Released: Oct 14, 2021

v4.0.0 での更新項目

機能

• Adds SamlDatabaseConfigurationResolver for storing SAML configuration using the Entity Framework.
• Adds SamlCachedConfigurationResolver for caching SAML configuration.
• Defaults to the current HTTP request if the AuthenticationProperties.RedirectUri hasn’t been specified when the authentication challenge method is called.
• Updates the SamlAuthenticationOptions.LoginCompletionUrl delegate to accept the redirectUri as an input argument.
• Adds ISamlProvider.ClearSessionAsync method to clear the...

Released: Aug 6, 2021

v3.7.0 での更新項目

機能

• As well as .NET Standard 2.0 and 2.1, target .NET 5.0.
• Add support for certificate validation.
• Provide a better exception message in the destination check.
• Support charset being included in the Content-Type header for HTTP-Post.
• In SOAP binding, call FlushAsync after WriteAsync rather than relying on Dispose to avoid InvalidOperationException: Synchronous operations are disallowed.
• Add the IMetadataComparer interface for comparing SAML metadata.
• Add the CheckForMetadataUpdates example.
• Add...

Released: May 27, 2021

v3.6.0 での更新項目

機能

• Add Keep and Remove mapping rules.
• The ResolveToHttps configuration flag should only apply to relative URLs.
• Prefix the path base to relative URLs only in the SAML authentication handler and middleware.
• Supports IdP-initiated SSO relay state being specified through configuration.
• Update package dependencies.
• Include Blazor Server examples.

Released: Mar 25, 2021

v3.5.0 での更新項目

機能

• Target .NET Standard 2.0 for .NET Core 2.0 and above and .NET Standard 2.1 for .NET Core 3.0 and above.
• Support AES-GCM data encryption.
• Support OAEP key encryption.

Released: Jan 20, 2021

v3.4.0 での更新項目

機能

• Support Content-Security-Policy headers for JavaScript.
• Support the AuthenticationSchemeOptions.EventsType property.
• Add ResolveToHttps configuration to better support SSL terminating load balancers.
• Cache X.509 certificate in the memory cache rather than the distributed cache.
• Failover gracefully if the cached certificate cannot be loaded.
• Include Microsoft .NET 5 examples.

Released: Nov 19, 2020

v3.3.0 での更新項目

機能

• Handle SAML assertions not including a subject.
• Supports EC-DSA signature algorithms.
• Use the X509KeyStorageFlags.EphemeralKeySet flag when loading certificates to avoid private key container permission issues.
• Supports encrypting the Name ID in the logout request.

不具合の修正

• Fixed issue with SAML assertion serialization.

Released: Oct 20, 2020

v3.2.0 での更新項目

機能

• Supports RSASSA-PSS signature algorithms (http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 etc).
• Allows refactoring the XML encryption and signatures classes so it is easier to support other algorithms.
• Ensures the assertion hasn’t expired before adding its ID to the assertion replay check cache.
• Fires the OnSendMessage after the message is signed rather than before.
• Supports an optional subject alternative name in CreateSelfSignedCert.
• Makes it easier to specify a different target for...

Released: Sep 7, 2020

v3.1.0 での更新項目

機能

• Supports extending the MetadataImporter/MetadataExporter classes.
• Include BEGIN/END CERTIFICATE in CreateSelfSignedCert.

Released: May 7, 2020

v3.0.0 での更新項目

機能

• Change the certificate manager to minimize the number of configuration resolver calls.
• Include HttpContext argument for all events.
• Include HttpContext argument for authentication handler and middleware delegates.
• Include .NET Core 3.1 examples.

Released: Mar 23, 2020

v2.9.0 での更新項目

機能

• Validate decrypted SAML assertions against the SAML XML schemas.
• Remove any -----BEGIN/END CERTIFICATE----- when loading a certificate string.
• Support disabling IdP-initiated SSO.
• Tighten up the InResponseTo checking.