v7.0

New issue

Open

No due date

•Last updated Oct 13, 2026

11% complete

Add XmlDSigVerifier wrapper for SignedXml
Unread
#519 opened Oct 25, 2025 · Updated Oct 5, 2026
155
Update Dependencies
Unread
#533 opened Mar 5, 2026 · Updated Oct 5, 2026
9
Decouple public key and data types from node:crypto (BinaryLike / KeyLike)
node-saml/xml-crypto#545 · opened on Sep 8, 2026 · v7.0
1
Design the sync/async model for 7.0 (Web Crypto, remote keys, and retiring the callback overloads)
node-saml/xml-crypto#546 · opened on Sep 8, 2026 · v7.0
Remove deprecated findChilds() alias
node-saml/xml-crypto#550 · opened on Sep 8, 2026 · v7.0
Audit the public export surface and deprecate internal helpers ahead of 7.0
node-saml/xml-crypto#551 · opened on Sep 8, 2026 · v7.0
2
fix: omit <Transforms> element when no transforms are specified
Unread
#542 opened Aug 11, 2026 · Updated Oct 15, 2026
14
feat!: remove deprecated findChilds() alias
Unread
#568 opened Sep 9, 2026 · Updated Oct 5, 2026
3
feat!: shrink the public export surface to what it means to publish
Unread
#569 opened Sep 9, 2026 · Updated Oct 5, 2026
3
feat!: decouple public key and data types from node:crypto
Unread
#570 opened Sep 9, 2026 · Updated Oct 5, 2026
5
feat!: give asynchronous work its own entry points
Unread
#571 opened Sep 9, 2026 · Updated Oct 5, 2026
5
addReference() does not validate xpath, so a reference without one fails with XPath parse error
node-saml/xml-crypto#584 · opened on Sep 12, 2026 · v7.0
Reference URIs without "#" are resolved as same-document IDs
node-saml/xml-crypto#594 · opened on Sep 14, 2026 · v7.0
Make C14nCanonicalization renderNs() and processInner() private, and drop the prefix-name scope check
node-saml/xml-crypto#618 · opened on Sep 24, 2026 · v7.0
isEmptyUri: true signs whatever xpath selects, so a reference to anything but the document element never verifies
node-saml/xml-crypto#620 · opened on Sep 25, 2026 · v7.0
1
A Transform without an Algorithm attribute is skipped instead of rejected
node-saml/xml-crypto#622 · opened on Sep 25, 2026 · v7.0
[ENHANCEMENT]: web-crypto support
node-saml/xml-crypto#477 · opened on Sep 17, 2024 · v7.0
3
Remove originalXmlWithIds
node-saml/xml-crypto#512 · opened on Aug 16, 2025 · v7.0
1
Separate Reference into SigningReference and ValidationReference
node-saml/xml-crypto#517 · opened on Oct 22, 2025 · v7.0
10
Xml-crypto doesnt properly handle dtd
node-saml/xml-crypto#524 · opened on Nov 9, 2025 · v7.0
7
Add keyKind (or isSymmetric) property to SignatureAlgorithm interface for structural symmetric-algorithm detection
node-saml/xml-crypto#537 · opened on May 15, 2026 · v7.0
[ENHANCEMENT]: createReferences emits an empty <Transforms></Transforms> block when ref.transforms is empty; the element is optional per XMLDSig and should be omitted
node-saml/xml-crypto#540 · opened on Aug 10, 2026 · v7.0
3
Added web-crypto support (#1)
Unread
#513 opened Oct 6, 2025 · Updated Oct 5, 2026Draft
20
Respect idAttribute when generating signatures.
Unread
#508 opened Jul 12, 2025 · Updated Oct 5, 2026
19
DRAFT: v7.x
Unread
#493 opened Apr 8, 2025 · Updated Oct 5, 2026
2

Navigation Menu

v7.0

Add XmlDSigVerifier wrapper for SignedXml

Update Dependencies

Decouple public key and data types from node:crypto (BinaryLike / KeyLike)

Design the sync/async model for 7.0 (Web Crypto, remote keys, and retiring the callback overloads)

Remove deprecated findChilds() alias

Audit the public export surface and deprecate internal helpers ahead of 7.0

fix: omit <Transforms> element when no transforms are specified

feat!: remove deprecated findChilds() alias

feat!: shrink the public export surface to what it means to publish

feat!: decouple public key and data types from node:crypto

feat!: give asynchronous work its own entry points

`addReference()` does not validate `xpath`, so a reference without one fails with `XPath parse error`

Reference URIs without "#" are resolved as same-document IDs

Make C14nCanonicalization renderNs() and processInner() private, and drop the prefix-name scope check

`isEmptyUri: true` signs whatever `xpath` selects, so a reference to anything but the document element never verifies

A `Transform` without an `Algorithm` attribute is skipped instead of rejected

[ENHANCEMENT]: web-crypto support

Remove originalXmlWithIds

Separate Reference into SigningReference and ValidationReference

Xml-crypto doesnt properly handle dtd

Add `keyKind` (or `isSymmetric`) property to `SignatureAlgorithm` interface for structural symmetric-algorithm detection

[ENHANCEMENT]: `createReferences` emits an empty `<Transforms></Transforms>` block when `ref.transforms` is empty; the element is optional per XMLDSig and should be omitted

Added web-crypto support (#1)

Respect idAttribute when generating signatures.

DRAFT: v7.x

Issues