Python3-saml

Latest version: v1.16.0

Safety actively analyzes 613460 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 5

1.16.0

- [364](https://github.com/SAML-Toolkits/python3-saml/commit/d1bfaeb17a786735827b8252b91deafde29dabd8) Improve get_metadata method from Parser, allowing to set headers
- Fix WantAuthnRequestsSigned parser
- Fix expired payloads used on tests
- Updated content from docs folder

1.15.0

- [317](https://github.com/SAML-Toolkits/python3-saml/pull/317) Handle unicode characters gracefully in python 2
- [338](https://github.com/SAML-Toolkits/python3-saml/pull/338) Fix WantAuthnRequestsSigned parser
- [339](https://github.com/SAML-Toolkits/python3-saml/pull/339) Add Poetry support
- Remove version restriction on lxml dependency
- Updated Django demo to 4.X (only py3 compatible)
- Updated Travis file. Forced lxml to be installed using no-validate_binary
- Removed references to OneLogin from documentation

1.14.0

- [297](https://github.com/onelogin/python3-saml/pull/297) Don't require yanked version of lxml.
- [298](https://github.com/onelogin/python3-saml/pull/298) Add support for python 3.10 and cleanup the GHA.
- [299](https://github.com/onelogin/python3-saml/pull/299) Remove stats from coveralls removed as they are no longer maintained.

1.13.0

- [296](https://github.com/onelogin/python3-saml/pull/296) Add rejectDeprecatedAlgorithm settings in order to be able reject messages signed with deprecated algorithms.
- Set sha256 and rsa-sha256 as default algorithms
- [288](https://github.com/onelogin/python3-saml/pull/288) Support building a LogoutResponse with non-success status
- Added warning about Open Redirect and Reply attacks
- [274](https://github.com/onelogin/python3-saml/pull/274) Replace double-underscored names with single underscores
- Add at OneLogin_Saml2_Auth get_last_assertion_issue_instant() and get_last_response_in_response_to() methods
- Upgrade dependencies

1.12.0

Not secure
* [276](https://github.com/onelogin/python3-saml/pull/276) Deprecate server_port from request data dictionary

1.11.0

Not secure
* [261](https://github.com/onelogin/python3-saml/pull/261) Allow duplicate named attributes, controlled by a new setting
* [268](https://github.com/onelogin/python3-saml/pull/268) Make the redirect scheme matcher case-insensitive
* [256](https://github.com/onelogin/python3-saml/pull/256) Improve signature validation process. Add an option to use query string for validation
* [259](https://github.com/onelogin/python3-saml/pull/259) Add get metadata timeout
* [246](https://github.com/onelogin/python3-saml/pull/246) Add the ability to change the ProtocolBinding in the authn request.
* [248](https://github.com/onelogin/python3-saml/pull/248) Move storing the response data into its own method in the Auth class
* Remove the dependency on defusedxml
* [241](https://github.com/onelogin/python3-saml/pull/241) Improve AttributeConsumingService support
* Update expired dates from test responses
* Migrate from Travis to Github Actions

Page 1 of 5

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.