Release v1.78.2

This release includes several breaking changes to the configuration, along with removal of OpenID4VCI Draft 13 and the legacy trust management. Please review carefully before upgrading.

For complete details, see the full release notes.

Breaking changes

• ⚠️ Configuration update
  • Replaced app.allowInsecureHttpTransport with a new httpClient block
  • Replaced app.stsTokenValidation.ttlJwks with new variables for improved control and security
  • Normalized credential configuration for technical (non-human) users
  • See full release note for details
• ⚠️ OpenID4VCI Draft 13 removed
  • See full release note for details of what's impacted
• ⚠️ Legacy trust management removed
  • See full release note for replacement details

New features

• Added the ability to restrict wallet interactions to only trusted entities

Enhancements

• Certificate creation now supports a DNS Subject Alternative Name
• Added config to set an upper limit on OID4VP submission body size

Ongoing development

• We are adding batch issuance and other new related features. New changes to credential schemas are made at the new /v2 credential schema endpoints. These endpoints are available now but full support for using v2 schemas in flows is still in development