Open Source Identity and Access Management For Modern Applications and Services https://www.keycloak.org
  • Java 92.5%
  • TypeScript 6.8%
  • FreeMarker 0.4%
  • JavaScript 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Maximilian Brodda a29205c778
Generate the admin API v2 OpenAPI validation hints in English regardless of the build locale (#54853)
Closes #54852

Signed-off-by: Maximilian Brodda <QuellcodeWanderer@users.noreply.github.com>
Co-authored-by: Maximilian Brodda <QuellcodeWanderer@users.noreply.github.com>
2026-11-13 19:13:05 +01:00
.claude Adding a skill for reviewing community translations with Claude or Copilot 2026-09-18 09:00:10 +02:00
.github Clean up Azure CI resources after workflow completion (#54835) 2026-11-13 18:41:09 +01:00
.idea
.mvn Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
.trivy Scan dependencies with Snyk as well as Trivy (#53185) 2026-11-09 06:54:11 +01:00
adapters Propagate SAML session ID change setting in DeploymentBuilder 2026-11-13 11:52:59 +01:00
authz Cache getGroupByName and group paths per request 2026-11-04 18:55:43 +01:00
authzen Prevent AuthZEN requests with user tokens 2026-07-13 16:19:14 +00:00
boms Add Spotless plugin with removeUnusedImports check enabled 2025-10-13 13:32:01 +02:00
common Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
core Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
crypto Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
dependencies
distribution Remove no longer used license processor (#52737) 2026-11-13 08:24:02 +01:00
docs Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
federation Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
integration Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
js Translations update from Hosted Weblate (#54500) 2026-11-12 18:55:37 +01:00
misc Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
model Support KEYCLOAK_JDBC_PING2 in custom JGroups stacks by injecting the connection factory 2026-11-13 15:45:55 +01:00
operator Removal of of cli options for the cache stacks 2026-11-12 10:19:25 +01:00
quarkus Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
rest Generate the admin API v2 OpenAPI validation hints in English regardless of the build locale (#54853) 2026-11-13 19:13:05 +01:00
saml-core Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
saml-core-api Fix SAML artifact binding failing to validate signed nested samlp:Response (#50862) 2026-07-17 13:51:40 +02:00
scim SCIM: PATCH on a group does not update meta.lastModified 2026-11-12 08:35:36 -03:00
server-spi Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
server-spi-private Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
services Close limited SOAP request streams in SAML endpoints 2026-11-13 17:40:50 +00:00
skills Upgrade login UI to PatternFly 6 (#52371) 2026-11-12 14:20:02 +01:00
ssf Enforce scope and audience check in the Admin API 2026-11-09 11:31:48 -03:00
test-framework Upgrade login UI to PatternFly 6 (#52371) 2026-11-12 14:20:02 +01:00
tests fix: ensuring that an invalid theme name does not consume resources (#54944) 2026-11-13 09:48:41 +01:00
testsuite Upgrade login UI to PatternFly 6 (#52371) 2026-11-12 14:20:02 +01:00
themes Translations update from Hosted Weblate (#54500) 2026-11-12 18:55:37 +01:00
util Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
.cveignore.yaml Add .cveignore.yaml to ignore specific CVEs 2026-10-06 20:30:18 +02:00
.editorconfig Proposed import order (#43432) 2025-11-14 09:34:49 +01:00
.gitattributes enforce LF line endings on *.tsx files (#45997) 2026-02-18 10:28:55 +00:00
.gitignore [OID4VCI] Credential Offer must be created by Issuer not Holder (#44255) 2025-11-27 16:07:10 +01:00
.gitleaks.toml
ADOPTERS.md
AGENTS.md task: add a spotless profile (#54723) 2026-11-11 07:31:09 -05:00
CONTRIBUTING.md task: add a spotless profile (#54723) 2026-11-11 07:31:09 -05:00
get-version.sh Make shebang in bash scripts consistent (#37369) 2026-02-17 11:32:28 +01:00
GOVERNANCE.md
LICENSE.txt
MAINTAINERS.md Adding maintainer affiliations (#52222) 2026-08-31 11:50:08 +00:00
maven-settings.xml
mvnw Handle special characters in mvnw.cmd Windows paths 2026-04-07 18:24:21 +02:00
mvnw.cmd Handle special characters in mvnw.cmd Windows paths 2026-04-07 18:24:21 +02:00
pom.xml Close all streams in the Keycloak production code (#53852) 2026-11-13 12:16:27 +01:00
PR-CHECKLIST.md
README.md Add client libraries repository to README 2026-05-28 10:59:02 +02:00
RELEASES.md Describing the Keycloak release strategy 2026-09-16 09:23:49 +02:00
SECURITY-INSIGHTS.yml
SECURITY.md Update SECURITY.md to align with keycloak.org security policy 2026-07-02 21:11:31 +02:00
set-version.sh Make shebang in bash scripts consistent (#37369) 2026-02-17 11:32:28 +01:00

Keycloak

GitHub Release OpenSSF Best Practices CLOMonitor OpenSSF Scorecard Artifact Hub GitHub Repo stars GitHub commit activity Translation status

Open Source Identity and Access Management

Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users.

Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more.

Help and Documentation

Reporting Security Vulnerabilities

If you have found a security vulnerability, please look at the instructions on how to properly report it.

Reporting an issue

If you believe you have discovered a defect in Keycloak, please open an issue. Please remember to provide a good summary, description as well as steps to reproduce the issue.

Getting started

To run Keycloak, download the distribution from our website. Unzip and run:

bin/kc.[sh|bat] start-dev

Alternatively, you can use the Docker image by running:

docker run quay.io/keycloak/keycloak start-dev

For more details refer to the Keycloak Documentation.

Building from Source

To build from source, refer to the building and working with the code base guide.

Testing

To run tests, refer to the running tests guide.

Writing Tests

To write tests, refer to the writing tests guide.

Contributing

Before contributing to Keycloak, please read our contributing guidelines. Participation in the Keycloak project is governed by the CNCF Code of Conduct.

Joining a community meeting is a great way to get involved and help shape the future of Keycloak.

Code of Conduct

We are committed to providing a safe, welcoming, and constructive environment for all Keycloak contributors and users. To protect this space, we actively enforce our Code of Conduct. If you wish to report an incident or appeal a moderation decision, please email keycloak-coc@googlegroups.com.

Other Keycloak Projects

License