Commit Graph

Select branches

Hide Pull Requests

develop

develop-keycloak-pattern1

develop-keycloak-pattern2

develop-keycloak-pattern3

develop-keycloak-pattern4

develop-keycloak-session-store

feature/keycloak-a1-jgroups-transport-block

feature/keycloak-a2-database-loss

feature/keycloak-a3-database-crash

feature/keycloak-a4-node-loss

feature/keycloak-a5-asymmetric-partition

feature/keycloak-a6-latency-injection

feature/keycloak-a7-volatile-comparison

feature/keycloak-a8-rolling-restart

feature/keycloak-account-linking-spa-ux

feature/keycloak-account-linking-sub-vs-email

feature/keycloak-b0-bff-redis-deploy

feature/keycloak-b1-redis-session-store

feature/keycloak-b2-multi-instance-session

feature/keycloak-b3-refresh-token-contention

feature/keycloak-b4-edge-authorization-scope

feature/keycloak-b5-redis-loss-persistence

feature/keycloak-b6-key-rotation

feature/keycloak-b7-cookie-secret-rotation

feature/keycloak-bff-csrf-samesite-defense

feature/keycloak-bff-oauth2login-session

feature/keycloak-bff-vs-spa-direct

feature/keycloak-c1-multi-app-sso

feature/keycloak-c2-backchannel-logout

feature/keycloak-d1-backup-restore

feature/keycloak-d2-version-upgrade

feature/keycloak-d3-secret-management

feature/keycloak-d4-certificate-renewal

feature/keycloak-d4a-deploy-hook

feature/keycloak-docker-compose-stack

feature/keycloak-edge-forwardauth-google-federation

feature/keycloak-edge-forwardauth-no-google

feature/keycloak-federation-spa-zero-change

feature/keycloak-first-broker-login-flow

feature/keycloak-followup-untested-items

feature/keycloak-four-pattern-tradeoff-matrix

feature/keycloak-google-claim-attribute-mapping

feature/keycloak-google-redirect-uri-policy

feature/keycloak-header-spoofing-defense

feature/keycloak-https-termination-caddy-nginx

feature/keycloak-idp-brokering-google-client

feature/keycloak-idp-mappers-claim-to-role

feature/keycloak-internal-spa-direct-google-federation

feature/keycloak-internal-spa-direct-no-google

feature/keycloak-iss-claim-hostname-mismatch

feature/keycloak-multinode-cluster-jdbc-ping

feature/keycloak-nginx-auth-request-integration

feature/keycloak-oauth2-proxy-oidc-flow

feature/keycloak-patterns

feature/keycloak-pkce-flow-stages

feature/keycloak-public-domain-tunneling

feature/keycloak-realm-client-export

feature/keycloak-refresh-rotation-and-logout

feature/keycloak-refresh-token-rotation

feature/keycloak-reverse-proxy-headers

feature/keycloak-single-ec2-google-federation

feature/keycloak-single-ec2-no-google

feature/keycloak-spa-token-storage-tradeoff

feature/keycloak-spring-rs-audience-validator

feature/keycloak-spring-rs-role-mapping

feature/keycloak-three-leg-trust-chain

feature/keycloak-token-mediating-access-handoff

feature/keycloak-token-mediating-confidential-client

feature/keycloak-traefik-forwardauth-alternative

feature/keycloak-vanilla-js-spa-pkce

main

Mono Color

• 7916455ce5 merge: PKCE flow stage contract donghyeon-ka 2026-07-25 16:36:43 +09:00
• 55a99b8147 test: codify SPA PKCE flow stages feature/keycloak-pkce-flow-stages donghyeon-ka 2026-07-25 16:36:43 +09:00
• 2765f5d109 merge: Spring resource server role mapping donghyeon-ka 2026-07-25 16:35:28 +09:00
• 3e3de6c4c3 feat: map Keycloak realm roles to Spring RBAC feature/keycloak-spring-rs-role-mapping donghyeon-ka 2026-07-25 16:35:28 +09:00
• d019846f87 merge: shared broker and deployment contracts develop-keycloak-pattern2 donghyeon-ka 2026-07-25 16:31:53 +09:00
