Releases: apereo/cas
Releases · apereo/cas
v4.1.2
- 62d6612 Reset the status endpoint's access security rule (@mmoayyed)
- 588dd1e Service username shall pass through attribute release policy (@mmoayyed)
- 4617f12 updated spring lib version (@mmoayyed)
- #1277 Ensure the logger is declared as transient (@mmoayyed)
- 71bfaef fix redirect loop on password expiration warning (@tduehr)
- 1a31315 remove service deletion during edit process (@tduehr)
- #1267 HttpOnly / Secure not set when "removing" CAS cookies (@mmoayyed)
- #1268 Provide a skewAllowance for SAML2 google apps (@mmoayyed)
- f2e33ed #1239 Wrong state type for logoutView in logout-webflow (@RaphC)
- 369e962 Fix bug in form validation for proxy service regex. (@fjollberg)
v4.0.7
- #1283 Updated spring lib version (@mmoayyed)
- 492e76c Fix redirect loop on password expiration warning (@tduehr)
- a6be1c8 HttpOnly / Secure not set when "removing" CAS cookies (@mmoayyed)
- #1251 #1239 Wrong state type for logoutView in logout-webflow (@RaphC)
- 5808a7b Fixed memcached serialization issue with no-arg constructors (@mmoayyed)
v4.1.1
- dc58696 ac526a3 fixed memcached serialization issue with no-arg constructors (@mmoayyed)
- 766b305 fixed issue with attribute repository serialization. (@mmoayyed)
- #1210 Removed NotNull annotation from
PrincipalAttributeRepository(@mmoayyed) - df36c69 fixed issue with inflation of saml authN request for google apps (@mmoayyed)
- #1189 Clean out all STs immediately when TGT is destroyed (@mduszyk)
- #1196 Upgrade ldaptive to 1.0.7 (@mmoayyed)
- 6f614c2 migrate vt-crypt dependency to cryptacular (@mmoayyed)
- 7d270eb removed service ticket registry from central auth service (@mduszyk)
- 4eff107 Enable returning of null principal per config, when no attributes are found (@mmoayyed)
- a75af8e removed transactional (@mmoayyed)
v4.0.6
v4.1.0
- #1153 Upgrade Java CAS Client to v3.4.1 (@battags)
- #1102 Documentation: Update Package Name for SAML. (@loren138)
- #1093 Support openid.identity=http://specs.openid.net/auth/2.0/identifier_select (@leleuj)
- #1095 Determine management app context path dynamically (@mmoayyed)
- #1083 Management webapp redesign (@mmoayyed, @doodelicious, @rkorn86)
- #1071 Mongo support module (@mmoayyed)
- #1069 BugFix: registered services equality mismatch (@mmoayyed)
- #1072 Removed extra linebreak to allow openid4java parsing (@mmoayyed)
- #1073 Update the OpenID documentation for v2 support (@leleuj)
- #1068 fixed kryo issue with unmodifiable cols. backport from master (@mmoayyed)
- #1055 #1049 - Fix serialization bug with EhcacheTicketRegistry (@AmmarBelakhel)
- #1064 Json file naming convention (@mmoayyed)
- #1054 Hazelcast Ticket Registry implementation. (@dima767)
- #1045 Move creation of HandlerResult up the chain (@mmoayyed)
- #992 CRL checking to optionally try all URLs (@mmoayyed)
- #993 Allow CAS to parse/display SAML MDUI (@mmoayyed)
- #1041 Missing French translations (@leleuj)
- #1039 Issues-1038 added the close method on abstract pool to free the resource on undeploy (@NicolasMarcotte)
- #1032 Fix OpenSAML initialization error (@mmoayyed)
- #1001 Moved CAS core APIs into separate API module (@mmoayyed)
- #1031 Upgrade to Apereo parent v40. (@mmoayyed)
- #1005 Allow JsonSvcReg to auto-detect changes (@mmoayyed)
- #1010 Moved encoding filter to the top (@mmoayyed)
- #1023 Move request security filter to filters.xml (@mmoayyed)
- #1021 Clean up how null errors/warnings are handled by LPPE (@mmoayyed)
- #1020 Login flow Transcoding config (@mmoayyed)
- #1029 Update pac4j to version 1.7.1 (@leleuj)
- #1000 Added Jetty plugin config (@mmoayyed)
- #1011 Updated maven plugins to latest patch releases (@mmoayyed)
- #1024 CAS-1227: Ukranian language bundle (@mmoayyed)
- #1019 cas-server-integration-memcached pulls on two version of kryo (@NicolasMarcotte)
- #1015 Updated metrics, time and reflections libs. (@mmoayyed)
- #1013 Updated AspectJ version (@mmoayyed)
- #1014 Updated hibernate version (@mmoayyed)
- #1017 Log4j update (@mmoayyed)
- #1012 Updated spring security version (@mmoayyed)
- #1009 Check for gateway mode on invalid TGT (@frett)
- #999 Updated Polish translations for version 4.1.x; issue #994 (@gerbil14)
- #834 Issue-825: Always add the TGT in request AND flow scope (@leleuj)
- #833 Updated copyright year to 2015 (@mmoayyed)
- #822 Context listener to report on CAS environment info. (@mmoayyed)
- #829 Drop cas-server-protocol module (@mmoayyed)
- #818 SSO-disabled service can never be granted ST (@mmoayyed)
