v8.0.0

8.0.0 (2026-03-31)

Features

• add encryption algorithm options (#157) (1444aad)

BREAKING CHANGES

• adding encryption algorithm in options(if not set, defaults to http://www.w3.org/2009/xmlenc11#aes256-gcm), adding disallowEncryptionWithInsecureAlgorithm to enforce secure encryption algorithms

v7.1.1

Bug Fixes

• fix: support signed logout response sent via POST by @ArtiomCiumac in #140

v7.1.0

Features

• add support for per-participant bindings during SLO (9f21610)

v7.0.2

Bug Fixes

• Upgrade vulnerable node-saml (See https://github.com/auth0/node-saml/releases/tag/v3.0.1) and ejs dependencies (26b8cbd)

v7.0.1

Bug Fixes

• Updated saml version to restore old behaviour allowing PEM files that are missing newlines for signing

v7.0.0

BREAKING CHANGES

• Requires node >= 12

Bug Fixes

• Upgrade vulnerable node-saml dependency (See https://github.com/auth0/node-saml/releases/tag/v2.0.0)

v6.0.2

chore(release): 6.0.2

v6.0.0

Accept multiple SessionIndex elements in SP-initated LogoutRequests

v5.0.1

Shift ID generation to id-generation library

v4.0.1

Catch possible SAML Response signing error