Authz Keycloak Changelog
Released changes to the Authz Keycloak plugin (`authz-keycloak`), newest release first.
13 released changes name authz-keycloak, newest release first — 8 in Apache APISIX, 5 in API7 Gateway. Each row links to the change itself.
| Release | Date | Type | Change |
|---|
| 3.10.2 (opens in API7 Gateway docs) | 2026-06-29 | Fix | Fixed issue: With lazy_load_paths enabled, the request query string was included when resolving the Keycloak resource by URI, so requests with query parameters failed to match a resource and were denied. The query str… (opens in API7 Gateway docs) |
| 3.10.0 (opens in API7 Gateway docs) | 2026-06-01 | Fix | Fixed issue: When static permissions were combined with http_method_as_scope, the derived method scope was written back to the reused plugin configuration, causing scopes to accumulate across requests. The permission… (opens in API7 Gateway docs) |
| 3.9.16 (opens in API7 Gateway docs) | 2026-07-10 | Fix | Fixed issue: With lazy_load_paths enabled, the request query string was included when resolving the Keycloak resource by URI, so requests with query parameters could fail to match the intended resource. The query stri… (opens in API7 Gateway docs) |
| 3.9.14 (opens in API7 Gateway docs) | 2026-06-15 | Fix | Fixed issue: When static permissions were combined with http_method_as_scope, the derived method scope was written back to the reused plugin configuration, causing scopes to accumulate across requests. The permission… (opens in API7 Gateway docs) |
| 3.9.11 (opens in API7 Gateway docs) | 2026-04-30 | Feature | All plugins now support $secret:// and $env:// references in any configuration field automatically. Previously, only a handful of plugins (jwt-auth, openid-connect, limit-count, authz-keycloak, csrf, limit-req, limit-… (opens in API7 Gateway docs) |
