> For the complete documentation index, see [llms.txt](https://docs.esignet.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.esignet.io/home/esignet/roadmap-and-releases/versions/v1.7.0.md). # v1.7.0 **Release Number:** v1.7.0 **Release Date:** 2nd December, 2025 ## **Overview** We’re excited to announce the release of [**eSignet v1.7.0**](https://github.com/mosip/esignet/tree/release-1.7.x), a feature-rich upgrade over v1.6.1 that introduces major advancements in security, enhanced user interaction flexibility, and improved deployment efficiency. This release includes full support for the [**FAPI 2.0 Security Profile**](https://docs.esignet.io/esignet-authentication/features#fapi-2.0-security-profile), implemented through multiple industry-standard RFCs, and brings dynamic, schema-driven UI enhancements for both Signup and KBI authentication—while ensuring complete backward compatibility with existing authentication flows. ## **Major Highlights** ### **New Features** #### **Support for FAPI 2.0 Security Profile** eSignet now [implements key RFCs required for FAPI 2.0 compliance](https://docs.esignet.io/esignet-authentication/features#fapi-2.0-security-profile), strengthening security and interoperability: * **Pushed Authorization Request (PAR)** – A new PAR endpoint is introduced to support secure, tamper-resistant authorization requests. * **Demonstration of Proof of Possession (DPoP)** – Adds cryptographic proof-of-possession for access tokens, preventing token replay attacks. * **Authorization Server Issuer Identification** – Enhances security by enabling the ‘Authorization Server’ to uniquely identify itself during authorization flows; includes updates to configurations in [oauth authorization server well-known](/home/esignet/esignet-authentication/develop/configuration/.well-known/oauth-configuration.md). {% hint style="success" %} **Tips**: **eSignet now supports FAPI 2.0 security profile.** However, enforcement of the FAPI 2.0 security profile is **client-configurable**. Each client can choose whether or not to enable FAPI 2.0 security profile for their integrations.\ If a client does **not** enforce the FAPI 2.0 security profile, their authentication flows will continue to work **seamlessly without any change**. {% endhint %} ### **Enhancements** #### **Dynamic Schema-Driven Signup UI** The Signup UI has been improved and [can now be generated dynamically based on a backend-driven UI schema](https://docs.esignet.io/esignet-signup/features#dynamic-signup-form-schema-driven-ui).\ This leverages a JSON form-builder library for improved flexibility and faster configuration changes. #### **Dynamic Schema-Driven KBI Authentication UI** [The KBI authentication UI](https://docs.esignet.io/esignet-authentication/features#supported-authentication-methods) is now also fully dynamic and powered by the same schema-based JSON form builder, enhancing consistency and maintainability. #### **Improved Deployment Scripts** Deployment scripts for the eSignet service have been refined to simplify setup, reduce configuration overhead, and ensure smoother deployments across environments. ### **Bug Fixes** Several known issues from the previous release have been addressed to improve platform stability and performance. Please refer to the link [here](https://mosip.atlassian.net/issues/?jql=issuetype%20%3D%20Bug%20and%20%22Release%20Number%5BLabels%5D%22%20%3D%20eSignet_v1.7.0) for the complete list of resolved issues.
Jira IDSummary
ES-2702Deployment : Not able to complete the sanity, after registration getting the error "Unable to process. Please try again".
ES-2691Deployment : signup captcha is not working, throwing an error "The captcha you entered is incorrect. Please try again".
ES-2683Deployment : esignet image is not getting updated to mosipqa/esignet-with-plugins:1.7.x its taking develop branch image.
ES-2678Deployment : In init_values.yaml branch is pointing to develop branch instead of release-1.7.x.
ES-2677Deployment : Still keyclock postgres image is pointing to bitnami.
ES-2665Docker-compose : In mock-relying-party-portal-fapi2-docker-compose.yml volumes: are not given.
ES-2659Linux : Docker Compose fails to start containers — “failed to extract layer” error.
ES-2632eSignet-MOSIP: User is unable to complete eKYC verification in MOSIP-ID plugin.
ES-2629esignet mock: Captcha is enabled but its not displayed in UI, but checking for captcha in UI and we are getting this error while signing up.
ES-2588In mock : KBI Login is not working.
ES-2577eSignet-MOCK: fetchUserInfo fails with error "Failed to get the User Info." when DPoP and PAR are disabled.
ES-2574eSignet-MOSIP-ID: User is unable to register in signup-mosipid-qabase.
ES-2556JWKS.json returning incorrect userinfo signing certificate.
### Known Issues Please refer [here](https://mosip.atlassian.net/issues/?jql=issuetype%20%3D%20Bug%20and%20labels%20%3D%20known_issue_eSignet_1.7.0) for full list of known issues.
Jira IDSummary
ES-2716In UI schema when email is marked as optional field by default its taking as mandatory field.
ES-2709KBI login in mock is not working when captcha is enabled
MOSIP-43956Update documentation for partner-onboarding/esignet.
MOSIP-43957Update keycloak init scripts in esignet-signup.
MOSIP-43958Issue in partner on boarder script for eSignet.
MOSIP-43960Partner on boarder script issue in esignet-signup.
### Story Development
Story IDDescription
ES-2589eSignet - Signup - Add a new endpoint to support the multi-part data.
ES-2429Signup Module - Signup UI registration Form - Add support to capture the face photo for the user.
ES-2379Authorization Server Issuer Identification for FAPI 2.0 Compliance.
ES-2346Add Support for additional Config in client management endpoint.
ES-2333Push Authorization request (PAR) - FAPI 2.0 Compliance - Add a new authorize url to process request with clientid and request uri.
ES-2296Push Authorization request (PAR) - FAPI 2.0 Compliance - New endpoint development to initiate PAR flow.
ES-2297Sender constrained tokens using DPOP for FAPI 2.0 security profile compliance.
ES-2058Enhance KBI form in eSignet UI.
ES-1644Registration form on the eSignet sign-up page should dynamically adjust its fields and layout based on a predefined UI schema.
### Repositories Released | Repository | Tag | | --------------------- | ---------------------------------------------------------------------- | | esignet | [v1.7.0](https://github.com/mosip/esignet/tree/v1.7.0) | | esignet-signup | [v1.3.0](https://github.com/mosip/esignet-signup/tree/v1.3.0) | | esignet-mock-services | [v0.12.0](https://github.com/mosip/esignet-mock-services/tree/v0.12.0) | | esignet-plugins | [v1.3.4](https://github.com/mosip/esignet-plugins/tree/v1.3.4) | ### Compatible Modules #### eSignet compatibility with MOSIP | Module/Repo | Compatible Version | | ----------- | ----------------------------------------------------------------------------------------------------------------------------------- | | PMS | [1.2.2.1](https://github.com/mosip/partner-management-services/tree/v1.2.2.1) | | IDA |

