Releases: nitmir/django-cas-server
Releases · nitmir/django-cas-server
v2.1.0
v2.1.0 - 2024-08-18
Added
- Support for Django 4.2
- Allow forms to be overridden from settings
Deprecated
- Make the crypt module optional and deprecate it's usage.
The python stdlid crypt module is deprecated since version 3.11 and
will be removed in version 3.13. Check for the availability of the
crypt module.
All password checks using the crypt module will stop to work on
python 3.13.
v2.0.0
v2.0.0 - 2022-10-17
Added
- Support for Django 4.0 and 4.1
- Add locale for zh_Hans
- Add a unit test with a non ascii char in service url
- Add settings to allow deletings Django cookies upon logout
Changed
- Update CI: require pytest >= 7 and remove pytest-pythonpath dependancy
Fixes
- Fix unicode sandwich issue in cas_server.utils.update_url
- Fix DeprecationWarning about default_app_config in Django 3.2
- Fix DeprecationWarning about USE_L10N in Django 4.0
Removed
- Drop support for python 2.7 (now deprecated for more than 2 years,
expect it to break now or in a near future) - Drop support for python 3.5 (but it should keep working for a while.
pytest >= 7 do not support python 3.5 and Debian Stretch support ended)
v1.3.1
v1.3.0
v1.3.0 - 2021-06-19
Added
- Support for Dango 3.1 and 3.2
- Implement CAS_LDAP_ATTRS_VIEW set to 0: then using ldap bind mode, user
attributes can be retreive either using CAS_LDAP_USER or using the
binded user credentials. - Added ppc64le architecture support on travis-ci (django-cas-server is
included in the ppc64le versions of RHEL and Ubuntu) - Python 3.9 support
Fixes
- Allow to use user attributes if auth by ldap bind
- Fix spelling mistakes in french translation
- Fix bug model datefield Form (Federated User Admin)
- django.conf.urls is deprecated and will be removed in Django 4.0.
Use django.urls.re_path instead
Removed
- Drop support for Django 3.0 as it reached end of life.
v1.2.0
v1.2.0 - 2020-07-05
Added
- Bootstrap 4 templates
- Support for Django 2.2 and 3.0
Fixes
- Replace calls to add_description_unit. As of Sphinx 2.4, the deprecated
add_description_unit function has been removed. - Fix CRYPT-DES hash method for LDAP
- Fix various spelling miskate in README.rst
- Service URL: keep blank GET arguments
Changed
- Use python3 for flake8, check_rst and coverage
- Update README.rst quickstart for using python3 by default
Removed
- Drop support for Django 2.0 and 2.1 as it reached end of life.
We still keep Django 1.11 as it is the last supported release
by python2 AND the currently packaged version of Django in
Debian Buster (current stable).
v1.1.0
v1.0.0
v1.0.0 - 2019-01-12
Added
- Support for python 3.6 and Django 1.11
- Support for Django 2.0
- Keep query string then redirecting from / to /login
Fixes
- Add missing attributes authenticationDate, longTermAuthenticationRequestTokenUsed and
isFromNewLogin from service validation response - Catch error from calling django.contrib.staticfiles.templatetags.staticfiles.static
in non-debug mode before collectstatic in cas_server.default_settings.py - Invalid escape sequence in regular expression
Deprecated
- Support for Django <1.11 is dropped, it should still works for this version.
Next versions will most probably be not compatible with Django <1.11 - Support for python 3.4 is dropped, it should still works for this version.
Next versions may or may not works with python 3.4.
Other
- Migrations have been squashed for Django 2.0 support. Be sur to apply all migration before
updating to this version - Update PyPi url from https://pypi.python.org to https://pypi.org
v0.9.0
v0.9.0 - 2017-11-17
Added
- Dutch translation
- Protuguese translation (brazilian variant)
- Support for ldap3 version 2 or more (changes in the API)
All exception are now in ldap3.core.exceptions, methodes for fetching attritutes and
dn are renamed. - Possibility to disable service message boxes on the login pages
Fixed
- Then using the LDAP auth backend with
bind
method for password check, do not try to bind
if the user dn was not found. This was causing the exception
'NoneType' object has no attribute 'getitem'
describe in #21 - Increase the max size of usernames (30 chars to 250)
- Fix XSS js injection
v0.8.0
Added
- Add a test for login with missing parameter (username or password or both)
- Add ldap auth using bind method (use the user credentials to bind the the ldap server and let the
server check the credentials) - Add CAS_TGT_VALIDITY parameter: Max time after with the user MUST reauthenticate.
Fixed
- Allow both unicode and bytes dotted string in utils.import_attr
- Fix some spelling and grammar on log messages. (thanks to Allie Micka)
- Fix froms css class error on success/error due to a scpaless block
- Disable pip cache then installing with make install
Changed
- Update french translation