Skip to content

Pull requests: cloudfoundry/uaa

New pull request New
18 Open 3,052 Closed
18 Open 3,052 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Implement SAML SLO signature validation
#4015 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix SAML RelayState allowlist validation
#4014 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
4
Fix ineffective jwt+rotate+!revocable combination
#4013 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix OIDC ID-token nonce against session
#4012 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix expiring code redemption
#4011 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix double submit csrf cookie
#4010 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix client ip for rate limiting
#4009 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
2
Fix cors allowed origin pattern matching
#4008 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
5
Fix bcrypt timing
#4007 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix authorization code consumption
#4006 opened Jul 29, 2026 by joemahady-comm Contributor Loading…
3
Fix SSRF via jwks_uri
#4000 opened Jul 25, 2026 by strehle Member Loading…
28
fix: block spoofable IP headers from rate limiting and restrict SAML RelayState redirects
#3999 opened Jul 25, 2026 by strehle Member Loading…
2
Support matching LDAP external groups by full DN, not just bare CN
#3982 opened Jul 15, 2026 by duanemay Member • Draft
4 tasks done
feat: RFC 8705 mutual-TLS client authentication for CF app instance identity
#3972 opened Jul 3, 2026 by rkoster • Draft
25
feat(spiffe): JWT-SVID signing endpoint (RFC UAA-SPIFFE-001)
#3968 opened Jun 29, 2026 by rkoster • Draft
1
Add an extra subject_token verification to protect token extensions
#3954 opened Jun 18, 2026 by fhanik Contributor Loading…
6
Move test database properties to test resources
#3628 opened Sep 19, 2025 by duanemay Member • Draft
3 tasks done
1
Proposed changes for indexing.
#3347 opened Mar 13, 2025 by rohit-armorikar Loading…
4
ProTip! What’s not been updated in a month: updated:<2026-06-30.