v2.8.11

• Xml entity escape @Munawwar
• Add dom parser options for context customization #535 @bsShoham

v2.8.10

fix encryption for @xmldom/xmldom 0.8.6 upgrade #511 (@mastermatt)

v2.8.9

fix: system locale effects camelcase conversion #507 (@ayZagen)
fix: support unencrypted PKCS#8 keys again #503 (@mastermatt)

v2.8.8

• extract sessionIndex from LogoutRequest #501 (@zentooo)
• allow arrays of certs #499 (@mastermatt)
• fix init issue in logoutResponseRedirectURL function #496 (@wujjpp)

v2.8.7

bump v2.8.7

v2.8.6

Upgrade @xmldom/xmldom to v0.8.3 to include the security patch (#492) @dan-diaz
Upgrade uuid version (#486) @andrew-m-civica

v2.8.5

What's Changed

• Fixes issue with SAMLSignature method not using default transformations by @stjeffrey in #473
• Makes normalizeCerString() handle inserted tabs (fixes issue with Okta) by @hackerceo in #481

New Contributors

• @stjeffrey made their first contribution in #473
• @hackerceo made their first contribution in #481

---

This note is automatically generated.

v2.8.4

• Update node-xml-encryption with the latest upstream update for security patch (#474)
• Fix broken tests after upgrade
• Take default encryption key algorithm as http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
  • The previous default is no longer to be recommended, for more detail, https://github.com/auth0/node-xml-encryption/blob/291f3f10d5d1d571a3b6da2d411aa323398f5650/lib/xmlenc.js#L54-L56
• Upgrade dev dependencies

v2.8.3

This patch release includes the node-forge package upgrade in order to resolve a security issue.

node-forge v.1

v2.8.2

This patch includes a proper fix and test after major dependencies upgrade. Thanks for the reports from @arthurrump and @oniemela.