Rafiki Updates - April 2025

Bogdan Sandu — Wed, 09 Apr 2025 14:57:48 +0000

Hello everyone! Last month came with the new v1.1.0-beta release which saw new contributors joining on this effort. Thanks Cozmin and Collins Munene for your contributions!

Here's what this new release has to offer and more updates from our team:

Inside v1.1.0-beta

Improved IDP error & redirect handling

Auth server is now using GNAP error middleware on Identity Provider(IDP) API, so errors from the IDP server return properly formatted objects, similar to the errors thrown in the Open Payments Authorization Server(AS). Also, expired interactions are handled gracefully by redirecting back to the client when possible and providing better error descriptions in redirect URL.

Open Payments additions

For Open Payments clients, we now differentiate between "Inactive Token" vs "Insufficient Grant" errors when making a request to the resource server. For the former, an Open Payments client will simply need to rotate the token, for the latter, a new grant must be requested with the correct permissions for the resource.

Another addition is that integrators can now set WALLET_ADDRESS_REDIRECT_HTML_PAGE environment flag which will allow doing a 302 redirect to a webpage for a wallet address query, if the accept header of the incoming request is text/html(typically from a browser).

Multi-Tenancy

Tenanted webhooks tasks are still in review and soon to be merged. Following up, this month we will begin testing the multi-tenancy v1 implementation.

Grant Spent Amounts and Login with Open Payments

Tasks were scoped out for these two features and we started working on the implementation. For more details about them you can check March updates post.

Important schedule update

Rafiki Community calls will now happen monthly (second Tuesday of the month) at 1530 GMT.