Changelog

See the most recent changes in Paradym.

Increased OpenID4VP request expiration to 5 minutes

July 14, 2025

Enhancement

The expiration for OpenID4VP requests has been increased from 2 minutes to 5 minutes.

The increased expiration time helps prevent failed presentations due to the user taking a bit longer to go through the presentation flow.


OpenID4VC SD-JWT issuance with X509 certificates

July 10, 2025

New feature

You can now issue SD-JWTs via OpenID4VC with X509 certificates!

Start by creating a new X509 root certificate for issuance in the "Trust" page within the dashboard, or using the new Certificates API.

When creating an SD-JWT credential template, you will now be able to select the X509 root certificate you created. The root certificate will automatically be used to generate document signing certificates for the issuance of the SD-JWT credentials.


Parse multi-document mDOCs and improved error handling for SD-JWT VC and mDOC debugger

July 9, 2025

New featureEnhancement
An image displaying the new document selector in the mdoc debugger.

The mDOC debugger now shows a document selector if a DeviceResponse contains multiple mDOCs. Previously only the first document was selected.

We have also improved the error handling for the mDOC and SD-JWT VC debuggers, showing the internal error message if the parsing failed. Since the tool is used for debugging, it makes sense to display the internal error message.

An image displaying the new error information in the mdoc debugger

Try it out in our mDOC debugger or SD-JWT VC debugger.


OpenID4VC request authentication with X509 certificates

June 25, 2025

New feature
An image showing the new certifiates page in the dashboard.

You can now sign your OpenID4VC presentation requests with X509 certificates!

Users can now create a X509 root certificate for the verification use case in the "Trust" page within the dashboard, or using the new Certificates API.

The root certificate will automatically be used to generate signing certificates for the requests.


Correctly handle OpenID4VC states on the invitation page

June 3, 2025

Bug fix

Resolved several issues with the invitation page showing an error screen after an invitation was successfully scanned.

The invitation page now correctly handles all states and shows whether an invitation is completed, expired, or could not be found.

For privacy reasons we will show the successful completion screen on the invitation page even if the issuance or verification failed. The completion screen is mostly to indicate to the user that the invitation has been processed by the wallet.


Filter DIDComm issuance and verification sessions based on connection and invitation id

May 16, 2025

New feature

Create project and manage project members from the dashboard

May 12, 2025

New featurePro Tier
An image showing the new members page in the settings of the dashboard.

Users on the Pro or Custom tier can now create new projects, and edit the members of a project directly from within the dashboard!

While this feature has been available through the API for a while, the same functionlity is now also available in the dashboard.

To create a new project from the dashboard, select the project selector in the top-left corner, and click the + icon. Managing project members can be done in the in the Members page of the Settings tab within a project.

Read more about it in the add projects and members documentation.


Send DIDComm revocation notification to wallet

April 11, 2025

New feature

When revoking Anoncreds credentials using the Batch revoke credentials endpoint, you can now notify the wallet about the revocation based on the Didcomm Revocation Notification V2 protocol.

This feature is only available for Anoncreds credentials issued over Didcomm that have a Didcomm connection linked to it, so it does not work for credentials that were issued without a Didcomm connection.

To send a revocation notification to supported wallets, set the notifyWallet body parameter to true. An example payload for the batch revoke credentials endpoint that notifies the wallet:

{
  "issuedCredentialIds": ["clu921ps300047eghxvhz33m4"],
  "notifyWallet": true,
}

You can read more in the Batch revoke credentials endpoint documentation.


ISO 18013-5 mDL/mDOC debugger

April 4, 2025

New feature
An image showing the mDOC debugger interface.

We're excited to extend our SD-JWT VC debugger, with a new ISO 18013-5 mDL/mDOC debugger, a powerful tool designed for developers working with mDOCs and mobile Driving Licenses (mDLs).

This debugger enables you to:

  • Decode mDOC IssuerSigned and DeviceResponse base64url encoded credentials into human-readable format.
  • Visualize the structure of the mDOC attributes, including the issuer X509 certificate, issuer signed attributes, and device key.
  • Preview images in the mDOC attributes by hovering over the attribute in the editor.

Whether you're a developer implementing mDOCs, or simply curious about the technology behind decentralized identity, this debugger helps you understand the workings of mDOC credentials.

Try it out now and let us know what you think!


Session expiration and cleanup

March 26, 2025

New featureEnhancement

We've added automatic cleanup of expired sessions and improved session management across DIDComm and OpenID4VC protocols. This ensures better resource management and security for your credential exchanges.

New webhook events

Track session expiration with new webhook events:

  • openid4vc.issuance.expired
  • openid4vc.verification.expired
  • didcomm.invitation.expired
  • didcomm.issuance.expired
  • didcomm.verification.expired
 Bugfixes and improvements
  • Added automatic cleanup of DIDComm and OpenID4VC sessions after completion or failure
  • Optimized DIDComm message processing by skipping redundant acknowledgments
  • Added new endpoints for manual cleanup of credential offers and presentation data