npm / keycloak-js
keycloak-js
What changed in keycloak-js 26, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.
3 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initkeycloak-js 263 changes
Fixes and other changes 3
The Cordova in-app browser closes immediately after the redirect URI is captured, preventing a brief “Web page not available” error on Android during token exchange.
Hash fragments are preserved in redirect URIs, restoring fragment-based navigation after authentication; unexpected trailing slashes are also addressed.
Redirect URLs on a different domain than the application origin no longer cause navigation to fail with a security error.