- #821 Issue-820: 'ticketId cannot be null' for a Facebook authentication (@leleuj)
- #824 Added Implementation-Date to JAR Manifests (@mmoayyed)
- #436 CAS-1179: TGT Expiration Policy Evaluators (@mmoayyed)
- #811 Issue-758: Revise and update Kryo serialization mechanism (@leleuj)
- #814 JSON Service Registry now made default (@mmoayyed)
- #676 Issue 468: Support for dynamic/caching principal attributes (@mmoayyed)
- #788 Issue-782: Update the security filter to version 2.0.0 (@leleuj)
- #772 Issue-740: Limit the queue size in the default ThreadPool in the SimpleHttpClient (@leleuj)
- #741 JSON serialization of RegisteredService into LDAP (@mmoayyed)
- #743 GoogleService: SAML response refactoring (@mmoayyed)
- #777 Allow TGT expiration policy control via CAS properties (@mmoayyed)
- #747 Support for displaying RegisteredService information on login form (@mmoayyed)
- #773 Update OpenID4Java; Removes dependency on missing guice:2.0 (@mmoayyed)
- #750 Add warning to InMemory Service Registry (@mmoayyed)
- #730 Allow CAS to return ticket objects rather than mere identifers (@mmoayyed)
- #345 CAS-1367: Move spring webflow conversaional state onto the client (@mmoayyed)
- #727 Attributes in SAML View Filtered by Attribute Policy (@mmoayyed)
- #729 Upgrading Ehcache to 2.9 (@mmoayyed)
- #721 Update OAuth20ProfileController: bearer tokens in the authorization header (@mikeroda)
- #674 Access principal in success view (@mmoayyed)
- #694 Configuration of host.name in multi-node deployments (@mmoayyed)
- #707 Issue 609: CAS OAuth Support 3.5.2 - 'service' query parameter is not being restored correctly (@leleuj)
- #711 OpenIdArgumentExtractor parent should be AbstractArgumentExtractor (@mmoayyed)
- #703 Use default theme, if no theme is found for the service (@mmoayyed)
- #696 do not focus username field, if another field is already selected (@sdorra)
- #700 OAuth approval prompt via a new configurable property (@mmoayyed, @steve-gregory, @edwins, @dennisroberts71)
- #701 Improved configuration of cas.properties location (@manamana88)
- #692 Issue #552 Avoid usage count in SSO opt-out check. (@serac)
- #697 Deprecated JBoss cache and uber-webapp modules (@mmoayyed)
- #665 JDBC QueryAndEncodeDatabaseAuthenticationHandler (@mmoayyed)
- #682 FileTrustStoreSslSocketFactory must support JVM truststore (@mmoayyed)
- #688 cas-687: SEC_1: remove default non-secure support in the services registry (@leleuj)
- #683 Issue 610: Non-configurable 'CasProfile#' username prefix in serviceResponse (@leleuj)
- #1 added attribute support to the CAS 2 authentication success response (@dennisroberts71)
- #446 CAS-1475: Refactoring of GoogleApps altUsername config (@mmoayyed)
- #444 CAS-1425: aligned view names to match the jsp filename (@mmoayyed, @jtgasper3)
- #647 Issue #460: TGT id to not be disclosed in logs (@mmoayyed)
- #671 Issue #670: Client authentication from pac4j should always return typed identifier (@leleuj)
- #677 Upgrade to JDK7 (@mmoayyed)
- #673 Issue #658: SAML validation now forcing service match (@mmoayyed)
- #640 SAML principal attribute release must pass through the policy (@mmoayyed)
- #650 Turn on/off slo per service, by having a new logout type for ... (@mmoayyed)
- #664 cas-663: Both log4j-over-slf4j.jar and slf4j-log4j12.jar in the management webapp (@leleuj)
- #662 return logout request to be application/x-www-form-urlencoded (@skibaa)
- #659 Ability to include multiple config files for the DispatcherServlet child application context (@dima767)
- #601 CAS-1466: Local truststore for proxy authentication (@mmoayyed)
- #642 Allow for time skewing ...
v4.0.5
v4.1.0-RC2
[maven-release-plugin] copy for tag v4.1.0-RC2
v4.1.0-RC1
[maven-release-plugin] copy for tag v4.1.0-RC1
v4.0.4
- #1037 Upgrade CAS 4.0.x to Pac4j 1.7.x (@leleuj)
- #1081 Exclude Restlet endpoints from Security Filter Mapping (@mmoayyed)
- #1079 SAML attributes should be fetched off of primary authN (@mmoayyed)
- c4f347d Removed extra linebreak to allow
openid4javaparsing (@mmoayyed) - #1067 Backported memcached+kryo update (@mmoayyed)
- #1049 Fix serialization bug with
EhcacheTicketRegistry(@mmoayyed) - #1057 Updated Spring to version 3.2.9 due to
SPR-11719(@philippberger)
v4.0.3
- 481a32b Ported over security filter changes v2.0.3 (@mmoayyed)
- dd28134 Moved UTF-8 character encoding filter to top (@mmoayyed)
- 7501389 Fixed LPPE warning flag for warnings (@mmoayyed)
- 6d981b3 Check for gateway mode on invalid TGT (@mmoayyed)
- f537fdc Updated ldaptive to version 1.0.6 (@mmoayyed)
- 4926c28 Updated Polish translations (@mmoayyed)