v1.6.1

Release Number: v1.6.1

Release Date: 29th Jul, 2025

Overview

We’re excited to announce the upcoming release of eSignet v1.6.1, a major update packed with new features, improved configurability, and enhanced security. This version brings greater flexibility for Relying Parties (RPs) to customize login experiences, a revamped UI, and significant improvements to deployment processes.

Version Note:

eSignet v1.6.1 is a patch release over the originally planned v1.6.0, addressing critical deployment-related bug fixes. It is the latest official version following eSignet v1.5.1.

Major Highlights

New Features

• Prefix & Postfix support for Choice of Login ID Configure login ID types (Email, Phone, VID, etc.) as per relying party (RP) needs. Comes with a revamped, more intuitive UI.

• Customizable Client Configuration Enhanced client management endpoint with additional options for better customization and control of eSignet's behavior.

• Purpose-Based eSignet UI UI dynamically adapts titles and tile subtitles based on the context and purpose of the service, providing a more relevant user experience.

Enhancements

• JTI Mandatory in Client Assertion JTI is now a required parameter in the client assertion JWT in token endpoint for improved security.

  ⚠️ Breaking Change: Existing relying parties (RPs) must include the jti claim to share consented claims successfully.

• Unique nonce for each transaction: nonce query parameter in the authorize url should be unique for each transaction.

  ⚠️ Breaking Change: If duplicate nonce is found “invalid_request“ error is thrown.

• Updated Vulnerable Libraries Security has been bolstered by updating dependencies and patching known vulnerabilities.

• Improved Deployment Scripts Upgraded installation scripts provide a smoother experience for new deployments of eSignet.

Features Released

Feature	Jira
Prefix & Postfix support for Choice of Login ID	ES-1665
Customizable Client Configuration	ES-1655
Purpose-Based eSignet UI	ES-216
Deployment Script Update	MOSIP-40529

Security Enhancements

Library Upgrades for Vulnerability Fixes:

Dependencies in eSignet service have been upgraded to fix known vulnerabilities.

Bug Fixes

Several known issues from the previous release have been addressed to improve platform stability and performance.

Please refer to the link here for the complete list of resolved issues.

Key Known Issues

Jira Issue	Summary
ES-2317	Verified Consented claims are not returned in userinfo response in MOSIP IDA
ES-2359	Getting invalid_request when the additional_config is added for the client

Please refer to link here for the full list of known issues.

Repositories Released

Repository	Tags
esignet	v1.6.1
esignet-signup	v1.2.1
esignet-mock-services	v0.11.1
esignet-plugins	v1.3.2

Compatibility Matrix

eSignet with MOSIP compatibility matrix

Module/Repo	Compatible Version
ID Authentication	1.2.1.0
PMS	1.2.2.1

eSignet with Sunbird compatibility matrix

Module/Repo	Compatible Version
Sunbird	v2.0.0-rc3

Signup with MOSIP compatibility matrix

Module/Repo	Compatible Version
ID Repository	1.2.2.1
Keymanager	1.2.1.0
PMS	1.2.2.1

Config Changes

eSignet

1. Added the following configurations to provide a structured and flexible approach to supporting multiple login ID types:

mosip.esignet.ui.config.login-id.options=

mosip.esignet.ui.config.login-id.options=

Allows customization for each ID type, including options such as:

• Prefixes (e.g., country codes for mobile numbers)

• Associated icons for improved UI experience

• Validation rules, such as regular expressions or length constraints

1. Property to configure additional config schema

mosip.esignet.additional-config.schema.url

Please refer here for details.

eSignet Mock Services

1. Property to configure the url to fetch the schema of additional config

mosip.mock.ui-spec.schema.url

Please refer here for details.

Database Changes

eSignet

1. New column: additional_config of type jsonb added to the client_detail table for storing flexible JSON configuration data.

2. Increased length of name column in the client_detail table to 600 characters to support longer client names.

Please refer here for details.

eSignet Mock Services

1. Modified the identity_json column in the client_detail table to use VARCHAR without a length limit, allowing for variable-length string data of unlimited size.

Please refer here for details.

Documentation

API Documentation

• eSignet API (v1.6.1)

• Signup API (v1.2.1)

Integration Guides

• eSignet Integration Guide

• Signup Integration Guide

End User Guides

• eSignet End User Guide

• Signup End User Guide

QA Report