AuthLab 0.2.1 Beta

Highlights

• Adds the post-Phase-4 logout and trust-diagnostics follow-up on top of the existing beta line.
• This is an incremental beta cut from v0.2.0-beta, focused on front-channel logout visibility and deeper SAML trust analysis.

Included in 0.2.1 Beta

• OIDC front-channel logout callback support
  • app-specific front-channel logout URI
  • matching-run invalidation when the provider triggers logout
  • logout event capture in the auth run history
• Inspector and diagnostics improvements
  • protocol compliance report tab
  • stronger logout posture visibility in the OIDC workbench
• SAML trust diagnostics
  • signature verification detail panel
  • response-vs-assertion signature coverage breakdown
  • captured digest/signature/reference metadata
  • embedded-certificate fingerprint comparison against configured IdP trust
• Certificate health tooling
  • IdP certificate subject, issuer, fingerprint, and validity window display
  • expiry / expiring-soon posture reporting
• Documentation and CI updates
  • README, roadmap, AGENTS, CLAUDE, CI strategy, and E2E docs refreshed
  • CI-facing test coverage added for front-channel logout, certificate diagnostics, signature diagnostics, and compliance reporting

Verification

• npm run test:ci

Notes

• This remains a GitHub prerelease.
• v0.2.0-beta stays available as the earlier broad Phase 1 through Phase 4 beta milestone.