mod_auth_mellon 0.9.1

Bugfixes:

• Fix session offset calculation that prevented us from having several
  active sessions at once.
• Run mod_auth_mellon request handler before most other handlers,
  so that other handlers cannot block it by accident.

mod_auth_mellon 0.9.0

• Set the AssertionConsumerServiceURL attribute in authentication
  requests.
• Bugfixes:
  • Fix use of uninitialized data during logout.
  • Fix session entry overflow leading to segmentation faults.
  • Fix looking up sessions by NameID, which is used during logout.

v0.8.0

• Add support for receiving HTTP-Artifact identifiers as POST data.
• Simplify caching headers.
• Map login errors into more appropriate HTTP error codes than
  400 Bad Request.
• Add MellonNoSuccessErrorPage option to redirect to a error page on login
  failure.
• Turn session storage into a dynamic pool of memory, which means that
  attribute values (and other items) can have arbitrary sizes as long as
  they fit in the session as a whole.
• Various bugfixes:
  • Fix for compatibility with recent versions of CURL.
  • Fix broken option MellonDoNotVerifyLogoutSignature.
  • Fix deadlock that could occur during logout processing.
  • Fix some compile warnings.
  • Fix some NULL derefernce bugs that may lead to segmentation faults.
  • Fix a minor memory leak during IdP metadata loading.

v0.7.0

mod_auth_mellon 0.7.0

v0.6.1

mod_auth_mellon 0.6.1

v0.6.0

mod_auth_mellon 0.6.0

v0.6.0-rc1

mod_auth_mellon 0.6.0-rc1

v0.5.0

mod_auth_mellon 0.5.0

v0.4.0

mod_auth_mellon 0.4.0