CHANGELOG.txt in rubycas-server-0.5.1 vs CHANGELOG.txt in rubycas-server-0.6.0
- old
+ new
@@ -1,4 +1,42 @@
+=== 0.6.0 :: 2008-03-28
+
+* Much of the supporting functionality that makes RubyCAS-Server
+ act as a well-behaved Linux service has been abstracted out
+ into its own library. This new library is called Picnic and is
+ now a gem dependency for RubyCAS-Server. You can find out more about
+ it at http://code.google.com/p/camping-picnic/.
+* The logout action will now accept a 'destination' parameter in lieu of
+ 'service'. This means that if a 'destination' parameter is given with
+ some URL, the logout action will show the login form, allowing the user
+ to immedietly log back in to the service specified by 'destination'.
+* The logout action will now accept a 'url' parameter. If given, the logout
+ page will show a message indicating that the CAS session has been terminated
+ and instructing the user to click on a link to follow the given URL. If the
+ 'url' parameter is given, the login form will NOT be shown on the logout
+ page (see above).
+* When an authentication failure occurs (because the user submitted
+ invalid credentials or the login ticket is missing), the server
+ now returns a 401 (Unauthorized) response instead of 200.
+* An encryption-enabled version of the SQL authenticator is now
+ available. For more info have a look at:
+ http://code.google.com/p/rubycas-server/wiki/UsingTheSQLEncryptedAuthenticator
+* Better compatibility with Oracle databases. The database migration
+ no longer tries to create tables with long names when long
+ table names are not supported by the underlying database connector
+ (issue #15).
+* The server now automatically removes leading and trailing whitespace from
+ the username entered by users. Passwords however are left intact, with no
+ whitespace removed.
+* The server can now be configured to automatically downcase the
+ username entered by users (dowcase_username option). So if a user
+ enters "JSmith", the system will convert it to "jsmith" if the
+ downcase_username option is set to true.
+* The server can now be made to bind to a specific address. See the
+ :bind_address option in the config.example.yml file.
+* Fixed bug with ActiveRecord 2.0.2 where service tickets were not
+ being given a type (issue #37).
+
=== 0.5.1 :: 2007-12-20
* Tickets generated by the server should now be a lot more secure.
The random string generator used for generating tickets now uses
Crypt::ISAAC. Tickets have also been extended in length; STs, PTs