r4.2

Release Notes

This public release contains the definition and documentation of

• number-verification 2.1.1

The API definition(s) are based on

• Commonalities r4.4 (0.9.0)
• Identity and Consent Management r4.2 (0.5.0)

number-verification 2.1.1

number-verification 2.1.1 is a patch update of this API.

Changes documented below are compared to version 2.1.0.

• API definition with inline documentation:
  • View it on ReDoc
  • View it on Swagger Editor
  • OpenAPI YAML spec file

Breaking changes

• N/A

Added

• Added access token requirements for Number Verification scopes: tokens are single-use, refresh tokens are not issued, and expiry is at most 300 seconds by @jpengar in #226
• Added companion whitepaper: Operator Token Acquisition for Number Verification on Android (TS.43/OpenID4VP) by @albertoramosmonagas in #238

Changed

• Refactored DevicePhoneNumber reference in YAML by @bigludo7 in #249
• Aligned with Commonalities r4.4 (0.9.0) by @bigludo7 in #235 and @hdamker in #252:
  • Error responses changed to reference BadRequest400 and Unauthenticated401 instead of Generic400 / Generic401; error examples moved to components/examples by @bigludo7 in #253
  • maxLength added to phoneNumber, hashedPhoneNumber, x-correlator and the ErrorInfo properties (no change in accepted values)
  • Tag names changed to Phone Number Verify / Phone Number Share
  • Added the mandatory "Request body strictness" section to info.description

Fixed

• fix(number-verification): corrected Gherkin test definition defects by @hdamker in #255
• test(number-verification): added missing 400 scenario for phoneNumberShare by @hdamker in #257
• Corrected externalDocs.description wording in number-verification.yaml by @hdamker in #240
• fix(number-verification): corrected RFC 2119 keywords and indentation in description by @hdamker in #263

Removed

• N/A

Full Changelog: r3.2...r4.2