djangosaml2

Release notes

• generalize args in do logout func @r350178982 (#405)
• Fix Content-Security-Policy if hash is included in script-src @prauscher (#404)
• Add CSP handler setting @GertBurger (#401)

Release notes

• Fix: New created users will have unusable password @pandafy (#399)

Release notes

• Add traceback info to logger messages within exceptions @mjsir911 (#394)

Release notes

• Make sure djangosaml2 works in csp-enabled applications too (fix #391) @prauscher (#392)
• Some improvements for the documentation. @hutchison (#393)

Release notes

• Add additional RelayState URL validation @tymees (#388)
• Python3.12 compat @g-as (#387)
• Bumped handled python versions & prepared for Django 5.0 @g-as (#386)

Release notes

• Logout relaystate @plojyon (#380)

Release notes

• Allow overriding SameSite value for session cookie @RouganStriker (#378)

Release notes

• Separate out the condition for skipping login @jafacakes2011 (#376)

Release notes

• Split authenticate into separate overridable function @marcelkornblum (#374)

Release notes

• Fix XSS in the idp url parameter [cleanup] @brianvans (#370)
• typo: [Documentation] xmlsec1 @peppelinux (#363)
• xmlsec package is xmlsec1 @Erik-J-D (#362)

Release notes

• fix: next_url bug (https://github.com/IdentityPython/djangosaml2/commit/c2cb2220ec185c21ff98841ad7f5b5c80733da11)

Closes https://github.com/IdentityPython/djangosaml2/issues/360

Release notes

• Fix XSS in next_path url param @Gee19 (#359)

What's Changed

• Better logging for _get_attribute_value to debug wrong configurations by @bthorben in https://github.com/IdentityPython/djangosaml2/pull/345

New Contributors

• @bthorben made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/345

Full Changelog: https://github.com/IdentityPython/djangosaml2/compare/v1.5.2...v1.5.3

Release notes

• Remove occurrences of my old nonexistent email address @lorenzogil (#342)
• Fix typo @cclauss (#339)

What's Changed

• bumped pyupgrade python target version to 3.7 by @g-as in https://github.com/IdentityPython/djangosaml2/pull/330
• chore: some CI improvements by @peppelinux in https://github.com/IdentityPython/djangosaml2/pull/331
• Django 4.1 compat by @g-as in https://github.com/IdentityPython/djangosaml2/pull/337:
  • default_app_config was removed.
  • next_page on LOGOUT removed

Full Changelog: https://github.com/IdentityPython/djangosaml2/compare/v1.5.0...v1.5.1

Release notes

• BREAKING CHANGE: Drop python 3.6 and django 2.2/3.1 @g-as (#329)
• Fix typo in PySAML2 example configuration @martin-mueller-cemas (#328)

Release notes

• feat: MDQ support @cheoppy (#327)

Release notes

• Update SameSite cookie notes @omidraha (#322)
• pre-commit integration @g-as (#320)
• tox: used final django ~ 4.0 version @g-as (#319)
• added support for python3.10 @g-as (#318)
• Added Django 4.0 compatibility @g-as (#317)

What's Changed

• Added Django 4.0 compatibility by @g-as in https://github.com/IdentityPython/djangosaml2/pull/317
• added support for python3.10 by @g-as in https://github.com/IdentityPython/djangosaml2/pull/318
• tox: used final django ~ 4.0 version by @g-as in https://github.com/IdentityPython/djangosaml2/pull/319
• pre-commit integration by @g-as in https://github.com/IdentityPython/djangosaml2/pull/320
• Update SameSite cookie notes by @omidraha in https://github.com/IdentityPython/djangosaml2/pull/322

New Contributors

• @g-as made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/317
• @omidraha made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/322

Full Changelog: https://github.com/IdentityPython/djangosaml2/compare/v1.3.5...v1.3.6

What's Changed

• Update setup.rst by @oakmegaeddie in https://github.com/IdentityPython/djangosaml2/pull/307
• Update setup.rst by @oakmegaeddie in https://github.com/IdentityPython/djangosaml2/pull/308
• Fix comment in setup.rst by @mmaridev in https://github.com/IdentityPython/djangosaml2/pull/310
• Use assertEqual instead of assertEquals for Python 3.11 compatibility. by @tirkarthi in https://github.com/IdentityPython/djangosaml2/pull/316
• chore: upgrade to pysaml 7.1.0
• feat: conf.py takes sp_kwargs to extend the customization of unit tests
• BREAKING CHANGE: RequestedAuthnContext updated to pysaml2 7.1 (https://github.com/IdentityPython/pysaml2/pull/807)
  it's mandatory to update your AuthnContext configuration with this structure

           "requested_authn_context": {
                "authn_context_class_ref": [
                    "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
                    "urn:oasis:names:tc:SAML:2.0:ac:classes:TLSClient",
                ],
                "comparison": "minimum",
            }

New Contributors

• @oakmegaeddie made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/307
• @mmaridev made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/310
• @tirkarthi made their first contribution in https://github.com/IdentityPython/djangosaml2/pull/316

Full Changelog: https://github.com/IdentityPython/djangosaml2/compare/v1.3.3...v1.3.5

Release notes

• chore: refactor idp_hinting - closes https://github.com/IdentityPython/djangosaml2/issues/302 @peppelinux (#313)
• Fix comment in setup.rst @mmaridev (#310)
• Update setup.rst @oakmegaeddie (#307) (#308)