Walt.id ships 0.18.0 with OIDC enterprise auth and zero-retention mode
What happened
- Walt.id lists 0.18.0 of its identity lib and Enterprise Stack release highlights, including CWT support for TokenStatusList and a Digital Credential API test app.
- The Enterprise Auth API now supports OIDC as an authentication flow, including external role mapping from identity providers such as Keycloak.
- A configurable zero-retention mode for PII in issuance and verification sessions is introduced; when enabled, session data is not persisted beyond the immediate transaction.
- TokenStatusList support is upgraded to IETF Draft 15, with changed status value ranges and compression behaviour.
- Annex C (DC API) flow support has been integrated into the Enterprise Verifier2 Service.
- Dependency upgrades include Kotlin, KotlinCrypto, nimbus-jose-jwt and Next.js security patches.
Why it matters to Signicat
- Enterprise OIDC auth and zero-retention mode target enterprise authentication and data-minimisation buyers that overlap with Signicat authentication and privacy positioning; overlap is moderate, as the source describes a developer release rather than a commercial launch.
- Annex C DC API support and the Digital Credential API test app indicate walt.id work on browser-based credential presentation, relevant to Signicat Wallet Hub presentation flows.
Evidence from the source (8 quotes)
- “Below are the highlights available through 0.18.0 of the identity lib.” source ↗
- “The Enterprise Auth API now supports OIDC as an authentication flow, including external role mapping from identity providers (e.g., Keycloak) to Enterprise Stack roles.” source ↗
- “A configurable zero-retention mode has been introduced for PII data in issuance and verification sessions.” source ↗
- “Status value ranges and compression behaviour have changed.” source ↗
- “Annex C (DC API) has been integrated into Enterprise Verifier2 Service.” source ↗
- “Updates included Kotlin, KotlinCrypto, nimbus-jose-jwt, and Next.js (security patches)” source ↗
- “The Enterprise Auth API now supports OIDC as an authentication flow” source ↗
- “Annex C (DC API) has been integrated into Enterprise Verifier2 Service.” source ↗
Reusable identity VCDeveloper experienceAuthentication passwordlessData sovereignty privacyEUDI wallet eIDAS 2Feature updateGlobal
6 of 6 facts verified against the source · confidence high · claude-haiku-5-5