• 76c852e947 merge: shared broker and deployment contracts donghyeon-ka 2026-07-25 16:31:53 +09:00
• b103650bcb merge: shared broker and deployment contracts donghyeon-ka 2026-07-25 16:31:53 +09:00
• f566ed192c merge: shared broker and deployment contracts donghyeon-ka 2026-07-25 16:31:53 +09:00
• c07593c471 merge: four-pattern tradeoff matrix donghyeon-ka 2026-07-25 16:31:44 +09:00
• d01a60964a docs: compare four authentication patterns feature/keycloak-four-pattern-tradeoff-matrix donghyeon-ka 2026-07-25 16:31:44 +09:00
• 5d7544256a merge: public domain tunnel profile donghyeon-ka 2026-07-25 16:31:13 +09:00
• eacc0e86c9 feat: add validated named tunnel profile feature/keycloak-public-domain-tunneling donghyeon-ka 2026-07-25 16:31:13 +09:00
• ac912cb354 merge: HTTPS termination profiles donghyeon-ka 2026-07-25 16:30:25 +09:00
• e4cee2a06d feat: add validated HTTPS termination profiles feature/keycloak-https-termination-caddy-nginx donghyeon-ka 2026-07-25 16:30:25 +09:00
• 006b405ad5 merge: reverse proxy header contract donghyeon-ka 2026-07-25 16:29:32 +09:00
• 8539d1bf5b feat: define trusted reverse proxy header contract feature/keycloak-reverse-proxy-headers donghyeon-ka 2026-07-25 16:29:32 +09:00
• 3473875d9a merge: Google redirect URI policy donghyeon-ka 2026-07-25 16:28:53 +09:00
• f077e5038e docs: define exact Google redirect URI policy feature/keycloak-google-redirect-uri-policy donghyeon-ka 2026-07-25 16:28:53 +09:00
• e4eb7e54f7 merge: federated subject identity contract donghyeon-ka 2026-07-25 16:28:00 +09:00
• bdde0feb86 test: verify broker identity uses subject not email feature/keycloak-account-linking-sub-vs-email donghyeon-ka 2026-07-25 16:28:00 +09:00
• 3da8e609ae merge: broker claim-to-role mapping donghyeon-ka 2026-07-25 16:26:59 +09:00
• ed064473dc feat: map broker claims to realm roles feature/keycloak-idp-mappers-claim-to-role donghyeon-ka 2026-07-25 16:26:59 +09:00
• 09562175a8 merge: shared Google claim mapping donghyeon-ka 2026-07-25 16:24:30 +09:00
• 84966750f6 merge: shared Google claim mapping donghyeon-ka 2026-07-25 16:24:30 +09:00
• 95ddaa6bc8 merge: shared Google claim mapping donghyeon-ka 2026-07-25 16:24:30 +09:00
• 549f5dcf3e merge: shared Google claim mapping donghyeon-ka 2026-07-25 16:24:30 +09:00
• a84f7d50a1 merge: Google claim attribute mapping donghyeon-ka 2026-07-25 16:24:24 +09:00
• 98b07b4fdf feat: map upstream Google identity claims feature/keycloak-google-claim-attribute-mapping donghyeon-ka 2026-07-25 16:24:24 +09:00
• e682777fc5 merge: shared Google brokering baseline donghyeon-ka 2026-07-25 16:18:16 +09:00
• 7bcf8da915 merge: shared Google brokering baseline donghyeon-ka 2026-07-25 16:18:00 +09:00
• cd8a046ca9 merge: shared Google brokering baseline donghyeon-ka 2026-07-25 16:18:00 +09:00
• 6fc2e77b7d merge: shared Google brokering baseline donghyeon-ka 2026-07-25 16:18:00 +09:00
• 98566a713d merge: hardened First Broker Login flow donghyeon-ka 2026-07-25 16:17:54 +09:00
• aeb783e592 test: reproduce and block unsafe broker auto-link feature/keycloak-first-broker-login-flow donghyeon-ka 2026-07-25 16:17:54 +09:00
• 3bbbaf5230 merge: Google broker configuration profiles donghyeon-ka 2026-07-25 15:30:47 +09:00
• 2ee4b2af1c feat: add Google broker configuration profiles feature/keycloak-idp-brokering-google-client donghyeon-ka 2026-07-25 15:30:47 +09:00
