From fd99aa62447f8f9048a7a8d6949c1221f3f0984e Mon Sep 17 00:00:00 2001
From: jhgojbis <gh_wipe@hotmail.com>
Date: Wed, 12 Nov 2025 08:53:41 +0100
Subject: [PATCH] Bug fix double-encoding for query parameter acr_values
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Related bug fix in Keycloak version 26.4

space with mutiple values results in → "+" → "%2B"

Reported bug:
https://github.com/keycloak/keycloak/issues/44125

Signed-off-by: jhgojbis <gh_wipe@hotmail.com>
---
 .../keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java b/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
index 691f9fab0e9..eb9d34e556c 100755
--- a/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
+++ b/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
@@ -561,7 +561,7 @@ public abstract class AbstractOAuth2IdentityProvider<C extends OAuth2IdentityPro
             }
 
             if (parameter != null && !parameter.isEmpty()) {
-                uriBuilder.queryParam(forwardParameter, URLEncoder.encode(parameter, StandardCharsets.UTF_8));
+                uriBuilder.queryParam(forwardParameter, parameter);
             }
         }
     }