scaler-tech/laravel-saml2

What's Changed

• Add support for Laravel 13 and update dependencies by @beeyev in #127

Full Changelog: 2.7.1...2.7.2

Changes

• Added local helper: src/Helpers/Uuid.php
  • Uuid::uuid7(?DateTimeInterface $time = null) with monotonic behavior within the same millisecond.
• Removed direct package dependency:
  • composer.json removed ramsey/uuid": "^4.0

• Remove Ramsey UUID support and implement custom UUIDv7 generator (source PR, @beeyev)

Full Changelog: 2.7.0...2.7.1

Highlights

• Updated package compatibility baseline to modern stack versions.
• Added/expanded integration test coverage for SAML auth flows, service provider wiring, and tenant CLI commands.
• Improved Saml2User attribute handling with parsed-attribute support while keeping backward-compatible property access.
• Improved package bootstrapping for newer Laravel versions (mergeConfigFrom now happens in register()).
• Added static analysis and code style tooling (PHPStan + PHP CS Fixer) and applied strict typing/style refactors across the codebase.
• Updated CI to run a Laravel/PHP matrix for current supported versions.

Compatibility updates

• Minimum PHP is now 8.2.
• Laravel illuminate/* support is now ^9 || ^10 || ^11 || ^12
• onelogin/php-saml is now ^4.0
• ramsey/uuid is now ^4.0
• Test stack updated to modern versions (phpunit 10/11, orchestra/testbench 8/9/10)

Upgrade note

• This branch is a major compatibility shift for consumers on older PHP/Laravel versions.
  If your app is below PHP 8.2 or Laravel 9, upgrade your platform first before adopting this branch.

What's Changed

Full Changelog: 2.5.1...2.7.0

Changes

• Added local helper: src/Helpers/Uuid.php
  • Uuid::uuid7(?DateTimeInterface $time = null) with monotonic behavior within the same millisecond.
• Removed direct package dependency:
  • composer.json removed ramsey/uuid": "^4.0

• [2.5.x] Implement UUIDv7 generation and update tenant creation to use it (source PR, @beeyev)

Full Changelog: 2.5.1...2.5.2

What's Changed

• Preserve existing tenant name_id_format on saml2:update-tenant unless --nameIdFormat is explicitly passed.
  Source issue: #96
• Accept both GET and POST on /saml2/{uuid}/sls to support IdP-initiated SLO callbacks that use POST binding.
  Source issues:
  #119
  #30
• Prevent redirect TypeError on auth/SLO error paths when route config values are missing by enforcing safe redirect response fallbacks.
  Source issues:
  #63
  #50

• Improve tests by @beeyev in https://github.com/scaler-tech/laravel-saml2_bak/pull/3

Full Changelog: 2.5.0...2.5.1

Forked project to scaler-tech/laravel-saml2

This version is fully compatible with v2.x 24Slides/laravel-saml2

What's Changed

• Update project metadata and documentation for Scaler Tech fork (source PR, @beeyev)
• Add GitHub Actions workflows for PHP environment setup and PHPUnit testing (source PR, @beeyev)

New Contributors

• @beeyev made their first contribution in source PR #1

Full Changelog: 2.4.2...2.5.0

Added

• Support Laravel 12 by @roiLeo in (PR #116, @roiLeo)

Added

• Add explicit nullable type in a few places to avoid "PHP Deprecated" warning (PR #113, @andreypopov)

Added

• Add explicit nullable type in a few places to avoid "PHP Deprecated" warning (PR #113, @andreypopov)

Added

• Add support for Laravel 11 (PR #85, @diegofonseca)

Added

• Add support for Laravel 11 (PR #85, @diegofonseca)

Added

• Add a possibility to skip loading default database migrations (PR #76, @abublihi)

Fixed

• Add .gitattributes to ensure that unnecessary files aren't exported when downloading via Composer (PR #75, @owenvoke)

Added

• Add a possibility to skip loading default database migrations (PR #76, @abublih)

Fixed

• Add .gitattributes to ensure that unnecessary files aren't exported when downloading via Composer (PR #75, @owenvoke)

Added

• Add uuid of tenant to salm2.error_detail; makes logs more informative (PR #74, @vopolonc)

Added

• Add support for Laravel 10 (PR #56, @danijelk)

Added

• Add an ability to customize Tenant model (PR #49, @dmyers)

Fixed

• Change idpKey to uuid in saml2.php (PR #45, @joelpittet)

Fixed

• Improve sls handling of errors to match acs action (PR #35, @dmyers)
• Fix querying tenants via console commands when using PostgreSQL (issue #22)

Added

• Add support for Laravel 9 (pr #20, @SimplyCorey)

Added

• Add SignedIn event accessors, to match the docs (#10, @darynmitchell)

Fixed

• Version require ramsey/uuid and phpunit/phpunit
• Update branch aliases

Added

• Laravel 8 support

Fixed

• Setting Name ID Format on SP bootstrap

Added

• The ability to customize Name ID Format for different Identity Providers

Added

• Custom Relay State URL per Tenant (to specify a redirection URL after sign in)

Added

• Support for Laravel 7 (#4)
• Add branch-aliases in composer.json

Fixed

• Only log debug messages when debug is enabled in config file (#3)

Added

• Support for Laravel 6 (#1)

Fixed

• Typos in README.md (#2)

Added

• Completely changed the way of supporting multiple Identity Providers by adding Tenants
• Helper functions saml_url(), saml_route(), saml_tenant_uuid()
• Initializing SP in middleware
• Database migrations
• Console commands saml2:create-tenant, saml2:update-tenant, saml2:delete-tenant, saml2:restore-tenant, saml2:list-tenants, saml2:tenant-credentials

Fixed

• Routes are now accepting UUID of tenants instead of idpKey

Removed

• IdP Resolver, now it resolves by ResolveTenant middleware by matching UUID on routes
• Building SSO SP in Laravel ServiceProvider

Added

• Refactored the way of resolving identity provider, now we take it from URL
• Implemented helper saml_idp_key() to retrieve a resolved IdP
• Implemented helpers saml_url(), saml_route() to generate SSO-friendly links (fx. on emails)

Fixed

• Fixed redirecting to a custom URL on login request using the returnTo query parameter

Removed

• Removed referrer URLs from config parameters

Added

• Implemented keeping resolved IdP (Saml2::getResolvedIdPKey())

Fixed

• Fixed tests
• PHPUnit version

Added

• Added CHANGELOG.md

Fixed

• Restricted support from Laravel 5.4+
• Restricted support PHP 7.0+
• Updated README.md

Added

• Support of multiple IdPs (Identity Providers)

Fixed

• Renamed configuration file from saml2_settings to saml2
• Replaced underscores with dots in routes
• Minor refactoring, formatting