Changes

🔨 Maintenance

• build: upgrade devcontainer SDK to .NET 10 & add net10.0 target to AspNetCore (#922) @akunzai
• Improve test coverage (#827) @akunzai
• Replace Moq with NSubstitute (#825) @akunzai

📦 Dependencies

• deps: remove stale System.Net.Http 4.3.4 and System.Text.RegularExpressions 4.3.1 pins (#924) @akunzai
• deps: bump test dependencies and unify pnpm version in React sample (#923) @akunzai
• Update dependencies (#921) @akunzai
• Bump brace-expansion from 5.0.5 to 5.0.6 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#920) @dependabot[bot]
• chore(deps): bump typescript-eslint from 8.59.0 to 8.59.1 in /samples/AspNetCoreReactSample/ClientApp (#915) @dependabot[bot]
• Bump Microsoft.AspNetCore.Authentication.OpenIdConnect from 10.0.6 to 10.0.7 (#913) @dependabot[bot]
• Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.6 to 10.0.7 (#917) @dependabot[bot]
• chore(deps-dev): bump vite from 8.0.9 to 8.0.10 in /samples/AspNetCoreReactSample/ClientApp (#916) @dependabot[bot]
• Bump Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.6 to 10.0.7 (#914) @dependabot[bot]
• Bump Microsoft.AspNetCore.Identity.UI from 10.0.6 to 10.0.7 (#918) @dependabot[bot]
• chore(deps): bump typescript from 6.0.2 to 6.0.3 in /samples/AspNetCoreReactSample/ClientApp (#911) @dependabot[bot]
• chore(deps): bump typescript-eslint from 8.58.1 to 8.59.0 in /samples/AspNetCoreReactSample/ClientApp (#910) @dependabot[bot]
• chore(deps-dev): bump @types/node from 25.5.2 to 25.6.0 in /samples/AspNetCoreReactSample/ClientApp (#909) @dependabot[bot]
• chore(deps-dev): bump vite from 8.0.7 to 8.0.9 in /samples/AspNetCoreReactSample/ClientApp (#908) @dependabot[bot]
• chore(deps-dev): bump eslint from 10.2.0 to 10.2.1 in /samples/AspNetCoreReactSample/ClientApp (#907) @dependabot[bot]
• chore(deps): bump release-drafter/release-drafter from 6 to 7 (#906) @dependabot[bot]
• chore(deps): bump pnpm/action-setup from 5 to 6 (#905) @dependabot[bot]
• chore(deps): bump docker/setup-buildx-action from 3 to 4 (#904) @dependabot[bot]
• Bump coverlet.collector from 6.0.4 to 10.0.0 (#892) @dependabot[bot]
• Fix vulnerabilities (#903) @akunzai
• chore(deps): update Keycloak CAS to 26.6.1 (#902) @github-actions[bot]
• chore(deps): update Keycloak CAS to 26.6.0 (#901) @github-actions[bot]
• chore(deps-dev): bump vite from 8.0.3 to 8.0.5 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#899) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.5.7 (#898) @github-actions[bot]
• chore(deps-dev): bump vite from 8.0.2 to 8.0.3 in /samples/AspNetCoreReactSample/ClientApp (#896) @dependabot[bot]
• Bump StackExchange.Redis from 2.12.4 to 2.12.8 (#895) @dependabot[bot]
• chore(deps): bump microsoft/setup-msbuild from 2 to 3 (#887) @dependabot[bot]
• chore(deps): bump codecov/codecov-action from 5 to 6 (#888) @dependabot[bot]
• chore(deps): bump docker/build-push-action from 6 to 7 (#890) @dependabot[bot]
• chore(deps): bump DavidAnson/markdownlint-cli2-action from 22 to 23 (#889) @dependabot[bot]
• chore(deps): bump pnpm/action-setup from 4 to 5 (#891) @dependabot[bot]
• chore(deps): bump brace-expansion from 5.0.2 to 5.0.5 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#886) @dependabot[bot]
• chore(deps): bump picomatch from 4.0.3 to 4.0.4 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#885) @dependabot[bot]
• chore(deps): bump flatted from 3.4.1 to 3.4.2 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#883) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.5.6 (#884) @github-actions[bot]
