v6

List view

Remove unused host parameter

breaking-change

Status: Open (in progress).

node-saml/node-samlnumber 398

#398 In node-saml/node-saml;

· cjbarth opened on Jul 27, 2025

Remove unused function arguments

breaking-change

enhancementNew feature or requestNew feature or request

Status: Open (in progress).

node-saml/node-samlnumber 367

#367 In node-saml/node-saml;

· cjbarth opened on Apr 11, 2024

Set inResponseTo validation to always

breaking-change

securityChanges related to plugging exploit vectorsChanges related to plugging exploit vectors

Status: Open (in progress).

node-saml/node-samlnumber 399

#399 In node-saml/node-saml;

· cjbarth opened on Jul 27, 2025

fix: keep empty and valueless SAML attributes in profile.attributes

Status: Open (in progress).

node-saml/node-samlnumber 413

#413 In node-saml/node-saml;

· arpitjain099 opened on Jun 5, 2026

v6: require signatures on redirect-binding logout messages

Status: Open.

#419 In node-saml/node-saml;

· cjbarth opened on Sep 17, 2026

v6: default signatureAlgorithm to sha256

Status: Open.

#422 In node-saml/node-saml;

· cjbarth opened on Sep 17, 2026

v6: reject an unrecognized signature or digest algorithm instead of falling back to SHA-1

Status: Open.

#423 In node-saml/node-saml;

· cjbarth opened on Sep 17, 2026

v6: remove Profile.getSamlResponseXml()

Status: Open.

#424 In node-saml/node-saml;

· cjbarth opened on Sep 17, 2026

v6: remove the validateSignature export

Status: Open.

#429 In node-saml/node-saml;

· cjbarth opened on Sep 17, 2026

Feat/useNewVerification

Status: Draft (not ready).

node-saml/node-samlnumber 408

#408 In node-saml/node-saml;

· ahacker1-securesaml opened on Sep 11, 2025