Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id BEA77200B5E for ; Wed, 10 Aug 2016 11:18:35 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id BD6EB160A93; Wed, 10 Aug 2016 09:18:35 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 0EB66160A90 for ; Wed, 10 Aug 2016 11:18:34 +0200 (CEST) Received: (qmail 85764 invoked by uid 500); 10 Aug 2016 09:18:34 -0000 Mailing-List: contact commits-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list commits@cxf.apache.org Received: (qmail 85755 invoked by uid 99); 10 Aug 2016 09:18:34 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 10 Aug 2016 09:18:34 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 206A1E0200; Wed, 10 Aug 2016 09:18:34 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: coheigea@apache.org To: commits@cxf.apache.org Message-Id: X-Mailer: ASF-Git Admin Mailer Subject: cxf-fediz git commit: Updating Release Notes Date: Wed, 10 Aug 2016 09:18:34 +0000 (UTC) archived-at: Wed, 10 Aug 2016 09:18:35 -0000 Repository: cxf-fediz Updated Branches: refs/heads/master 23bd04c3d -> 186022a47 Updating Release Notes Project: http://git-wip-us.apache.org/repos/asf/cxf-fediz/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf-fediz/commit/186022a4 Tree: http://git-wip-us.apache.org/repos/asf/cxf-fediz/tree/186022a4 Diff: http://git-wip-us.apache.org/repos/asf/cxf-fediz/diff/186022a4 Branch: refs/heads/master Commit: 186022a47726c6db2e68698435a597b3d255ff4d Parents: 23bd04c Author: Colm O hEigeartaigh Authored: Wed Aug 10 10:18:20 2016 +0100 Committer: Colm O hEigeartaigh Committed: Wed Aug 10 10:18:20 2016 +0100 ---------------------------------------------------------------------- release_notes.txt | 81 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 81 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf-fediz/blob/186022a4/release_notes.txt ---------------------------------------------------------------------- diff --git a/release_notes.txt b/release_notes.txt index d3a07d0..cee24fa 100644 --- a/release_notes.txt +++ b/release_notes.txt @@ -63,6 +63,87 @@ N.A. 8. Specific issues, features, and improvements fixed in this version +Release Notes - CXF-Fediz - Version 1.3.1 + +Bug + + [FEDIZ-161] - FederationConfigImpl.init() calls loadConfig(File) which fails for war files with special characters in its name + [FEDIZ-164] - IdP default flow doesn't support multiple realms + [FEDIZ-165] - SAML SSO redirection on ForceAuthn or token expiry not working + [FEDIZ-166] - "No message body writer" error for OAuthError in the OIDC IdP + [FEDIZ-169] - Enforce mandatory requested claims on the RP side + [FEDIZ-170] - Load keystore/truststore resources in the container plugins + +Improvement + + [FEDIZ-160] - Replace Hibernate with Apache BVal + [FEDIZ-162] - Make it possible to disable the requirement for a Signature when validating a SAML SSO AuthnRequest in the IdP + [FEDIZ-163] - Default to disabling Deflate Encoding for the SAML SSO response + [FEDIZ-168] - Support SAML Token without Audience Restriction + [FEDIZ-171] - Add a configuration option to add the "Authenticated" role to the list of roles of the authenticated user + [FEDIZ-172] - OIDC DataProvider should support client_credentials clients + +New Feature + + [FEDIZ-76] - Support Facebook Login for Trusted IDP + + +Release Notes - CXF-Fediz - Version 1.3.0 + +Sub-task + + [FEDIZ-74] - Support Google Login for Trusted IDP + +Bug + + [FEDIZ-118] - Allow securing root context applications + [FEDIZ-125] - Logout is not working in Fediz websphere plugin and cookie name is not configurable + [FEDIZ-128] - Parent POM dependencies wrong in Websphere artifacts + [FEDIZ-132] - Encoding Error by generated JAXB classes + [FEDIZ-139] - cxf-fediz plugin osgi export + [FEDIZ-140] - IDP caches outdated SAML Tokens + [FEDIZ-142] - TrustedIdpSAMLProtocolHandler.REQUIRE_KEYINFO does not work + [FEDIZ-146] - wtrealm should not be mandatory for 3rd party signin response + [FEDIZ-147] - IDP will be listed in HomeRealm Selection view, even if it should not be used directly + [FEDIZ-151] - Session Conflict with Cookies + [FEDIZ-156] - SAMLRequest ID must not start with a Number + [FEDIZ-157] - SAMLResponse Handler uses URL instead of Realm name for issuer validation + +Improvement + + [FEDIZ-113] - Support SAML SSO Metadata in the IdP + [FEDIZ-119] - Customizable Login-Page + [FEDIZ-120] - IDP Encoding of SignInResponse configurable + [FEDIZ-121] - Upgrade to Spring 4 + [FEDIZ-122] - Replace Apache bval with Hibernate + [FEDIZ-123] - Update certificates to 2048 bits + [FEDIZ-130] - Add a Jetty 9 plugin + [FEDIZ-131] - Add JAXRS based demos + [FEDIZ-133] - Improve logout page customizability + [FEDIZ-135] - CXF plugin should let the initial successful sign in request proceed + [FEDIZ-141] - POST Binding for SAML SSO Remote IDP + [FEDIZ-145] - Swagger REST API Support + [FEDIZ-152] - Disable URL rewrites with SessionID to avoid session hijacking + [FEDIZ-154] - Example 'simpleWebapp' needs proper configuration of the FederationEntryPoint in IDP realm-b + [FEDIZ-159] - whr propagation can be disabled + +New Feature + + [FEDIZ-126] - Systests for websphere plugin + [FEDIZ-127] - Webshere example application doesn't fit to systemtests and is not buildable as ear file + [FEDIZ-143] - Home Realm Discovery based on OIDC login_hint + [FEDIZ-144] - HomeRealm Discovery Service based on Spring EL + [FEDIZ-153] - Support OpenId Connect bridging in the Fediz IdP + +Question + + [FEDIZ-124] - Fediz-plugin for Tomcat 8 + +Task + + [FEDIZ-114] - Remove X509TokenValidator and DefaultSubjectProvider in the STS + + Release Notes - CXF-Fediz - Version 1.2.2 Sub-task