Version 0.13.0
Release Name: Inji Web Wallet 0.13.0
Release Type: Developer
Release Date: 29th July, 2025
Overview
This release of Inji Web Wallet v0.13.0 marks a significant milestone with the introduction of Identity Provider (IDP) based login, enabling users to seamlessly log in using their Google account. This enhancement makes credential access and management more intuitive and accessible, especially for users new to the ecosystem.
Once logged in via Google, users can securely download and store their credentials in the Stored Cards section of the web wallet. This introduces a more user-friendly and federated authentication model aligned with modern identity standards. Together, these updates strengthen the Inji Web Wallet's position as a secure, standards-compliant, and user-friendly platform for managing verifiable credentials.
Key Highlights
Multiple new API integrations to support login, token validation, and credential retrieval workflows
New database structures for securely managing user sessions and credential metadata
Enhanced OpenID4VCI compliance, including proper handling of
c_nonceand token typesUI responsiveness improvements across devices
Security updates, addressing cryptographic best practices and container hardening
Expanded test automation for login, credential management, and passcode flows
Enhanced error handling for OAuth2 login and download APIs
UI Upgrades
Landing Screen:
Clear call-to-action for users to log in via Google or existing credentials.
Visual improvements and responsive layout for desktop and mobile.
Google Login Integration:
One-click login with Google using OAuth 2.0.
Automatic redirection to the wallet homepage on successful authentication.
Passcode Setup / Login:
For first-time users, a guided flow to create a secure 6-digit passcode.
Returning users can log in quickly using their passcode.
Session Management:
Improved handling of session expiry with user-friendly messages.
Re-authentication prompts without losing current context.
Error Handling:
User-friendly error messages for all the negative flows.
Clear navigation paths for retrying or resetting login.
Visual Identity:
Enhanced UI branding with visual cues and localized messages.
Support for dark/light modes and accessibility improvements.
Features Released
Note: Detailed information about this feature, including all related user stories and tasks, is available in the linked JIRA ticket above. Please refer to it for comprehensive insights.
Login Feature via IDP (Google)
Repositories Released
Compatible Modules
Bug Fixes
As part of the 0.13.0 release, the following issue has been addressed:
Download with Validity in Login Flow fails for large data
c_nonce expected outside access token as per OpenID4VCI spec
Invalid error message for empty grant type with Google login
Error code incorrect for missing code in OAuth flow
User-unfriendly error messaging on profile page
Biased random numbers created from crypto source
Docker image vulnerabilities patched
Double scrollbars on View Card screen
Unnecessary scrollbars on stored card
Missing error message for invalid token type
Session expiry does not trigger re-authentication
Redundant /users/me hit in guest mode
Expired token not showing expected error
Misalignment on share validity screen
Hamburger menu unresponsive in mobile view
Translations not showing on Authorize page
Extra spacing between Generation Date and value
Known Issues
Below is the list of known issues for Inji Web Wallet as of version 0.13.0:
INJI Web - Unable to re-download the same VC again.
INJI Web - Unable to download MOSIP VC after logging in with email address.
INJI Usability - After entering wrong passcode and clicking submit, the existing passcode is not cleared.
INJI Web - Unable to download MOSIP VC after logging in with email address.
INJI Usability - After taking backup in INJI Mobile, same VCs should appear in INJI Web when logged in with same email address.
No success message appears after matching passcodes.
Download icon not aligned properly on view card screen.
updated_at value is generated in the DB for an initial user account creation.
Better to show user approval dialogue box after clicking on forget passcode button.
Better to update "Forgot passcode" to "Reset passcode" on the next screen.
While downloading the cards, user profile details are not displayed in the background.
Clicking browser back button while resetting password leads to inappropriate error.
Downloaded cards are not aligned in reverse chronological order.
After updating passcode configuration, user unable to login from the UI.
Passcode visible in plain text format in browser inspect mode.
No proper error message on UI when Redis/DB is down.
No retry prompt after 5 failed passcode attempts.
No display of remaining attempts while retrying passcode.
Gmail login: "Submit" button gets enabled even when passcode fields are not validated.
Documentation Links
Last updated
Was this helpful?