samlauth 8.x-3.9

To keep in mind:

• Do not be confused by the version number. Versions 8.x-3.8 and above are compatible with (only) Drupal 9.2+ and Drupal 10.
• ACSF compatibility (#3218856: v3.3 change in configuration values breaks ACSF) has not been fixed yet, as far as I'm aware.

Behavior change:

• by Mingsong, longwave: After processing login/logout, the ACS/SLS endpoints now refuse to redirect to URLS deemed unsafe, after login/logout. This only affects setups whose IdP explicitly wants to redirect to a URL whose hostname differs from the ACS endpoint. See Changelog.md for mitigation measures.

Bugfixes:

• Actually fix #3294460 by immaculatexavier (lost from 3.7) / #3308446 by Spec0, Migsong: Syntax error in SamlauthRoleMappingForm.php on line 45

Other:

• 'Configure SAML authentication' permission is marked as "Give to trusted roles only; this permission has security implications."