v1.9.3

Release notes

• generalize args in do logout func @r350178982 (#405)
• Fix Content-Security-Policy if hash is included in script-src @prauscher (#404)
• Add CSP handler setting @GertBurger (#401)

v1.9.2

Release notes

• Fix: New created users will have unusable password @pandafy (#399)

v1.9.1

Release notes

• Add traceback info to logger messages within exceptions @mjsir911 (#394)

1.9.0

Release notes

• Make sure djangosaml2 works in csp-enabled applications too (fix #391) @prauscher (#392)
• Some improvements for the documentation. @hutchison (#393)

1.8.0

Release notes

• Add additional RelayState URL validation @tymees (#388)
• Python3.12 compat @g-as (#387)
• Bumped handled python versions & prepared for Django 5.0 @g-as (#386)

1.7.0

Release notes

• Logout relaystate @plojyon (#380)

1.6.0

Release notes

• Allow overriding SameSite value for session cookie @RouganStriker (#378)

v1.5.8

Release notes

• Separate out the condition for skipping login @jafacakes2011 (#376)

v1.5.7

Release notes

• Split authenticate into separate overridable function @marcelkornblum (#374)

v1.5.6

Release notes

• Fix XSS in the idp url parameter [cleanup] @brianvans (#370)
• typo: [Documentation] xmlsec1 @peppelinux (#363)
• xmlsec package is xmlsec1 @Erik-J-D (#362)