Skip to content

v2.0.0

Choose a tag to compare

@adamstegman adamstegman released this 24 Apr 15:20
· 9 commits to master since this release
9d2ad5e

New features

  • Store IDP session index in session to allow multiple sessions per user (#255)
    • BREAKING CHANGE: single logout is enabled by default. Set Devise.saml_session_index_key to nil to disable.
    • BREAKING CHANGE: single logout session index key is now stored in session instead of as a column on the User model. Remove Devise.saml_session_index_key from your Devise config and you can drop that column from your users table after this update is deployed.

Fixes

  • [refactor]use find_by instead of where + first (#233)
  • Bump ruby-saml to v1.17.0 to fix CVE-2024-4540 (#256)
  • Using model name in logs instead of user (#258)
  • Dependency-vulnerability: ruby-saml to 1.18, updates for tests to pass (#263)

Housekeeping

  • Fix Build Status on README (#238)
  • Bump actions/checkout from 3 to 4 (#240)
  • Add Rails 7.1 to CI (#246)
  • Update README.md (#247)
    • "Surface ruby-saml's single_value_compatibility, which is easy to miss and a non intuitive default"