Shen authored Dec 29, 2023 and Roderik Muit committed Dec 29, 2023

Issue #3365193 by sker101, roderik: Keep /saml/logout working after successful SAML auth + Drupal login failure.

Issue #3211479 by roderik, bmelvin1, adamfranco, John Franklin, azinck: Improve map_users_roles setting (add option to bypass roles check for user linking).

Fix 'Roles allowed for linking' that mistakenly had "Authenticated user" showing among its options. Also improve changelog, and reorder some config options (no functional change).

Dave Reid authored Dec 28, 2023 and Roderik Muit committed Dec 28, 2023

Issue #3384859 by Dave Reid, roderik: Allow redirecting from login form directly to the /saml/login route; remove login_link_show option

Issue #3211380 by chx, roderik, gpotter: Support for NameID as Unique ID and/or to map like any other attribute.

Random small improvements. Among others: make explicit that the values returned by getAttributes() are always arrays, and (for now) contain duplicate values. This makes it clear that getAttributeByConfig() can be made easier to read / equalized with the version in UserSyncEventSubscriber, without introducing any behavior change.

Fix config screen (after split): metadata_valid_secs would not be saved anymore, idp_change_password_service would be emptied / not saved anymore. Also, change label of translation tab.

Fix tests for the config screen overhaul; extend metadata tests and fix cache expiry for metadata when config is saved. (Config screen changes are unimportant.)

Issue #3309724: circumvent PHP-SAML checks to be able to generate metadata after setting just SP details.

Fix configuration value for drupal_login_roles / map_users_roles as saved by form. (Filtered now. No behavior change.)

Move labels of configuration options into schema.yml. This changes nothing except minor changes to some labels, and positioning of one checkbox.

Issue #3377532 by roderik, alex_sansom, malcomio: Fix "Log out different user upon re-authentication" option.

Issue #3384262 by michael.roosz, roderik: fix regex in ensureSafeRelayState() to work for drupal sites in subpaths.

#3211541 by roderik: remove reference to old EmailValidator (that was replaced in Core 8.8) since our v3.6+ supports Core >=9.2.

Revert "Revert "Issue #3289460 by japerry, Lal_, balintpekker, mglaman: Automated Drupal 10 compatibility fixes""

This reverts commit fedaafae.

Revert "Issue #3289460 by japerry, Lal_, balintpekker, mglaman: Automated Drupal 10 compatibility fixes"

This reverts commit 7f394a20.