API7 Gateway 3.9.3

Release Date: 2026-01-26

Features

Plugins

• AI Request Rewrite (opens in Plugin Hub docs)
  • Supported two new providers: Gemini, Vertex AI.
• SAML Auth (opens in Plugin Hub docs)
  • Added auth_protocol_binding_method parameter to support configuring SAML protocol binding methods, including HTTP-POST and HTTP-Redirect. The default value is HTTP-Redirect (backward compatible with previous versions). HTTP-POST must be used when Azure AD is the identity provider.

Fixes

Plugins

• SAML Auth (opens in Plugin Hub docs)

  • Fixed issue: SAML sessions could not be shared across multiple gateway instances. Added the mandatory secret field for configuring the key to encrypt session data.

    Upgrade note

    The saml-auth plugin upgraded from older versions can work normally but cannot share sessions across multiple gateway instances. This issue can be resolved by configuring the secret field.

  • Fixed issue: Missing NameID field in the SAML request when processing logout requests. The absence of the NameID field will cause logout failure when Azure AD is the identity provider.