Uploaded image for project: 'Red Hat build of Keycloak'
  1. Red Hat build of Keycloak
  2. RHBK-3598

Security Defenses realm settings lost when switching between Headers and Brute Force Detection tabs (v25+) [GHI#42676]

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      Before reporting an issue

      [x] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

      Area

      admin/ui

      Describe the bug

      Realm settings in the Security Defenses section are not persisting when switching between tabs (Headers ↔ Brute Force Detection) without a browser refresh. Settings saved in one tab get overwritten by old values when saving in another tab.

      Version

      26.3.3

      Regression

      [x] The issue is a regression

      Expected behavior

      The Referrer Policy should remain set to no-referrer-x (the value saved in step 3).

      Actual behavior

      The Referrer Policy reverts to the original value no-referrer, losing the changes made in the Headers tab.

      How to Reproduce?

      When saving the first tab:
      1. PUT ui-ext request sends all realm properties to backend
      2. GET {{

      {realm-id}}} request fetches updated properties (correct new value returned)

      When switching tabs and saving the second tab:
      1. PUT ui-ext request is made, but it sends the original value instead of the previously saved value
      2. GET {{{realm-id}

      }} request returns the overwritten (incorrect) value

      Working Behavior (v24.0.5)

      • Browser automatically refreshes after saving settings
      • Both PUT and GET requests maintain correct values
      • Tab switching preserves previously saved change

      Anything else?

      The frontend appears to maintain stale state when switching between Security Defenses tabs without a page refresh. The UI sends outdated values in the ui-ext PUT request, overwriting previously saved changes.

      • Works: 24.0.5
      • Broken: 25.0.0, 26.1.5, 26.3.3

              Unassigned Unassigned
              pvlha Pavel Vlha
              Keycloak Core (shared)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: