6.12.0

Bug fixes

• Addressed security bugs (#1656, #1661, #1657).
• Fixed the task leaking issue in the EventBasedLRUCache (#1667).

Enhancements and features

• Added support for decryption using AesGcm (#1606).

6.11.1

Bug fix:

• Fixing incorrect parameters when writing Saml2ProxyConditions (#1646).

6.11.0

Enhancements and Features

Send SKU and Version details to metadata end point #1632

6.10.2

Removed name entry from claim type mapping #1629

6.10.1

Enhancements and Features

#1626 - Change base type of SecurityTokenUnableToValidateException

6.10.0

Enhancements and Features

• #1621 Change default values for DefaultAutomaticRefreshInterval and DefaultRefreshInterval
• #1615 Add SecurityTokenUnableToValidateException
• #1620 Reduce copies in URL encoder

6.9.0

Bug fixes

• Removed calls to overridable methods in constructors (#1549).
• Modified AuthenticationProtocolMessage to use CSP 'unsafe-eval' compliant default value for _script (#1565).
• SecurityTokenNoExpirationException 'IDX10225' is now thrown if a token is missing an 'nbf' or 'exp' claim (#1582).

Enhancements and features

• Made the 'x5c' property available on the JwtHeader (#1543).
• Added ClaimTypeMapping for 'name' claim (#1545).
• Added a net472 desktop target (#1552).
• Added 'phone_number' and 'phone_number_verified' standard claims to JwtRegisteredClaimNames (#1559).
• Added RSACng support for encryption / decryption (#1579).
• Added an EventBasedLRUCache for use by InMemoryCryptoProviderCache on the .NET desktop targets (#1605). See here for more details.

6.8.0

Bug fixes

• Resolve encryption key when Kid is not present in token #1511
• Objects overriding GetHashCode also override Equals #1536

Enhancements and features

• Improve empty audience error message #1488
• Enveloped Signature Writer should be able to determine the Digest algorithm from signing algorithm #1508
• Add Claims and PropertyBag properties to TokenValidationResult #1514
• Throw SecurityTokenSignatureValidationFailedException when none of the provided keys verify the signature #1515
• Add message for all keys were not supported #1520
• Add TokenType to SecurityTokenDescriptor. #1522
• Remove locks in SignatureProviders #1535

6.7.1

Reverted Saml2AuthenticationContext to previous behavior (< v6.7.0) where IsAbsoluteUri check is done only when DeclarationReference is not null (#1480).

6.7.0

Features

• Adjusted SignedHttpRequest logic to control optional validation of claims.
• Added Microsoft.CodeAnaylsis.FxCopAnalyzers to validate code.
• Added SecurityKey.IsSupportedAlgorithm API to check if a SecurityKey / Algorithm is supported.

Bug Fixes

• SamlSerializer fails to validate token using an XmlReader created from a XDocument.
• Null reference possible in logging when using the IDX13300 and IDX13107 log messages.
• When creating a TokenValidationResult and setting the Exception property, ensure IsValid is set to false.
• Use CultureInvariant when parsing double values.

Pull Requests click here.

Bug fixes click here.