blob: 5e68fb9ca8c09e2524e1104c01bb9eea2eac9a2c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
* API Changes
* AX::FetchResponse::fromSuccessResponse - return null when AX
response arguments are absent
* Alter AX fromOpenIDRequest() to take Auth_OpenID_AuthRequest
object instead of Auth_OpenID_Message object so that it matches
its counterpart methods in SREG and PAPE extensions.
* PAPE (Provider Authentication Policy Extension) module
* Updated extension for specification draft 2
* Auth_OpenID_PAPE_Request::fromSuccessResponse returns None if
PAPE response arguments were not signed
* Added functions to generate request/response HTML forms with
auto-submission javascript
* Consumer (relying party) API:
Auth_OpenID_AuthRequest::htmlMarkup
* Server API: Auth_OpenID_OpenIDResponse::toHTML
* New Features
* Added examples/discover.php, an OpenID service discovery tool
* Add optional form_tag_attrs argument to
Auth_OpenID_ServerResponse::toFormMarkup for setting arbitrary
FORM element attributes
* Fetchers now only read/request first megabyte of response
* Bug Fixes
* NOT NULL constraints were added to SQLStore tables where
appropriate
* Yadis discovery now properly falls back to HTML-based discovery if
it fails to get an XRDS document
* Auth_OpenID_Decoder now behaves correctly when given a protocol
message with an invalid OpenID namespace or a missing OpenID mode
* Auth_OpenID_OpenIDResponse::toFormMarkup: Use return_to from the
request, not the response fields (Not all responses (i.e. cancel,
setup_needed) include a return_to field.)
* normalize return_to URL before performing return_to verification
* Auth_OpenID_Consumer::_verifyDiscoveryResults: fall back to OpenID
1.0 type if 1.1 endpoint cannot be found
* Auth_Yadis_ParanoidHTTPFetcher now works correctly with both array
and non-array CURL versions
* Clarified licensing language in all source files
* OpenID 1 association requests no longer explicitly set
no-encryption session type
* Auth_OpenID_ServiceEndpoint::getDisplayIdentifier no longer
includes a fragment, if present, in display identifiers
* check_authentication requests: copy entire response, not just
signed fields. Fixes missing namespace in check_authentication
requests
* Yadis discovery now includes application/xhtml+xml and qualities
in the Accept header
* Normalize URLs correctly with URINorm.php
* Auth_OpenID_MySQLStore: Use ENGINE instead of TYPE when creating
tables
|
