Skip to content

Commit d3b5172

Browse files
committed
Prepare release 4.2.0
1 parent e15e32e commit d3b5172

File tree

2 files changed

+84
-5
lines changed

2 files changed

+84
-5
lines changed

CHANGELOG

+82-2
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,54 @@
11
CHANGELOG
22
=========
3+
4+
5+
v4.2.0
6+
* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate
7+
* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types
8+
* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false
9+
* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments
10+
* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML
11+
* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST
12+
* LogoutRequest and the LogoutResponse object to separate functions
13+
* Make Saml2\Auth can accept a param $spValidationOnly
14+
* Fix typos on readme.
15+
* [#480](https://github.com/SAML-Toolkits/php-saml/pull/480) Fix typo on SPNameQualifier mismatch error message
16+
* Remove unbound version constraints on xmlseclibs
17+
* Update dependencies
18+
* Fix test payloads
19+
* Remove references to OneLogin.
20+
21+
v4.1.0
22+
* Add pipe through for the $spValidationOnly setting in the Auth class.
23+
24+
v4.0.1
25+
* Add compatibility with PHP 8.1
26+
* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method
27+
* Add warning about Open Redirect and Reply attacks
28+
* Add warning about the use of IdpMetadataParser class. If Metadata URLs
29+
are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF
30+
331
v4.0.0
32+
* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method
433
* Supports PHP 8.X
534

35+
v3.7.0
36+
* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate
37+
* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types
38+
* Make Saml2\Auth can accept a param $spValidationOnly
39+
* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false
40+
* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments
41+
* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML
42+
* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST
43+
* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method
44+
* Make Saml2\Auth can accept a param $spValidationOnly
45+
* Fix typos on readme.
46+
* Add warning about Open Redirect and Reply attacks
47+
* Add warning about the use of IdpMetadataParser class. If Metadata URLs
48+
are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF
49+
* Fix test payloads
50+
* Remove references to OneLogin.
51+
652
v3.6.1
753
* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method
854

@@ -61,12 +107,46 @@ v.3.1.1
61107

62108
v.3.1.0
63109
* Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE)
64-
* Fix setting_example.php servicename parameter
110+
* Fix setting_example.php servicename parameter
65111

66112
v.3.0.0
67113
* Remove mcrypt dependency. Compatible with PHP 7.2
68114
* xmlseclibs now is not part of the toolkit and need to be installed from original source
69115

116+
v.2.20.0
117+
* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate
118+
* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types
119+
* Make Saml2\Auth can accept a param $spValidationOnly
120+
* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false
121+
* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments
122+
* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML
123+
* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST
124+
* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method
125+
* Fix typos on readme.
126+
* [#480](https://github.com/SAML-Toolkits/php-saml/pull/480) Fix typo on SPNameQualifier mismatch
127+
* Add $spValidationOnly param to Auth
128+
* Update xmlseclibs (3.1.2 without AES-GCM and OAEP support)
129+
* Add warning about Open Redirect and Reply attacks
130+
* Add warning about the use of IdpMetadataParser class. If Metadata URLs
131+
are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF
132+
* Update dependencies
133+
* Fix test payloads
134+
* Remove references to OneLogin.
135+
136+
v.2.19.1
137+
* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method
138+
139+
v.2.19.0
140+
* [#412](https://github.com/onelogin/php-saml/pull/412) Empty instead of unset the $_SESSION variable
141+
* [#433](https://github.com/onelogin/php-saml/issues/443) Fix Incorrect Destination in LogoutResponse when using responseUrl #443
142+
* Add support for SMARTCARD_PKI and RSA_TOKEN Auth Contexts
143+
* Support Statements with Attribute elements with the same name enabling the allowRepeatAttributeName setting
144+
* Get lib path dinamically
145+
* Check for x509Cert of the IdP when loading settings, even if the security index was not provided
146+
147+
v.2.18.1
148+
* Add setSchemasPath to Auth class and fix backward compatibility
149+
70150
v.2.18.0
71151
* Support rejecting unsolicited SAMLResponses.
72152
* Support stric destination matching.
@@ -229,7 +309,7 @@ v.2.7.0
229309
* Fix PHP 7 error (used continue outside a loop/switch).
230310
* Fix bug on organization element of the SP metadata builder.
231311
* Fix typos on documentation. Fix ALOWED Misspell.
232-
* Be able to extract RequestID. Add RequestID validation on demo1.
312+
* Be able to extract RequestID. Add RequestID validation on demo1.
233313
* Add $stay parameter to login, logout and processSLO method.
234314

235315
v.2.6.1

src/Saml2/version.json

+2-3
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
{
22
"php-saml": {
3-
"version": "4.1.0",
4-
"released": "07/15/2022"
3+
"version": "4.2.0",
4+
"released": "30/05/2024"
55
}
66
}
7-

0 commit comments

Comments
 (0)