Search results

Click fork: upstream Format, MessagesMap and ClickUtils.getLogService() are javax.servlet-bound and fail with NoClassDefFoundError

bug

javaPull requests that update java codePull requests that update java code

refactoringCode cleanup, refactor, dead-code or dependency removalCode cleanup, refactor, dead-code or dependency removal

Status: Open.

#1111 In OpenIdentityPlatform/OpenAM;

· vharseko opened on Aug 21, 2026

Click fork: half the upstream imports were never repointed, so type checks in ContainerUtils and Form can never match

bug

javaPull requests that update java codePull requests that update java code

refactoringCode cleanup, refactor, dead-code or dependency removalCode cleanup, refactor, dead-code or dependency removal

Status: Open.

#1110 In OpenIdentityPlatform/OpenAM;

· vharseko opened on Aug 20, 2026

Account lockout stops counting instead of falling back to memory when the identity store cannot hold the counter

bug

javaPull requests that update java codePull requests that update java code

securitySecurity fix or hardening (CVE, GHSA, XSS/CSRF/SSRF)Security fix or hardening (CVE, GHSA, XSS/CSRF/SSRF)

Status: Open.

#1107 In OpenIdentityPlatform/OpenAM;

· vharseko opened on Aug 13, 2026

Remove Restlet: migrate /oauth2, /uma, /xacml and /.well-known to the ForgeRock CHF stack

enhancement

oauth2OAuth2 / OpenID ConnectOAuth2 / OpenID Connect

Status: Open.

Feature

#1075 In OpenIdentityPlatform/OpenAM;

· maximthomas opened on Jul 21, 2026