Dear MOSIP Community,
We are delighted to announce the release of eSignet v1.8.0 - a significant step forward in infrastructure modernization and data privacy. This release brings a major runtime upgrade to Java 21 across the eSignet ecosystem, along with support for encrypted UserInfo responses, ensuring stronger protection of sensitive user data in compliance with global OIDC standards.
Major Highlights
-
Migration to Java 21
We have upgraded eSignet and its core modules from Java 11 to Java 21. This upgrade delivers improved performance, better resource management through virtual threads, and long-term support. The upgrade applies across the following repositories: -
Encrypted UserInfo Support (RFC 7516)
To further secure PII (Personally Identifiable Information), eSignet now supports returning the UserInfo response as an encrypted JSON Web Encryption (JWE) token.-
Enhanced Privacy: Ensures that user attributes are only readable by the intended client application.
-
Standard Compliance: Implements RFC 7516 (JSON Web Encryption), aligning eSignet with global security best practices for OpenID Connect (OIDC) providers.
-
-
Bug Fixes
Numerous issues from the previous release have been resolved to improve stability, performance, and environment readiness.
To explore all the features, bug fixes, and known issues in detail, please refer to the full release notes. Additionally, you can refer here for in-depth documentation on eSignet.
If you have any questions or feedback, feel free to contact us at community.mosip.io.
Thanks to all developers, QA teams, and contributors who made this release possible. And to our community - your continued support and feedback are what keep us improving.
Best regards,
Rachik Sharma
Product Owner - eSignet
On behalf of the MOSIP Team