Changes for version 0.89 - 2026-08-07

  • Significant Changes
    • Implement cert_text as a first class anchor (0.86 said it was)
    • Update Changes for 0.86 and 0.88, CVE-2026-18108 was also fixed
    • Increment minimum version for XML::Sig to 0.72
    • Fix some test issues
    • Windows tests are still an issue - will fix soon
    • BREAKING CHANGE: As of Release 0.86, one of cacert, cert_text or insecure_trust_embedded_cert must be provided when instantiating:
    • Net::SAML2::SP (forwards cacert to sp_post_binding)
    • Net::SAML2::Binding::POST
    • Net::SAML2::Object::Response
    • Net::SAML2::Protocol::Assertion
    • insecure_trust_embedded_cert trusts the certificate embedded in the message itself, which provides no protection against a forged Assertion. It exists for test and development use only.
    • As of Release 0.79 the following have been changed and the old version may be removed in an upcoming release.
    • Net::SAML2::Protocol::Artifact
      • response_to changed to in_response_to
    • Net::SAML2::Protocol::LogoutResponse
      • response_to changed to in_response_to
  • Detailed Change Log
    • 4e6d446 Fixes #248 Sub::Override calling method in t/23-post-binding.t
    • ee6cd22 Fixes #248 - nanosecond issue
    • 51ad4c3 Fixes #249 Make cert_text a first class anchor
    • 025912d Increment minimum version for XML::Sig
    • 1fe9849 CVE-2026-18108 was also fixed in version 0.86
    • f0d771a Remove GitHub::CreateRelease
    • 3c43c05 Increment repo version
    • d1fa6e0 v0.88

Modules

SAML2 bindings and protocol implementation
An attribute consuming service object
HTTP POST binding for SAML
HTTP Redirect binding for SAML
SOAP binding for SAML
SAML Identity Provider object
A response object
SAML2 artifact object
ArtifactResolve protocol class
SAML2 assertion object
SAML2 AuthnRequest object
SAML2 LogoutRequest Protocol object
SAML2 LogoutResponse Protocol object
RequestedAttribute class
Common behaviour for Protocol messages
A role to verify the SAML response XML
Common behaviour for Certificates in XML
Common behaviour for XML language settings
SAML Service Provider object
Custom Moose types for Net::SAML2
Utility functions for Net::SAML2
Net::SAML2 subclass of XML::Sig
XML Util class