lasso/NEWS

NEWS
====

2.2.90 - January 18th 2010
--------------------------

Lots of internal changes and some external one too.

There is a new api to force, forbid or let Lasso sign messages, it is called
lasso_profile_set_signature_hint.

Big overhaul of the ID-WSF 1 and 2 codes, and of the SAML 2.0 profiles. Now all
SAML 2.0 profile use common internal functions from the lasso_saml20_profile_
namespace to handle bindings (SOAP,Redirect,POST,Artifact,PAOS). New internal
API to load SSL keys from many more formats from the public API.

In ID-WSF 2.0, Data Service Template has been simplified, we no more try to
apply queries, it is the responsability of the using code to handle them.

In bindings land, the file bindings/utils.py has been stuffed with utility
function to manipulate 'type' tuple, with are now used to transfer argument and
type description, their schema is (name, C-type, { dictionary of options } ),
they are now used everywhere in the different bindings. We support output
argument in PHP5, Python and Java, i.e. pointer of pointer arguments with are
written to in order to return multiple values. For language where the binding
convert error codes to exceptions (all of them now), the ouput value is
returned as the normal return value of the method, so only one output argument
is handled for now.

We now use GObject-introspection annotations in the documentation to transfer
to the binding generator the necessary metadata about the API (content of
lists, hashtables, wheter pointer are caller/callee owned, can be NULL or if
argument have a default value). The file bindings/override.xml is now
deprecated.

In documentation land, the main reference documentation was reorganizaed and
more symbols have been added to it. Many more functions are documented.

There is now tools to control the evolution of the ABI/API of Lasso.

2.2.2 - March 24th 2009
-----------------------

Many fixes and improvements to the ID-WSF 1 support, new API to load SSL keys
off memory, documentation for ID-WSF methods, general robustness and memory
leak fixes.

2.2.1 - July 22nd 2008
----------------------

Fixed problems with signed SAML 2.0 URL strings and checks against existing
assertions to tell if authentication was required.

2.2.0 - May 28th 2008
---------------------

Added support for encrypted NameIdentifier in ID-FF 1.2, fixed various minor
issues with ID-WSF support and several bugs and memory management issues; also
replaced bindings for Java, PHP 5 and Python with new ones, created by a custom
code generator.

2.1.1 - August 21st 2007
------------------------

Added support for LassoSignatureType to bindings (support was already but
implicitely present for Python), fixed references to Node and String lists
in all bindings.

2.1.0 - August 13rd 2007
------------------------

Added preliminary support for ID-WSF 2, Discovery and Data Service Template,
added missing accessors for class elements in SAML 2 language bindings, fixed
potential DoS in message parsing.


2.0.0 - January 16th 2007
-------------------------

Completed SAMLv2 support, passed conformance event organized by the Liberty
Alliance from December 4th to 8th 2006.  Gratuitous giant version bump to
mark this step.  Fixed memory leaks and potential segmentation faults.


1.9.9 - December 19th 2006
--------------------------

  [Test version, news copied over to 2.0.0]


0.6.6 - October 16th 2006
-----------------------

Fixed issues in ID-WSF Data and Interaction services support, fixed a few
robustness issues in corner cases.

  [This version was finally not released due to decision to first finish
   SAMLv2 support and pass the conformance tests.]


0.6.5 - March 21st 2006
-----------------------

Fixed support for SWIG 1.3.28 (now required), fixed a win32 build issue, fixed
documentation.


0.6.4 - March 8th 2006
----------------------

Added first draft of ID-WSF Interaction Service support, added message
signatures to ID-WSF messages, added first draft of SAML 2 support (only
Web-SSO and part of Single Logout for the moment), fixed some corner cases,
improved error detection in different places, upgraded SWIG support to 1.3.28
and generally improved the bindings.


0.6.3 - September 30th 2005
---------------------------

Improved behaviour when confronted to other Liberty providers that do not
implement all the mandatory Liberty requirements, improved error status code
reporting, completed support for public keys embedded in metadata files, fixed
a few corner case bugs.  Also continued work on ID-WSF support, implementing
Discovery and DST services but still considered experimental and disabled by
default.
	  

0.6.2 - May 26th 2005
---------------------

Fixed usage of NameIdentifiers after calls to Register Name Identifier profile,
improved robustness against other Liberty implementations, improved loading of
metadata, fixed minor bugs and memory leaks.  Continued work on ID-WSF support,
still partial and disabled by default.


0.6.1 - February 22nd 2005
--------------------------

Completed <lib:Extension> support, added full bidirectional query string support
for AuthnContextStatementRef, AuthnContextClassRef and AuthnContextComparison,
fixed a crasher-bug in a rare case of single sign on profile, tested and
shipped with Microsoft Visual Studio project files.


0.6.0 - January 27th 2005
-------------------------

Rewrote library internals to use standard structures instead of libxml2 nodes;
this allows faster processing, more flexibility and better support for language
bindings.  Documented all the API functions.  Fixed and improved the rest.


0.5.0 - November 9th 2004
-------------------------

All features of SP Basic, SP, IDP, and LECP profiles for Liberty IDFF 1.2
Static Conformance are now implemented, except for "Backward Compatibility".
Extended features are also supported, except for "Affiliations".  Compatible
with the demo application of the last Beta version of SourceID Liberty 2.0.

Improved metadata support, a lot of new feature and bugfixes.

API, ABI, and dump format of messages have changed, so this release is not
compatible with previous versions.


0.4.1 - September 7th 2004
--------------------------

Small bug fixes. Windows DLL are now linked with standard call aliases.


0.4.0 - September 6th 2004
--------------------------

Complete support for the main profiles of Liberty Alliance IF-FF 1.2 (Single
Sign On, Single Logout, and Federation Termination).  Revamped language
bindings to use SWIG (supported languages are noew Python, PHP, Java and C#).
More unit tests.  Bugs fixed.


0.3.0 - July 27th 2004
----------------------

Improved support for Single Sign On and Single Logout profiles.  Python and
Java bindings.  Unit tests.  Bugs fixed.


0.2.0 - June 1st 2004
---------------------

First release as a C library.