CHANGES 8.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256
  1. Changes
  2. =======
  3. 0.18.0 (2020-02-14)
  4. ----------
  5. - Django 3.0 support. Thanks to OskarPersson
  6. - forceauthn and allowcreate support. Thanks to peppelinux
  7. - Dropped support for Python 3.4
  8. - Also thanks to WebSpider, mhindery, DylannCordel, habi3000 for various fixes and improvements
  9. Thanks to plumdog
  10. 0.17.2 (2018-08-29)
  11. ----------
  12. - Upgraded pysaml2 dependency to version 4.6.0 which fixes security issue.
  13. Thanks to plumdog
  14. 0.17.1 (2018-07-16)
  15. ----------
  16. - A 403 (permission denied) is now raised if a SAMLResponse is replayed, instead of 500.
  17. - Dropped support for Python 3.3
  18. - Upgraded pysaml2 dependency to version 4.5.0
  19. Thanks to francoisfreitag, mhindery, vkurup, peppelinux
  20. 0.16.11 (2017-12-25)
  21. ----------
  22. - Dropped compatibility for Python < 2.7 and Django < 1.8.
  23. - Added a clean_attributes hook allowing backends to restructure attributes extracted from SAML response.
  24. - Log when fields are missing in a SAML response.
  25. - Log when attribute_mapping maps to nonexistent User fields.
  26. - Multiple compatibility fixes and other minor improvements and code cleanups
  27. Thanks to francoisfreitag, mhindery, charn, jdufresne
  28. 0.16.10 (2017-10-02)
  29. -------------------
  30. - Bugfixes and internal refactorings.
  31. - Added support for custom USERNAME_FIELD on custom User models. Many thanks to francoisfreitag.
  32. 0.16.9 (2017-09-19)
  33. -------------------
  34. - Bugfixes and minor improvements. Thanks to goetzk and AmbientLighter.
  35. - Added option SAML_LOGOUT_REQUEST_PREFERRED_BINDING
  36. - Added Django 1.11 to tox.
  37. 0.16.4 (2017-09-11)
  38. -------------------
  39. - Added support for SHA-256 signing. Thanks to WebSpider.
  40. - Bugfixes. Thanks to justinsg and charn.
  41. - Error handling made more extensible. This will be further improved in next versions.
  42. 0.16.1 (2017-07-15)
  43. -------------------
  44. - Bugfixes. Thanks to canni, AmbientLighter, cranti and logston.
  45. - request is now passed to authentication backend (introduced in Django 1.11). Thanks to terite.
  46. 0.16.0 (2017-04-14)
  47. -------------------
  48. - Upgrade pysaml2 dependency to version 4.4.0 which fixes some serialization issues. Thanks to nakato for the report.
  49. - Added support for HTTP Redirect binding with signed authentication requests. Many thanks to liquidpele for this feature and other related refactorings.
  50. - The custom permission_denied.html template was removed in favor of standard PermissionDenied exception. Thanks to mhindery.
  51. 0.15.0 (2016-12-18)
  52. -------------------
  53. - Python 3.5 support. Thanks to timheap.
  54. - Added support for callable user attributes. Thanks to andy-miracl and joetsoi.
  55. - Security improvement: "next" URL is now checked. thanks to flupzor.
  56. - Improved testability. Thanks to flupzor.
  57. - Other bugfixes and minor improvements. Thanks to jamaalscarlett, ws0w, jaywink and liquidpele.
  58. 0.14.5 (2016-09-19)
  59. -------------------
  60. - Django 1.10 support. Thanks to inducer.
  61. - Various fixes and minor improvements. Thanks to ajsmilutin, ganiserb, inducer, grunichev, liquidpele and darbula
  62. 0.14.4 (2016-03-29)
  63. -------------------
  64. - Fix compatibility issue with pysaml2-4.0.3+. Thanks to jimr and astoltz.
  65. - Fix Django 1.9 compatibility issue in templates. Thanks to nikoskal.
  66. 0.14.3 (2016-03-18)
  67. -------------------
  68. - Upgraded to pysaml2-4.0.5.
  69. - Added 'ACS_DEFAULT_REDIRECT_URL' setting for default redirection after successful authentication. Thanks to ganiserb.
  70. 0.14.2 (2016-03-11)
  71. -------------------
  72. - Released under the original 'djangosaml2' package name; abandoning the djangosaml2-knaperek fork.
  73. 0.14.1 (2016-03-09)
  74. -------------------
  75. - Upgraded to pysaml2-4.0.4.
  76. 0.14.0 (2016-01-28)
  77. -------------------
  78. - Upgrade to pysaml2-4.0.2. Thanks to kviktor
  79. - Django 1.9 support. Thanks to Jordi Gutiérrez Hermoso
  80. 0.13.2 (2015-06-24)
  81. -------------------
  82. - Improved usage of standard Python logging.
