Release 5.4.0:
- Extend support for POTENTIAL UC5: Remote qualified electronic signatures
- Update data classes in
rqes-data-classes
- See main classes
RqesOpenId4VpHolder
andRqesOpenId4VpVerifier
invck-rqes
- OpenID4VP: Update implementation to draft 23, adding transaction data hashes to the response of the Wallet
- Rename
RequestOptions
toOpenIdRequestOptions
- Add
transactionData
toPresentationRequestParameters
- Update data classes in
- Implement Digital Credentials Query Language (DCQL) from OpenID for Verifiable Presentations:
- Add DCQL library in module
openid-data-classes
(modulevck
now depends on this module because of dcql queries) AuthenticationRequestParameters
: Add memberdcqlQuery
CredentialFormatEnum
: Add methodcoerceDeprecations
to coerce deprecatedVC_SD_JWT
toDC_SD_JWT
Holder
: Deprecate previous methods for creating presentations, add new methods for creating presentations supporting DCQL and presentation exchange- Add class
CredentialPresentation
- Add class
CredentialPresentationRequest
- Change
PresentationResponseParameters
to directly reveal the parameters necessary for creating a response - Add subclasses to
PresentationResponseParameters
for working with raw presentation results - Add subclass
VerifiableDCQLPresentationValidationResults
ofAuthnResponseResult
to preserve credential query identifiers AuthorizationResponsePreparationState
now holds general credential presentation requestOpenId4VpHolder
: Add presentation methods supporting both presentation mechanisms and deprecate previously existing presentation methodsOpenId4VpVerifier
: AddprepareAuthnRequest
andsubmitAuthnRequest
to allow customization of presentation request, add validation support for DCQL presentationsRequestOptions
: Add memberpresentationMechanism
to explicitly select DCQL or PresentationExchange
- Add DCQL library in module
- Error handling:
- Preserve more causes for errors
- In
AuthnRespnoseResult.Error
addcause
, which optionally holds the cause for the error - In
AuthnRespnoseResult.ValidationError
addcause
, which optionally holds the cause for the error
- Improve support for ISO mDocs:
- In
IssuerSignedItem
, tagInstant
values with CBOR tag0
, andLocalDate
with CBOR tag1004
- In
- Updates:
- signum to 3.13.0, fixing COSE headers with more than one certificate
- Remove elements marked as deprecated in 5.3.0:
OidcSiopVerifier
,OidcSiopWallet
,Verifier.verifyPresentation()
,OpenId4VpVerifier.validateAuthnResponseFromPost()