1.2.1.0
1.3.x (for identity assurance 1.0 support)

| #### eSignet compatibility with Sunbird | Module/Repo | Compatible Version | | ----------- | --------------------------------------------------------------------------- | | Sunbird | [v2.0.0-rc3](https://github.com/Sunbird-RC/sunbird-rc-core/tree/v2.0.0-rc3) | #### eSignet Signup compatibility with MOSIP | Module/Repo | Compatible Version | | --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | ID Repository |

1.2.1.0
1.3.x (for identity assurance 1.0 support)

| | otpmanager | [1.2.0.1](https://github.com/mosip/otp-manager/tree/v1.2.0.1) | | kernel-notification-service | [1.2.0.1](https://github.com/mosip/commons/tree/v1.2.0.1/kernel/kernel-notification-service) | | auditmanager | [1.2.0.1](https://github.com/mosip/audit-manager/tree/v1.2.0.1) | ### DB Changes * **eSignet Mock Identity System**: * Please refer the [link here](https://github.com/mosip/esignet-mock-services/blob/master/db_upgrade_script/mosip_mockidentitysystem/sql/0.11.2_to_0.12.0_upgrade.sql) for the DB upgrade script * Please refer the [link here](https://github.com/mosip/esignet-mock-services/blob/master/db_upgrade_script/mosip_mockidentitysystem/sql/0.11.2_to_0.12.0_rollback.sql) for the DB rollback script ### Config Changes * **eSignet**: The properties listed below are newly added to the eSignet default configuration. For a comprehensive view of all configuration properties in eSignet, please [refer here](https://github.com/mosip/esignet/blob/master/esignet-service/src/main/resources/application-default.properties). * `mosip.esignet.par.expire-seconds=60` * `mosip.esignet.par.request-uri.prefix=urn:ietf:params:oauth:request_uri:` * `mosip.esignet.dpop.clock-skew=10` * `mosip.esignet.dpop.nonce.expire.seconds=15` * `mosip.esignet.kbispec.ttl.seconds=18000` * `mosip.esignet.client-assertion.unique.jti.required=true` * **Signup**: The properties listed below are newly added to the Signup default configuration. For a comprehensive view of all configuration properties in eSignet, please [refer here](https://github.com/mosip/esignet-signup/blob/master/signup-service/src/main/resources/application-default.properties). * `mosip.signup.uispec.ttl.seconds=18000` ### Documentation **API Documentation** * [**eSignet API (v1.7.0)**](https://github.com/mosip/esignet/blob/master/docs/esignet-openapi.yaml) * [**Signup API (v1.3.0)**](https://github.com/mosip/esignet-signup/blob/master/docs/esignet-signup-openapi.yaml) **Integration Guides** * [**eSignet Integration Guide**](https://docs.esignet.io/esignet-authentication/develop/integration) * [**Signup Integration Guide**](https://docs.esignet.io/esignet-signup/develop/integration-guide-signup-portal) **End User Guides** * [**eSignet End User Guide**](https://docs.esignet.io/esignet-authentication/test/end-user-guide) * [**Signup End User Guide**](https://docs.esignet.io/esignet-signup/test/end-user-guide) [**QA Report**](/home/esignet/roadmap-and-releases/versions/v1.7.0/test-report.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.esignet.io/home/esignet/roadmap-and-releases/versions/v1.7.0.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.