v0.1.2: Offline QR Verification and eSignet Improvements

Fayda MCP v0.1.2 adds offline QR credential verification, new inspection tools, and improvements to eSignet integration.

New tools
• list_allowed_checks
• list_verification_purposes
• check_service_health

Offline QR verification
• Decode Fayda V4 demographic QR payloads.
• Verify detached RS256 signatures using operator-approved public keys.
• Return minimal predicates without exposing demographics, face photos, or signature bytes.
• Keep holder_authenticated=false. QR verification authenticates signed credential data, not the person presenting it.

eSignet improvements
• Added PS256 and ES256 token validation.
• Updated client assertion headers and UserInfo validation.
• Added issuer trailing-slash handling.
• Improved Redis connection pooling and transient timeout retries.

Configuration
• Accept Fayda Developer Portal .env variable names.
• Decode base64 RSA JWK signing keys automatically.
• Support OIDC discovery with explicit overrides.

Security and packaging
• Replaced committed test private keys with in-memory key generation.
• Sanitized documentation and test fixtures.
• Updated release metadata and automated publishing for v0.1.2.
• Packaging checks passed.

Upgrade:
pip install --upgrade fayda-mcp

Still in development. Feedback and contributions are welcome.

v0.1.1 - Production-grade Fayda eSignet Support & Hardened Security

Bring production-grade Fayda eSignet identity verification to your Model Context Protocol (MCP) agents.

What's Changed

• Dedicated CLI: Run via fayda-mcp run (stdio/HTTP) with safe, auto-redacted configuration inspection.
• Resilient Authentication: Smart OIDC key rotation, bounded JWKS caching, and zero-downtime key refresh.
• Multi-Process Architecture: Independent agent (stdio) and callback (HTTP) workers synchronized over Redis and PostgreSQL.
• Hardened Security: Built-in replay attack prevention via atomic state consumption and idempotency keys.
• Database Migrations: Schema lifecycle management with fayda-mcp migrate (includes rollbacks and status tracking).