Releases: ITfoxtec/ITfoxtec.Identity.Saml2
Version 4.10.9-beta3
- Update vulnerable dependencies for System.IdentityModel.Tokens.Jwt and System.Security.Cryptography.Xml.
- Removed support for .NET 5.0 and .NET Core 3.1.
- Add support for Extensions property as part of the EntityDescriptor and the SP/IDPSSODescriptor in metadata.
- In Saml2Configuration, change the set property to public for SignatureValidationCertificates and AllowedAudienceUris.
- Add fix for scoping namespace.
- Add support for multiple translation for Organization elements.
Braking changes in metadata:
- The type
ServiceNameis changed toLocalizedNameType. - The
Organizationconstructorsurlparameter type is changed fromstringtoUri.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.9-beta2
- Add support for ServiceNames [1..*] according to SAML 2.0 spec, to provide service names for different languages in metadata.
- Add support for the FriendlyName property as part of the RequestedAttribute in metadata.
- Add support for ProviderName property as part of the AuthnRequest.
- Bug fix: Use protocol instead of assertion namespace in metadata IDPEntry, IDPList and Scoping.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.9-beta1
- Add support for NameQualifier and SPNameQualifier.
- Add support for AuthnRequest Scoping.
- Change the access level to protected in related to the SamlBinding to make inheritance possible.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.8
- Add support for organization in metadata.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.7
- Resolve nullable type conversion error bug. The error made it impossible to read Saml2AuthnRequest.AssertionConsumerServiceIndex and Saml2AuthnRequest.AttributeConsumingServiceIndex because the type is
int?.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.6
- Symbols packages (snupkg) added along with the nuget packages.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.5
- Support .NET 8.0.
- Validate XML signature transforms.
- Resolve bug when ArtifactResponse StatusCode is Success but Inner StatusCode is Responder.
- Support to read binding by HTTP method.
- User .NET token max size TokenValidationParameters.DefaultMaximumTokenSizeInBytes (256.000 bytes) as request / response max length.
Not 100% backwards compatible:
- Change Saml2Binding to be non-generic. This change is not 100% backwards compatible but most relaying parties will not notice any change.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.4
- Change to only validate the certificate that can verify the signature in redirect binding. This has previously been changed for post bindings.
- Resolve artifact assertion signature validation bug.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.3
- Change to only validate the certificate that can verify the signature.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/
Version 4.10.2
- Add support for validating the maximum length of a received SAML 2.0 request/response. The maximum allowed length is 100,000 characters. The validation is enabled in the
ToGenericHttpRequest(validate: true)method by setting thevalidateattribute.
NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/