Releases: IdentityPython/djangosaml2
Releases · IdentityPython/djangosaml2
v1.0.0
- General code refactor based on Django ClassViews
- Better Code Coverage
- Discovery Service support
- HTTP-Redirect with optional signed authn requests
v0.50.0
Discovery Service support
v0.40.1
Minor release with two bugfixes. The first regards the missing signature in http-redirect sso binding, the second came with the latter changes introduced by SameSite cookie, now fixed.
v0.40.0
- Allow a SSO request without any attributes besides the NameID info. Backwards-incompatible changes to allow easier behaviour differentiation, two methods now receive the idp identifier (+ **kwargs were added to introduce possible similar changes in the future with less breaking effect):
- Method signature changed on Saml2Backend.clean_attributes: from
clean_attributes(self, attributes: dict)
toclean_attributes(self, attributes: dict, idp_entityid: str, **kwargs)
- Methodignature changed on Saml2Backend.is_authorized: from
is_authorized(self, attributes: dict, attribute_mapping: dict)
tois_authorized(self, attributes: dict, attribute_mapping: dict, idp_entityid: str, **kwargs)
- Method signature changed on Saml2Backend.clean_attributes: from
- SAML session refactor and minor changes in README file
- local Logout - indipendent by IdP SLO Response
v0.30.0
SameSite workaround with a specialized cookie decoupled from django default one
v0.20.0
- Bugfix: Always save newly created users when ATTRIBUTE_MAPPING is missing in the config
- pySAML2 v5.3.0
v0.19.1
- Fixed creating new user with iexact lookup
v0.19.0
- Support several required fields during User creation
- Don't pass sigalg parameter when not signing login request
- ALLOW_SAML_HOSTNAMES validation for redirect
- Custom attribute mapping for Django user model (example)
- Slo absence workaround
- Metadata EntityID exception handling
- Fix unsigned authentication request to POST endpoint
- py38 Test fixes
- CI with Github actions
- Backend restructuring for easier subclassing
- Assertion consumer service now more extensible as a class-based view
with hooks that can be overridden by subclass implementations.