• Relaxed audience restriction. Real world tests show that some IdPs do not send this :(

Full Changelog: 2.1.6...2.1.7

• Security: add audience validation. Protects against cross-SP assertion reuse attack
• Removed obsolete members
• Moved tests to net10

Full Changelog: 2.1.5...2.1.6

Service release

What's Changed

• Bump System.Security.Cryptography.Xml from 8.0.2 to 10.0.8
• Bump all test dependencies too
• Nuget publishing pipeline

Full Changelog: 2.1.4...2.1.5

What's Changed

• Minor performance improvements by @TheTrueColonel in #93
• Use Encoding.UTF8 singleton instead of re-creating every time
• Unit tests dependencies

New Contributors

• @TheTrueColonel made their first contribution in #93

Full Changelog: 2.1.3...2.1.4

What's Changed

• Added example ASP.NET Core app
• Moved unit tests to net8, fixed failing tests
• Updated nugets, code formatting
• IdP-initiated logout request
• Added logoutrequest unittest
• Update README.md by @Celer21 in #88

New Contributors

• @Celer21 made their first contribution in #88

Full Changelog: 2.1.2...2.1.3

Workaround for people paste certificates without "BEGIN/END CERTIFICATE" strings and things break on Linux. Fixes #70

Full Changelog: 2.1.1...2.1.2

Updated vulnerable Nugets, removed some unneeded dependencies

Full Changelog: 2.1.0...2.1.1

What's Changed

• Added advanced attribute getters by @szukuro in #79
• Signout request by @alex-jitbit in #81
• Added SAML metadata generation helper

New Contributors

• @szukuro made their first contribution in #79

Full Changelog: 2.0.1...2.1.0

Performance improvements

• Use Encoding.ASCII.GetBytes instead of StringToByteArray (3X faster)
• Don't use DateTime.Now.ToUniversalTime, use UtcNow, 10X faster

Full Changelog: 2.0.0...2.0.1

More unit tests, also out of beta - tested, no bugs found.

Full Changelog: 1.2.5...2.0.0