CHANGELOG.md

8.0.0 (2026-03-31)

Features

• add encryption algorithm options (#157) (1444aad)

BREAKING CHANGES

• adding encryption algorithm in options(if not set, defaults to http://www.w3.org/2009/xmlenc11#aes256-gcm), adding disallowEncryptionWithInsecureAlgorithm to enforce secure encryption algorithms

7.1.1 (2023-11-20)

Bug Fixes

• support signed logout response sent via POST (#140) (5274d62)

7.1.0 (2023-07-24)

Features

• add support for per-participant bindings during SLO (9f21610)

7.0.2 (2022-06-09)

Bug Fixes

• Update saml and ejs dependencies (#132) (26b8cbd)

7.0.1 (2022-05-19)

Bug Fixes

• install updated saml to address issue with malformed pem (#129) (ce5cb5c)

7.0.0 (2022-02-09)

⚠ BREAKING CHANGES

• Requires NodeJS >= 12

See https://github.com/auth0/node-saml/releases/tag/v2.0.0

Bug Fixes

• remove vulnerable node-saml dependency (#126) (bab5bd0)

6.0.2 (2021-06-07)

6.0.1 (2021-03-02)

• Use @auth0/xmldom (#119)

6.0.0 (2021-02-23)

⚠ BREAKING CHANGES

• The expected signature of SessionParticipants.get has been changed to SessionParticipants.get(issuer, sessionIndices, nameId, cb) where sessionIndices is an array of SessionIndex values from the LogoutRequest. Previously, this was called with only a single value: the value of first SessionIndex element from the LogoutRequest. The effect is that any matching SessionIndex specified in a LogoutRequest may be used to identify a matching SessionParticipant when processing the logout request. (ef9a056).

5.0.1 (2021-02-10)

Bug Fixes

• build fix from merge (24fa8be)

5.0.0-rc.1 (2021-01-22)

5.0.0-rc.0 (2021-01-22)

⚠ BREAKING CHANGES

• fix npm audit and library upgrades

• remove ci for node v4, 6, 8, add 14

• fix npm audit and library upgrades (a2688c7)

• remove ci for node v4, 6, 8, add 14 (3019b74)

5.0.0 (2021-02-09)

⚠ BREAKING CHANGES

• Fix dependency security issues (#114)

• Fix dependency security issues (#114) (26bb934)