Skip to content

Conversation

@kneckinator
Copy link
Collaborator

No description provided.

@kneckinator kneckinator requested a review from uocnb July 20, 2022 10:18
Copy link
Member

@uocnb uocnb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

kamlesh012 and others added 28 commits May 22, 2025 13:54
Signed-off-by: Kamlesh <kamleshbisht012@gmail.com>
…et pin and wallet confirm pin and perform the validations to check if they both match or not and then write test cases for the same and update the documentation and postman collection

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
… is of length 6 and numeric and rename pin to passcode in error messages to keep it consistent with UI

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
…e wallet endpoint

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
…ile to immediately return the error message to the user if pin and confirmPin don't match instead of checking the pin validations to reduce the number of steps

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
[Injiweb 1513] update create wallet endpoint to receive both entered pin and confirm pin in the request
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…e via header

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…names

1. issuer_name -> issuer_display_name
2. credential_type -> credential_type_display_name

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…ale via header

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…s api

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…tial API

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Detailed changes
- extract functions for duplicate blocks
- optimize imports
- remove redundant default params specified
- remove redundant equals check in test verify or mock calls

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
CredentialMetadata's datashareUrl and credentialValidity fields are removed as resultant

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
…VerifiableCredentialRequestDTO

GlobalExceptionHandler handleHandlerMethodValidationException method will return error_message as per the customized error message

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
GlobalExceptionHandler handleHandlerMethodValidationException method will return error_message as per the customized error message

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
functionality: Retrieves user profile information, first checking the cache and then the database if needed

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
… API

Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
Signed-off-by: KiruthikaJeyashankar <kiruthikavjshankar@gmail.com>
kongadurgesh and others added 11 commits October 7, 2025 20:58
…from feature branch to develop (#947)

* [Injiweb 1704] Add endpoint to receive the Authorization request and validate it and return the required presentation details to the caller in OpenId4VP flow (#861)

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1704] write test cases for multiple classes in openid4vp flow and add script file for trusted verifiers table (#867)

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Update OpenAPI specification with complete endpoint documention (#887)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - Add Open API specification for Submit Presentation Endpoint (#890)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* injiweb-1713-stoplight added details (#892)

Signed-off-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1704] Fix Pre Register Issue for OpenID4VP (#885)

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Update Open API Specification as per new design (#896)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Add threetenabp jar for maven build fix in PR (#903)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* injiweb-1713-stoplight-1 updated post & patch api (#897)

Signed-off-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* Injiweb 1711 jar removal (#905)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Add get matching credentials endpoint for OpenID4VP (#909)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* 654 update from develop (#919)

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Refactor session management and credential matching services (#922)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Migration from Custom Objects to Library Objects (#923)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* Injiweb 1711 refractor (#924)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* injiweb-1711 fixed the serialization issue of cache (#927)

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - Add Test cases (#928)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1711] - add test cases (#933)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* Injiweb 1713 manage trust combined (#934)

Signed-off-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* injiweb-1713-code-coverage added tests (#935)

Signed-off-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - Implement presentation submission with verifiable presentation storage (#942)

* [INJIWEB-1712] - Implement presentation submission with verifiable presentation storage

- Add PresentationSubmissionService and implementation for handling VP submission
- Create SubmitPresentationRequestDTO and SubmitPresentationResponseDTO
- Add VerifiablePresentation entity and repository for VP persistence
- Create new database table for storing verifiable presentations
- Implement KeyPairService for generating and managing key pairs
- Add Base64Util for encoding/decoding operations
- Enhance WalletPresentationsController with submit presentation endpoint
- Add OpenID4VPConstants for centralized OpenID4VP-related constants
- Update SessionManager and other services to support VP submission flow

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - Add test coverage for presentation submission and related services

- Add comprehensive tests for PresentationSubmissionService
- Add KeyPairService tests for all signing algorithms (RSA, ES256, ES256K, ED25519)
- Add Base64Util test coverage for encoding/decoding operations
- Expand WalletPresentationsController and CredentialRequestService tests
- Fix key pair generation to match signing algorithm in tests
- Cover multiple credential formats (LDP_VC, MSO_MDOC) and edge cases

