Skip to content

4.1 release notes - #139

Open
javereec wants to merge 5 commits into
mainfrom
task/v4.1-release-notes
Open

4.1 release notes#139
javereec wants to merge 5 commits into
mainfrom
task/v4.1-release-notes

Conversation

@javereec

Copy link
Copy Markdown
Contributor

No description provided.

Comment thread platform/releases/svx-4.1.0.md Outdated
## New Features

- SVX Verify sessions can now report the specific cryptographic key a presentation was bound to, making it easier for integrators to confirm proof of possession.
- **Transaction Data support** (per the [OpenID4VP](https://openid.net/specs/openid-4-verifiable-presentations-1_0.html) specification): Verifiers can now attach additional context to a presentation request, and wallets can restrict which types of this data they are willing to accept. Verifiers can confirm that the credential presentation returned by a wallet was genuinely bound to the requested context, adding an extra layer of assurance to verification flows.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@leikind @ragnika can you add a section to the document explaining how to use this functionality. Which endpoints, etc

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@javereec added a short section called How to use Transaction Data


- SVX Verify sessions can now report the specific cryptographic key a presentation was bound to, making it easier for integrators to confirm proof of possession.
- **Transaction Data support** (per the [OpenID4VP](https://openid.net/specs/openid-4-verifiable-presentations-1_0.html) specification): Verifiers can now attach additional context to a presentation request, and wallets can restrict which types of this data they are willing to accept. Verifiers can confirm that the credential presentation returned by a wallet was genuinely bound to the requested context, adding an extra layer of assurance to verification flows.
- Certificate management now shows which signing key a managed certificate belongs to, and certificate listings support filtering and pagination.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ragnika I think an example what would helpful in a separate section

Comment thread platform/releases/svx-4.1.0.md Outdated
- **Transaction Data support** (per the [OpenID4VP](https://openid.net/specs/openid-4-verifiable-presentations-1_0.html) specification): Verifiers can now attach additional context to a presentation request, and wallets can restrict which types of this data they are willing to accept. Verifiers can confirm that the credential presentation returned by a wallet was genuinely bound to the requested context, adding an extra layer of assurance to verification flows.
- Certificate management now shows which signing key a managed certificate belongs to, and certificate listings support filtering and pagination.
- Signing requests can now accept base64url-encoded input, in addition to plain text.
- Session data used by the authorization server can now be stored in Postgres as an alternative to Redis.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@leikind does this entail that Redis is no longer a requirement when setting up an installation or are there other features that still require it?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@javereec please read the section again

Comment thread platform/releases/svx-4.1.0.md Outdated
- Certificate management now shows which signing key a managed certificate belongs to, and certificate listings support filtering and pagination.
- Signing requests can now accept base64url-encoded input, in addition to plain text.
- Session data used by the authorization server can now be stored in Postgres as an alternative to Redis.
- OAuth clients can now be marked as native or web applications, enabling correct authentication behavior for native app integrations.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@leikind In which component? How do you mark them as web or native. What is different about it?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@javereec please read the section again

## Improvements

- Failed SVX Verify presentations now include a more detailed reason, making it easier to understand why a verification did not succeed.
- The demo issuance and verification pages have moved into the main dashboard; the previous standalone demo pages have been retired.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Matthew-Meeco can you add a section with screenshots of the pages

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants