* Include the XSD of the XML Encryption Syntax and Processing
Version 1.1 to the schema validator
- Update to 7.5.1
* deps: restrict pyOpenSSL up to v24.2.1 until it is replaced
* deps: update dependncies for the lockfile and examples
- add use-cryptography.patch to fix tests
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=77
- update to 7.5.0:
* Fix missing requested attributes from the ACS
* Add support for errorURL to be exposed in metadata for IdP
* Update logged message when the signature validation on the
assertion fails
* Replace imp with importlib
* deps: restrict xmlschema version
* deps: remove utility from packaging
* examples: update code and README to align with latest code
* docs: update readme with info about xmlsec1 compatibility
* misc: add pepy badges on the README file
- update requires
- add pycrypto/pyOpenSSL dependency
OBS-URL: https://build.opensuse.org/request/show/1218964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-pysaml2?expand=0&rev=32
* Fix missing requested attributes from the ACS
* Add support for errorURL to be exposed in metadata for IdP
* Update logged message when the signature validation on the
assertion fails
* Replace imp with importlib
* deps: restrict xmlschema version
* deps: remove utility from packaging
* examples: update code and README to align with latest code
* docs: update readme with info about xmlsec1 compatibility
* misc: add pepy badges on the README file
- update requires
- add pycrypto/pyOpenSSL dependency
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=75
- update to 7.4.2:
* Add support for xmlsec1 1.3.x
* Use the set crypto_backend when creating the entity metadata
* ## 7.4.1 (2023-02-24)
* Fix subject-id requirements processing
* ## 7.4.0 (2023-02-14)
* Ensure the ID of each Signature element is unique when
signing an encrypted assertion
* Bump Python to 3.9
* dev: Add mypy configuration and type stubs
* tests: move tox.ini config into pyproject.toml
* docs: Update release instructions
* ## 7.3.0 (2023-02-14)
* During metadata generation, render extensions both for
EntityDescriptor and IdPSSODescriptor
* Fix compatibility with certain SAML implementation that
inflate messasges on the POST binding
* Update the SWAMID entity category requirements
* Fix check for NameID when it originates from an encrypted
asssertion
* Add support for pymongo `>=3.5` and `<5`
* Update README with supported specifications
* Remove dependency on the six package
* Cleanup unused imports and pythonisms for Python versions
older than 3.6
* Convert README to markdown
* Introduce flake8 to check for issues
* Use black and isort to manage formatting and imports
* Use poetry to manage the project dependencies, packaging and
versions
OBS-URL: https://build.opensuse.org/request/show/1145159
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=73
- version update to 7.2.1 (2022-08-23)
* Accept and forward sign and digest alg information when creating a metadata string
* Fix tests to comply with latest xmlschema
- version update to 7.2.0 (2022-08-10)
* Add schemas for eIDAS extensions, elements and attributes
* Add the voPerson v2 attributes mappings; see reference
* Add the registration_info_typ method on saml2.mdstore.MetadataStore to get the registration information from an EntityDescriptor services
* Allow exceptions to convey the SAML StatusCode in an error response
* Fix typo on method name under saml2.mdstore.MetadataStore; from sbibmd_scopes to shibmd_scopes
* Add partial support for xs:date AttributeValue type
* Fallback to xs:string as the type of the AttributeValue text node
* Fallback to the authn context class declaration to set the authn context class reference
* Αdd configuration option http_client_timeout to set a timeout on the HTTP calls by the httpbase module
* Load certificates using cryptography and support certificate chains
* Remove deprecated cryptography backend param
* Fix assertion policy filter: Fallback to match a known attribute or return its name
* examples: Allow multiple attributes to be returned by the idp
* tests: Minor cleanups
* docs: Reference python2 compatible fork
* misc: add pepy badges on the README file
OBS-URL: https://build.opensuse.org/request/show/1008601
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=65
- version update to 7.1.2
## 7.1.2 (2022-03-04)
- fix assertion policy filter to try to resolve the local_name using the friendly name if it failed with the name_format
- reload metadata in-place to avoid memory leak
- tests: Restrict pymongo to v3
- docs: highlight installation command
## 7.1.1 (2022-02-22)
- Process and verify the metadata signature for EntitiesDescriptor and EntityDescriptor
- Fix client to be able to retry creating an AuthnRequest with a different binding
- Allow requested_authn_context to be an object
- AttributeValues are optional; allow Attributes to not have values
- Update SWAMID entity category to support https://myacademicid.org/entity-categories/esi
- Fix signing for requests with the SOAP binding
- tests: new test case for signed SOAP LogoutRequests
- docs: document the metadata node_name option for the remote source
- examples: align with latest updates
- deps: declare setuptools as a requirement for processing the package version
- build: add python 3.9 and 3.10 to classifiers
- misc: linter fixes
## 7.1.0 (2021-11-16)
- Fix signature verification for the redirect binding for AuthnRequest and
LogoutRequest.
