All pull requests

Pull requests

• Add an option to expand composite roles to the Hardcoded Role protocol mapper

  team/core-clients
  #53821·ybai08 opened Oct 10, 2026Contributor·

  ·
  1

  2

• Create attributes to allow downstream support

  #53820·andymunro opened Oct 9, 2026Contributor·

  ·
  1

  9

  

• Adjust the timeouts to allow for a retry after a ISPN000427

  #53811·ahus1 opened Oct 9, 2026Member·

  ·
  1

  3

  

• is-53807 add german translations for admin ui via AI

  #53808·robson90 opened Oct 9, 2026Contributor·

  ·
  1

  1

• Expose redirect URI to OAuth consent themes

  #53798·lilianmisser-dg opened Oct 9, 2026·

  ·
  1

  1

• Fix session-limit denial wrongly triggering brute force

  team/core-authn
  #53795·rmartinc opened Oct 9, 2026Contributor·

  ·
  1

  4

• weekness fix

  team/core-iam
  #53791·ruchikajha95 opened Oct 9, 2026Contributor·

  ·
  1

  

• Fix group membership modification for invalid federated LDAP users

  team/core-iam
  #53785·abhiyadav79 opened Oct 9, 2026·

  ·
  1

  10

• [CVE-2026-105305] Enforce client minimum ACR in Device Authorization Grant

  team/core-authnteam/core-protocols
  #53779·edewit opened Oct 9, 2026Contributor·

  ·
  1

  6

• Clarify token exchange after revoking an ancestor access token

  team/core-protocols
  #53770·Oluwatobi-Mustapha opened Oct 9, 2026Contributor·

  ·
  1

  1

• Map LDAP first name to givenName by default

  flaky-testteam/core-shared
  #53767·dasniko opened Oct 8, 2026Contributor·

  ·
  1

  4

• Authorize receiver-driven SSF subject adds per subject

  team/core-iam
  #53765·ssilvert opened Oct 8, 2026Contributor·

  ·
  1

  6

• Removing ui-ext and start unifying role mapping endpoints

  #53764·pedroigor opened Oct 8, 2026Contributor·

  ·
  4

• require https when dereferencing jwt vc issuer jwks_uri

  #53763·naruto-lgtm opened Oct 8, 2026Contributor·

  ·
  1

  2

• Filter user session and consent client data by client view permission

  flaky-testteam/core-iam
  #53761·ssilvert opened Oct 8, 2026Contributor·

  ·
  1

  9

• Mask secrets in client installations when view-only permissions are used

  team/core-protocols
  #53758·vmuzikar opened Oct 8, 2026Contributor·

  ·
  1

  4

• Skip disabled identity providers when looking up a token exchange subject issuer

  team/core-protocols
  #53756·ybai08 opened Oct 8, 2026Contributor·

  ·
  1

  2

• fix: addressing the copy paste error in DescriptionConverter

  #53754·shawkins opened Oct 8, 2026Contributor·

  ·
  1

• Require specifying IdPs when requesting external tokens in V1 Brokering

  team/core-iam
  #53752·vmuzikar opened Oct 8, 2026Contributor·

  ·
  1

  3

• Strip allow.token.introspection.without.audience.check from DCR requests

  team/core-protocols
  #53748·Pepo48 opened Oct 8, 2026Contributor·

  ·
  1

  2

• Use stable collection order in recorded bytecode

  team/cloud-native
  #53745·martinohansen opened Oct 8, 2026·

  ·
  1

  14

• Stop the deferred password re-hash from overwriting a password changed after validation

  #53742·d53dave opened Oct 8, 2026·

  ·
  1

  6

• [OID4VCI]: Add admin UI action to revoke issued credentials

  #53737·Awambeng opened Oct 8, 2026Contributor·

  ·
  1

• Fully escape JSON string values in SCIM resource filters

  team/core-iam
  #53731·atiqur-rahman-pro opened Oct 8, 2026Contributor·

  ·
  1

  1

• Remove credentials_offer_id from OID4VC authorization details

  flaky-test
  #53730·Ogenbertrand opened Oct 8, 2026Contributor·

  ·
  1

  17