Skip to content

feat: add encryption algorithm options#47

Merged
julienwoll merged 1 commit intomasterfrom
fix-encryption-algorithms
Mar 31, 2026
Merged

feat: add encryption algorithm options#47
julienwoll merged 1 commit intomasterfrom
fix-encryption-algorithms

Conversation

@julienwoll
Copy link
Copy Markdown
Contributor

Description

Adding possibility to choose the encryption algorithm when generating a SAML assertion.

BREAKING CHANGE:

  • The default encryption algorithm was http://www.w3.org/2001/04/xmlenc#aes256-cbc and is now http://www.w3.org/2009/xmlenc11#aes256-gcm,
  • adding disallowEncryptionWithInsecureAlgorithm (true by default) to enforce secure encryption algorithms

Testing

  • This change adds test coverage for new/changed/fixed functionality

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not the default branch

BREAKING CHANGE: adding encryption algorithm in options(if not set, defaults to http://www.w3.org/2009/xmlenc11#aes256-gcm), adding disallowEncryptionWithInsecureAlgorithm to enforce secure encryption algorithms
@julienwoll julienwoll requested a review from a team as a code owner March 31, 2026 11:58
@julienwoll julienwoll merged commit 5f53685 into master Mar 31, 2026
5 checks passed
@github-actions
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 8.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants