From 6e027b7be6377e4871c9d2ff8a41f193b376d9e8 Mon Sep 17 00:00:00 2001
From: Johnny Shields <27655+johnnyshields@users.noreply.github.com>
Date: Tue, 14 Jan 2025 09:14:17 +0900
Subject: [PATCH 1/3] Update utils.rb

---
 lib/ruby_saml/utils.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/ruby_saml/utils.rb b/lib/ruby_saml/utils.rb
index 2489a5f8..3b9a5bc7 100644
--- a/lib/ruby_saml/utils.rb
+++ b/lib/ruby_saml/utils.rb
@@ -399,6 +399,7 @@ def generate_uuid(prefix = nil)
       prefix = prefix.is_a?(FalseClass) ? nil : prefix || UUID_DEFAULT_PREFIX
       "#{prefix}#{SecureRandom.uuid}"
     end
+    # @deprecated Use #generate_uuid
     alias_method :uuid, :generate_uuid
 
     # Given two strings, attempt to match them as URIs using Rails' parse method.  If they can be parsed,

From 3e3e2500d570a11f748ab5625b45f373eb134fe8 Mon Sep 17 00:00:00 2001
From: Johnny Shields <27655+johnnyshields@users.noreply.github.com>
Date: Tue, 14 Jan 2025 09:48:50 +0900
Subject: [PATCH 2/3] Update UPGRADING.md

---
 UPGRADING.md | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

diff --git a/UPGRADING.md b/UPGRADING.md
index e959d9ea..78036068 100644
--- a/UPGRADING.md
+++ b/UPGRADING.md
@@ -77,12 +77,12 @@ settings.idp_slo_service_binding = :redirect
 
 For clarity, the default value of both parameters is `:redirect` if they are not set.
 
-### Addition of Settings sp_uuid_prefix and removal of Utils::UUID_PREFIX
+### Change to message UUID prefix customization
 
-By default, the `uuid` (aliased to `request_id` / `response_id`) method in `RubySaml::Authrequest`,
-`RubySaml::Logoutrequest`, and `RubySaml::Logoutresponse` uses the `_` character as a default prefix,
-for example `_a1b3c5d7-9f1e-3d5c-7b1a-9f1e3d5c7b1a`. In RubySaml, versions prior to `2.0.0`, it was
-possible to change this default prefix by either calling `RubySaml::Utils.set_prefix` or by mutating
+On SP-originated messages (`Authrequest`, `Logoutrequest`, `Logoutresponse`), RubySaml generates the
+`uuid` (aliased to `request_id` / `response_id`) using the `_` character as a default prefix,
+for example `_a1b3c5d7-9f1e-3d5c-7b1a-9f1e3d5c7b1a`. In RubySaml versions prior to `2.0.0`, it was
+possible to change this default prefix by either `RubySaml::Utils.set_prefix` or by mutating
 the `RubySaml::Utils::UUID_PREFIX` constant (which was what `.set_prefix` did.) In RubySaml `2.0.0`,
 this prefix is now set using `settings.sp_uuid_prefix`:
 
@@ -91,10 +91,9 @@ this prefix is now set using `settings.sp_uuid_prefix`:
 settings.sp_uuid_prefix = 'my_id_'
 ```
 
-A side-effect of this change is that the `uuid` (aliased to `request_id` / `response_id`) method in
-`RubySaml::Authrequest`, `RubySaml::Logoutrequest`, and `RubySaml::Logoutresponse` now is `nil` until
-the `#create` method is called. Previously, it was generated automatically during object instantiation.
-After calling `#create` for the first time the UUID will not change, even if a `Settings` object with
+A side-effect of this change is that the `uuid` of the `Authrequest`, `Logoutrequest`, and `Logoutresponse`
+classes now is `nil` until the `#create` method is called (previously, it was generated during object instantiation.)
+After calling `#create` for the first time the `uuid` will not change, even if a `Settings` object with
 a different `sp_uuid_prefix` is passed-in on subsequent calls.
 
 ### Deprecation of compression settings

From b91bbc63c514ad7d23948953c3af497b0302a03b Mon Sep 17 00:00:00 2001
From: Johnny Shields <27655+johnnyshields@users.noreply.github.com>
Date: Tue, 14 Jan 2025 09:52:16 +0900
Subject: [PATCH 3/3] Update UPGRADING.md

---
 UPGRADING.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/UPGRADING.md b/UPGRADING.md
index 78036068..c5b1dbfd 100644
--- a/UPGRADING.md
+++ b/UPGRADING.md
@@ -89,10 +89,15 @@ this prefix is now set using `settings.sp_uuid_prefix`:
 ```ruby
 # Change the default prefix from `_` to `my_id_`
 settings.sp_uuid_prefix = 'my_id_'
+
+# Create the AuthNRequest message
+request = RubySaml::Authrequest.new
+request.create(settings)
+request.uuid #=> "my_id_a1b3c5d7-9f1e-3d5c-7b1a-9f1e3d5c7b1a"
 ```
 
 A side-effect of this change is that the `uuid` of the `Authrequest`, `Logoutrequest`, and `Logoutresponse`
-classes now is `nil` until the `#create` method is called (previously, it was generated during object instantiation.)
+classes now is `nil` until the `#create` method is called (previously, it was set in the constructor.)
 After calling `#create` for the first time the `uuid` will not change, even if a `Settings` object with
 a different `sp_uuid_prefix` is passed-in on subsequent calls.