New
1.17.0 (Sep 10, 2024)
1.17.0 (Sep 10, 2024)
- Fix for critical vulnerability CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector
- #687 Add CI coverage for Ruby 3.3 and Windows.
- #673 Add
Settings#sp_cert_multiparamter to facilitate SP certificate and key rotation. - #673 Support multiple simultaneous SP decryption keys via
Settings#sp_cert_multiparameter. - #673 Deprecate
Settings#certificate_newparameter. - #673
:check_sp_cert_expirationwill use the first non-expired certificate/key when signing/decrypting. It will raise an error only if there are no valid certificates/keys. - #673
:check_sp_cert_expirationnow validates the certificatenot_beforecondition; previously it was only validatingnot_after. - #673
:check_sp_cert_expirationnow causes the generated SP metadata to exclude any inactive/expired certificates.