v1.8.1

1.8.1 (2026-03-19)

Bug Fixes

• close sse streams when auth session is gone (806bad3)
• run model mutating endpoint code in txn (c1ca785)

Dependencies

• deps-dev: bump org.apache.maven.plugins:maven-failsafe-plugin (68cf3c0)
• deps-dev: bump org.mockito:mockito-core from 5.17.0 to 5.23.0 (20d494a)

v1.8.0

1.8.0 (2026-03-17)

Features

• login-challenge: add createdAt for LoginChallenge; improve documentation (#125) (ad1420a)

v1.7.1

1.7.1 (2026-03-11)

Bug Fixes

• flaky tests (e9b337c)
• open only one thread for SSE per kc node (f666846)
• stale challenges from deleted credentials could block login (f2d4876)

v1.7.0

1.7.0 (2026-03-10)

Features

• add lockout spi (177becc)

Dependencies

• deps-dev: bump org.apache.maven.plugins:maven-compiler-plugin (4e432fd)
• deps-dev: bump org.apache.maven.plugins:maven-surefire-plugin (2b5aa98)
• deps-dev: bump org.glassfish.jersey.core:jersey-common (fe4decf)
• deps: bump keycloak.version from 26.5.2 to 26.5.4 (cb639f5)

v1.6.3

1.6.3 (2026-03-04)

Bug Fixes

• add USER_LOCKED_OUT to frontend flow (#104) (db02740)

v1.6.2

1.6.2 (2026-02-16)

Bug Fixes

• do not use failureChallenge for challenge timeouts to not lock out users (e16c29b)

v1.6.1

1.6.1 (2026-02-11)

Bug Fixes

• add client id to push mfa events (51059d9)
• disable keycloak event bridge by default to increase flexibility (fc0af5b)

v1.6.0

1.6.0 (2026-02-09)

Features

• add /push-mfa/login/lockout endpoint (ec33395)

Bug Fixes

• remove useless / flaky tests (7c7995d)

v1.5.7

1.5.7 (2026-02-09)

Bug Fixes

• rename credentialId to better show which one it is (keycloak, device) (#92) (220531d)

v1.5.6

1.5.6 (2026-02-06)

Bug Fixes

• htu should ignore query params per RFC 9449 section 4.2 (9b79b3f)
• keycloak event bridge mapping challenge accepted to LOGIN means duplicate keycloak events (7f2f112)
• use correct credentialId in events (3818859)