Skip to content

OneLogin's SAML PHP Toolkit v2.6.0

Compare
Choose a tag to compare
@pitbulk pitbulk released this 17 Jul 10:37
· 513 commits to master since this release

This 2.6.0 version:

  • Set NAMEID_UNSPECIFIED as default NameIDFormat to prevent conflicts with IdPs that don't support NAMEID_PERSISTENT.
  • Now the SP is able to select the algorithm to be used on signatures (DSA_SHA1, RSA_SHA1, RSA_SHA256, RSA_SHA384, RSA_SHA512).
  • Change visibility of _decryptAssertion to protected.
  • Update xmlseclibs library.
  • Handle valid but uncommon dsig block with no URI in the reference.
  • login, logout and processSLO now return ->redirectTo instead of just call it.
  • Split the setting check methods. Now 1 method for IdP settings and other for SP settings.
  • Let the setting object to avoid the IdP setting check. required if we want to publish SP SAML Metadata when the IdP data is still not provided.