# Local Inji Web credential download fails with RESIDENT-APP-028

**URL:** <https://community.mosip.io/t/local-inji-web-credential-download-fails-with-resident-app-028/2943>\
**Category:** Support\
**Tags:** inji, inji\_web\_wallet\
**Created:** [October 22, 2026, 9:00pm UTC](https://community.mosip.io/t/local-inji-web-credential-download-fails-with-resident-app-028/2943 "2026-10-22T21:00:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sricharanand](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@sricharanand](https://community.mosip.io/u/sricharanand)\
**Post date:** [October 22, 2026, 9:00pm UTC](https://community.mosip.io/t/local-inji-web-credential-download-fails-with-resident-app-028/2943/1 "2026-10-22T21:00:18Z")

</div>

Dear Sir/Ma’am,

I am trying to run the Inji core stack locally using Docker Compose.

The local eSignet authorization flow works successfully through Postman. However, browser-based credential download through Inji Web fails.

**Browser Request** :  
POST …/credentials/download

**Payload** :  
grant\_type=authorization\_code  
redirect\_uri=[http://localhost:3004/redirect](http://localhost:3004/redirect)  
issuer=Farmer  
credential=FarmerCredential  
vcStorageExpiryLimitInTimes=-1

**Mimoto Log** : Exception occurred while generating pdf

**The underlying exception** :  
401 Unauthorized:  
{  
“error”: “invalid\_client”,  
“error\_description”: “Invalid client assertion”  
}

Mimoto is configured with:

client\_id: wallet-demo-reset-20261023  
client\_alias: wallet-demo-reset-20261023  
auth method: private\_key\_jwt  
signing algorithm: RS256  
token endpoint: [http://esignet.localhost:8088/oauth2/token](http://esignet.localhost:8088/oauth2/token)

I followed the certgen.zip Userguide. The Postman-generated private\_key\_jwt assertion succeeds, but Mimoto 0.21.0’s assertion is rejected by eSignet 2.0.0.

Please let me know what can be done.

Please find below the images showing the same issue.  
Thanks.

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/6/6614318023826e3a51c9856f48555e2e75ae2d37.png)

 ![image](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/2X/4/44cbd8dc7cfbf9c56b9609dbe1e753e0b08b1334.png)

---

<div class="post-metadata">

**Author:** ![sricharanand](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@sricharanand](https://community.mosip.io/u/sricharanand)\
**Post date:** [October 23, 2026, 11:25am UTC](https://community.mosip.io/t/local-inji-web-credential-download-fails-with-resident-app-028/2943/2 "2026-10-23T11:25:39Z")

</div>

@swatigoel Is there anything that can be done about this?
