v0.7.0

What's Changed

• Add ability to the SAML test provider to create signed SAML responses by @hcjulz in #135
• Bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #136
• feat (config): add support for a http.RoundTripper by @jimlambrt in #137
• chore: update deps by @jimlambrt in #138

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #130
• Add case insensitive user attribute keys configs for LDAP by @jasonodonnell in #132
• chore (oidc, jwt, ldap): update deps by @jimlambrt in #133
• Add empty anonymous group search configs by @jasonodonnell in #134

New Contributors

• @jasonodonnell made their first contribution in #132

Full Changelog: v0.5.0...v0.6.0

v0.5.0

Improvements

• JWT
  • Adds ability to specify more than one KeySet used for token validation (#128)

v0.4.1

Bug Fixes

• SAML: Truncate issue instant to microseconds to support Microsoft Entra ID enterprise applications #126

v0.4.0

New and Improved:

• Support for SAML authentication (#99).

v0.3.4

Bug fixes

• OIDC/examples/cli
  • Use free port if OIDC_PORT is not set for the example (PR)

v0.3.3

Bug fixes:

• LDAP
  • A more compete fix for escapeValue(...) and we've stopped exporting it (PR)

v0.3.2

Bug fixes:

• Address a set of LDAP issues (PR):
  • Properly escape user filters when using UPN domains
  • Increase max tls to 1.3
  • Improve EscapeValue(...)
  • Use text template for rendering filters

v0.3.1

Bug Fixes

• Fixes integer overflow in auth_time claim validation when compiled for 32-bit
  architecture (PR)

v0.3.0

OIDC

• Add ProviderConfig which creates a provider that doesn't support OIDC discovery. It's probably better to use NewProvider(...) with discovery whenever possible (PR and issue).
• Improve WSL detection (PR)
• Add option to allow all of IAT, NBF, and EXP to be missing (PR)
• Validate sub and aud are present in an id_token (PR)

LDAP

• Add better (more consistent) timeouts (PR)
• Add better error msgs on failed search queries (PR)
• Add new config fields for including/excluding user attrs (PR)
• Add WithUserAttributes(...) option to the ldap package that allows callers to request that attributes be returned for the authenticating user (PR)