Skip to content

v4.1.0

Compare
Choose a tag to compare
@mmoayyed mmoayyed released this 18 Sep 17:20
· 24765 commits to master since this release
  • #1153 Upgrade Java CAS Client to v3.4.1 (@battags)
  • #1102 Documentation: Update Package Name for SAML. (@loren138)
  • #1093 Support openid.identity=http://specs.openid.net/auth/2.0/identifier_select (@leleuj)
  • #1095 Determine management app context path dynamically (@mmoayyed)
  • #1083 Management webapp redesign (@mmoayyed, @doodelicious, @rkorn86)
  • #1071 Mongo support module (@mmoayyed)
  • #1069 BugFix: registered services equality mismatch (@mmoayyed)
  • #1072 Removed extra linebreak to allow openid4java parsing (@mmoayyed)
  • #1073 Update the OpenID documentation for v2 support (@leleuj)
  • #1068 fixed kryo issue with unmodifiable cols. backport from master (@mmoayyed)
  • #1055 #1049 - Fix serialization bug with EhcacheTicketRegistry (@AmmarBelakhel)
  • #1064 Json file naming convention (@mmoayyed)
  • #1054 Hazelcast Ticket Registry implementation. (@dima767)
  • #1045 Move creation of HandlerResult up the chain (@mmoayyed)
  • #992 CRL checking to optionally try all URLs (@mmoayyed)
  • #993 Allow CAS to parse/display SAML MDUI (@mmoayyed)
  • #1041 Missing French translations (@leleuj)
  • #1039 Issues-1038 added the close method on abstract pool to free the resource on undeploy (@NicolasMarcotte)
  • #1032 Fix OpenSAML initialization error (@mmoayyed)
  • #1001 Moved CAS core APIs into separate API module (@mmoayyed)
  • #1031 Upgrade to Apereo parent v40. (@mmoayyed)
  • #1005 Allow JsonSvcReg to auto-detect changes (@mmoayyed)
  • #1010 Moved encoding filter to the top (@mmoayyed)
  • #1023 Move request security filter to filters.xml (@mmoayyed)
  • #1021 Clean up how null errors/warnings are handled by LPPE (@mmoayyed)
  • #1020 Login flow Transcoding config (@mmoayyed)
  • #1029 Update pac4j to version 1.7.1 (@leleuj)
  • #1000 Added Jetty plugin config (@mmoayyed)
  • #1011 Updated maven plugins to latest patch releases (@mmoayyed)
  • #1024 CAS-1227: Ukranian language bundle (@mmoayyed)
  • #1019 cas-server-integration-memcached pulls on two version of kryo (@NicolasMarcotte)
  • #1015 Updated metrics, time and reflections libs. (@mmoayyed)
  • #1013 Updated AspectJ version (@mmoayyed)
  • #1014 Updated hibernate version (@mmoayyed)
  • #1017 Log4j update (@mmoayyed)
  • #1012 Updated spring security version (@mmoayyed)
  • #1009 Check for gateway mode on invalid TGT (@frett)
  • #999 Updated Polish translations for version 4.1.x; issue #994 (@gerbil14)
  • #834 Issue-825: Always add the TGT in request AND flow scope (@leleuj)
  • #833 Updated copyright year to 2015 (@mmoayyed)
  • #822 Context listener to report on CAS environment info. (@mmoayyed)
  • #829 Drop cas-server-protocol module (@mmoayyed)
  • #818 SSO-disabled service can never be granted ST (@mmoayyed)
  • #821 Issue-820: 'ticketId cannot be null' for a Facebook authentication (@leleuj)
  • #824 Added Implementation-Date to JAR Manifests (@mmoayyed)
  • #436 CAS-1179: TGT Expiration Policy Evaluators (@mmoayyed)
  • #811 Issue-758: Revise and update Kryo serialization mechanism (@leleuj)
  • #814 JSON Service Registry now made default (@mmoayyed)
  • #676 Issue 468: Support for dynamic/caching principal attributes (@mmoayyed)
  • #788 Issue-782: Update the security filter to version 2.0.0 (@leleuj)
  • #772 Issue-740: Limit the queue size in the default ThreadPool in the SimpleHttpClient (@leleuj)
  • #741 JSON serialization of RegisteredService into LDAP (@mmoayyed)
  • #743 GoogleService: SAML response refactoring (@mmoayyed)
  • #777 Allow TGT expiration policy control via CAS properties (@mmoayyed)
  • #747 Support for displaying RegisteredService information on login form (@mmoayyed)
  • #773 Update OpenID4Java; Removes dependency on missing guice:2.0 (@mmoayyed)
  • #750 Add warning to InMemory Service Registry (@mmoayyed)
  • #730 Allow CAS to return ticket objects rather than mere identifers (@mmoayyed)
  • #345 CAS-1367: Move spring webflow conversaional state onto the client (@mmoayyed)
  • #727 Attributes in SAML View Filtered by Attribute Policy (@mmoayyed)
  • #729 Upgrading Ehcache to 2.9 (@mmoayyed)
  • #721 Update OAuth20ProfileController: bearer tokens in the authorization header (@mikeroda)
  • #674 Access principal in success view (@mmoayyed)
  • #694 Configuration of host.name in multi-node deployments (@mmoayyed)
  • #707 Issue 609: CAS OAuth Support 3.5.2 - 'service' query parameter is not being restored correctly (@leleuj)
  • #711 OpenIdArgumentExtractor parent should be AbstractArgumentExtractor (@mmoayyed)
  • #703 Use default theme, if no theme is found for the service (@mmoayyed)
  • #696 do not focus username field, if another field is already selected (@sdorra)
