-
Notifications
You must be signed in to change notification settings - Fork 45
Release Notes
kbeckman edited this page Jul 25, 2014
·
5 revisions
Visit omniauth-wsfed on RubyGems.org.
- Gem dependency updates.
- Refactor to move ALL auth_request URL generation to AuthRequest class.
- Gem dependency updates.
- Removed AuthN token Created_At validation. Details here.
- Implemented WS-Trust and WS* field validation in AuthN token:
- Audience/Realm - validates the token's intent is specific to the relying party's realm
- Created - validates token creation date is not a timestamp in the future
- Expires - validates token has not exceeded its expiration timestamp at the time of validation
- Added additional callback validations:
- Token Issuer - requires the token issuer matches the configured issuer URI
- Claims - validates the list of AuthN claims is not empty
- Name/UID - validates the existence of a valid :id_claim as specified in the config settings
- Added a significant amount of unit tests to validate new functionality as well as existing, untested functionality.
- Factored out the Microsoft Windows Azure ACS JSON IdP feed functionality into a separate gem -- azure-acs.
- WS-Federation redirect for authentication supporting the following query string parameters:
- [wa] - wsignin1.0 action
- [wtrealm] - application/resource security realm
- [wreply] - application reply-to/callback URL
- [wtc] - current time of the authentication request
- [whr] - home realm identifier
- WS-Trust response parsing - SAML token signature and claims validation.
- WS-Federation home realm discovery - using [whr] query string parameter or custom URL.
- Supports SAML 2.0 token format.
- Bonus support for Microsoft Windows Azure ACS IdP JSON feed for custom home realm discovery.