ignore only some rollout states

## [10.7.5](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.4...v10.7.5) (2022-10-21)

### Bug Fixes

* ignore incomplete token registrations ([5e4da8c4](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/5e4da8c41f900c6613fe65d9c4f04fc5c81a3b14))

do not consider tokens with non-empty rollout_state
(e.g. unverified TOTP or incomplete WebAuthn) 

## [10.7.4](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.3...v10.7.4) (2022-09-09)

### Bug Fixes

* handle numeric array in mfaEnforceSettings ([e1355c9b](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/e1355c9bebbb40f5714d8be9b5410e53b1342179))

## [10.7.3](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.2...v10.7.3) (2022-08-30)

### Bug Fixes

* do not prefer MFA at upstream when not preferred at SP ([c1b50daa](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/c1b50daa71fcb019cd889548d141b558e07573c9))

fix: do not prefer MFA at upstream when not preferred at SP

## [10.7.2](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.1...v10.7.2) (2022-08-04)

### Bug Fixes

* change log message about setUpstreamRequestedAuthnContext from error to info ([cdec4874](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/cdec4874705ed3ed6608404f39d2d714e4a48622))

setUpstreamRequestedAuthnContext is not called whenever the user has an existing session

## [10.7.1](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.0...v10.7.1) (2022-08-01)

### Bug Fixes

* add missing import in Utils ([399f373b](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/399f373b69aa4051ce543216a9949785294894e1))

# [10.7.0](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.6.0...v10.7.0) (2022-07-27)

### Features

* enforcing MFA per user per service ([354b516a](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/354b516a5fcb776716b95db83db5b2118f5ce5b6))

Mfa enforce settings

new attribute mfaEnforceSettings instead of mfaEnforced, new option entityID

# [10.6.0](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.5.2...v10.6.0) (2022-07-20)

### Bug Fixes

* use configuration options in DiscoUtils as well ([109f0a45](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/109f0a458ce9942c748ecf24be599f1d4955314d))

### Features

* config options password_contexts and mfa_contexts ([17939463](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/17939463f88f31b6a30f3a25c479c984932f54d0))
* regular expression support for context options ([132162d0](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/132162d03f4ceb668acbce196fe4d6ed0f6a5e6d))
* utility class for proxy, recover originally requested contexts ([89ae1552](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/89ae1552bddc88aed0092f0397545ec40dd29476))

utility class for proxy, configurable lists of AuthnContextClassRefs

also dropped redundant option proxy_mode from additional attributes filter

chore(deps): update dependency minimist to 1.2.6 [security]

## [10.5.2](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.5.1...v10.5.2) (2022-07-13)

### Bug Fixes

* prevent empty mfaTokens ([6a8d76d3](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/6a8d76d37b72a7be9136a2005293dee12ad06f9e))
* typo ([7a85d9bf](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/7a85d9bfcde30e5133c6b00dde0405c68cd7e4be))

fix: prevent empty mfaTokens

a filter for adding attributes from LDAP has problem with empty attributes

## [10.5.1](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.5.0...v10.5.1) (2022-06-22)

### Bug Fixes

* prevent undefined offset warning ([851c636c](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/851c636cbfb8795e0a0f9196b3ab48d6061621c3))