IVs must be random and one-time (never reused). Additionally, by deriving it from the key, the key length was effectively reduced to 128 bits.

This allows custom themes to inject data for all templates by simply adding a new hook.

Add a check to the constructor of the new redis store to check if predis/predis is available, and throw a critical configuration error if not.

Added Redis as possible session storage mechanism, fixes #574

It actually needs a DOMNode, so it has been renamed to isDOMNodeOfType().

Additionally, some superfluous asserts() have been removed, and SimpleSAML\Utils\XML::getDOMChildren() has also changed its signature, as it should also receive a DOMNode, not a DOMElement.

If something fails, an exception would be thrown, instead of “false” being returned.

Also, at this point we are sure that the return value will be a string, because the call to fetch() does not set the third parameter ($getHeaders) to true.

SimpleSAML_Binding_Shib13_* classes refactorized to PSR-4 and PSR-2

SimpleSAML_XML_* classes refactorized to PSR-4 and PSR-2

facebook oauth response format changed

authtwitter: Added support for fetching users email address as attribute

docs: Fix the build status buttons

Minor fixes and enhancements to phpdoc.

Use it when constant-time comparisons are needed to avoid side-channel attacks.

To put it differently, to avoid OSX machines being identified as windows boxes, “darwin” should be evaluated *before* “win”.

Slight improvement of documentation in authsources config template

Make the language parameter name available to the templates, and remove that parameter from the queryParams entry in the template data.

This allows us to focus on the “real” parameters, ignoring language selection routines. It also allows us to build our own language bar the way we want it, not only with links.

This allows us to build the language switching links even when we have query parameters that would otherwise get lost.

The sspmod_saml_SP_Logout_Store::logoutSessions() method was still expecting the NameID to be an array.

This is supposed to provide better support for OAuth 1.0 Revision A.

Raise exception when memcache-server is down