|
1 | 1 | CHANGELOG
|
2 | 2 | =========
|
| 3 | + |
| 4 | + |
| 5 | +v4.2.0 |
| 6 | +* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate |
| 7 | +* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types |
| 8 | +* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false |
| 9 | +* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments |
| 10 | +* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML |
| 11 | +* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST |
| 12 | +* LogoutRequest and the LogoutResponse object to separate functions |
| 13 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 14 | +* Fix typos on readme. |
| 15 | +* [#480](https://github.com/SAML-Toolkits/php-saml/pull/480) Fix typo on SPNameQualifier mismatch error message |
| 16 | +* Remove unbound version constraints on xmlseclibs |
| 17 | +* Update dependencies |
| 18 | +* Fix test payloads |
| 19 | +* Remove references to OneLogin. |
| 20 | + |
| 21 | +v4.1.0 |
| 22 | +* Add pipe through for the $spValidationOnly setting in the Auth class. |
| 23 | + |
| 24 | +v4.0.1 |
| 25 | +* Add compatibility with PHP 8.1 |
| 26 | +* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method |
| 27 | +* Add warning about Open Redirect and Reply attacks |
| 28 | +* Add warning about the use of IdpMetadataParser class. If Metadata URLs |
| 29 | + are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF |
| 30 | + |
3 | 31 | v4.0.0
|
| 32 | +* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method |
4 | 33 | * Supports PHP 8.X
|
5 | 34 |
|
| 35 | +v3.7.0 |
| 36 | +* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate |
| 37 | +* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types |
| 38 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 39 | +* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false |
| 40 | +* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments |
| 41 | +* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML |
| 42 | +* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST |
| 43 | +* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method |
| 44 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 45 | +* Fix typos on readme. |
| 46 | +* Add warning about Open Redirect and Reply attacks |
| 47 | +* Add warning about the use of IdpMetadataParser class. If Metadata URLs |
| 48 | + are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF |
| 49 | +* Fix test payloads |
| 50 | +* Remove references to OneLogin. |
| 51 | + |
6 | 52 | v3.6.1
|
7 | 53 | * [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method
|
8 | 54 |
|
@@ -61,12 +107,46 @@ v.3.1.1
|
61 | 107 |
|
62 | 108 | v.3.1.0
|
63 | 109 | * Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE)
|
64 |
| -* Fix setting_example.php servicename parameter |
| 110 | +* Fix setting_example.php servicename parameter |
65 | 111 |
|
66 | 112 | v.3.0.0
|
67 | 113 | * Remove mcrypt dependency. Compatible with PHP 7.2
|
68 | 114 | * xmlseclibs now is not part of the toolkit and need to be installed from original source
|
69 | 115 |
|
| 116 | +v.2.20.0 |
| 117 | +* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate |
| 118 | +* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types |
| 119 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 120 | +* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false |
| 121 | +* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments |
| 122 | +* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML |
| 123 | +* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST |
| 124 | +* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method |
| 125 | +* Fix typos on readme. |
| 126 | +* [#480](https://github.com/SAML-Toolkits/php-saml/pull/480) Fix typo on SPNameQualifier mismatch |
| 127 | +* Add $spValidationOnly param to Auth |
| 128 | +* Update xmlseclibs (3.1.2 without AES-GCM and OAEP support) |
| 129 | +* Add warning about Open Redirect and Reply attacks |
| 130 | +* Add warning about the use of IdpMetadataParser class. If Metadata URLs |
| 131 | + are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF |
| 132 | +* Update dependencies |
| 133 | +* Fix test payloads |
| 134 | +* Remove references to OneLogin. |
| 135 | + |
| 136 | +v.2.19.1 |
| 137 | +* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method |
| 138 | + |
| 139 | +v.2.19.0 |
| 140 | +* [#412](https://github.com/onelogin/php-saml/pull/412) Empty instead of unset the $_SESSION variable |
| 141 | +* [#433](https://github.com/onelogin/php-saml/issues/443) Fix Incorrect Destination in LogoutResponse when using responseUrl #443 |
| 142 | +* Add support for SMARTCARD_PKI and RSA_TOKEN Auth Contexts |
| 143 | +* Support Statements with Attribute elements with the same name enabling the allowRepeatAttributeName setting |
| 144 | +* Get lib path dinamically |
| 145 | +* Check for x509Cert of the IdP when loading settings, even if the security index was not provided |
| 146 | + |
| 147 | +v.2.18.1 |
| 148 | +* Add setSchemasPath to Auth class and fix backward compatibility |
| 149 | + |
70 | 150 | v.2.18.0
|
71 | 151 | * Support rejecting unsolicited SAMLResponses.
|
72 | 152 | * Support stric destination matching.
|
@@ -229,7 +309,7 @@ v.2.7.0
|
229 | 309 | * Fix PHP 7 error (used continue outside a loop/switch).
|
230 | 310 | * Fix bug on organization element of the SP metadata builder.
|
231 | 311 | * Fix typos on documentation. Fix ALOWED Misspell.
|
232 |
| -* Be able to extract RequestID. Add RequestID validation on demo1. |
| 312 | +* Be able to extract RequestID. Add RequestID validation on demo1. |
233 | 313 | * Add $stay parameter to login, logout and processSLO method.
|
234 | 314 |
|
235 | 315 | v.2.6.1
|
|
0 commit comments