Skip to content

Releases: auth0/passport-wsfed-saml2

Update .npmignore

16 Jun 18:06
b7c1360
Compare
Choose a tag to compare
  • Update .npmignore

v4.5.0 Add Destination and AssertionConsumerServiceURL as SAML request template variables

09 Jun 13:44
f7534bd
Compare
Choose a tag to compare

Add Destination and AssertionConsumerServiceURL as SAML request template variables

v4.4.0 Use @auth0/xmldom

02 Mar 19:25
f78399a
Compare
Choose a tag to compare
  • Use custom npm lib with custom versions of xmldom

v4.3.0 Add support for modern encryption algorithms

03 Feb 19:23
2a7f943
Compare
Choose a tag to compare

Support Node 10

14 Jun 10:57
a33a0f0
Compare
Choose a tag to compare

This release updates x509 to support Node 10. The officially supported Node versions as of the v4.x.x release stream are Node v8.x and v10.x.

Handle exception when requestTemplate is malformed between placeholders (#90)

24 Jul 18:08
Compare
Choose a tag to compare
DF-38 Wrapping template parse to prevent uncaught (#90)

## ✏️ Changes

There is a situation in which the @@ VAR @@ can get goofed up and
contain strings that will include part of the template itself. This will
not parse correctly and throws an exception in the replace phase of the
regex matching. I've wrapped it in a try/catch to prevent it from
bringing the process down.

Noting that this area looks problematic as it was recently patched in https://github.com/auth0/passport-wsfed-saml2/pull/88

Version bumped to `3.0.12`.

## 🔗 References

[Sentry Issue](https://sentry.io/auth0/auth0-server/issues/617753396/events/25564560312/)

## 🎯 Testing

✅ This change has unit test coverage

v3.0.9

14 Feb 17:13
6d50336
Compare
Choose a tag to compare

Contains:

  • Fix remaining cases where an invalid identityProviderUrl isn't handled (#77)

v3.0.8

02 Feb 19:20
Compare
Choose a tag to compare

Minor fixes:

  • Fixes an issue where pairs of XML character entities would get dropped from the XML digest (#74)
  • Improve error message when signing certificate is invalid (#72)

v3.0.7

11 Jan 21:00
4887285
Compare
Choose a tag to compare
  • Removed the package-lock.json file
  • Removed the moment package and unused imports
  • Updated the xml-crypto version to fix an trim newline characters from the digest during comparison

v3.0.6

08 Jan 16:54
f527ae8
Compare
Choose a tag to compare
  • Minor fix that prevents an exception in the case of a missing login endpoint