• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 1.14.0:
  * Add support for python 3.10 and cleanup the GHA
  * Remove stats from coveralls removed as they are no longer maintained
  * Add rejectDeprecatedAlgorithm settings in order to be able reject messages
    signed with deprecated algorithms
  * Support building a LogoutResponse with non-success status
  * Replace double-underscored names with single underscores
  * Deprecate server_port from request data dictionary

• Files Changed
• Browse Source

- Update to 1.11.0:
  - #261 Allow duplicate named attributes, controlled by a new
    setting
  - #268 Make the redirect scheme matcher case-insensitive
  - #256 Improve signature validation process. Add an option to
    use query string for validation
  - #259 Add get metadata timeout
  - #246 Add the ability to change the ProtocolBinding in the
    authn request.
  - #248 Move storing the response data into its own method in
    the Auth class
  - Remove the dependency on defusedxml
  - #241 Improve AttributeConsumingService support
  - Update expired dates from test responses
- The test suite is still ignored.

• Files Changed
• Browse Source

- The test suite is a complete disaster right now, switching it
  off (gh#onelogin/python3-saml#272).

- Update to 1.10.1:
  - Fix bug on LogoutRequest class, get_idp_slo_response_url was
    used instead get_idp_slo_url
  - Added custom lxml parser based on the one defined at
    xmldefused. Parser will ignore comments and processing
    instructions and by default have deactivated huge_tree, DTD
    and access to external documents
  - Destination URL Comparison is now case-insensitive for netloc
  - Support single-label-domains as valid. New security parameter
    allowSingleLabelDomains
  - Added get_idp_sso_url, get_idp_slo_url and
    get_idp_slo_response_url methods to the Settings class and
    use it in the toolkit
  - #212 Overridability enhancements. Made classes overridable by
    subclassing. Use of classmethods instead staticmethods
  - Add get_friendlyname_attributes support
  - Remove external lib method get_ext_lib_path. Add
    set_cert_path in order to allow set the cert path in a
    different folder than the toolkit
  - Add sha256 instead sha1 algorithm for sign/digest as
    recommended value on documentation and settings
  - #178 Support for adding idp.crt from filesystem
  - Add samlUserdata to demo-flask session
  - Fix autoreloading in demo-tornado
- Remove bug-testDecryptElement.patch, which has been included
  upstream.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to 1.7.0:
  * Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from
    SAMLResponse.
  * Adjusted single logout service to provide NameQualifier and SPNameQualifier
    to logout method.
  * Add getNameIdNameQualifier to Auth and SamlResponse.
  * Extend logout method from Auth and LogoutRequest constructor to support.
  * Added get_in_response_to method to Response and LogoutResponse classes
  * Update defusexml dependency

• Files Changed
• Browse Source

• Browse Source