v2.0.4

Release Note

#98 Fix undefined acs endpoint in authn request

v2.0.3

Release note

• Customize namespace for EncryptedAssertion tag 377bad8
• #89 Add support for configuration of signing order 0af7b8c

v2.0.2

Release note

A small patch that fixes the test build

v2.0.1

This patch includes

• #87 Patch for existence check for signature verification
• #88 Patch for allowing arbitrary namespace in EncryptedAssertion tag
• #89 Add test case for validating response with encrypted assertion
• #91 Patch for the typo in fetching endpoint of single sign on service
• #92 Fix typo in documentation and test suite

v2.0.0

#65 Bump for v2 release

v2.0.1-rc.3

• Fix the always-true signature validation (2.0.0-rc.3)
• Add test coverage for logout and message integrity test (2.0.0-rc.3)
• Fix always-true message signature (2.0.1-rc.3)

Special thanks to @ugolas pointing out the issue of always-true signature validation.

v2.0.0-rc.2

Release note

Recommend to upgrade from v2.0.0-rc.1 to v2.0.0-rc.2

• Add test cases for simulating idp-initiated sso
  • response with signed assertion
  • response with signed assertion + signed message
  • response with encrypted signed assertion
  • response with encrypted signed assertion + signed message
• Update xml-crypto to 0.10.1
• Default signature algorithm to "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
• Patch for bug fixes

Next rc version will be included more test coverage (logout, add attributes), then v2.0.0 will go live.

v2.0.0-rc.1 -> v2.0.0-rc.2 -> v2.0.0-rc.3 (23th June) -> v2.0.0 (30th June)

v2.0.0-rc.1

npm install [email protected]

v2.0.0-beta

#41 Release of 2.0.0 beta

v1.4.1

Fix security issue by updating ejs (used in xml-encryption) to latest version.