Version 0.16.0

Release Name: Inji Wallet 0.16.0

Release Type: Developer

Release Date: 28th April, 2025

Overview

We are excited to announce the release of Inji Wallet Version 0.16.0! This update introduces major enhancements to security, metadata management, standards compliance, and credential handling. Here's a detailed overview of the latest improvements and features:

Key Highlights

1. ED25519-2020 Key Support

  • Feature: VP signing with ED25519Signature2020.

  • Inji Mobile now uses a newer, more secure algorithm (ED25519-2020) to sign tokens for better security.

  • Inji Mobile now uses the ED25519-2020 algorithm to sign vp_token in the OpenID4VP flow, aligning with modern cryptographic standards for improved security and reliability.

2. Authorization Request URI Support

  • Feature: Streamlined Authorization Flow with request_uri.

  • QR codes now include additional information for smoother, error-free authorization requests.

  • Supports client_id, request_uri, and request_uri_method in QR codes.

  • Introduced a new Request URI Endpoint for generating signed JWT authorization requests.

  • Improved error handling and updated OpenID4VP library for seamless integration.

3. Verifier Metadata Management (Kotlin)

  • Feature: Support for Multiple Client ID Schemes in OpenID4VP.

  • Inji supports different types of verification methods, improving flexibility and error handling in Kotlin.

  • Supports verifier validation using:

    • Pre-registered schemes

    • Redirect URI schemes

    • DID schemes

  • Includes improved error handling and JOSE header compatibility.

4. Unique UID Generation for VCs

  • Feature: Remove id field and generate internal UID.

  • Each Verifiable Credential (VC) now gets a unique ID that remains the same across backup and restore.

  • Generates a UUID (v4) as a unique identifier during VC download.

  • UID is used for file naming and remains consistent across backup/restore.

  • Independent of id field presence in VC response.

5. Dynamic Well-Known Endpoint Discovery

  • Feature: Standards-compliant endpoint resolution.

  • Inji automatically finds the right URLs for issuers, reducing configuration complexity.

  • Constructs well-known URL dynamically using credential_issuer_host.

  • Removed fallback JSONs from config.

  • Issuers are now responsible for redirection handling.

  • Ensures compliance with OpenID4VCI spec and simplifies config management.

6. Verifier Metadata Management (Swift)

  • Feature: Support for Metadata Validation in iOS.

  • Inji on iOS now supports various verification methods and ensures secure token handling.

  • Adds support for pre-registered, redirect URI, and DID schemes.

  • Custom DID Resolver implemented for public key extraction.

  • Integrated with beatt83/jose-swift for JWT verification.

  • Ensures compatibility and secure Authorization Request handling in Swift SDK.

Technical Improvements

  • Enhanced QR Code logic to support complex OpenID4VP flows.

  • JWT construction and signing updated using secure algorithms.

  • Added support for mock server testing and validation.

  • Improved UI rendering for long client IDs (bug fix).

  • API updates and better error handling for missing or invalid metadata.

  • client_id_scheme supported and for more details link with Readme of 0.2.x branch inji-openid4vp/README.md at release-0.2.x · mosip/inji-openid4vp.

Features Released

List of New Features

Jira Links

Multiple client IDs (Swift)

Support for Multiple Client ID Schemes in OpenID4VP Flow for Swif

Multiple client IDs (Kotlin)

Support for Multiple Client ID Schemes in OpenID4VP Flow for Kotlin

Localized Intro Sliders on First Launch

Intro Sliders Enhancement Language to Change as per Selection

Link-Based Presentation Request

Support Request URI for authorization request in OpenIDVP

Technical Enhancement to Features

Jira Links

Unique VC Identifier

Remove "id" from Verifiable Credentials (VC) and Generate a Unique UID

Added signature format

Use ED25519-2020 key to generate VP proof

Auto-fetch wallet config

Well-known discovery at Inji Mobile to fetch well-known response

Repository Released

Module
Version

Inji Mobile Wallet

inji-openid4vp-ios-swift

inji-openid4vp

Tuvali

Compatible Modules

Module
Version

mimoto

inji-config

esignet

inji-certify

pixelpass

secure-keystore

secure-keystore-ios-swift

inji-vci-client

tuvali-ios-swift

inji-vci-client-ios-swift

pixelpass-ios-swift

vc-verifier

Known Issues

Below is the list of known issues. To read in detail click here..

Jira Issue

Issue Description

[OpenId4VP] QR data is base64 encoded.

Invalid URL Format for OPENID4VP on Android 14 and above version.

Search is not working for the VCs from home page.

INJI- In the Credential Registry popup, when entering an invalid URL in the 'Edit Credential Registry' field, the error message is overlapping.

The activation VC is not working for a second time on the same device; the same VC displays a technical error message.

After we removed the mandatory configuration for the Mock issuer is not showing the error message in UI.

During face authentication, the camera view is not opening in all IOS device.

Automation run for sanity is failing few scenarios.

Bug Fixes

Below is the list of fixes as part of the 0.16.0 release:

Jira Issue

Issue Description

Sunbird insurance VC download is failing with Ed25519 key.

Automation(VC Verifier) - Verification of the mDL (mso_mdoc) against VC Verifier library is failing with no classFoundException.

Disable the toggle for the biometric, but do not provide a passcode. Close and reopen the application; it still asks for a passcode to log in.

qa-inji1 - Issuer page is not loading.

DL VC download is failing in qa-inji1.

INJIMOB- We are unable to download the MOSIP VC using the RegClient UIN, as it shows an 'Invalid UIN' error.

The Help icon should be consistent across all pages.

Intermittent download errors occur, causing the application to become unusable.

After performing backup and restore, and then removing a VC, the actual count of VCs and the VCs present in the wallet are mismatched.

Error screen CTAs not working in VC download flow.

Injimobile - The download VC is stuck in a loading state.

Intermediately We are unable to download the mock mdl VC; an error message appears.

We are unable to download the mosip VC; an error message appears.

IOS - when biometric is cancelled multiple times during app launch the app data is deleted.

Online login is failing with inji app crash from device.

INJI - After providing biometric authentication, if the user clicks the cancel button, they should not be allowed to successfully download the VC.

Inji- We are unable to download the VC via MOSIP ID due to an error message stating 'Failed to send OTP.

Inji- The link from the help page leads to a 'Page Not Found' error when clicked.

INJI- Intermittently, we are unable to download Sunbird as a 'Something went wrong' screen is being displayed.

In INJI Mobile app, the issue type fails to load after selecting an issuer on Android and iOS devices.

INJIMOB - Along with Insurance certify VC, an extra mock VC is getting downloaded.

INJIMOB - Mock certify and mock fallback VC downloaded background color not reflecting, Only after close and reopen app it is reflecting.

INJIMOB - About inji detail is different from IOS to android.

Biometrics Toggle stop working after Inji tour guide is dismissed.

INJIMOB- QR login is not working, we 're sorry! due to technical error we are unable to serve your request now .please try again later.

INJIMOB- intermediately , the QR login is not working. We are encountering an error message.

In the INJI 0.12x version, issues with downloading their UIN cards.

User is getting a 'Technical error' message on the first attempt to download the VC after restarting the certify pod.

Injimobile- After we removed the mandatory configuration for the Mock, issuer is not showing the error message in UI.

Search box close button is not working unless invoked on a specific point.

Deprecated

N/A

Documentation

Last updated

Was this helpful?