v1.2.3

• Make release available in package cloud #191

v1.2.2

• Added dynamic group maping for AD Povider (#146)
• Improved the debug logs for SAML (#184)
• The SAML’s EntityID now can be any string and not only the IDP’s metadata Url (#180)
• Fixed Expected Enveloped and C14N transforms issue (#182)

v1.2.1

Changelog

• Accept --conf for config file path
• Add changes for dashboard embedded TIB to support SQL
• Do not cache SAML middleware so multiple profiles can work independently (#176)

Docker images

• docker pull tykio/tyk-identity-broker:v1.2.1
• docker pull tykio/tyk-identity-broker:v1.2

v1.1.2-rc1

Potential SAML fix

v1.2.0

• Added new option in the profiles SSOOnlyForRegisteredUsers, to configure if we want to allow only existent dashboard’s users to perform SSO.
• Fix #152 we now have arm64 docker images as well as a slim image with a reduced attack surface
• Fixed bug when using Proxy provider for developer portal access,if the email was empty the developer was not created, now in such case it will be created in the format [email protected]

v1.1.1

• Fixed SAML vulnerability where the Go XML parser can cause SAML authentication bypass. The XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data) leading to make the SAML authentication bypass possible.
• Enhanced error messages coming from mongo store
• Implemented redis backend to make TIB work better behind a load balancer
• TIB’s proxy flow now insert upstream host header into the call, so it will work with any upstream service that verifies Host headers against expected host headers.

v1.1.0

• Fixed EOF MongoDB errors (#135).
• Implemented MongoDB auth. store enhancements, so it works better in front of a load balancer (#132).
• Redis path params (#136).

v1.0.0

• Added an identity provider for SAML (#7).
• Added support for self signed certificates (#102).
• Fixed email override when using custom fields ((#109).
• Fixed SkipUserInfoRequest behavior (#114).

v0.7.2

Fixed bugs:

• Fix CustomEmailField usage (#109).
• Fix multiple user information requests on social provider (#114).

v0.7.1

Update version.go