# Keycloak JS 26.2.4 released

DevFeed: [Keycloak JS 26.2.4 released](<https://devfeed.tech/articles/keycloak-js-26-2-4-released-31768.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2026/04/keycloak-js-2624-released>)

Author: Keycloak Team

Published: 2026-04-22T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Cordova](<https://devfeed.tech/topics/cordova.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [browser](<https://devfeed.tech/topics/browser.md>), [version](<https://devfeed.tech/topics/version.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [browser](<https://devfeed.tech/tags/browser.md>), [bug-fixes](<https://devfeed.tech/tags/bug-fixes.md>), [changes](<https://devfeed.tech/tags/changes.md>), [cordova](<https://devfeed.tech/tags/cordova.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-js-release](<https://devfeed.tech/tags/keycloak-js-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [version](<https://devfeed.tech/tags/version.md>)

## AI overview

Keycloak JS 26.2.4 fixes two Cordova adapter regressions introduced in version 26.2.1. It prevents duplicate authentication requests during token exchange and closes the in-app browser before the exchange begins, avoiding a brief Android error.

## Source excerpt

Highlights This release of Keycloak JS addresses two regressions in the Cordova adapter that were introduced in version 26.2.1. Bug Fixes Cordova adapter no longer triggers duplicate authentication requests A regression introduced in version 26.2.1 caused the Cordova in-app browser to fire multiple loadstart events before the token exchange completed, resulting in concurrent authentication requests that could fail the login flow. The completed flag is now set before awaiting the token exchange, preventing duplicate processing of the redirect URI. keycloak/keycloak-js#208 Cordova in-app browser now closes before awaiting token exchange A regression introduced in version 26.2.1 caused the Cordova in-app browser to remain open during the asynchronous token exchange, resulting in a brief "Web page not available" error flashing on Android before the browser eventually closed. The browser is now closed immediately after the redirect URI is captured, before the token exchange begins. keycloak/keycloak-js#209 Upgrading Before upgrading refer to the migration guide for a complete list of changes.