- update to 7.5.0:
  * Fix missing requested attributes from the ACS
  * Add support for errorURL to be exposed in metadata for IdP
  * Update logged message when the signature validation on the
    assertion fails
  * Replace imp with importlib
  * deps: restrict xmlschema version
  * deps: remove utility from packaging
  * examples: update code and README to align with latest code
  * docs: update readme with info about xmlsec1 compatibility

 * misc: add pepy badges on the README file
- update requires
- add pycrypto/pyOpenSSL dependency

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add %{?sle15_python_module_pythons}

• Files Changed
• Browse Source

- Fix dependencies according to upstream setup.cfg

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add patch pymongo-4-support.patch:
  * Support pymongo >= 4

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- add 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch

• Files Changed
• Browse Source

- update requires

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add avoid-too-large-dates.patch to avoid test failures on i586
  (Y38K bug; gh#IdentityPython/pysaml2#759)

• Files Changed
• Browse Source

- Skip test test_filter_ava_registration_authority_1
  (gh#IdentityPython/pysaml2#759).

• Files Changed
• Browse Source

- update to 6.3.1:
  - Fix extraction of RegistrationInfo when no information is available
  - Fix http_info struct to include status-code
  - Allow to specify policy configurations based on the registration authority.
  - Add new configuration option `logout_responses_signed` to sign logout responses.
  - When available and appropriate return the ResponseLocation along with the Location
    attribute.
  - Always use base64.encodebytes; base64.encodestring has been dropped.
  - Examples: fix IdP example that was outputing debug statements on stdout that became
    part of its metadata.
  - CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
  - CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
    commit/merge on the master branch autotically creates a new pre-release. To install a
    prelease, run:
  - Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
  - Set the default value for the NameFormat attribute to unspecified when parsing
  - Support arbitrary entity attributes
  - Replace all asserts with proper checks
  - Allow request signing in artifact2message
  - Support logging configuration through the python logger
  - Fix wrong identifiers for ecdsa algos
  - Fix automatic inversion of attribute map files
  - Factor out common codepaths in attribute_converter
  - Remove uneeded exception logging
  - Docs: Update configuration options documentation
  - Examples: Support both str and bytes in SAML requests on the example idp
  - Examples: Update to key generation to 2048 bits

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 5.3.0:
  - Fix check for nameid_format set to the string "None" in the configuration
  - Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
  - Refactor create_authn_request method to be easier to reason about
  - Fix NameIDPolicy checks for allowed Format and allowCreate values

• Files Changed
• Browse Source

- update to 5.1.0:
  - support eIDAS RequestedAttributes per AuthnRequest
  - fix xmlsec1 --id-attr configuration option value
  - do not remove existing disco URL query params
  - load attribute maps in predictable order
  - better error message when AudienceRestriction does not validate
  - always use base64.encodebytes instead of base64.encodestring
  - update the eIDAS attribute mapping for legal person
  - fix py_compile warnings
  - fix pylint errors and warnings
  - various small fixes
  - add Python3.8 as supported
  - tests: fix validity dates
  - docs: document default value for 'want_response_signed'

• Files Changed
• Browse Source

- Don't use %python3_only command, but properly use alternatives.
- Skip failing tests on i586 (gh#IdentityPython/pysaml2#682)

• Files Changed
• Browse Source

- update to 5.0.0:
  - Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
  - Add freshness period feature for MetaDataMDX
  - Fix bug in duration calculation in time_util library
  - Fix ipv6 validation to accommodate for addresses with brackets
  - Fix xmlsec temporary files deletions
  - Add method to get supported algorithms from metadata
  - Add mdstore method to extract assurance certifications
  - Add mdstore method to extract contact_person data
  - Add attribute mappings from the Swiss eduPerson Schema
  - Make AESCipher and Fernet interfaces compatible
  - Remove deprecated saml2.aes module
  - Remove deprecated saml2.extensions.ui module
  - Replace deprecated mongodb operations
  - Rename ToOld error to TooOld
  - Fix pytest warnings
  - Mock tests that need a network connection
  - Start dropping python2 support
  - Add mdstore methods to extract mdui uiinfo elements
  - Add attribute mapping for umbrellaID attributes
  - Fix logic error in pick_binding method for Entity class
  - Validate the audience of assertions regardless of a response being unsolicited
  - Fix PKCS_9 saml_url prefix
  - docs: Fix warnings from docs generation
  - docs: Update release instructions regarding branch releases
  - docs: Fix list formatting on IdP example page
  - docs: Update pysaml2 options doc with `name_id_format_allow_create`
  - misc: fix various typos

• Files Changed
• Browse Source

- Use python dbm dependency instead of legacy gdbm

• Files Changed
• Browse Source