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - Refactor presentation submission flow and add comprehensive test coverage

- Extract PresentationActionService for verifier authentication and VP token construction
- Refactor PresentationSubmissionServiceImpl for better separation of concerns
- Simplify WalletPresentationsController by moving business logic to service layer
- Rename VerifiablePresentationRepository and add DTO validations

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - remove IO Exceptions

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - merge feature branch to develop

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1712] - Add upgrade scripts and docker table creation scripts

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* INJIWEB-1712 - Remove deleted files from talisman

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* Revert "MOSIP-41966: API - Negative testcases should not be there in Prerequisite section. (#844)"

This reverts commit 775cd81.

Signed-off-by: jackjain <jackjain1995@gmail.com>

---------

Signed-off-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>
Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
Signed-off-by: jackjain <jackjain1995@gmail.com>
Co-authored-by: PuBHARGAVI <46226958+PuBHARGAVI@users.noreply.github.com>
Co-authored-by: cyber-titan <124165966+cyber-titan@users.noreply.github.com>
Co-authored-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>
Co-authored-by: jackjain <jackjain1995@gmail.com>
* [INJIWEB-1712] - update db scripts

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB_1712] - Update OVP jar method call to sendErrorResponseToVerifier
Update Test cases for the change in method

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Co-authored-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
* MOSIP-42951 - Prefix context for mimoto and reverse merge from release

Signed-off-by: Mohanachandran S <mohanachandran.s@technoforte.co.in>

* Unchanged the file

Signed-off-by: Mohanachandran S <mohanachandran.s@technoforte.co.in>

* Updated the POM version

Signed-off-by: Mohanachandran S <mohanachandran.s@technoforte.co.in>

* Removed the policy creation for device partner creation

Signed-off-by: Mohanachandran S <mohanachandran.s@technoforte.co.in>

* Updated README.md

Signed-off-by: Mohanachandran S <165888272+mohanachandran-s@users.noreply.github.com>

* Updated README.md

Signed-off-by: Mohanachandran S <165888272+mohanachandran-s@users.noreply.github.com>

---------

Signed-off-by: Mohanachandran S <mohanachandran.s@technoforte.co.in>
Signed-off-by: Mohanachandran S <165888272+mohanachandran-s@users.noreply.github.com>
* Added namespace before cache so no environment conflict happen

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>

* changed caching prefix

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>

* changed caching prefix with injiweb

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>

---------

Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
Signed-off-by: Gurpreet41082 <gurpreet.kaur@thoughtworks.com>
* MOSIP-42816 Automation for the 4 new APIs

Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>

* MOSIP-42816 Automation for the 4 new APIs

Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>

* MOSIP-42816 Automation for the 4 new APIs

Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>

* MOSIP-42816 Automation for the 4 new APIs

Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>

---------

Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>
* [INJIWEB-1743] - Fix API Automation Failures
Add Exception Handlers for Invalid URLs
Update Input Parameters Validation for Session Manager
Add Test cases for new Exception Handlers

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1743] - remove unused imports

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1743] - Add null check for Session Map

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1743] - Fix handler method and test cases

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: Nitin Hegde <nitin.k@cyberpwn.com>
#957)

Change errorCode from internal_server_error to invalid_request

Signed-off-by: Nitin Hegde <165893206+hegdenitin@users.noreply.github.com>
Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>
}
try {
log.info("RestApiClient::postApi()::entry uri: {}", uri);
result = (T) rt.postForObject(uri, setRequestHeader(requestType, mediaType), responseClass);

