Skip to content

CHANGELOG.md

Latest commit

 

History

History
195 lines (137 loc) · 6.45 KB

CHANGELOG.md

File metadata and controls

195 lines (137 loc) · 6.45 KB
Raw

Changes

Next

  • enhancement: new button to load a metadata file in the SAML IDP configuration page
  • enhancement: possiblity to see the SAML login log in the admin page
  • simplification of the admin page to set attributes mapping: there is now a single input field to set the login attribute mapping. In the configuration: the __login parameter from the [saml:attributes-mapping] section is not used anymore.

Version 2.9.0

  • enhancement: new configuration parameter to allow local logout instead of IDP logout

Version 2.8.1

  • Fix php error in Configuration::readIdPConfig()

Version 2.8.0

  • enhancement: security settings are now editable from the SAML admin page, allowing to match exact requirements from the SAML server.
  • enhancement: link to download the metadata file in the main configuration page
  • enhancement: improve UX on SP/IDP configuration page when certificates are not valid;
  • enhancement: log SAML errors into a specific log file (saml.log)
  • fix: there was an error when submitting the idp config form, whereas the idp encryption certificate was not given

Version 2.7.0

  • When Certificates are added or changed, security settings for signature are enabled automatically, unless certificates are not valid.
  • SAML properties configuration: fill the regeneration certificate form with existing certificate details
  • SAML properties configuration: the regeneration cert form allows selecting years of validity instead of days
  • SAML admin: show certificat details in forms allowing to set certificates.
  • Show messages on the SAML admin page and on the dashboard when some certificates are not valid (expired or missing for example).

Version 2.6.0

  • Fix: accounts are not duplicated anymore when, at each authentication process, the IDP provides same login but with a different character case. A configuration parameter caseSensitiveLogins=on allow to keep the old behavior if necessary.

Version 2.5.0

  • new configuration parameter, indicating to remove the groups prefix from groups given by SAML.
  • remove the configuration parameter "groups separator". It is useless, as groups are always given as a list.

Version 2.4.1

  • Update php-saml to 4.3.1, to fix a security issue into xmlseclibs: CVE-2025-66475

Version 2.4.0

  • New configuration parameter, to show only the SAML button on the login page. The login/password form is not shown except if there is a specific url parameter. A redirection can be done via a configuration parameter, set by hand, if this is not UX issue for the application.

Version 2.3.1

  • Update php-saml to 4.3.1, to fix a security issue into xmlseclibs: CVE-2025-66475

Version 2.3.0

  • Support of an SAML attribute containing groups to assign the user to jAcl2 groups automatically
  • new configuration parameter to change the default page to redirect to after login
  • Improve html with ids and div to ease CSS styling
  • Fix configuration: fix some PHP notices when some configuration parameters were missing

Version 2.2.5

  • Fix: there was a php error when certs_encryption_files was empty

Version 2.2.4

  • SAML admin: improve the appearance of content of certificates and keys.
  • Update authentication plugin for Jelix 1.8.3+

Version 2.2.3

  • Admin: hide the content of the dialog about certificate generation, that was always visible on the SP config page.

Version 2.2.2

  • Improve the presentation of the main configuration page.

Version 2.2.1

  • Show ACS and SLS adresses on the configuration panel
  • Fix: the metadata content is now available, even if the IDP properties are not set yet.

Version 2.2.0

  • admin: Display the URL of endpoint even if configuration is not done
  • admin, accounts: show authentication type in users details page
  • Configuration option to redirect directly to the SAML authentication page
  • Try to fix configuration cache issue
  • Fix some PHP warnings about jApp::configPath()

Version 2.1.5

  • add an uninstaller script, which remove the SAML configuration and restore previous authentication configuration.

Version 2.1.1, 2.1.2, 2.1.3 and 2.1.4

  • Fix upgrade with Jelix 1.7/1.8

Version 2.1.0

  • new installers for Jelix 1.7 and 1.8
  • compatibility with Jelix 1.8
  • Upgrade PHP-SAML to 4.0.1
  • Compatiblity with PHP 7.4 minimum

Version 2.0.1

  • Fix: removing accounts having upper case letter in their login name, did not work.
  • Fix: installers for Jelix 1.7+ were missing

Version 2.0.0

It allows now to choice the authentication method : by the classical login/password (provided by the jauth or the jcommunity module), or by SAML. It means that instead of redirecting the user to the identity provider web site when authentication is required, it shows the classical login/password form with an additional button to authenticate with Saml.

It fixes the logout initiated by the identity provider: PHP session linked to closed SAML session are now destroyed.

It provides a new module, samladmin, which allows to configure SAML within an administration web interface, with a generator of private key/certificate, with an automatic fill of idp parameters by retrieving a given metadata url of the idp.

For developers:

  • the jauth module is now required, except if you are using the jcommunity module
  • no more specific configuration for the jcommunity module
  • configuration changes:
    • no more after_login and after_logout in the saml:sp section
    • a jcache:saml profile can be setup to store correspondance between PHP session id and SAML session id.
    • new label parameter into [saml:idp] for the login button
  • API changes:
    • Jelix\Saml\Configuration does not required anymore a jRequest object for its constructor.

Version 1.0.3

  • Composer: add autoconfiguration for the Lizmap application

Version 1.0.2

  • Fix SP metadata : some data, like the sp certificate, were missing from metadata.
  • Upgrade PHP-Saml to 3.6.1

Version 1.0.1

  • Fix: installer should add the admin user into the admins group
  • Fix: kill full session when logout
  • Fix: do not cache the logout response into the browser

Version 1.0.0

Initial release.