Released: Aug 6, 2021

Updates in v3.7.0

Funktionen

• As well as .NET Standard 2.0 and 2.1, target .NET 5.0.
• Add support for certificate validation.
• Provide a better exception message in the destination check.
• Support charset being included in the Content-Type header for HTTP-Post.
• In SOAP binding, call FlushAsync after WriteAsync rather than relying on Dispose to avoid InvalidOperationException: Synchronous operations are disallowed.
• Add the IMetadataComparer interface for comparing SAML metadata.
• Add the CheckForMetadataUpdates example...

Released: May 27, 2021

Updates in v3.6.0

Funktionen

• Add Keep and Remove mapping rules.
• The ResolveToHttps configuration flag should only apply to relative URLs.
• Prefix the path base to relative URLs only in the SAML authentication handler and middleware.
• Supports IdP-initiated SSO relay state being specified through configuration.
• Update package dependencies.
• Include Blazor Server examples.

Released: Mar 25, 2021

Updates in v3.5.0

Funktionen

• Target .NET Standard 2.0 for .NET Core 2.0 and above and .NET Standard 2.1 for .NET Core 3.0 and above.
• Support AES-GCM data encryption.
• Support OAEP key encryption.

Released: Jan 20, 2021

Updates in v3.4.0

Funktionen

• Support Content-Security-Policy headers for JavaScript.
• Support the AuthenticationSchemeOptions.EventsType property.
• Add ResolveToHttps configuration to better support SSL terminating load balancers.
• Cache X.509 certificate in the memory cache rather than the distributed cache.
• Failover gracefully if the cached certificate cannot be loaded.
• Include Microsoft .NET 5 examples.

Released: Nov 19, 2020

Updates in v3.3.0

Funktionen

• Handle SAML assertions not including a subject.
• Supports EC-DSA signature algorithms.
• Use the X509KeyStorageFlags.EphemeralKeySet flag when loading certificates to avoid private key container permission issues.
• Supports encrypting the Name ID in the logout request.

Fehlerkorrekturen

• Fixed issue with SAML assertion serialization.

Released: Oct 20, 2020

Updates in v3.2.0

Funktionen

• Supports RSASSA-PSS signature algorithms (http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 etc).
• Allows refactoring the XML encryption and signatures classes so it is easier to support other algorithms.
• Ensures the assertion hasn’t expired before adding its ID to the assertion replay check cache.
• Fires the OnSendMessage after the message is signed rather than before.
• Supports an optional subject alternative name in CreateSelfSignedCert.
• Makes it easier to specify a different...

Released: Sep 7, 2020

Updates in v3.1.0

Funktionen

• Supports extending the MetadataImporter/MetadataExporter classes.
• Include BEGIN/END CERTIFICATE in CreateSelfSignedCert.

Released: May 7, 2020

Updates in v3.0.0

Funktionen

• Change the certificate manager to minimize the number of configuration resolver calls.
• Include HttpContext argument for all events.
• Include HttpContext argument for authentication handler and middleware delegates.
• Include .NET Core 3.1 examples.

Released: Mar 23, 2020

Updates in v2.9.0

Funktionen

• Validate decrypted SAML assertions against the SAML XML schemas.
• Remove any -----BEGIN/END CERTIFICATE----- when loading a certificate string.
• Support disabling IdP-initiated SSO.
• Tighten up the InResponseTo checking.

Released: Feb 22, 2020

Updates in v2.8.0

Funktionen

• Does not clear the cookie's secure flag if the connection isn't secure as there might be an SSL terminating load balancer.