Check failure

Code scanning / CodeQL

Server-side request forgery

Potential server-side request forgery due to a [user-provided value](1).
Comment on lines +47 to +62
uses: mosip/kattu/.github/workflows/chart-lint-publish.yml@master
with:
CHARTS_DIR: ./helm
CHARTS_URL: https://mosip.github.io/mosip-helm
REPOSITORY: mosip-helm
BRANCH: gh-pages
INCLUDE_ALL_CHARTS: "${{ inputs.INCLUDE_ALL_CHARTS || 'NO' }}"
IGNORE_CHARTS: "${{ inputs.IGNORE_CHARTS ||'reporting|reporting-init|activemq-artemis' }}"
CHART_PUBLISH: "${{ inputs.CHART_PUBLISH || 'YES' }}"
LINTING_CHART_SCHEMA_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/chart-schema.yaml"
LINTING_LINTCONF_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/lintconf.yaml"
LINTING_CHART_TESTING_CONFIG_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/chart-testing-config.yaml"
LINTING_HEALTH_CHECK_SCHEMA_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/health-check-schema.yaml"
secrets:
TOKEN: ${{ secrets.ACTION_PAT }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +14 to +17
uses: mosip/kattu/.github/workflows/clear-artifacts.yml@master
secrets:
ACCESS_TOKEN: ${{ secrets.access_token }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +28 to +40
uses: mosip/kattu/.github/workflows/maven-build.yml@master-java21
with:
SERVICE_LOCATION: ./
BUILD_ARTIFACT: mimoto
secrets:
OSSRH_USER: ${{ secrets.OSSRH_USER }}
OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }}
OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
GPG_SECRET: ${{ secrets.GPG_SECRET }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

## Recreate zips to provide support for docker unzip operation
recreate-zips:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +41 to +74
needs: build-mimoto
runs-on: ubuntu-latest
env:
BUILD_ARTIFACT: mimoto
NEW_BUILD_ARTIFACT: mimoto-recreated
SERVICE_LOCATION: mimoto
steps:
- uses: actions/checkout@v3
- uses: actions/download-artifact@v4
if: ${{ ( env.BUILD_ARTIFACT != 'false' ) }}
with:
name: ${{ env.BUILD_ARTIFACT }}
path: ../
- name: recreate zip
run: |
cd ../

echo "LS ./"
ls .
echo "unzip command"
unzip -uj "${{ env.BUILD_ARTIFACT }}.zip" "target/*" -d "${{ env.SERVICE_LOCATION }}/target/"

echo "find command"
cd ${{ env.SERVICE_LOCATION }}
find ../${{ env.SERVICE_LOCATION }} -path '*/target/*' -name '*.jar' -type f -executable -exec zip ${{ env.NEW_BUILD_ARTIFACT }}.zip {} +

- name: Upload the springboot jars
if: ${{ !contains(github.ref, 'master') }}
uses: actions/upload-artifact@v4
with:
name: ${{ env.NEW_BUILD_ARTIFACT }}
path: ${{ env.NEW_BUILD_ARTIFACT }}.zip

sonar_analysis:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
Comment on lines +75 to +89
needs: build-mimoto
if: "${{ github.event_name != 'pull_request' }}"
uses: mosip/kattu/.github/workflows/maven-sonar-analysis.yml@master-java21
with:
SERVICE_LOCATION: ./
secrets:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
ORG_KEY: ${{ secrets.ORG_KEY }}
OSSRH_USER: ${{ secrets.OSSRH_USER }}
OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }}
OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
GPG_SECRET: ${{ secrets.GPG_SECRET }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

build-dockers:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +90 to +112
needs: recreate-zips
strategy:
matrix:
include:
- SERVICE_LOCATION: '../mimoto'
SERVICE_NAME: 'mimoto'
BUILD_ARTIFACT: 'mimoto-recreated'
SQUASH_LAYERS: '8'
fail-fast: false
uses: mosip/kattu/.github/workflows/docker-build.yml@master-java21
name: ${{ matrix.SERVICE_NAME }}
with:
SERVICE_LOCATION: ${{ matrix.SERVICE_LOCATION }}
SERVICE_NAME: ${{ matrix.SERVICE_NAME }}
BUILD_ARTIFACT: ${{ matrix.BUILD_ARTIFACT }}
SQUASH_LAYERS: ${{ matrix.SQUASH_LAYERS }}
secrets:
DEV_NAMESPACE_DOCKER_HUB: ${{ secrets.DEV_NAMESPACE_DOCKER_HUB }}
ACTOR_DOCKER_HUB: ${{ secrets.ACTOR_DOCKER_HUB }}
RELEASE_DOCKER_HUB: ${{ secrets.RELEASE_DOCKER_HUB }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