- Include encryption KeyName in encrypted assertions.
- Add "reason" field in invalid signature errors due to invalid document format.
- New SP configuration option requested_authn_context to set the preferred
RequestedAuthnContext class reference.
- Add support for metadata refresh by adding a metadata_reload method into saml2.Entity.
This method is to be externally invoked, and to receive the same metadata
configuration as what was passed under the metadata key to saml2.Config. The method
loads a new metadata configuration and swaps it in (replacing the references across
OBS-URL: https://build.opensuse.org/request/show/967451
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=61
- removed obsolete 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
- Update to 7.0.1:
* 7.0.1 (2021-05-20)
- Preserve order of response bindings on IdP-initiated logout
- Fix use of expected binding on SP logout
* 7.0.0 (2021-05-18)
- **BREAKING** Replace encryption method rsa-1_5 with rsa-oaep-mgf1p
- Add documentation next to the code
* 6.5.2 (2021-05-18)
- Add shibmd_scopes metadata extractor
- Allow the Issuer element on a Response to be missing
- Respect the preferred_binding configuration for the single_logout_service
- Fix logout signature flags for redirect, post and soap requests
- Respect the logout_requests_signed configuration option
- Fix crash when applying policy on RequestedAttribute without a friendlyName
- Correctly validate IssueInstant
- Correctly handle AudienceRestriction elements with no value
- Raise InvalidAssertion exception when assertion requirements are not met
- Raise SAMLError on failure to parse a metadata file
- Raise StatusInvalidAuthnResponseStatement when the AuthnStatement is not valid
- Handle all forms of ACS endpoint specifications
- tests: Always use base64.encodebytes; base64.encodestring has been dropped
- build: Set minimum version needed for xmlschema
- docs: Update Travis CI badge from travis-ci.org to travis-ci.com
- examples: Fix example code
OBS-URL: https://build.opensuse.org/request/show/903776
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=60
- Update to 6.5.0 - Security release
* Fix processing of invalid SAML XML documents - CVE-2021-21238
* Fix unspecified xmlsec1 key-type preference - CVE-2021-21239
* Add more tests regarding XSW attacks
* Add XML Schemas for SAML2 and common extensions
* Fix the XML parser to not break on ePTID AttributeValues
* Fix the initialization value of the return_addrs property of the StatusResponse object
* Fix SWAMID entity-category policy regarding eduPersonTargetedID
* data: use importlib to load package data (backwards compatibility through the importlib_resources package)
* docs: improve the documentation for the signing_algorithm and digest_algorithm options
* examples: fix the logging configuration of the example-IdP
* tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents
* tests: improvements on the generation of response and assertion objects
* tests: expand tests on python-3.9 and python-3.10-dev
- added new build dependencies:
* python3-importlib-resources
* python3-xmlschema
* update-alternatives
- removed obsolete avoid-too-large-dates.patch
- replaced %python3_alternative by %python_alternative
OBS-URL: https://build.opensuse.org/request/show/865074
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=52
- update to 6.3.1:
- Fix extraction of RegistrationInfo when no information is available
- Fix http_info struct to include status-code
- Allow to specify policy configurations based on the registration authority.
- Add new configuration option `logout_responses_signed` to sign logout responses.
- When available and appropriate return the ResponseLocation along with the Location
attribute.
- Always use base64.encodebytes; base64.encodestring has been dropped.
- Examples: fix IdP example that was outputing debug statements on stdout that became
part of its metadata.
- CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
- CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
commit/merge on the master branch autotically creates a new pre-release. To install a
prelease, run:
- Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
- Set the default value for the NameFormat attribute to unspecified when parsing
- Support arbitrary entity attributes
- Replace all asserts with proper checks
- Allow request signing in artifact2message
- Support logging configuration through the python logger
- Fix wrong identifiers for ecdsa algos
- Fix automatic inversion of attribute map files
- Factor out common codepaths in attribute_converter
- Remove uneeded exception logging
- Docs: Update configuration options documentation
- Examples: Support both str and bytes in SAML requests on the example idp
- Examples: Update to key generation to 2048 bits
OBS-URL: https://build.opensuse.org/request/show/857125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-pysaml2?expand=0&rev=19
- Fix extraction of RegistrationInfo when no information is available
- Fix http_info struct to include status-code
- Allow to specify policy configurations based on the registration authority.
- Add new configuration option `logout_responses_signed` to sign logout responses.
- When available and appropriate return the ResponseLocation along with the Location
attribute.
- Always use base64.encodebytes; base64.encodestring has been dropped.
- Examples: fix IdP example that was outputing debug statements on stdout that became
part of its metadata.
- CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
- CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
commit/merge on the master branch autotically creates a new pre-release. To install a
prelease, run:
- Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
- Set the default value for the NameFormat attribute to unspecified when parsing
- Support arbitrary entity attributes
- Replace all asserts with proper checks
- Allow request signing in artifact2message
- Support logging configuration through the python logger
- Fix wrong identifiers for ecdsa algos
- Fix automatic inversion of attribute map files
- Factor out common codepaths in attribute_converter
- Remove uneeded exception logging
- Docs: Update configuration options documentation
- Examples: Support both str and bytes in SAML requests on the example idp
- Examples: Update to key generation to 2048 bits
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=46
- update to 6.1.0:
* Fix signed logout requests flag
* Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy Format
- Users using `name_id_format` to set the `<NameIDPolicy Format="...">` attribute now
need to use the new configuration option `name_id_policy_format`.
* Fix documentation formatting
* Fix generation of signed metadata
* Add attribute mappings used by SwedenConnect (DIGG, INERA and PKIX specifications)
* Update SWAMID entity category
* Document the `additional_cert_files` configuration option
OBS-URL: https://build.opensuse.org/request/show/820452
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=44
- Fix check for nameid_format set to the string "None" in the configuration
- Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
- Refactor create_authn_request method to be easier to reason about
- Fix NameIDPolicy checks for allowed Format and allowCreate values
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=42
- update to 5.1.0:
- support eIDAS RequestedAttributes per AuthnRequest
- fix xmlsec1 --id-attr configuration option value
- do not remove existing disco URL query params
- load attribute maps in predictable order
- better error message when AudienceRestriction does not validate
- always use base64.encodebytes instead of base64.encodestring
- update the eIDAS attribute mapping for legal person
- fix py_compile warnings
- fix pylint errors and warnings
- various small fixes
- add Python3.8 as supported
- tests: fix validity dates
- docs: document default value for 'want_response_signed'
OBS-URL: https://build.opensuse.org/request/show/814543
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-pysaml2?expand=0&rev=16
- support eIDAS RequestedAttributes per AuthnRequest
- fix xmlsec1 --id-attr configuration option value
- do not remove existing disco URL query params
- load attribute maps in predictable order
- better error message when AudienceRestriction does not validate
- always use base64.encodebytes instead of base64.encodestring
- update the eIDAS attribute mapping for legal person
- fix py_compile warnings
- fix pylint errors and warnings
- various small fixes
- add Python3.8 as supported
- tests: fix validity dates
- docs: document default value for 'want_response_signed'
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=40
- Update to 4.8.0:
* Refactor the way ForceAuthn is set: check for "true" and "1"
* Allow to set NameQualifier and SPNameQualifier attributes for ePTID
* Parse assertions with Holder-of-Key profile
* Add created_at timestamps to all mongodb documents
* Look for existing persistent id's before creating new ones
* Do not add AllowCreate property for default transient NameID
* Enable entity category import from module search path
* Add SAML subject identifier attributes to saml2_uri attributemap
* Fix deprecation warning regarding the cgi module - use the html module when available
* Misc minor improvements
* tests: Be compatible with latest pytest
* tests: Make tests pass after 2024
* tests: Add py37 as a test target
* docs: Correct instructions to run tests
* docs: Fix misc typos
OBS-URL: https://build.opensuse.org/request/show/717622
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-pysaml2?expand=0&rev=12
* Refactor the way ForceAuthn is set: check for "true" and "1"
* Allow to set NameQualifier and SPNameQualifier attributes for ePTID
* Parse assertions with Holder-of-Key profile
* Add created_at timestamps to all mongodb documents
* Look for existing persistent id's before creating new ones
* Do not add AllowCreate property for default transient NameID
* Enable entity category import from module search path
* Add SAML subject identifier attributes to saml2_uri attributemap
* Fix deprecation warning regarding the cgi module - use the html module when available
* Misc minor improvements
* tests: Be compatible with latest pytest
* tests: Make tests pass after 2024
* tests: Add py37 as a test target
* docs: Correct instructions to run tests
* docs: Fix misc typos
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pysaml2?expand=0&rev=27
oid sha256:2b93b50b768711e5ffc96c0b5630c1e50b3160335e267ed902d3a535385e9418
size 6065861
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