  • #700 OAuth approval prompt via a new configurable property (@mmoayyed, @steve-gregory, @edwins, @dennisroberts71)
  • #701 Improved configuration of cas.properties location (@manamana88)
  • #692 Issue #552 Avoid usage count in SSO opt-out check. (@serac)
  • #697 Deprecated JBoss cache and uber-webapp modules (@mmoayyed)
  • #665 JDBC QueryAndEncodeDatabaseAuthenticationHandler (@mmoayyed)
  • #682 FileTrustStoreSslSocketFactory must support JVM truststore (@mmoayyed)
  • #688 cas-687: SEC_1: remove default non-secure support in the services registry (@leleuj)
  • #683 Issue 610: Non-configurable 'CasProfile#' username prefix in serviceResponse (@leleuj)
  • #1 added attribute support to the CAS 2 authentication success response (@dennisroberts71)
  • #446 CAS-1475: Refactoring of GoogleApps altUsername config (@mmoayyed)
  • #444 CAS-1425: aligned view names to match the jsp filename (@mmoayyed, @jtgasper3)
  • #647 Issue #460: TGT id to not be disclosed in logs (@mmoayyed)
  • #671 Issue #670: Client authentication from pac4j should always return typed identifier (@leleuj)
  • #677 Upgrade to JDK7 (@mmoayyed)
  • #673 Issue #658: SAML validation now forcing service match (@mmoayyed)
  • #640 SAML principal attribute release must pass through the policy (@mmoayyed)
  • #650 Turn on/off slo per service, by having a new logout type for ... (@mmoayyed)
  • #664 cas-663: Both log4j-over-slf4j.jar and slf4j-log4j12.jar in the management webapp (@leleuj)
  • #662 return logout request to be application/x-www-form-urlencoded (@skibaa)
  • #659 Ability to include multiple config files for the DispatcherServlet child application context (@dima767)
  • #601 CAS-1466: Local truststore for proxy authentication (@mmoayyed)
  • #642 Allow for time skewing of the issue instant when validating saml requests (@mmoayyed)
  • #624 #620: logout requests should contain logoutRequest Parameter (@mmoayyed)
  • #641 #465: terminate web session prop externalized (@mmoayyed)
  • #644 Issue#477: delete redundant Safe* components from web.init package (@dima767)
  • #646 Issue 645: Adding in Must Change Password functionality (@jtgasper3)
  • #622 #612: Attributes other than String and element iterable in foreach are not supported (@leleuj)
  • #626 #502: saml authn attributes dont appear in validation response (@mmoayyed)
  • #616 Moving JDBC components from core and over to jdbc module (@mmoayyed)
  • #452 CAS-1439: PGT and PT ids should begin with their assigned prefix (@mmoayyed)
  • #623 uid/psw should be required fields (@mmoayyed)
  • #615 Correct and update Catalan translation (@alexhenrie)
  • #461 CAS-1480: Moving proxy authz over to httpBasedHandler (@mmoayyed)
  • #454 CAS-1474: Deprecated unneeded "requireSecure" settings (@mmoayyed)
  • #453 CAS-1479: Allow relevant expiration policies to support a time unit (@mmoayyed)
  • #455 CAS-1465: added support/logs for audit WHO param as arrays (@mmoayyed)
  • #456 CAS-1399: Updated inspektr to 1.1 GA (@mmoayyed)
  • #458 CAS-1360: Implementation of the REST API with Spring @RestController (@dima767)
  • #445 CAS-1467: Upgrade to Quartz 2.x (@mmoayyed)
  • #443 CAS-1468: X509SubjectAlternativeNameUPNPrincipalResolver (@dima767)
  • #447 CAS-1477: Plugin versions reformatted. Support for Coveralls (@mmoayyed)
  • #448 Updated the labels in messages_zh_CN.properties. (@shijh)
  • #439 CAS-1457: Authorization of pgtUrls for proxy AuthN (@mmoayyed)
  • #435 CAS-1430: New switch-case transformer component (@mmoayyed)
  • #412 CAS-1413: other CAS-protocol attributes in the validation response (@mmoayyed)
  • #363 CAS-1388: Refactored login flows to be picked up by pattern. (@mmoayyed)
  • #343 CAS-1111: Check if CAPS LOCK is enabled on CAS Login (@mmoayyed)
  • #419 CAS-1438: URL matching support for validation (@mmoayyed)
  • #421 CAS-1441: Radius module improvements (@mmoayyed)
  • #341 CAS-1276: Allow to configure synchronous messages sent to endpoints. (@mmoayyed)
  • #417 CAS-1414: Expired TGT on ST generation does not invoke logout (@mmoayyed)
  • #424 CAS-1443: JAAS handler should pick Kerberos realm settings (@mmoayyed)
  • #390 CAS-1416: Expose /status and /statistics access rules in cas.properties (@mmoayyed)
  • #422 CAS-1442: Add support for CHANGE_AFTER_RESET flag (@mmoayyed)
  • #348 CAS-1373: Update X509's Ehcache dependency version to match parent. (@mmoayyed)
  • #391 CAS-1419: Connecting slo.callbacks.disabled property (from LogoutManager) to the D... (@jtgasper3)
  • #357 CAS-1319: Added the ability to auto-mark the CAS cookie as http-only. (@mmoayyed)
  • #364 CAS-1254: Update web schema locations to point to v.2.5 (@mmoayyed)
  • #410 CAS-1009: New CAS default theme (@mmoayyed)
  • #423 CAS-1444: Qualifying authn handlers should encode the psw (@mmoayyed)