# By Matt Schwager (1) and Nicholas Amon (1)
# Via Jaime Pérez Crespo (2) and Matt Schwager (1)
* 'master' of github.com:simplesamlphp/simplesamlphp:
  Added documentation for AttributeCopy authentication processing filter.
  Bug fix to include the subject nameid in the data returned from a SAML 1.0 SSO authentication.

Fail more gracefully when the different endpoints are accessed directly. Instead of displaying an "Unable to find the current binding" error message that creates confusion, tell the user it's his fault.

Bug fix to include the subject nameid in the data returned from a SAML 1.0 SSO authentication.

Added documentation for AttributeCopy authentication processing filter.

Adding MDX metadata handler

Solve a security issue with some modules (not validating URLs we are redirecting to) by moving the check to the SimpleSAML_Auth_State::loadState() method.

Typos

Add documentation to sp-remote for signature.certificate

Stop calling SimpleSAML_Session::getAttributes() in SimpleSAML_Error_Error class. Use an alternate way to try to fetch user's mail.

Remove error handling code when session fails to initialise in SimpleSAML_Session::getSessionFromRequest().

Remove DATA_TIMEOUT_LOGOUT and expireDataLogout() from SimpleSAML_Session. Now, if we want to store data in the session that needs to go away when logging out, we should do that manually on every logout.

Manually remove logout callbacks data from the session on the SP (instead of using SimpleSAML_Session::DATA_TIMEOUT_LOGOUT).

# By Jakob Schlyter
# Via Jaime Pérez Crespo (1) and Jakob Schlyter (1)
* 'master' of github.com:simplesamlphp/simplesamlphp:
  create /var/lib/simplesamlphp/cert
  bump release
  update vendor
  do not depend on php-pecl-krb5, only used for negotiate
  speling
  typo
  RPM specfile for simpleSAMLphp, tested on CentOS 7

Manually remove idp-ssotime data from the session on the IdP, per association (instead of using SimpleSAML_Session::DATA_TIMEOUT_LOGOUT).

RPM specfile for simpleSAMLphp, tested on CentOS 7