• 030ae94be3 merge: Keycloak branch governance index donghyeon-ka 2026-07-25 15:26:26 +09:00
• 728e737dc8 docs: add 39-branch Keycloak governance index feature/keycloak-patterns donghyeon-ka 2026-07-25 15:26:26 +09:00
• f8544d5bec merge: forwarded identity spoofing defense donghyeon-ka 2026-07-25 14:59:47 +09:00
• 2d58dea5e1 feat(ap4): defend forwarded identity headers feature/keycloak-header-spoofing-defense donghyeon-ka 2026-07-25 14:59:47 +09:00
• 452aa4808a merge: nginx auth_request integration donghyeon-ka 2026-07-25 14:55:04 +09:00
• 357b7f927b feat(ap4): integrate nginx auth_request feature/keycloak-nginx-auth-request-integration donghyeon-ka 2026-07-25 14:55:04 +09:00
• 5ce47689a9 merge: oauth2-proxy OIDC flow donghyeon-ka 2026-07-25 14:50:00 +09:00
• 4ac0133586 feat(ap4): add oauth2-proxy OIDC flow feature/keycloak-oauth2-proxy-oidc-flow donghyeon-ka 2026-07-25 14:50:00 +09:00
• 82a054c5c8 merge: AP3 CSRF and SameSite defenses donghyeon-ka 2026-07-25 14:42:33 +09:00
• 4495eb63a0 feat(ap3): add CSRF and SameSite defenses feature/keycloak-bff-csrf-samesite-defense donghyeon-ka 2026-07-25 14:42:33 +09:00
• b48a12f101 merge: AP3 oauth2Login session BFF donghyeon-ka 2026-07-25 14:38:02 +09:00
• c611acf662 feat(ap3): add oauth2Login session BFF feature/keycloak-bff-oauth2login-session donghyeon-ka 2026-07-25 14:38:02 +09:00
• 4440c0e2b7 merge: AP2 access-only token handoff donghyeon-ka 2026-07-25 14:28:56 +09:00
• bd48516e0f feat(ap2): hand off access token only feature/keycloak-token-mediating-access-handoff donghyeon-ka 2026-07-25 14:28:56 +09:00
• 774f492750 merge: AP2 confidential token mediator donghyeon-ka 2026-07-25 14:23:27 +09:00
• 5e5badbffb feat(ap2): add confidential token mediator feature/keycloak-token-mediating-confidential-client donghyeon-ka 2026-07-25 14:23:27 +09:00
• b601908ab9 merge(ap1): refresh rotation and logout donghyeon-ka 2026-07-25 14:16:17 +09:00
• 2ff6d2bfda test(ap1): verify refresh rotation and logout feature/keycloak-refresh-rotation-and-logout donghyeon-ka 2026-07-25 14:16:17 +09:00
• 7f47478fb8 merge(ap1): token storage tradeoff donghyeon-ka 2026-07-25 14:14:02 +09:00
• 6f1ccdd978 test(ap1): demonstrate token storage tradeoff feature/keycloak-spa-token-storage-tradeoff donghyeon-ka 2026-07-25 14:14:02 +09:00
• 8961671a1c merge(ap1): issuer mismatch diagnostic donghyeon-ka 2026-07-25 14:12:23 +09:00
• 5a8bc9b145 test(ap1): reproduce issuer mismatch feature/keycloak-iss-claim-hostname-mismatch donghyeon-ka 2026-07-25 14:12:23 +09:00
• 994bef0edd merge(ap1): resource audience validation donghyeon-ka 2026-07-25 14:11:31 +09:00
• 84a9ca3e8f feat(ap1): enforce resource audience feature/keycloak-spring-rs-audience-validator donghyeon-ka 2026-07-25 14:11:28 +09:00
• c048d00994 merge(ap1): vanilla SPA PKCE login donghyeon-ka 2026-07-25 14:09:09 +09:00
• c1fae6137c feat(ap1): add vanilla SPA PKCE login feature/keycloak-vanilla-js-spa-pkce donghyeon-ka 2026-07-25 14:09:03 +09:00
• e2fba41f56 merge: shared Keycloak realm baseline donghyeon-ka 2026-07-25 13:21:42 +09:00
• 998eada6f5 feat: add shared realm and pattern clients feature/keycloak-realm-client-export donghyeon-ka 2026-07-25 13:21:36 +09:00
• 5ddb97d3a1 merge: shared Keycloak compose baseline donghyeon-ka 2026-07-25 13:14:58 +09:00
• f47dea3e24 feat: add shared Keycloak compose baseline feature/keycloak-docker-compose-stack donghyeon-ka 2026-07-25 13:14:58 +09:00
• 1eeff83d0b Initial commit main donghyeon.kang 2026-07-23 04:24:38 +00:00