  83. 0.13.1 (2015-06-05)
  84. -------------------
  85. - Added support for djangosaml2 specific user model defined by SAML_USER_MODEL setting
  86. 0.13.0 (2015-02-12)
  87. -------------------
  88. - Django 1.7 support. Thanks to Kamei Toshimitsu
  89. 0.12.0 (2014-11-18)
  90. -------------------
  91. - Pysaml2 2.2.0 support. Thanks to Erick Tryzelaar
  92. 0.11.0 (2014-06-15)
  93. -------------------
  94. - Django 1.5 custom user model support. Thanks to Jos van Velzen
  95. - Django 1.5 compatibility url template tag. Thanks to bula
  96. - Support Django 1.5 and 1.6. Thanks to David Evans and Justin Quick
  97. 0.10.0 (2013-05-05)
  98. -------------------
  99. - Check that RelayState is not empty before redirecting into a loop. Thanks
  100. to Sam Bull for reporting this issue.
  101. - In the global logout process, when the session is lost, report an error
  102. message to the user and perform a local logout.
  103. 0.9.2 (2013-04-19)
  104. ------------------
  105. - Upgrade to pysaml2-0.4.3.
  106. 0.9.1 (2013-01-29)
  107. ------------------
  108. - Add a method to the authentication backend so it is possible
  109. to customize the authorization based on SAML attributes.
  110. 0.9.0 (2012-10-30)
  111. ------------------
  112. - Add a signal for modifying the user just before saving it on
  113. the update_user method of the authentication backend.
  114. 0.8.1 (2012-10-29)
  115. ------------------
  116. - Trim the SAML attributes before setting them to the Django objects
  117. if they are too long. This fixes a crash with MySQL.
  118. 0.8.0 (2012-10-25)
  119. ------------------
  120. - Allow to use different attributes besides 'username' to look for
  121. existing users.
  122. 0.7.0 (2012-10-19)
  123. ------------------
  124. - Add a setting to decide if the user should be redirected to the
  125. next view or shown an authorization error when the user tries to
  126. login twice.
  127. 0.6.1 (2012-09-03)
  128. ------------------
  129. - Remove Django from our dependencies
  130. - Restore support for Django 1.3
  131. 0.6.0 (2012-08-29)
  132. ------------------
  133. - Add tox support configured to run the tests with Python 2.6 and 2.7
  134. - Fix some dependencies and sdist generation. Lorenzo Gil
  135. - Allow defining a logout redirect url in the settings. Lorenzo Gil
  136. - Add some logging calls to improve debugging. Lorenzo Gil
  137. - Add support for custom conf loading function. Sam Bull.
  138. - Make the tests more robust and easier to run when djangosaml2 is
  139. included in a Django project. Sam Bull.
  140. - Make sure the profile is not None before saving it. Bug reported by
  141. Leif Johansson
  142. 0.5.0 (2012-05-22)
  143. ------------------
  144. - Allow defining custom config loaders. They can be dynamic depending on
  145. the request.
  146. - Do not automatically add the authentication backend. This way
  147. we allow other people to add their own backends.
  148. - Support for additional attributes other than the ones that get mapped
  149. into the User model. Those attributes get stored in the UserProfile model.
  150. 0.4.2 (2012-03-23)
  151. ------------------
  152. - Fix a crash in the idplist templatetag about using an old pysaml2 function
  153. - Added a test for the previous crash
  154. 0.4.1 (2012-03-19)
  155. ------------------
  156. - Upgrade pysaml2 dependency to version 0.4.1
  157. 0.4.0 (2012-03-18)
  158. ------------------
  159. - Upgrade pysaml2 dependency to version 0.4.0 (update our tests as a result
  160. of this)
  161. - Add logging calls to make debugging easier
  162. - Use the Django configured logger in pysaml2
  163. 0.3.3 (2012-02-14)
  164. ------------------
  165. - Freeze the version of pysaml2 since we are not (yet!) compatible with
  166. version 0.4.0
  167. 0.3.2 (2011-12-13)
  168. ------------------
  169. - Avoid a crash when reading the SAML attribute that maps to the Django
  170. username
  171. 0.3.1 (2011-12-01)
  172. ------------------
  173. - Load the config in the render method of the idplist templatetag to
  174. make it more flexible and reentrant.
  175. 0.3.0 (2011-11-30)
  176. ------------------
  177. - Templatetag to get the list of available idps.
  178. - Allow to map the same SAML attribute into several Django field.
  179. 0.2.4 (2011-11-29)
  180. ------------------
  181. - Fix restructured text bugs that made pypi page looks bad.
  182. 0.2.3 (2011-06-14)
  183. ------------------
  184. - Set a unusable password when the user is created for the first time
  185. 0.2.2 (2011-06-07)
  186. ------------------
  187. - Prevent infinite loop when going to the /saml2/login/ endpoint and the user
  188. is already logged in and the settings.LOGIN_REDIRECT_URL is (badly) pointing
  189. to /saml2/login.
  190. 0.2.1 (2011-05-09)
  191. ------------------
  192. - If no next parameter is supplied to the login view, use the
  193. settings.LOGIN_REDIRECT_URL as default
  194. 0.2.0 (2011-04-26)
  195. ------------------
  196. - Python 2.4 compatible if the elementtree library is installed
  197. - Allow post processing after the authentication phase by using
  198. Django signals.
  199. 0.1.1 (2011-04-18)
  200. ------------------
  201. - Simple view to echo SAML attributes
  202. - Improve documentation
  203. - Change default behaviour when a new user is created. Now their attributes
  204. are filled this first time
  205. - Allow to set a next page after the logout
  206. 0.1.0 (2011-03-16)
  207. ------------------
  208. - Emancipation from the pysaml package