# Keycloak JS 26.2.3 released

DevFeed: [Keycloak JS 26.2.3 released](<https://devfeed.tech/articles/keycloak-js-26-2-3-released-31757.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2026/02/keycloak-js-2623-released>)

Author: Keycloak Team

Published: 2026-02-05T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [bug](<https://devfeed.tech/topics/bug.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [version](<https://devfeed.tech/topics/version.md>), [Angular](<https://devfeed.tech/topics/angular.md>), [React](<https://devfeed.tech/topics/react.md>)

Tags: [angular](<https://devfeed.tech/tags/angular.md>), [bug](<https://devfeed.tech/tags/bug.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-js-release](<https://devfeed.tech/tags/keycloak-js-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [react](<https://devfeed.tech/tags/react.md>), [regression](<https://devfeed.tech/tags/regression.md>), [release](<https://devfeed.tech/tags/release.md>), [routing](<https://devfeed.tech/tags/routing.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [version](<https://devfeed.tech/tags/version.md>)

## AI overview

Keycloak JS 26.2.3 fixes a regression introduced in version 26.2.2 that URL-encoded path-style URL fragments after the OAuth callback when using fragment response mode, breaking hash-based routing. The issue affected Angular, React, and other client-side applications.

## Source excerpt

Highlights This release of Keycloak JS addresses a regression that was introduced in version 26.2.2 affecting applications that use hash-based routing in combination with the fragment response mode. Bug Fixes URL hash fragments are now preserved correctly with 'fragment' response mode A regression was introduced in version 26.2.2 that caused URL fragments with path-style routing (e.g., #/admin/maintenance/scripts) to be URL-encoded after the OAuth callback, breaking applications that use hash-based routing. This issue affected Angular, React, and other applications that rely on the hash portion of the URL for client-side routing. keycloak/keycloak-js#241 Upgrading Before upgrading refer to the migration guide for a complete list of changes.