1
- # OmniAuth SAML Version History
2
-
3
- A generic SAML strategy for OmniAuth.
4
-
5
- https://github.com/omniauth/omniauth-saml
6
-
7
- ## 1.6.0 (2016-06-27)
1
+ <a name =" v1.6.0 " ></a >
2
+ ### v1.6.0 (2016-06-27)
8
3
* Ensure that subclasses of ` OmniAuth::Stategies::SAML ` are registered with OmniAuth as strategies (https://github.com/omniauth/omniauth-saml/pull/95 )
9
4
* Update ruby-saml to 1.3 to address [ CVE-2016 -5697] ( https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5697 ) (Signature wrapping attacks)
10
5
11
- ## 1.5.0 (2016-02-25)
6
+ <a name =" v1.5.0 " ></a >
7
+ ### v1.5.0 (2016-02-25)
12
8
13
9
* Initialize OneLogin::RubySaml::Response instance with settings
14
10
* Adding "settings" to Response Class at initialization to handle signing verification
@@ -18,56 +14,67 @@ https://github.com/omniauth/omniauth-saml
18
14
* Call validation earlier to get real error instead of 'response missing name_id'
19
15
* Avoid mutation of the options hash during requests and callbacks
20
16
21
- ## 1.4.2 (2016-02-09)
17
+ <a name =" v1.4.2 " ></a >
18
+ ### v1.4.2 (2016-02-09)
22
19
23
20
* update ruby-saml to 1.1
24
21
25
- ## 1.4.1 (2015-08-09)
22
+ <a name =" v1.4.1 " ></a >
23
+ ### v1.4.1 (2015-08-09)
26
24
27
25
* Configurable attribute_consuming_service
28
26
29
- ## 1.4.0 (2015-07-23)
27
+ <a name =" v1.4.0 " ></a >
28
+ ### v1.4.0 (2015-07-23)
30
29
31
30
* update ruby-saml to 1.0.0
32
31
33
- ## 1.3.1 (2015-02-26)
32
+ <a name =" v1.3.1 " ></a >
33
+ ### v1.3.1 (2015-02-26)
34
34
35
35
* Added missing fingerprint key check
36
36
* Expose fingerprint on the auth_hash
37
37
38
- ## 1.3.0 (2015-01-23)
38
+ <a name =" v1.3.0 " ></a >
39
+ ### v1.3.0 (2015-01-23)
39
40
40
41
* add ` idp_cert_fingerprint_validator ` option
41
42
42
- ## 1.2.0 (2014-03-19)
43
+ <a name =" v1.2.0 " ></a >
44
+ ### v1.2.0 (2014-03-19)
43
45
44
46
* provide SP metadata at ` /auth/saml/metadata `
45
47
46
- ## 1.1.0 (2013-11-07)
48
+ <a name =" v1.1.0 " ></a >
49
+ ### v1.1.0 (2013-11-07)
47
50
48
51
* no longer set a default ` name_identifier_format `
49
52
* pass strategy options to the underlying ruby-saml library
50
53
* fallback to omniauth callback url if ` assertion_consumer_service_url ` is not set
51
54
* add ` idp_sso_target_url_runtime_params ` option
52
55
53
- ## 1.0.0 (2012-11-12)
56
+ <a name =" v1.0.0 " ></a >
57
+ ### v1.0.0 (2012-11-12)
54
58
55
59
* remove SAML code and port to ruby-saml gem
56
60
* fix incompatibility with OmniAuth 1.1
57
61
58
- ## 0.9.2 (2012-03-30)
62
+ <a name =" v0.9.2 " ></a >
63
+ ### v0.9.2 (2012-03-30)
59
64
60
65
* validate the SAML response
61
66
* 100% test coverage
62
67
* now requires ruby 1.9.2+
63
68
64
- ## 0.9.1 (2012-02-23)
69
+ <a name =" v0.9.1 " ></a >
70
+ ### v0.9.1 (2012-02-23)
65
71
66
72
* return first and last name in the info hash
67
73
* no longer use LDAP OIDs for name and email selection
68
74
* return SAML attributes as the omniauth raw_info hash
69
75
70
- ## 0.9.0 (2012-02-14)
76
+ <a name =" v0.9.0 " ></a >
77
+ ### v0.9.0 (2012-02-14)
71
78
72
79
* initial release
73
80
* extracts commits from omniauth 0-3-stable branch
0 commit comments