CHANGELOG.txt in rubycas-server-0.5.1 vs CHANGELOG.txt in rubycas-server-0.6.0

- old
+ new

@@ -1,4 +1,42 @@ +=== 0.6.0 :: 2008-03-28 + +* Much of the supporting functionality that makes RubyCAS-Server + act as a well-behaved Linux service has been abstracted out + into its own library. This new library is called Picnic and is + now a gem dependency for RubyCAS-Server. You can find out more about + it at http://code.google.com/p/camping-picnic/. +* The logout action will now accept a 'destination' parameter in lieu of + 'service'. This means that if a 'destination' parameter is given with + some URL, the logout action will show the login form, allowing the user + to immedietly log back in to the service specified by 'destination'. +* The logout action will now accept a 'url' parameter. If given, the logout + page will show a message indicating that the CAS session has been terminated + and instructing the user to click on a link to follow the given URL. If the + 'url' parameter is given, the login form will NOT be shown on the logout + page (see above). +* When an authentication failure occurs (because the user submitted + invalid credentials or the login ticket is missing), the server + now returns a 401 (Unauthorized) response instead of 200. +* An encryption-enabled version of the SQL authenticator is now + available. For more info have a look at: + http://code.google.com/p/rubycas-server/wiki/UsingTheSQLEncryptedAuthenticator +* Better compatibility with Oracle databases. The database migration + no longer tries to create tables with long names when long + table names are not supported by the underlying database connector + (issue #15). +* The server now automatically removes leading and trailing whitespace from + the username entered by users. Passwords however are left intact, with no + whitespace removed. +* The server can now be configured to automatically downcase the + username entered by users (dowcase_username option). So if a user + enters "JSmith", the system will convert it to "jsmith" if the + downcase_username option is set to true. +* The server can now be made to bind to a specific address. See the + :bind_address option in the config.example.yml file. +* Fixed bug with ActiveRecord 2.0.2 where service tickets were not + being given a type (issue #37). + === 0.5.1 :: 2007-12-20 * Tickets generated by the server should now be a lot more secure. The random string generator used for generating tickets now uses Crypt::ISAAC. Tickets have also been extended in length; STs, PTs