Skip to content

Bump python3-saml from 1.9.0 to 1.10.1

Bumps python3-saml from 1.9.0 to 1.10.1.

Release notes

Sourced from python3-saml's releases.

OneLogin's SAML Python3 Toolkit v1.10.1

  • Fix bug on LogoutRequest class, get_idp_slo_response_url was used instead get_idp_slo_url

OneLogin's SAML Python3 Toolkit v1.10.0

  • Added custom lxml parser based on the one defined at xmldefused. Parser will ignore comments and processing instructions and by default have deactivated huge_tree, DTD and access to external documents
  • Destination URL Comparison is now case-insensitive for netloc
  • Support single-label-domains as valid. New security parameter allowSingleLabelDomains
  • Added get_idp_sso_url, get_idp_slo_url and get_idp_slo_response_url methods to the Settings class and use it in the toolkit
  • #212 Overridability enhancements. Made classes overridable by subclassing. Use of classmethods instead staticmethods
  • Add get_friendlyname_attributes support
  • Remove external lib method get_ext_lib_path. Add set_cert_path in order to allow set the cert path in a different folder than the toolkit
  • Add sha256 instead sha1 algorithm for sign/digest as recommended value on documentation and settings
  • #178 Support for adding idp.crt from filesystem
  • Add samlUserdata to demo-flask session
  • Fix autoreloading in demo-tornado
Changelog

Sourced from python3-saml's changelog.

1.10.1 (Jan 27, 2021)

  • Fix bug on LogoutRequest class, get_idp_slo_response_url was used instead get_idp_slo_url

1.10.0 (Jan 14, 2021)

  • Added custom lxml parser based on the one defined at xmldefused. Parser will ignore comments and processing instructions and by default have deactivated huge_tree, DTD and access to external documents
  • Destination URL Comparison is now case-insensitive for netloc
  • Support single-label-domains as valid. New security parameter allowSingleLabelDomains
  • Added get_idp_sso_url, get_idp_slo_url and get_idp_slo_response_url methods to the Settings class and use it in the toolkit
  • #212 Overridability enhancements. Made classes overridable by subclassing. Use of classmethods instead staticmethods
  • Add get_friendlyname_attributes support
  • Remove external lib method get_ext_lib_path. Add set_cert_path in order to allow set the cert path in a different folder than the toolkit
  • Add sha256 instead sha1 algorithm for sign/digest as recommended value on documentation and settings
  • #178 Support for adding idp.crt from filesystem
  • Add samlUserdata to demo-flask session
  • Fix autoreloading in demo-tornado
Commits
  • 9825605 Release 1.10.1
  • 5f276d8 Merge pull request #235 from nltommynl/nltommynl-sp-initiated-slo-fix
  • 2db9284 Update logout_request.py
  • ad47c8e Merge pull request #230 from daxxog/master
  • 3fa8f72 More description for X-Forwarded header in comments.
  • d5304e0 Commented out X-Forwarded bit in views.py
  • 615bb73 Add reference to python 3.8 and 3.9 support
  • 3ccf9ab Release 1.10.0
  • c25df81 Added custom lxml parser based on the one defined at xmldefused. Update copyr...
  • 95f06d3 Add _generate_request_id to logout_request and logout_response and replace st...
  • Additional commits viewable in compare view

Merge request reports