v1.5.0

Release Name: v.1.5.0

Release Date: 23rd Jan, 2025

Overview

We are excited to announce the release of eSignet v1.5.0, featuring the key implementation of Identity Assurance 1.0 (Draft). This open standard enhances eSignet’s ability to verify and authenticate identities more assuredly, laying the foundation for the newly supported video-based eKYC verification plugin. In addition to this core feature, the release includes security fixes and several architectural updates to streamline workflows and enhance the overall user and developer experience.

Features

1. Identity Assurance Implementation

   • Implemented Identity Assurance 1.0 (Draft), aligning with open standards for higher identity verification assurance, laying the foundation for video eKYC support.

2. Signup and Login with OTP for Verified Claims

   • Added video eKYC via WebSocket in the signup portal, enabling secure, real-time video verification during registration.

3. Well-Informed Claim Details

   • Users now receive clear consent requests before starting eKYC, ensuring transparency on data usage.

4. Clickable QR Code for INJI Wallet Login

   • A clickable QR code now appears for INJI Wallet login, with an embedded deeplink for seamless access within the same device.

Major Highlights

1. Local Deployment with Docker-Compose

   • Removed artifactory and config Server dependencies, enabling local eSignet deployment via docker-compose for easier setup and environment management.

2. eSignet-Plugins Repository Updates

   • eSignet-plugins repository for better compatibility and functionality.

3. Captcha Validation Improvements

   • Enhanced captcha validation for improved security and fewer vulnerabilities.

4. VC Issuance migration to Inji Certify

   • eSignet no longer supports VC issuance. This functionality was supported up to eSignet v1.4.2. INJI Certify now handles VC issuance. The documentation has been updated to reflect this change.

Note: The Identity Assurance feature has been added in the eSignet 1.5.0 release, and is currently supported only with the mock identity system.

Security Enhancements

• Security issues have been addressed to enhance platform security and speed. For a complete list of fixed bugs, please refer to this link.

Bug Fixes

• Several known issues from v1.4.1 have been resolved to improve platform stability. A detailed list of fixes is available here.

We believe this release will greatly improve eSignet's security, efficiency, and user experience. Thank you for your continued support!

Key Known Issues

Jira Issue	Issue Description
ES-1992	OAuth Details API is initiating the transaction despite a mismatch between the aud claim in the provided ID token and the clientId
ES-1986	IDT based authentication is successful on using reused challenge.
ES-1981	The system is not checking for an available slot every “6” seconds, for a max of “10” time while the loading screen is displaying
ES-1977	Individual ID is not validated with IDT auth factor

Please refer to this link for the list of all known issues.

Repositories Released

Repository Released	Tags
esignet	v1.5.0
esignet-signup	v1.1.0
esignet-mock-services	v0.10.0
esignet-plugins	v1.3.0
mosip-onboarding	v1.3.0-beta.1

Compatible Modules

Module/Repository	Compatible Version
IDA	1.2.1.0
ID Repository	1.2.1.0
Kernel	1.2.0.1
Sunbird	v2.0.0-rc3

Documentation

1. API Documentation

2. Integration Guides

3. End User Guide

4. QA Report