Skip to content

[backport camel-4.18.x] CAMEL-24448: camel-keycloak - reject an introspection response without an iss claim - #25859

Merged
Croway merged 1 commit into
apache:camel-4.18.xfrom
oscerd:backport/25827-to-camel-4.18.x
Aug 28, 2026
Merged

[backport camel-4.18.x] CAMEL-24448: camel-keycloak - reject an introspection response without an iss claim#25859
Croway merged 1 commit into
apache:camel-4.18.xfrom
oscerd:backport/25827-to-camel-4.18.x

Conversation

@oscerd

@oscerd oscerd commented Aug 28, 2026

Copy link
Copy Markdown
Contributor

Backport of #25827

Cherry-pick of #25827 onto camel-4.18.x.

Original PR: #25827
Original author: @oscerd

Resolution: the 4.23 upgrade-guide entry is dropped, since the guides for every release line live on main.

Verified: module builds green on camel-4.18.x with no generated-file drift.

Claude Code on behalf of oscerd

…ries no issuer (apache#25827)

Reject a token-introspection response that carries no issuer, so the keycloak component does not accept an introspection result whose issuer cannot be validated.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@oscerd oscerd added this to the 4.23.0 milestone Aug 28, 2026
@oscerd oscerd added the backport indicate that a Pull request is a backport from a fix from the main branch label Aug 28, 2026
@Croway Croway modified the milestones: 4.23.0, 4.18.5 Aug 28, 2026
@Croway
Croway merged commit aba0f75 into apache:camel-4.18.x Aug 28, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport indicate that a Pull request is a backport from a fix from the main branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants