- Minimum supported lxml version is now 5.0.
- Minimum supported minisignxml version is now 24.6.
- Added support for python 3.12.
- Added support for
saml_endpoint
URLs with a query string inminisaml.request.get_request_redirect_url
thanks to a contribution by @thesebas.
- Breaking
minisaml.response.validate_response
now requires an additional parameteridp_issuer
. - Breaking Several dependencies had their minimum supported version updated.
- Added
minisaml.response.validate_multi_tenant_response
to make integrating MiniSAML into multi-tenant systems easier and safer.
- Added
allowed_time_drift
parameter tominisaml.response.validate_response
to allow for clock inaccuracies when validating SAML responses. minisaml.errors.ResponseExpired
now stores both the observed time and the time limit of the SAML response as attributes on the exception.minisaml.errors.ResponseTooEarly
now stores both the observed time and the time limit of the SAML response as attributes on the exception.- Added more documentation, changed documentation theme.
- Minimum supported minisignxml version is now 22.4.
- Allow passing multiple certificates to
minisaml.repsonse.validate_response
to allow certificate rollover. - Added the certificate used in
minisaml.repsonse.validate_response
to the returnedminisaml.repsonse.Response
. - Minimum supported minisignxml version is now 20.11b0.
- Breaking
minisaml.repsonse.Attribute.value
is now of typeOptional[str]
- Breaking
minisaml.response.Response.attrs
is now of typeDict[str, Optional[str]]
- Improved support for Attribute Statements. Attributes with multiple values or no values are now supported.
- Added
minisaml.response.Attribute.values
(List[str]
) - Fixed incorrect Base64 encoding of SAML Requests.
- Support sub-second resolution for datetimes in SAML responses.
- Fix minisignxml dependency specifier
- Support SAML signatures with non-SHA256 digest and signinig algorithms
- Relaxed type hint for validate_response to allow strings as well as bytes.
- Added documentation.
- NameFormat on saml:Attribute is optional
- Initial release