|
1 | 1 | # Changelog
|
2 | 2 |
|
3 | 3 |
|
| 4 | +## 7.1.0 (2021-11-16) |
| 5 | + |
| 6 | +- Fix signature verification for the redirect binding for AuthnRequest and |
| 7 | + LogoutRequest. |
| 8 | +- Include encryption KeyName in encrypted assertions. |
| 9 | +- Add "reason" field in invalid signature errors due to invalid document format. |
| 10 | +- New SP configuration option requested_authn_context to set the preferred |
| 11 | + RequestedAuthnContext class reference. |
| 12 | +- Add support for metadata refresh by adding a metadata_reload method into saml2.Entity. |
| 13 | + This method is to be externally invoked, and to receive the same metadata |
| 14 | + configuration as what was passed under the metadata key to saml2.Config. The method |
| 15 | + loads a new metadata configuration and swaps it in (replacing the references across |
| 16 | + several objects that hold a metadata reference). |
| 17 | +- Fix SessionIndex resolution during logout. |
| 18 | +- Fix AuthnResponse::get_subject to be able to decrypt a NameID with the given keys. |
| 19 | +- Refactor AuthnResponse::authn_info to consider DeclRef equivalent to ClassRef. |
| 20 | +- Ensure creation of multiple ePTIDs is handled correctly. |
| 21 | +- Improve signature checks by ensuring the Object element is absent, enforcing allowed |
| 22 | + transform aglorithms, enforcing allowed canonicalization methods and requiring the |
| 23 | + enveloped-signature transform to be present. |
| 24 | +- mdstore: Make unknown metadata extensions available through the internal metadata. |
| 25 | +- mdstore: Fix the exception handler of the InMemoryMetaData object. |
| 26 | +- mdstore: Fix the serialization of the MetadataStore object. |
| 27 | +- examples: Fix code to catter changes in interfaces. |
| 28 | +- examples: Update certificates to avoid SSL KEY TO SMALL errors. |
| 29 | +- docs: Significant improvement on the configuration options documentation. |
| 30 | +- docs: Fix typos. |
| 31 | + |
| 32 | + |
4 | 33 | ## 7.0.1 (2021-05-20)
|
5 | 34 |
|
6 | 35 | - Preserve order of response bindings on IdP-initiated logout
|
|
0 commit comments