Release 2.13.0

Author: pitbulk

CHANGELOG

@@ -1,5 +1,11 @@
 CHANGELOG
 =========
+v.2.13.0
+* Update xmlseclibs with some fixes.
+* Add extra protection verifying the Signature algorithm used on SignedInfo element, not only rely on the xmlseclibs verify / verifySignature methods.
+* Add getAttributesWithFriendlyName method which returns the set of SAML attributes indexed by FriendlyName
+* Fix bug on parseRemoteXML and parseFileXML. Internal calls to parseXML missed the desiredNameIdFormat parameter
+
 v.2.12.0
 * Improve Time management. Use DateTime/DateTimeZone classes.
 * Escape error messages in debug mode

lib/Saml2/Utils.php

@@ -1207,13 +1207,16 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public'
 
     public static function isSupportedSigningAlgorithm($algorithm)
     {
-        return in_array($algorithm, array(
-            XMLSecurityKey::RSA_1_5,
-            XMLSecurityKey::RSA_SHA1,
-            XMLSecurityKey::RSA_SHA256,
-            XMLSecurityKey::RSA_SHA384,
-            XMLSecurityKey::RSA_SHA512
-        ));
+        return in_array(
+            $algorithm,
+            array(
+                XMLSecurityKey::RSA_1_5,
+                XMLSecurityKey::RSA_SHA1,
+                XMLSecurityKey::RSA_SHA256,
+                XMLSecurityKey::RSA_SHA384,
+                XMLSecurityKey::RSA_SHA512
+            )
+        );
     }
 
     /**

lib/Saml2/version.json

@@ -1,6 +1,6 @@
 {
     "php-saml": {
-        "version": "2.12.0",
-        "released": "06/11/2017"
+        "version": "2.13.0",
+        "released": "05/03/2017"
     }
 }