• chore(deps): bump flatted from 3.3.3 to 3.4.1 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#882) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.5.5 (#881) @github-actions[bot]
• chore(deps): bump axios from 1.13.5 to 1.13.6 in /samples/AspNetCoreReactSample/ClientApp (#874) @dependabot[bot]
• chore(deps-dev): bump @types/node from 25.3.0 to 25.3.3 in /samples/AspNetCoreReactSample/ClientApp (#875) @dependabot[bot]
• chore(deps): bump typescript-eslint from 8.56.0 to 8.56.1 in /samples/AspNetCoreReactSample/ClientApp (#873) @dependabot[bot]
• chore(deps): bump minimatch from 10.2.2 to 10.2.4 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#870) @dependabot[bot]
• Bump Microsoft.TestPlatform.ObjectModel from 18.0.1 to 18.3.0 (#878) @dependabot[bot]
• Bump StackExchange.Redis from 2.11.3 to 2.11.8 (#879) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.5.4 (#865) @github-actions[bot]
• Bump ajv from 6.12.6 to 6.14.0 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#864) @dependabot[bot]
• Update dependencies (#863) @akunzai
• chore(deps): update Keycloak CAS to 26.5.3 (#859) @github-actions[bot]
• Update dependencies (#858) @akunzai
• Bump @types/react from 19.2.10 to 19.2.13 in /samples/AspNetCoreReactSample/ClientApp (#854) @dependabot[bot]
• Bump @vitejs/plugin-react from 5.1.2 to 5.1.3 in /samples/AspNetCoreReactSample/ClientApp (#855) @dependabot[bot]
• Bump @types/node from 25.1.0 to 25.2.2 in /samples/AspNetCoreReactSample/ClientApp (#856) @dependabot[bot]
• Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /samples/AspNetCoreReactSample/ClientApp in the npm_and_yarn group across 1 directory (#853) @dependabot[bot]
• Bump Microsoft.AspNetCore.Identity.UI from 10.0.1 to 10.0.2 (#851) @dependabot[bot]
• Bump Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.1 to 10.0.2 (#849) @dependabot[bot]
• Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.1 to 10.0.2 (#850) @dependabot[bot]
• Bump axios from 1.13.2 to 1.13.4 in /samples/AspNetCoreReactSample/ClientApp (#847) @dependabot[bot]
• Bump typescript-eslint from 8.53.1 to 8.54.0 in /samples/AspNetCoreReactSample/ClientApp (#845) @dependabot[bot]
• Bump Microsoft.AspNetCore.Authentication.OpenIdConnect from 10.0.1 to 10.0.2 (#848) @dependabot[bot]
• Bump Microsoft.AspNetCore.SpaProxy from 10.0.1 to 10.0.2 (#852) @dependabot[bot]
• Bump @types/node from 25.0.9 to 25.1.0 in /samples/AspNetCoreReactSample/ClientApp (#846) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.5.2 (#843) @github-actions[bot]
• Update dependencies (#842) @akunzai
• chore(deps): update Keycloak CAS to 26.5.1 (#841) @github-actions[bot]
• Update dependencies (#840) @akunzai
• Bump typescript-eslint from 8.49.0 to 8.51.0 in /samples/AspNetCoreReactSample/ClientApp (#838) @dependabot[bot]
• Bump vite from 7.2.7 to 7.3.0 in /samples/AspNetCoreReactSample/ClientApp (#837) @dependabot[bot]
• Bump Microsoft.Playwright from 1.50.0 to 1.57.0 (#839) @dependabot[bot]
• Bump @types/node from 25.0.2 to 25.0.3 in /samples/AspNetCoreReactSample/ClientApp (#836) @dependabot[bot]
• Bump wouter from 3.8.1 to 3.9.0 in /samples/AspNetCoreReactSample/ClientApp (#835) @dependabot[bot]
• chore(deps): update Keycloak CAS to 26.4.7 (#829) @github-actions[bot]
• Update dependencies (#826) @akunzai
• Bump vite from 7.2.4 to 7.2.6 in /samples/AspNetCoreReactSample/ClientApp (#824) @dependabot[bot]
• Bump xunit.v3 from 3.2.0 to 3.2.1 (#823) @dependabot[bot]
• Bump dotnet-reportgenerator-globaltool from 5.4.18 to 5.5.0 (#821) @dependabot[bot]
• Update dependencies (#816) @...

