Release notes

Jump to bottom Edit New page

LELEU Jérôme edited this page Sep 5, 2016 · 24 revisions

See the pac4j release notes as well.

Version 1.2.0:

Upgrade to pac4j v1.9.1 and Spark Java 2.5
Multi-profiles support
Protection against "session fixation" attacks
RequiresAuthenticationFilter becomes SecurityFilter
Updated algorithm for the application logout

Version 1.1.0 (based on pac4j v1.8.x):

REST support (basic auth, header, request parameter, IP)
New authentication mechanisms (LDAP, JWT, SQL, MongoDB, Stormpath)
Authorizations: IP check, HTTP method check, profile type verification, Spring Security like security filters (cache control, Xframe), CSRF protection...
Application logout support
A specific client can be dynamically selected for authentication
Path exclusions support
New AnonymousClient for advanced use cases
Updated OAuth, CAS, SAML and OpenID Connect supports
New session store mechanism
Customizable callback urls
Upgrade to Java 8

Versions 1.0.1, 1.0.2 & 1.0.3:

Fix bugs on SAML support

Version 1.0.0:

Based on pac4j v1.7: supports for CAS / OAuth / OpenID / SAML / HTTP / GAE / OpenID Connect