CHANGELOG.txt in rubycas-server-0.4.2 vs CHANGELOG.txt in rubycas-server-0.5.0

- old
+ new

@@ -1,4 +1,41 @@ +=== 0.5.0 :: 2007-09-20 + +* Gateway requests should now be handled correctly. When the request to the + login page is made with gateway=true as one of the parameters, the CAS + server will immediately redirect back to the target service along with + a service ticket if an SSO session exists for the user (or without a + service ticket if there is no pre-existing SSO session). + Note that if you are using RubyCAS-Client and want gatewaying, you will + need to upgrade it to 1.1.0 as gatewaying was broken in prior versions. +* If gateway=true is specified as part of the logout URI, the server will + log the user out and immediately redirect them back to the specified + service. In other words, you can now do "gatewayed logouts" as well + as logins. +* A login ticket can now be remotely requested from the server by placing + a POST request to '/loginTicket'. +* The login view can now be made to return only the login form. This is + done by adding the 'onlyLoginForm' parameter to the '/login' request. + Optionally, a 'submitToURI' parameter can be supplied to force the login + form to submit to the given URI (otherwise the server will try to figure + out the full URI to its own login controller). This functionality may be + useful when you want to embed the login form in some external page, as + an IFRAME otherwise. +* Custom views can now be used to override the default Markaby templates + by specifying a 'custom_views_file' option in the configuration. See + custom_views.example.rb. [jzylks] +* Table names have been shortened to work with Oracle. A migration has + been added that should do the shortening for you the first time you run + this new RubyCAS-Server version. +* Multiple authenticators can now be specified. During authentication, + credentials are presented to the first authenticator, then the second, + and so on, until the user is validated by any one authenticator or fails + validation for all of them. [jzylks] +* When using webrick, you can now run with SSL disabled by omitting the + ssl_cert and ssl_key parameters. +* Changed incorrect MySQL example database configuration -- option should + be 'host:' not 'server:' (issue #22). + === 0.4.2 :: 2007-07-26 * The LDAP/AD authenticator has been largely re-written. The code is a bit cleaner now, and should work better with non-Active Directory LDAP servers (although this has yet to be tested since I don't have access to a non-AD