Samlify Versions Save

• Xml entity escape @Munawwar
• Add dom parser options for context customization #535 @bsShoham

fix encryption for @xmldom/xmldom 0.8.6 upgrade https://github.com/tngan/samlify/pull/511 (@mastermatt)

fix: system locale effects camelcase conversion https://github.com/tngan/samlify/pull/507 (@ayZagen) fix: support unencrypted PKCS#8 keys again https://github.com/tngan/samlify/pull/503 (@mastermatt)

• extract sessionIndex from LogoutRequest #501 (@zentooo)
• allow arrays of certs #499 (@mastermatt)
• fix init issue in logoutResponseRedirectURL function #496 (@wujjpp)

Upgrade @xmldom/xmldom to v0.8.3 to include the security patch (#492) @dan-diaz Upgrade uuid version (#486) @andrew-m-civica

What's Changed

• Fixes issue with SAMLSignature method not using default transformations by @stjeffrey in https://github.com/tngan/samlify/pull/473
• Makes normalizeCerString() handle inserted tabs (fixes issue with Okta) by @hackerceo in https://github.com/tngan/samlify/pull/481

New Contributors

• @stjeffrey made their first contribution in https://github.com/tngan/samlify/pull/473
• @hackerceo made their first contribution in https://github.com/tngan/samlify/pull/481

This note is automatically generated.

• Update node-xml-encryption with the latest upstream update for security patch (https://github.com/tngan/samlify/issues/474)
• Fix broken tests after upgrade
• Take default encryption key algorithm as http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
  • The previous default is no longer to be recommended, for more detail, https://github.com/auth0/node-xml-encryption/blob/291f3f10d5d1d571a3b6da2d411aa323398f5650/lib/xmlenc.js#L54-L56
• Upgrade dev dependencies

This patch release includes the node-forge package upgrade in order to resolve a security issue.

node-forge v.1

This patch includes a proper fix and test after major dependencies upgrade. Thanks for the reports from @arthurrump and @oniemela.