The scope of testing is to verify fitment to the specification from the perspective of:
Functionality
Deployability
Configurability
Customizability
Verification is performed not only from the end-user perspective but also from the System Integrator (SI) point of view. Hence, the configurability and extensibility of the software is also assessed. This ensures readiness of software for use in multiple countries. Since MOSIP is an “API First” product platform, verification scope required comprehensive automation testing for all the MOSIP APIs. An automation Test Rig is created for the same.
The Inji Wallet
testing scope revolves around the following flows:
Biometric unlock
Passcode unlock
VC download via MOSIP
VC download via eSignet
Retrieving UIN/VID via AID
Pinning a VC
Normal VC sharing with VID
Deleting VC
Face Auth on Resident's phone with VID
Multi language support
Wallet binding
QR code Login
Logout
Persona based approach has been adopted to perform the IV&V(Independent Verification and Validation) by simulating the test scenarios that resemble a real-time implementation.
A Persona is a fictional character/ user profile created to represent a user type that might use a product/ or a service in a similar way. Persona based testing is a software testing technique that puts software testers in the customer's shoes, assesses their needs from the software and thereby determines use cases/ scenarios that the customers will execute. The persona needs may be addressed through any of the following:
Functionality
Deployability
Configurability
Customizability
The verification methods may differ based on how the need was addressed.
For regression check, MOSIP Test Rig
, an automation testing suite is indigenously designed and developed for supporting persona based testing. MOSIP Test Rig covers the end-to-end test execution and reporting. The end-to-end functional test scenarios are written starting from pre-registration, to creation of packet in registration center, processing the packet through the registration processor, generating UIN and authenticating identity using IDA through various permutation and combinations of cases being covered. MOSIP Test Rig will be an open source artifact which can also be enhanced and used by countries to validate the SI deliveries before going live. Persona classes include both negative and positive personas. Negative persona classes include users like Bribed Registration Office, Malicious Insider etc. The needs of positive persona classes must be met, whereas the needs of negative persona classes must be effectively restricted by the software.
Below are the test metrics for Inji Wallet by performing functional testing using mockMDS
and mockABIS
. The process followed was black box testing which based its test cases on the specifications of the software component under test. Functional test was performed in combination of individual module testing as well as integration testing. Test data were prepared inline with the user stories. Expected results were monitored by examining the user interface. The coverage includes GUI testing, System testing, End-To-End flows across multiple languages and configurations. The testing cycle included simulation of multiple identity schema and respective UI schema configurations.
Test Rate: 95% with Pass Rate : 82%
Here is the detailed breakdown of metrics:
Total Test cases: 602
Passed: 476
Failed: 99
Skipped: 27
Total Test cases: 485
Passed: 387
Failed: 78
Skipped: 20
Below section provides details on API test metrics by executing MOSIP functional automation Framework. All external API test executions were performed at module level isolation. Each endpoint is tested with the test data and expectations of each test data are mapped to assert the test case.
Test Rate: 100% with Pass Rate: 99.52%
Here is the detailed breakdown of metrics:
Note:
Functional and test rig code base branch which is used for the above metrics is:
Commit Id is: 103e0606
Hash Tag: afedb56a2977844286bc4cbfedb8263507efa823a3d7d5a7b3cbd601ac22d120
Below are the test metrics by performing VC Sharing functionality on various device combinations.
Test Rate: 100% with Pass Rate : 100%
Below are the detailed test metrics by performing manual/ automation testing. The project metrics are derived from Defect density, Test coverage, Test execution coverage, test tracking and efficiency.
The various metrics that assist in test tracking and efficiency are as follows:
Passed Test Cases Coverage: It measures the percentage of passed test cases. (Number of passed tests / Total number of tests executed) x 100
Failed Test Case Coverage: It measures the percentage of all the failed test cases. (Number of failed tests / Total number of test cases executed) x 100
Link for the detailed test report.
Release Name: Inji 0.10.0
Upgrade From: Inji 0.9.0
Support: Developer Release
Release Date: 19th December, 2023
We are pleased to announce the release of Inji Version 0.10.0. This release builds upon Inji 0.9.1, introducing key features and improvements.
OpenID Support for Verifiable Credentials: Inji 0.10.0 introduces support for OpenID, facilitating the issuance of verifiable credentials.
Enhanced Security for Personally Identifiable Information (PII) Data: A significant focus has been placed on reinforcing security measures related to Personally Identifiable Information (PII) data.
Facial Recognition for Transaction Authorization: This version introduces advanced facial recognition capabilities to elevate the security of transaction authorization processes.
Improved UI/UX: User Interface (UI) and User Experience (UX) have undergone refinement to provide users with an intuitive and aesthetically pleasing interaction.
Application ID (AID): Inji 0.10.0 now includes an Application ID, contributing to streamlined identification and tracking.
Below is the detailed summary of the release.
A redesigned interface promises improved usability and a more intuitive experience.
Navigation buttons have been updated to prominently display primary functionalities.
Secondary functionalities, such as viewing received Verifiable Credentials (VC) and displaying QR codes, have been relocated under the settings menu for a streamlined experience.
The introduction of new and detailed error messages, along with app warnings, aims to enhance transparency and overall usability.
Securely stored encryption of private keys using the Android hardware keystore for heightened security.
Implemented hash algorithms for verifying the integrity of downloaded and received Verifiable Credentials (VCs).
Enhanced password security with the implementation of password hashing algorithms.
App now proactively responds to security breaches by initiating a self-reset or eliminating tampered Verifiable Credentials (VCs).
Inji now seamlessly integrates with OpenID, expanding support for Verifiable Credentials (VC).
The app is now equipped to onboard Identity Providers (IdP), offering users a choice when interacting with issuers.
Introduces new screens allowing users to select issuers before downloading Verifiable Credentials (VC).
eSignet and MOSIP have been successfully onboarded as Identity Providers within Inji.
Inji now employs advanced facial recognition libraries for secure and seamless authorization of Verifiable Credential (VC) transfers.
A unique application ID is now associated with each unique installation of Inji. It is made accessible to the users.
Redmi devices are not supported for this release. To know more, refer to known issues in Redmi device.
The user will now be redirected to the MOSIP page successfully from the About INJI
screen. Earlier the link was crashing the app. #INJI 225
The user will be able to login into eSignet portal via QR code, using the VC activated on Home screen via. ellipsis menu. #INJI 253
App will prompt and remove tampered VC. #INJI 397
The user will be asked for language preference only at new installation. #INJI 362
Previously used UIN/VID will not be suggested in the AID field for VC download. #INJI 332
The user will be able to see the detailed view of Received
VC. #INJI 329
The user will be redirected to an intermittent downloading screen, when download is triggered from OpenID supported issuer. #INJI 458
Total
Passed
Failed
Skipped
1087
863
177
47
Total
Passed
Failed
Skipped
1268
1262
6
0
Total
Passed
Failed
Skipped
154
152
2
0
Total
Passed
Failed
Skipped
1114
1110
4
0
Total
Passed
Failed
Skipped
40
40
0
0
Repositories
Tags Released
mimoto
inji
tuvali
mosip-config
secure-keystore
mosip-onboarder