Releases: boxyhq/saml20
Releases · boxyhq/saml20
saml20 v1.0.1
Changed
- Minor refactoring
saml20 v1.0.0
Changed
- Converted code to TypeScript
Added
- XML signing
- AuthnRequest generation
- Certificate utilities
- Signature validation
saml20 v0.2.1
Security
- Added tests for https://www.kb.cert.org/vuls/id/475445, code was already protected against this attack
Fixed
- Handle exception when parsing a response which does not have an assertion
saml20 v0.2.0
Security
- Protect against signature, assertion, and response wrapping attacks
Changed
- Formatting
- Updated dependencies
saml20 v0.1.7
Added
- Support for validation of InResponseTo (for SP initiated flow)
Changed
- Updated xmldom
saml20 v0.1.5
Fixed
- ADFS fix
Security
- Updated dependencies (including security vulnerabilities)