What's Changed

🐛 Bug Fixes

• #750: Fix service URL in OWIN CasAuthenticationHandler by @ferflorespinto in #751

Misc

• Improved .NET Framework compatibility by @akunzai in #710
• Create PR for web.config changes by @akunzai in #711
• Bump keycloak from 26.0.8 to 26.1.0 by @akunzai in #712
• Update NPM packages by @akunzai in #720
• Update dependencies by @akunzai in #721
• Fix assembly binding redirects by @github-actions in #722
• Migrate to new slnx format by @akunzai in #723
• Update dependencies by @akunzai in #724
• Fix assembly binding redirects by @github-actions in #725
• Cannot login without HTTPS since Keycloak v26 by @akunzai in #727
• Migrate xunit from v2 to v3 by @akunzai in #728
• Update dependencies by @akunzai in #731
• Fix assembly binding redirects by @github-actions in #732
• Fix known vulnerabilities by @akunzai in #733
• Update dependencies by @akunzai in #739
• Fix assembly binding redirects by @github-actions in #740
• Update dependencies by @akunzai in #741
• Update dependencies by @akunzai in #748
• Fix assembly binding redirects by @github-actions in #749
• Bump version to 5.6.1 by @akunzai in #752

New Contributors

• @github-actions made their first contribution in #722
• @ferflorespinto made their first contribution in #751

Full Changelog: v5.6.0...v5.6.1

What's Changed

• Upgrade dependencies for .NET Framework targeting by @akunzai in #709

Full Changelog: v5.5.0...v5.6.0

What's Changed

• Support CAS logout for OWIN by @akunzai in #580

Full Changelog: v5.4.0...v5.5.0

What's Changed

• The ISystemClock is obsolete since ASP.NET Core 8.0 by @akunzai in #469
• Improve the CAS logout redirection and exception handling by @akunzai in #471
• Ensure the ServiceTicketValidator use configured HttpClient by @akunzai in #472
• Improve error handling by @akunzai in #502
• Removed the GSS.Authentication.CAS.DistributedCache package by @akunzai in #506
• Fixes the default TicketIdFactory for TicketStore by @akunzai in #507
• Remove obsolete methods or properties by @akunzai in #508
• Obsoleting the IServiceTicketStore by @akunzai in #509
• Restore the authenticationType for AuthenticationTicket by @akunzai in #510

Full Changelog: 5.3.3...v5.4.0

What's Changed

• Build symbol package and publish it to NuGet.org by @akunzai in #310

Full Changelog: 5.3.2...5.3.3

• Add net462 target framework to fix assembly reference errors
• Bump Microsoft.Extensions.Primitives from 2.0.0 to 2.2.0
• Bump Microsoft.Extensions.Caching.Abstractions from 2.0.0 to 2.2.0
• Bump Microsoft.Owin.Security.Cookies from 4.2.0 to 4.2.2

• Remove the netstandard2.0 target framework from GSS.Authentication.CAS.AspNetCore to fix CVE-2022-34716

• Use the ASP.NET Core shared framework #131
• Restore the Name and Role ClaimType of ClaimsIdentity #132
• Renamed the ServiceTicket properties to match naming in AuthenticationProperties
• Prefer to use the ServiceTicket.ExpiresUtc for cache expiration

• Bump Microsoft.Owin.Security.Cookies from 4.1.1 to 4.2.0 #130
• Improved the IServiceTicketStore implementation #128
• Renamed the UseAuthenticationSessionStore to SaveTokens