CHANGELOG.txt in rubycas-server-0.4.2 vs CHANGELOG.txt in rubycas-server-0.5.0
- old
+ new
@@ -1,4 +1,41 @@
+=== 0.5.0 :: 2007-09-20
+
+* Gateway requests should now be handled correctly. When the request to the
+ login page is made with gateway=true as one of the parameters, the CAS
+ server will immediately redirect back to the target service along with
+ a service ticket if an SSO session exists for the user (or without a
+ service ticket if there is no pre-existing SSO session).
+ Note that if you are using RubyCAS-Client and want gatewaying, you will
+ need to upgrade it to 1.1.0 as gatewaying was broken in prior versions.
+* If gateway=true is specified as part of the logout URI, the server will
+ log the user out and immediately redirect them back to the specified
+ service. In other words, you can now do "gatewayed logouts" as well
+ as logins.
+* A login ticket can now be remotely requested from the server by placing
+ a POST request to '/loginTicket'.
+* The login view can now be made to return only the login form. This is
+ done by adding the 'onlyLoginForm' parameter to the '/login' request.
+ Optionally, a 'submitToURI' parameter can be supplied to force the login
+ form to submit to the given URI (otherwise the server will try to figure
+ out the full URI to its own login controller). This functionality may be
+ useful when you want to embed the login form in some external page, as
+ an IFRAME otherwise.
+* Custom views can now be used to override the default Markaby templates
+ by specifying a 'custom_views_file' option in the configuration. See
+ custom_views.example.rb. [jzylks]
+* Table names have been shortened to work with Oracle. A migration has
+ been added that should do the shortening for you the first time you run
+ this new RubyCAS-Server version.
+* Multiple authenticators can now be specified. During authentication,
+ credentials are presented to the first authenticator, then the second,
+ and so on, until the user is validated by any one authenticator or fails
+ validation for all of them. [jzylks]
+* When using webrick, you can now run with SSL disabled by omitting the
+ ssl_cert and ssl_key parameters.
+* Changed incorrect MySQL example database configuration -- option should
+ be 'host:' not 'server:' (issue #22).
+
=== 0.4.2 :: 2007-07-26
* The LDAP/AD authenticator has been largely re-written. The code is a bit
cleaner now, and should work better with non-Active Directory LDAP servers
(although this has yet to be tested since I don't have access to a non-AD