Skip to content

Conversation

@johanib
Copy link
Contributor

@johanib johanib commented Dec 15, 2025

Require xmlseclibs 3.1.4

Prior to this change, it was possible to use a version of xmlseclibs that contained security issues.


Mark bundle as incompatible with SF 8

Saml Bundle is not compatible with symfony/http-foundation yet
Prior to this change, this library could be installed alongside symfony/http-foundation 8.
However, this library will break with http-foundation 8, as the generic get() function from the request method is removed.

Split into issue: #135
See \Surfnet\SamlBundle\SAML2\AuthnRequestFactory::createSignedFromHttpRequest
See \Surfnet\SamlBundle\SAML2\AuthnRequestFactory::createAuthnRequestFromHttpRequest

Prior to this change, it was possible to use a version of xmlseclibs that contained security issues.
Prior to this change, this library could be installed alongside symfony/http-foundation 8.
However, this library will break with http-foundation 8, as the generic get() function from the request method is removed.

See \Surfnet\SamlBundle\SAML2\AuthnRequestFactory::createSignedFromHttpRequest

See \Surfnet\SamlBundle\SAML2\AuthnRequestFactory::createAuthnRequestFromHttpRequest
@johanib johanib force-pushed the feature/xmlseclibsupdate branch from 5f22c71 to db168a9 Compare December 15, 2025 10:32
@johanib johanib requested review from MKodde and pmeulen December 15, 2025 10:34
Copy link
Member

@pmeulen pmeulen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@johanib johanib merged commit d393691 into main Dec 15, 2025
2 checks passed
@johanib johanib deleted the feature/xmlseclibsupdate branch December 15, 2025 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants