v0.8 (06/28/2012)
-----------------
- new option TKTAuthPassthruBasicAuth and corresponding field in ticket
  ("bauth") makes it possible to specify the Basic authorization
  username/password in the ticket (e.g. when reverse proxying to a
  third party system that cannot use mod_auth_pubtkt).
  The credentials can optionally be encrypted in the ticket (AES-128-CBC).


v0.7 (06/04/2012)
-----------------
- TKTAuthPublicKey can now be set per directory/location (it is
  still possible to set a global default key, so existing configurations
  do not need to be changed)
  (contributed by Ivo De Decker).

- TKTAuthLoginURL is now optional; if not provided, users without
  a valid ticket will simply get an HTTP forbidden error
  (contributed by Ivo De Decker).

- Added Perl ticket generation module
  (contributed by Assaf Gordon).

- Module now compiles with Apache 2.4.

- Added TKTAuthBadIPURL option
  (contributed by John Wittkoski).

- Increased max. UID length to 64 (from 32); can be changed by
  modifying MAX_UID_SIZE.


v0.6a (02/23/2010)
------------------
- Fixed XSS vulnerability in example php-login/login.php.
  (reported by Thomas Hug).


v0.6 (09/12/2009)
-----------------
- Fixed inheritance of TKTAuthCookieName and TKTAuthBackArgName
  configuration directives
  (reported by Iaroslav Vassiliev).

- Improved compatibility with HTTP 1.0 (redirect)
  (contributed by Frederic Planchon <frederic@planchon.org>).


v0.5 (01/22/2009)
-----------------
- Fixed parsing of cookies with escaped spaces ('+')
  (reported by Iaroslav Vassiliev).

- Fixed errors in login.php example.


v0.4 (01/18/2009)
-----------------
- Replaced TKTAuthGracePeriod directive by graceperiod key in ticket
  (contributed by Frederic Planchon <frederic@planchon.org>).

- Updated example PHP login page to support ticket refreshing/grace periods
  (contributed by Frederic Planchon <frederic@planchon.org>).


v0.3 (01/13/2009)
-----------------
- Added TKTAuthFakeBasicAuth option (when enabled, adds an Authorization
  header to prevent problems with username logging for requests that are
  handled by PHP), contributed by Frederic Planchon <frederic@planchon.org>.

- Added support for ticket refreshing (TKTAuthRefreshURL and
  TKTAuthGracePeriod configuration directives), contributed by
  Frederic Planchon <frederic@planchon.org>.


v0.2 (02/03/2008)
-----------------
- Initial public release.