build-maven-apitest-mimoto:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +113 to +124
uses: mosip/kattu/.github/workflows/maven-build.yml@master-java21
with:
SERVICE_LOCATION: ./api-test
BUILD_ARTIFACT: apitest-mimoto
secrets:
OSSRH_USER: ${{ secrets.OSSRH_USER }}
OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }}
OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
GPG_SECRET: ${{ secrets.GPG_SECRET }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

build-apitest-mimoto-local:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Comment on lines +125 to +170
needs: build-maven-apitest-mimoto
runs-on: ubuntu-latest
env:
NAMESPACE: ${{ secrets.dev_namespace_docker_hub }}
SERVICE_NAME: apitest-mimoto
SERVICE_LOCATION: api-test
BUILD_ARTIFACT: apitest-mimoto-local
steps:
- uses: actions/checkout@v3
- name: Set up JDK 21
uses: actions/setup-java@v3
with:
distribution: 'temurin'
java-version: '21'
server-id: ossrh # Value of the distributionManagement/repository/id field of the pom.xml
settings-path: ${{ github.workspace }} # location for the settings.xml file
- name: Setup the settings file for ossrh server
run: echo "<settings> <servers> <server> <id>ossrh</id> <username>${{secrets.ossrh_user}}</username> <password>${{secrets.ossrh_secret}}</password> </server> </servers> <profiles> <profile> <id>ossrh</id> <activation> <activeByDefault>true</activeByDefault> </activation> <properties> <gpg.executable>gpg2</gpg.executable> <gpg.passphrase>${{secrets.gpg_secret}}</gpg.passphrase> </properties> </profile> <profile> <id>allow-snapshots</id> <activation><activeByDefault>true</activeByDefault></activation> <repositories> <repository> <id>snapshots-repo</id> <url>https://oss.sonatype.org/content/repositories/snapshots</url> <releases><enabled>false</enabled></releases> <snapshots><enabled>true</enabled></snapshots> </repository> <repository> <id>releases-repo</id> <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url> <releases><enabled>true</enabled></releases> <snapshots><enabled>false</enabled></snapshots> </repository> </repositories> </profile> <profile> <id>sonar</id> <properties> <sonar.sources>.</sonar.sources> <sonar.host.url>https://sonarcloud.io</sonar.host.url> </properties> <activation> <activeByDefault>false</activeByDefault> </activation> </profile> </profiles> </settings>" > $GITHUB_WORKSPACE/settings.xml
- name: Build Automationtests with Maven
run: |
cd ${{ env.SERVICE_LOCATION}}
mvn clean package -s $GITHUB_WORKSPACE/settings.xml
- name: Copy configuration files to target directory.
run: |
cp -r ${{ env.SERVICE_LOCATION}}/target/classes/config ${{ env.SERVICE_LOCATION}}/target/config
cp -r ${{ env.SERVICE_LOCATION}}/testNgXmlFiles ${{ env.SERVICE_LOCATION}}/target/testNgXmlFiles
- name: Ready the springboot artifacts
if: ${{ !contains(github.ref, 'master') }}
run: |
## FIND JARS & COPY ONLY EXECUTABLE JARs STORED UNDER TARGET DIRECTORY
find ${{ env.SERVICE_LOCATION }} -path '*/target/*' -exec zip ${{ env.BUILD_ARTIFACT }}.zip {} +
- name: Upload the springboot jars
if: ${{ !contains(github.ref, 'master') }}
uses: actions/upload-artifact@v4
with:
name: ${{ env.BUILD_ARTIFACT }}
path: ${{ env.BUILD_ARTIFACT }}.zip
- uses: 8398a7/action-slack@v3
with:
status: ${{ job.status }}
fields: repo,message,author,commit,workflow,job # selectable (default: repo,message)
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} # required
if: failure() # Pick up events even if the job fails or is canceled.

