Keycloak Version

version	date	Notes
Keycloak 22	2023-07-11
Keycloak 21	2023-02-23
Keycloak 20	2022-11-01	Quarkus only
Keycloak 19	2022-07-27
Keycloak 18	2022-04-21
Keycloak 17	2022-02-12	Quarkus
Keycloak 16	2021-12-17
Keycloak 15	2021-07-30
Keycloak 14	2021-06-18
Keycloak 13	2021-05-06
Keycloak 12	2020-12-17
Keycloak 11	2020-07-22
Keycloak 10	2020-04-29

提示

• 新 Operator - Keycloak 20
• 停止支持 WildFly 版本 - Keycloak 20
• 新 Console - Keycloak 19
• 默认 Quarkus - Keycloak 17

• Release Notes
• https://github.com/keycloak/keycloak/releases
• keycloak/kc-sig-fapi

Keycloak 22

• Java 11
• Quarkus 3.x
  • Java EE -> Jakarta EE
• Hibernate ORM 6
• WildFly Elytron -> Keycloak KeyStore Vault
• Quarkus KeyStore Config Source
• Hostname debug tool

Keycloak 21.1

• Monorepo
• FIPS 140-2
• 试验性 Account Console version 3
  • bin/kc.sh start-dev --features=account3

Keycloak 21

• 移除旧的 Admin Console
• 要求 Java 17+
• 移除内置支持 Hashicop Vault
  • https://github.com/keycloak/keycloak/discussions/16446

Keycloak 20

• 移除 WildFly
• New Keycloak Operator
• Realm Operator
• server options
  • hostname-url
  • hostname-admin-url
  • https://www.keycloak.org/server/hostname

Keycloak 19

• New Admin Console
• Update Email Workflow
• 集中日志
  • https://www.keycloak.org/server/logging#_centralized_logging_using_gelf
  • https://quarkus.io/guides/centralized-log-management
• OpenID Connect and SAML Adapters End-of-life
  • Fuse 6 and 7
  • JBoss AS 7 and EAP 6
  • Jetty 9.2 and 9.3
  • Spring Boot 1

Keycloak 18

• Session limits
• Step-up authentication
  • allow access to clients or resources based on a specific authentication level of a user
• preview
  • Client secret rotation
  • 2FA Recovery Codes
• 新的 预览版 Operator - https://www.keycloak.org/operator/installation
  • v20 的时候停止支持旧的 Operator，切换为新的 Operator
  • keycloak/keycloak-operator
• 新的 预览版 Admin Console - 19 变为默认
• 完整实现 OpenID Connect Logout
• WebAuthn id-less authentication
• 参考
  • https://www.keycloak.org/2022/04/keycloak-1800-released
  • https://www.keycloak.org/guides

Keycloak 17

• 正式支持 Quarkus
  • WildFly 支持到 2022-06
  • Migrating to Quarkus distribution
    • 不能再动态加载 provider
• Quarkus 2.7.0

Keycloak 16

• Wildfly 25 - Elytron
  • 配置方式发生变化
• Quarkus 2.5.3

Keycloak 15

• Financial-grade API/FAPI 增强, FAPI CIBA and Open Banking Brasil

Keycloak 15.1

• OpenID Connect Front-Channel Logout 1.0

Keycloak 14

• Client Policies and Financial-grade API/FAPI

Keycloak 13

• OAuth 2.0 Device Authorization Grant - RFC 8628
• OpenID Connect Client Initiated Backchannel Authentication - CIBA
• PKCE for identity brokering

Keycloak 12

• Keycloak.X powered by Quarkus
• OpenID Connect Back-Channel Logout
• Gatekeeper EOL - louketo-proxy

Keycloak 11

• LDAPv3 password modify operation
• Namespace support for LDAP group mapper

Keycloak 10

• Identity Brokering Sync Mode
• Client Session Timeout for OpenID Connect / OAuth 2.0
• OAuth 2.0 Token Revocation - RFC 7009