Search results

Bug: Token endpoint accepts client assertions signed with disallowed algorithms (RS256), violating FAPI 2.0

Status: Open.

#2236 In mosip/esignet;

· KashiwalHarsh opened on Jul 27, 2026

Conformance Bug Fixes

FAPI_2-0

Status: Open.

Task

#2234 In mosip/esignet;

· rachik-hue opened on Jul 27, 2026

·  

eSignet_v2.0.0

Log level is hardcoded for ThunderidEngine as 'DEBUG'

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2228 In mosip/esignet;

· sacrana0 opened on Jul 27, 2026

·  

eSignet_thunder_2.0.0_beta.1

Add empty db upgrade scripts for 1.8.0 to 2.0.0 migration

Status: Open.

Task

#2226 In mosip/esignet;

· sacrana0 opened on Jul 27, 2026

·  

eSignet_thunder_2.0.0_beta.1

[api-test] Decide report storage mechanism for Rancher-scheduled runs (S3-compatible upload vs mounted volume)

task

Status: Open.

Feature

#2220 In mosip/esignet;

· nandhu-kumar opened on Jul 24, 2026

·  

eSignet_v2.0.0

[api-test] Decide report storage mechanism for Rancher-scheduled runs (S3-compatible upload vs mounted volume)

Status: Open.

#2219 In mosip/esignet;

· nandhu-kumar opened on Jul 24, 2026

eSignet-Thunder: After a successful OTP login (ID system pointing to MOSIP), pressing the browser Back button lands on "Something went wrong (401)" instead of returning to the login screen

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2218 In mosip/esignet;

· santhoshsunder opened on Jul 23, 2026

·  

eSignet_v2.0.0

eSignet-Thunder: Bug — ID Token and UserInfo JWS advertise/issue RS256 only; FAPI requires PS256/ES256

bugSomething isn't workingSomething isn't working

Status: Open.

#2217 In mosip/esignet;

· santhoshsunder opened on Jul 23, 2026

eSignet-Thunder: Bug — Client can be created with userinfo_response_type=JWE without a registered enc_public_key (missing cross-field validation)

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2216 In mosip/esignet;

· santhoshsunder opened on Jul 23, 2026

·  

eSignet_thunder_2.0.0_beta.1

eSignet-Thunder: Bug — /oauth2/authorize returns errorCode=server_error for an unknown/invalid client_id instead of a 4xx client error

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2215 In mosip/esignet;

· santhoshsunder opened on Jul 23, 2026

·  

eSignet_v2.0.0

eSignet-Thunder: Bug — Advertised OAuth2 endpoints /revoke (RFC 7009), /dcr/register (RFC 7591) and /bc-authorize (CIBA) return HTTP 404

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2214 In mosip/esignet;

· santhoshsunder opened on Jul 23, 2026

[api-test] Docker Compose for local/CI runs + GitHub Actions workflow

task

Status: Open.

Task

#2209 In mosip/esignet;

· nandhu-kumar opened on Jul 23, 2026

·  

eSignet_thunder_2.0.0_beta.1