Keycloak

1
= Highlights
2

3
== WildFly 17 Upgrade
4

5
Keycloak server was upgraded to use WildFly 17 under the covers.
6

7
== Tomcat 9 adapter support
8

9
Java adapter for Apache Tomcat 8 and Apache Tomcat 9 was unified and now it serves for both of them.
10

11
== New Account Console
12

13
A lot of work has been done on the new Account Console and Account REST API. It's not quite ready yet, but it's getting
14
there and hopefully will be fully done for Keycloak 8.
15

16
== Signed and Encrypted ID Token Support
17

18
{project_name} can support the signed and encrypted ID token according to the Json Web Encryption (JWE) specification. Thanks to https://github.com/tnorimat[tnorimat].
19

20
== Testing and release automation
21

22
The Keycloak team has spent a significant amount of time on automation around testing and releases both for Keycloak and
23
Red Hat Single Sign-On.
24

25
= Other improvements
26

27
* PKCE support added to JavaScript adapter. Thanks to https://github.com/thomasdarimont[thomasdarimont]
28
* Oracle database support added to Keycloak container image. Thanks to https://github.com/nerdstep[nerdstep]
29
* Clock Skew support added to SAML adapter. Thanks to https://github.com/steevebtib[steevebtib]
30
* TypeScript support for Node.js adapter. Thanks to https://github.com/evanshortiss[evanshortiss]
31
* Gatekeeper now allows to provide unencrypted token in header, while encrypting in cookie. There was also a bug on Gatekeeper when `Revoke Refresh Token` is enabled on the Keycloak server. The issue was fixed. Thanks to https://github.com/fredbi[fredbi]
32
* New tab in the Admin console to display the list of users for client roles. Thanks to https://github.com/unly[unly]
33