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Bound LDAP StartTLS shutdown with read timeout | atiqur-rahman-pro | XL | No | 77.2h | 0.0h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Avoid substitution in the 25.0.0 upgrading changes | rmartinc | XS | No | 0.8h | 0.0h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Clear CRL and public key storage within the cluster | ahus1 | S | No | 16.9h | 0.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Perform local service-ticket round trip after kerberos authentication (26.6) | rmartinc | L | No | 15.9h | 15.8h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit metric series creation via idp tag on broker login endpoint | ahus1 | M | No | 42.5h | 0.1h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Avoid logging SPNEGO credentials in log | ahus1 | XS | No | 15.5h | 15.5h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Updating the list of protostream lock | ahus1 | XS | No | 15.4h | 0.8h | Oct 02, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Allow OAuth scope characters in organization alias | martin-kanis | L | No | 204.2h | 0.1h | Oct 01, 2026 |
SummaryFeatureAllow OAuth scope characters in organization alias Expands allowed characters for organization aliases to match OAuth 2.0 scope syntax, improving compatibility with external clients and simplifying integration. Health Assessment
Large
Medium
Medium
AI Details
Usage:
AI Reviewed
Category:
Code AI
Tools:
Copilot
Confidence:
0.95
Tech Stack
Languages:
Java
|
||||||
| Perform local service-ticket round trip after kerberos authentication (26.8) | rmartinc | L | No | 5.5h | 5.5h | Oct 01, 2026 |
SummaryBug FixPerform local service-ticket round trip after kerberos authentication Ensures a local service-ticket round trip after Kerberos authentication, improving authentication reliability and security for users. Health Assessment
Large
Low
Low
AI DetailsTech Stack
Languages:
Java
|
||||||
| [BACKPORT] Restore undefined guard on RoleSelect form values | ssilvert | XS | AI | 5.0h | 1.5h | Oct 01, 2026 |
SummaryBug FixRestore undefined guard on RoleSelect form values Prevents admin UI crashes when mounting Permissions Evaluation tab. Ensures reliable permissions configuration for administrators. Health Assessment
Small
Low
Low
AI Details
Usage:
AI Assisted
Category:
Code AI
Tools:
Claude
Confidence:
0.95
Tech Stack
Languages:
Typescript
Frameworks:
React
|
||||||
| Admin credential DELETE bypasses denied reset-password permission | vramik | L | No | 31.2h | 0.6h | Oct 01, 2026 |
SummaryBug FixFix admin credential delete permission bypass Resolves a security flaw where deleting admin credentials bypassed reset-password permission checks, preventing unauthorized credential removal. Health Assessment
Large
High
Low
AI Details
Usage:
AI Reviewed
Category:
Code AI
Tools:
Copilot
Confidence:
0.95
Tech Stack
Languages:
Java
|
||||||
| Refresh SMTP OAuth tokens before they expire | prasanna164-code | M | No | 171.0h | 0.0h | Oct 01, 2026 |
SummaryBug FixRefresh SMTP OAuth tokens before they expire This PR updates the SMTP OAuth token cache to refresh tokens 30 seconds before expiration, preventing authentication failures and improving email delivery reliability for users. Health Assessment
Medium
Low
Low
AI Details
Usage:
AI Reviewed
Category:
Code AI
Tools:
Copilot
Confidence:
0.95
Tech Stack
Languages:
Java
|
||||||
| Enforce view-users permission when resolving users during policy eval… | sguilhen | M | No | 5.0h | 0.1h | Oct 01, 2026 |
SummaryBug FixEnforce view permission on users during policy evaluation Fixes a critical authorization flaw by ensuring view permissions are checked when resolving users and clients during policy evaluation, preventing unauthorized access. Health Assessment
Small
Low
Low
AI Details
Usage:
AI Reviewed
Category:
Code AI
Tools:
Copilot
Confidence:
0.95
Tech Stack
Languages:
Java
|
||||||
| [26.6] Truncate certificate CN to 64 characters per RFC 5280 (#51779) | Pepo48 | M | No | 0.8h | 0.5h | Oct 01, 2026 |
SummaryBug FixTruncate certificate CN to 64 characters per RFC 5280 Ensures certificate common names are truncated to 64 characters to comply with RFC 5280, preventing potential errors in certificate handling. Health Assessment
Medium
Low
Low
AI Details
Confidence:
0.20
Tech Stack
Languages:
Java
|
||||||