feat: integrate Keycloak 26 commercial hardening - #42

Merged

seonghobae merged 107 commits into

mainfrom

agent/product-hardening-integration

Aug 3, 2026

Commits on Jul 21, 2026

fix: make the realm importable on Keycloak 26 and onboard naruon as first RP

seonghobae
and
claude
committed
d3f83cf
feat: move external federation out of realm code into a DB-backed runtime API

seonghobae
and
claude
committed
16ec55b
fix: replace the broad urllib opener in the container healthcheck

seonghobae
and
claude
committed
1538427
fix(security): authenticate the admin API and harden identifier + secret handling

seonghobae
and
claude
committed
446c8a0
chore: re-trigger required reviews after enabling keyverse in the robot-review dispatch allowlist

seonghobae
and
claude
committed
8cf239f

Commits on Jul 22, 2026

feat(realm): email-first self-registration under the passkey contract

seonghobae
and
claude
committed
a215574
feat(registration): headless signup API with bootstrap-password contract

seonghobae
and
claude
committed
9eacf74
fix(admin-api): re-authenticate once when the cached admin token expires

seonghobae
and
claude
committed
03d5fbb

Commits on Jul 29, 2026

fix(healthcheck): allow-list URL scheme and clear Semgrep dynamic-urllib finding
claude
committed
2fd34a9

Commits on Jul 30, 2026

fix(scim): refuse SCIM PUT that would resurrect a tombstoned merged duplicate
claude
committed
5e9c4eb

Commits on Jul 31, 2026

Commits on Aug 3, 2026