samlauth 8.x-3.10

Add a summary here

Contributors (18)

japerry, roderik, geertvd, sker101, bmelvin1, adamfranco, John Franklin, azinck, Dave Reid, chx, gpotter, alex_sansom, malcomio, michael.roosz, Rudi Teschner, joelpittet, DrIPA, Mingsong

Changelog

Issues: 19 issues resolved.

Changes since 8.x-3.9:

Bug

• #3424834 by japerry, roderik: increase minimum externalauth version to minimize confusion about "Links" list.
• #2939159 by geertvd: Redirect after login not correct when using base_path
• #3309724: circumvent PHP-SAML checks to be able to generate metadata after setting just SP details.
• #3365193 by sker101, roderik: Keep /saml/logout working after successful SAML auth + Drupal login failure.
• #3377532 by roderik, alex_sansom, malcomio: Fix "Log out different user upon re-authentication" option.
• #3384262 by michael.roosz, roderik: fix regex in ensureSafeRelayState() to work for drupal sites in subpaths.
• #3352286 by Mingsong: Warning message in Drupal 10 with PHP 8.1

Feature

• #3448832: Drupal 11 compatibility
• #3211380 by chx, roderik, gpotter: Support for NameID as Unique ID and/or to map like any other attribute.
• #3211479 by roderik, bmelvin1, adamfranco, John Franklin, azinck: Improve map_users_roles setting (add option to bypass roles check for user linking).
• Split configuration screen into two: "SAML communcation" vs "the rest".
• #3379033 by DrIPA, roderik: Add "SSO login link" on the user login page
• #3384859 by Dave Reid, roderik: Allow redirecting from login form directly to the /saml/login route
• #3387611 by Dave Reid: Add support for mapping complex name fields
• #3338701" for 'invalid_xml' error, log XML errors and add ?check=0 URL argument.
• #3308325 by Rudi Teschner, joelpittet: Allow relative paths for certificates

Docs

• #3272609: add pointer to Drupal configuration for reverse proxies.
• #3308562: add more documentation about SamlauthEvents::USER_SYNC event.
• #3377857: update README section about SAMLtest.id
• Clarify /saml/changepw route and associated setting.

Misc

• #3211541 by roderik: remove reference to old EmailValidator (that was replaced in Core 8.8) since our v3.6+ supports Core >=9.2.
• Add /saml/reauth route (for easier testing; not documenting it until there's a common use case).