1.9.0

Release notes

• Make sure djangosaml2 works in csp-enabled applications too (fix #391) @prauscher (#392)
• Some improvements for the documentation. @hutchison (#393)

1.8.0

Release notes

• Add additional RelayState URL validation @tymees (#388)
• Python3.12 compat @g-as (#387)
• Bumped handled python versions & prepared for Django 5.0 @g-as (#386)

1.7.0

Release notes

• Logout relaystate @plojyon (#380)

1.6.0

Release notes

• Allow overriding SameSite value for session cookie @RouganStriker (#378)

v1.5.8

Release notes

• Separate out the condition for skipping login @jafacakes2011 (#376)

v1.5.7

Release notes

• Split authenticate into separate overridable function @marcelkornblum (#374)

v1.5.6

Release notes

• Fix XSS in the idp url parameter [cleanup] @brianvans (#370)
• typo: [Documentation] xmlsec1 @peppelinux (#363)
• xmlsec package is xmlsec1 @Erik-J-D (#362)

v1.5.5

Release notes

• fix: next_url bug (c2cb222)

Closes #360

v1.5.4

Release notes

• Fix XSS in next_path url param @Gee19 (#359)

v1.5.3

What's Changed

• Better logging for _get_attribute_value to debug wrong configurations by @bthorben in #345

New Contributors

• @bthorben made their first contribution in #345

Full Changelog: v1.5.2...v1.5.3