build-dockers_apitest_mimoto:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
Comment on lines +171 to +191
needs: build-apitest-mimoto-local
strategy:
matrix:
include:
- SERVICE_LOCATION: 'api-test'
SERVICE_NAME: 'apitest-mimoto'
BUILD_ARTIFACT: 'apitest-mimoto-local'
ONLY_DOCKER: true
fail-fast: false
name: ${{ matrix.SERVICE_NAME }}
uses: mosip/kattu/.github/workflows/docker-build.yml@master-java21
with:
SERVICE_LOCATION: ${{ matrix.SERVICE_LOCATION }}
SERVICE_NAME: ${{ matrix.SERVICE_NAME }}
BUILD_ARTIFACT: ${{ matrix.BUILD_ARTIFACT }}
ONLY_DOCKER: ${{ matrix.ONLY_DOCKER }}
secrets:
DEV_NAMESPACE_DOCKER_HUB: ${{ secrets.DEV_NAMESPACE_DOCKER_HUB }}
ACTOR_DOCKER_HUB: ${{ secrets.ACTOR_DOCKER_HUB }}
RELEASE_DOCKER_HUB: ${{ secrets.RELEASE_DOCKER_HUB }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
kongadurgesh and others added 18 commits November 6, 2025 13:59
… and update redirect URI handling (#962)

* Fix direct_post response mode: use form-encoded data and update redirect URI handling

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1746] - Update logic to null check redirect_uri
Update Test case for empty redirect_uri

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
…ties (#961)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
* Revert "INJIWEB-1746 - All logs for debug"

This reverts commit 6d6be79.

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1746] - Fix logging mechanism

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
* [INJIWEB-1757] Add exclusions in pom.xml for junit dependency in kernel-core, remove direct junit dependency, remove unused h2database, remove logback dependency

Signed-off-by: jackjain <jackjain1995@gmail.com>

* [INJIWEB-1757] Remove unused variables from pom.xml

Signed-off-by: jackjain <jackjain1995@gmail.com>

---------

Signed-off-by: jackjain <jackjain1995@gmail.com>
Co-authored-by: jackjain <jackjain1995@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
* [INJIWEB-1757] - Remove unused dependencies

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1757] - Remove unused dependencies

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: Nitin Hegde <165893206+hegdenitin@users.noreply.github.com>
* [INJIWEB-1768] - Update method names w.r.t OVP Jar
Update test cases

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1768] - Refractor code to remove unused methods after jar changes

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
…er security team feedback (#975)

* [INJIWEB-1756] add URL wildcard check for datashare resource URL as per security team feedback

Signed-off-by: jackjain <jackjain1995@gmail.com>

* [INJIWEB-1756] Remove additional URL decoding

Signed-off-by: jackjain <jackjain1995@gmail.com>

* [INJIWEB-1756] Remove unused imports

Signed-off-by: jackjain <jackjain1995@gmail.com>

---------

Signed-off-by: jackjain <jackjain1995@gmail.com>
Co-authored-by: jackjain <jackjain1995@gmail.com>
* injiweb-1671 made credSub opt for ldp_vc

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

* injiweb-1671-credSub-optional updated fix for sdjwt & testcases

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

* injiweb-1671-credSub-optional removed display credSub logic

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

* injiweb-1671-credSub-optional removed id field from sd-jwt

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

* injiweb-1671-credSub-optional added fix for missing keys in order

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

* injiweb-1671-credentialSubject-opt removed id from credential keys

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>

---------

Signed-off-by: cyber-titan <saiabhi2309@gmail.com>
* [INJIWEB-1780] Change redirect url fetching logic in datashare direct-post response mode to handle redirect_uri coming in from /vp-submission response (#978)

Signed-off-by: jackjain <jackjain1995@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Update Service Class Implementations, Rename DTOs, Update Utils Classes, Update Test files (#977)

* [INJIWEB-1779] - Fix PR Review comments

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - update default configuration in trusted verifiers json

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Add 0.19.1 to 0.19.2 upgrade and rollback scripts

