- Block new XPath 3.1 functions such as json-doc.
- We now use a REx based XPath 3.1 parser as the Saxon parser does not produce a clean parse tree.
- Clean up: Include log4j2 config files in CLI utils and tests so that messages are not lost.
- Clean up: No longer create a new XSLT Compiler on every request.
- Fixed a memory leak when compiling and validating policies.
- Clean up: Improve extended attributes in XML.
- Denote that
multiValueattribute isfalseif not specifed. - Ensure that SAML and internal namespaces don't leak into the
RAX-AUTH:extendedAttributeselement.
- Denote that
- An empty extended attribute is now represented as having a
nullvalue (or an empty array) inRAX-AUTH:extendedAttributesin JSON.- The previous behavior was to not output an extended attribute at all if it was empty.
- Updated Dependency
- checker-util: 2.4.1 → 2.5.1
- Disallow inline functions in policy path expressions.
- Fixed a bug where multi-value attributes were not always returned as an array when generating JSON output.
- We now support
groupsas a standard attribute, which supports default value with {D}- As a result of the change, standard attributes will no longer be set in the SAML assertion if they are not specified in the mapping policy.
- We now set
mapping:multiValuein a SAML attribute to denote whether the attribute may hold several values.- Setting
mapping:multiValuehelps in conversion to JSON when setting extended attributes via theRAX-AUTH:extendedAttributes.
- Setting
- Fixed a number of parsing bugs when using {(P|A)ts?()} in a template that spans multiple lines.
- Added the ability to specify default values ({D}) via configuration (defaults.xml) for standard attributes. Several places may be searched for values via XPath, SAML attribute name, or via passed in parameters.
- Updated Dependency
- checker-util: 2.4.0 → 2.4.1
- Updated Dependencies
- saxon: 9.7.0-8 → 9.8.0-4
- wadl-tools: 1.0.33 → 1.0.37
- checker-util: 2.1.1 → 2.4.0
- Fixed a bug where we checked XPath syntax against XPath 3.1 but only supported 2.0 -- we now support XPath 3.1 fully.
- Fixed a bug when converting values with {(P|A)ts()} from XML to JSON
- Added JSON to YAML conversion with CLI support.
- Disallowing available-environment-variables, collection, document, environment-variable, unparsed-text-available, unparsed-text, unparsed-text-lines, and uri-collection functions in policy path expressions. Also disallowing any functions not in the standard fn or mappingRules namespaces.
- Added support for {Pt()} and {Pts()} which provides direct access to XPath in a template.
- Added support for YAML policies
- Fixed a bug where supported policy XPath functions were not properly declared
- Clean up : Better reporting of failed tests
- Clean up : Reuse common assertions in test suite
- Clean up : Add .DS_Store to .gitignore
- Fixed bug with {D} on role attribute if a role value contained a space
- Fixed bug in JSON to XML Conversion of attribute policy
- Added new call to validate policy given a JSONNode
- Added XPath validation to disallow doc and doc-available functions in policy path expressions
- Added support for {At()} and {Ats()} which provides direct access to attributes in a template
- Fixed a bug where an empty extension attribute value creates a malformed SAMLResponse
- Fixed a bug where specifying an attribute name that started with a digit caused a failure
- Fixed a bug where the correct ClassLoader was not properly setup in Saxon
- Clean up : Added project directories to ensure that all projects can compile locally
- Set the issue to the SAML Response to a default value of http://openrepose.org/filters/SAMLTranslation
- Initial Release