|
1 | 1 | # Ruby SAML Changelog |
2 | 2 |
|
| 3 | +### 1.18.0 (???) |
| 4 | +* [#718](https://github.com/SAML-Toolkits/ruby-saml/pull/718/) Add support to retrieve from SAMLResponse the AuthnInstant and AuthnContextClassRef values |
| 5 | +* [#720](https://github.com/SAML-Toolkits/ruby-saml/pull/720) Fix ambiguous regex warnings |
| 6 | +* [#715](https://github.com/SAML-Toolkits/ruby-saml/pull/715) Fix typo in SPNameQualifier error text |
| 7 | + |
3 | 8 | ### 1.17.0 (Sep 10, 2024) |
4 | 9 | * Fix for critical vulnerability CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector |
5 | 10 | * [#687](https://github.com/SAML-Toolkits/ruby-saml/pull/687) Add CI coverage for Ruby 3.3 and Windows. |
|
15 | 20 |
|
16 | 21 | ### 1.15.0 (Jan 04, 2023) |
17 | 22 | * [#650](https://github.com/SAML-Toolkits/ruby-saml/pull/650) Replace strip! by strip on compute_digest method |
18 | | -* [#638](https://github.com/SAML-Toolkits/ruby-saml/pull/638) Fix dateTime format for the validUntil attribute of the generated metadata |
| 23 | +* [#638](https://github.com/SAML-Toolkits/ruby-saml/pull/638) Fix dateTime format for the validUntil attribute of the generated metadata |
19 | 24 | * [#576](https://github.com/SAML-Toolkits/ruby-saml/pull/576) Support `Settings#idp_cert_multi` with string keys |
20 | 25 | * [#567](https://github.com/SAML-Toolkits/ruby-saml/pull/567) Improve Code quality |
21 | 26 | * Add info about new repo, new maintainer, new security contact |
|
52 | 57 |
|
53 | 58 | ### 1.12.0 (Feb 18, 2021) |
54 | 59 | * Support AES-128-GCM, AES-192-GCM, and AES-256-GCM encryptions |
55 | | -* Parse & return SLO ResponseLocation in IDPMetadataParser & Settings |
| 60 | +* Parse & return SLO ResponseLocation in IDPMetadataParser & Settings |
56 | 61 | * Adding idp_sso_service_url and idp_slo_service_url settings |
57 | 62 | * [#536](https://github.com/onelogin/ruby-saml/pull/536) Adding feth method to be able retrieve attributes based on regex |
58 | 63 | * Reduce size of built gem by excluding the test folder |
|
184 | 189 | * Fix response_test.rb of gem 1.3.0 |
185 | 190 | * Add reference to Security Guidelines |
186 | 191 | * Update License |
187 | | -* [#334](https://github.com/onelogin/ruby-saml/pull/334) Keep API backward-compatibility on IdpMetadataParser fingerprint method. |
| 192 | +* [#334](https://github.com/onelogin/ruby-saml/pull/334) Keep API backward-compatibility on IdpMetadataParser fingerprint method. |
188 | 193 |
|
189 | 194 | ### 1.3.0 (June 24, 2016) |
190 | 195 | * [Security Fix](https://github.com/onelogin/ruby-saml/commit/a571f52171e6bfd87db59822d1d9e8c38fb3b995) Add extra validations to prevent Signature wrapping attacks |
|
202 | 207 | * [#316](https://github.com/onelogin/ruby-saml/pull/316) Fix Misspelling of transation_id to transaction_id |
203 | 208 | * [#321](https://github.com/onelogin/ruby-saml/pull/321) Support Attribute Names on IDPSSODescriptor parser |
204 | 209 | * Changes on empty URI of Signature reference management |
205 | | -* [#320](https://github.com/onelogin/ruby-saml/pull/320) Dont mutate document to fix lack of reference URI |
| 210 | +* [#320](https://github.com/onelogin/ruby-saml/pull/320) Dont mutate document to fix lack of reference URI |
206 | 211 | * [#306](https://github.com/onelogin/ruby-saml/pull/306) Support WantAssertionsSigned |
207 | 212 |
|
208 | 213 | ### 1.1.2 (February 15, 2016) |
|
219 | 224 | * [#270](https://github.com/onelogin/ruby-saml/pull/270) Allow SAML elements to come from any namespace (at decryption process) |
220 | 225 | * [#261](https://github.com/onelogin/ruby-saml/pull/261) Allow validate_subject_confirmation Response validation to be skipped |
221 | 226 | * [#258](https://github.com/onelogin/ruby-saml/pull/258) Fix allowed_clock_drift on the validate_session_expiration test |
222 | | -* [#256](https://github.com/onelogin/ruby-saml/pull/256) Separate the create_authentication_xml_doc in two methods. |
| 227 | +* [#256](https://github.com/onelogin/ruby-saml/pull/256) Separate the create_authentication_xml_doc in two methods. |
223 | 228 | * [#255](https://github.com/onelogin/ruby-saml/pull/255) Refactor validate signature. |
224 | | -* [#254](https://github.com/onelogin/ruby-saml/pull/254) Handle empty URI references |
| 229 | +* [#254](https://github.com/onelogin/ruby-saml/pull/254) Handle empty URI references |
225 | 230 | * [#251](https://github.com/onelogin/ruby-saml/pull/251) Support qualified and unqualified NameID in attributes |
226 | 231 | * [#234](https://github.com/onelogin/ruby-saml/pull/234) Add explicit support for JRuby |
227 | 232 |
|
228 | 233 | ### 1.0.0 (June 30, 2015) |
229 | 234 | * [#247](https://github.com/onelogin/ruby-saml/pull/247) Avoid entity expansion (XEE attacks) |
230 | 235 | * [#246](https://github.com/onelogin/ruby-saml/pull/246) Fix bug generating Logout Response (issuer was at wrong order) |
231 | 236 | * [#243](https://github.com/onelogin/ruby-saml/issues/243) and [#244](https://github.com/onelogin/ruby-saml/issues/244) Fix metadata builder errors. Fix metadata xsd. |
232 | | -* [#241](https://github.com/onelogin/ruby-saml/pull/241) Add decrypt support (EncryptID and EncryptedAssertion). Improve compatibility with namespaces. |
| 237 | +* [#241](https://github.com/onelogin/ruby-saml/pull/241) Add decrypt support (EncryptID and EncryptedAssertion). Improve compatibility with namespaces. |
233 | 238 | * [#240](https://github.com/onelogin/ruby-saml/pull/240) and [#238](https://github.com/onelogin/ruby-saml/pull/238) Improve test coverage and refactor. |
234 | 239 | * [#239](https://github.com/onelogin/ruby-saml/pull/239) Improve security: Add more validations to SAMLResponse, LogoutRequest and LogoutResponse. Refactor code and improve tests coverage. |
235 | 240 | * [#237](https://github.com/onelogin/ruby-saml/pull/237) Don't pretty print metadata by default. |
|
0 commit comments