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Merge WalletPresentationService classes into Single Class
Remove redundant code for other VC formats except LPC_VC
Update Test Cases

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Rename VPAuthorizationRequest to VPAuthorizationRequestDTO

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Rename VPAuthorizationRequest to VPAuthorizationRequestDTO

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Update KeyPairService to KeyPairRetievalService and KeyPairServiceImpl to KeyPairRetievalServiceImpl

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Update WalletPresentationController and WalletPresentationService

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1779] - Update Encoding Decoding Logic to Jar Utils (#979)

Remove Base64Util and Test
Update WalletPresentationServiceTest references

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1770] Fix credential display name and add proper description to id field in api docs (#982)

Signed-off-by: jackjain <jackjain1995@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1795] - Update mimoto version to 0.21.0

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: jackjain <jackjain1995@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Co-authored-by: Jack <jackjain1995@gmail.com>
Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
* [INJIWEB-1774] - Add CSRF Token Implementation for Mimoto

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Remove misleading comment

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Update Value Param

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Update tests method names
remove setAccesible from constructor

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1776] - Delete legacy code (#990)

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Add mimoto endpoints to ignoreUrls
Update default configuration

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Enable CSRF by defualt

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Update Postman Collection
Add postcript for get wallets and get issuers endpoint
Add property to mimoto default properties  to docker setup

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Update API Documentation

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Remove dead config
Remove /wallets from ignore urls

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - remove client id and secret

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* Revert "[INJIWEB-1774] - Remove dead config"

This reverts commit 4ef6b44fb6e4330c880ac638c45d38fb17f87086.

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1774] - Remove dead config
Remove /wallets from ignore urls

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
#991)

* [INJIWEB-1800] - Remove setAccessible(true) from main and test

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Update Manual JSON Path extraction to jayway JSONPATH
Remove unused code from JSONUtil and refractor
Update testcases for JSON Path

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove temporary change

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove setAccessible(true) from main and test

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Update Manual JSON Path extraction to jayway JSONPATH
Remove unused code from JSONUtil and refractor
Update testcases for JSON Path

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove temporary change

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove reundant code in evaluateJsonPath

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove setAccessible(true) from main and test

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Update Manual JSON Path extraction to jayway JSONPATH
Remove unused code from JSONUtil and refractor
Update testcases for JSON Path

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove temporary change

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

* [INJIWEB-1800] - Remove reundant code in evaluateJsonPath

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>

---------

Signed-off-by: kongadurgesh <kongadurgesh20@gmail.com>
Signed-off-by: Mohanachandran S <165888272+mohanachandran-s@users.noreply.github.com>
* INJIWEB-1750 Spike implementation of using injivc-renderer's SVG to PDF converter

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 updated the method to ensure injivcrenderer is called for the right credential format

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 Added the tests, worked on CR comments, modifications to include qrCodeImage data in credentialJsonString

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 Replaced the use of Base64Util

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 Replace java.util.base64 decoder with nimbus

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 Use of the updated injivcrenderer jar 0.2.0-snapshot

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 ack the code rabbit comments on test file

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 Adding renderMethod in the VCCredentialProperties dto

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 modified the PresentationServiceTest and VCCredentialProperties dto to exclude renderMethod when null

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 test fixes

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 tests added for CredentialPDFGeneratorService

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 increased test coverage, created constants file and addressed comments

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

* INJIWEB-1580 renaming of function in CredentialPDFGeneratorService and cleanup

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>

---------

Signed-off-by: Rudhhi Shah <rudhhi.shah@thoughtworks.com>
…#993)

* [INJIWEB-1721] - Update readme for deploying Mimoto without datashare

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Update readme to mention only Mobile wallet

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Update readme to mention only Mobile wallet

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Update readme to mention only Mobile wallet

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Add bash for readme script

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Add bash for readme script

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Update readme to mention only Mobile wallet

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

* [INJIWEB-1721] - Update country to entity

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>

---------

Signed-off-by: Durgesh Konga <kongadurgesh20@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.