All pull requests

Pull requests

• Replace compromised samltest.id domain with samltest.dev

  #668·c9s opened Sep 10, 2026·

  ·
  1

• idp: make the NameID formats advertised in metadata configurable

  #667·ChrisJr404 opened Aug 26, 2026·

  ·

• Upgrades github.com/russellhaering/goxmldsig to v1.6.0

  #664·joesiltberg opened May 20, 2026·

  ·
  1

• Upgrade goxmldsig to v1.6.0 to fix CVE-2026-33487

  #662·kmansou opened Mar 25, 2026·

  ·
  3

• Require Destination on all SAML responses

  #660·aashh opened Feb 9, 2026·

  ·
  1

• Fix authentication bypass with AllowIDPInitiated

  #659·aashh opened Feb 9, 2026·

  ·
  1

• Bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.3.1

  dependenciesgo
  #656·dependabot[bot] opened Jan 29, 2026·

  ·
  1

• Add crypto.Signer support for KMS/HSM keys

  #654·dineshudayakumar opened Jan 15, 2026·

  ·

• Bump golang.org/x/crypto from 0.33.0 to 0.47.0

  dependenciesgo
  #652·dependabot[bot] opened Jan 13, 2026·

  ·
  1

• Move key material from xmlenc fuzz.go to fuzz_test.go so it doesn't get compiled in

  #646·iansltx opened Nov 20, 2025·

  ·

• Bump golang.org/x/crypto from 0.33.0 to 0.45.0

  dependenciesgo
  #645·dependabot[bot] opened Nov 20, 2025·

  ·

• Update schema for AuthenticatingAuthority and add tests

  #639·SoarinFerret opened Oct 2, 2025·

  ·

• explicitly set unspecified name id format

  #637·quantumsheep opened Sep 3, 2025·

  ·
  1

• Bump github.com/beevik/etree from 1.5.0 to 1.6.0

  dependenciesgo
  #636·dependabot[bot] opened Aug 25, 2025·

  ·

• support Scoping

  #635·hermanbanken opened Aug 20, 2025·

  ·

• fix(HandleIDPInitiated): Remove recursive rlock

  #631·dmoerner opened Aug 6, 2025·

  ·
  1

• fix: properly read namespaces with no prefix from the root element

  #626·Unix4ever opened Jun 30, 2025·

  ·
  2

• fix: split signature and encryption keys (issue #623)

  #624·dellekappa opened Jun 4, 2025·

  ·

• Handle error before handling session in Middleware.RequireAccount

  #622·GiienaAstrella opened May 28, 2025·

  ·

• fix: improve SAML signature validation for redirect binding

  #621·gsaandy opened May 17, 2025·

  ·
  7

• SAML post to correct URL and make example run locally

  #617·adricasti opened May 2, 2025·

  ·
  1

• Bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0

  dependenciesgo
  #607·dependabot[bot] opened Apr 14, 2025·

  ·

• Add support for POST on a wrapped request

  #534·sfc-gh-thardie opened Sep 8, 2023·

  ·

• Implement query signature verification

  #449·Jguer opened Jul 21, 2022·

  ·
  18