Version 5.1.0

5.1.0 (2020-06-09)

• support eIDAS RequestedAttributes per AuthnRequest
• fix xmlsec1 --id-attr configuration option value
• do not remove existing disco URL query params
• load attribute maps in predictable order
• better error message when AudienceRestriction does not validate
• always use base64.encodebytes instead of base64.encodestring
• update the eIDAS attribute mapping for legal person
• fix py_compile warnings
• fix pylint errors and warnings
• various small fixes
• add Python3.8 as supported
• tests: fix validity dates
• docs: document default value for 'want_response_signed'

Version 5.0.0 - Security release

5.0.0 (2020-01-13) - Security release

• Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
• Add freshness period feature for MetaDataMDX
• Fix bug in duration calculation in time_util library
• Fix ipv6 validation to accommodate for addresses with brackets
• Fix xmlsec temporary files deletions
• Add method to get supported algorithms from metadata
• Add mdstore method to extract assurance certifications
• Add mdstore method to extract contact_person data
• Add attribute mappings from the Swiss eduPerson Schema
• Make AESCipher and Fernet interfaces compatible
• Remove deprecated saml2.aes module
• Remove deprecated saml2.extensions.ui module
• Replace deprecated mongodb operations
• Rename ToOld error to TooOld
• Fix pytest warnings
• Mock tests that need a network connection
• Start dropping python2 support

Version 4.9.0

4.9.0 (2019-11-03)

• Add mdstore methods to extract mdui uiinfo elements
• Add attribute mapping for umbrellaID attributes
• Fix logic error in pick_binding method for Entity class
• Validate the audience of assertions regardless of a response being unsolicited
• Fix PKCS_9 saml_url prefix
• docs: Fix warnings from docs generation
• docs: Update release instructions regarding branch releases
• docs: Fix list formatting on IdP example page
• docs: Update pysaml2 options doc with name_id_format_allow_create
• misc: fix various typos

Version 4.8.0

4.8.0 (2019-07-08)

• Refactor the way ForceAuthn is set: check for "true" and "1"
• Allow to set NameQualifier and SPNameQualifier attributes for ePTID
• Parse assertions with Holder-of-Key profile
• Add created_at timestamps to all mongodb documents
• Look for existing persistent id's before creating new ones
• Do not add AllowCreate property for default transient NameID
• Enable entity category import from module search path
• Add SAML subject identifier attributes to saml2_uri attributemap
• Fix deprecation warning regarding the cgi module - use the html module when available
• Misc minor improvements
• tests: Be compatible with latest pytest
• tests: Make tests pass after 2024
• tests: Add py37 as a test target
• docs: Correct instructions to run tests
• docs: Fix misc typos
• examples: Set cherrypy version explicitly

Version 4.7.0

4.7.0 (2019-04-02)

• Add support for MDQ signature verification
• Raise XmlsecError if xmlsec1 operations do not succeed
• Handle non standard response error status codes correctly
• Remove the hardcoded warning filter; pass -Wd to the python
  interpreter to enable warnings
• Remove the python-future dependency and only use six
• Minor python2 and python3 compatibility fixes
  (unicode strings and example code)
• Minor documentation fixes

Version 4.6.5

4.6.5 (2018-12-04)

• Fix for response status error case handling (introduced in v4.6.5)
• Added assurance-certification support
• Added entity-category-support support

Thanks @rectalogic @skanct

Version 4.6.4

Changelog

4.6.4 (2018-11-22)

• Make use of the sign argument to entity.Entity::apply_binding when binding is
  HTTP-Redirect. Reminder: use authn_requests_signed configuration option
  to indicate that Authentication Requests sent by the SP must be signed
• Add want_assertions_or_response_signed configuration option - see
  documentation about the introduced behaviour
• Fix code for idp and sp examples
• Do not require assertion conditions
• Fix response encoding format
• Various code improvements for config, sigver, client_base, client,
  ecp_client, ecp, s2repoze and entity modules
• Support non-ascii attribute values for encryption and decryption

Thanks to @johanlundberg @skoranda @yuqing0708 @erakli

Version 4.6.3

Do not map between attribute FriendlyName and attribute Name when no attributemaps are provided.

Version 4.6.2

4.6.2 (2018-09-06)

Refactor AttributeValueBase::set_text method.

• set_text is doing too many things. At least the structure is a bit cleaner;
  though, still complex.
• set_text will set the type if no type has been set.
• set_text should not modify the type if it has already been set,
• set_text should not depend on the type's namespace.
• set_text should not interfere with the 'anyType' type.
• set_text will raise a ValueError if the value cannot be represented by the
  type.
• set_text will raise a ValueError if the type is unknown.

Version 4.6.1

4.6.1 (2018-08-29)

• Allow multiple AttributeStatement tags per Assertion
• Raise ValueError for invalid attribute type
• Make NameID element optional
• tests: fix test that depended on actual datetime
• build: Set minimum build-tool version through pyproject.toml