CoronaCheck 2.3.3

Holder:

• When strippen refresh fails, the app will automatically retry after 10 minutes.
• When the user restarts the app within 10 minutes, the strippen refresh is delayed until 10 minutes have past. (GitHub)
• Improved resilience against DDoS attacks:

• Changed 30 second network/response timeout for (ui)blocking calls to 10 seconds
• Changed holder config urls (regular config and config-providers) to use the CDN
• Removed retry buttons for 'create QR' and strippen refresh
• Tested if offline use works under all network circumstances

CoronaCheck 2.3.2

Holder:

• Small copy update of the validity text label on the QR card
• Error states: Improvements "ophaaltoken" flow
• Error states: Show error code on 429 page
• Error states: distinction between client and server not reachable
• Split labels in Details QR screen
• Added the DigiD logo in all locations that refer to DigiD
• Disabled signature checks for /v5
• Improved SIG maintainability
• Added functionality for universal links

Bug fixes:

• Paper certificate is not added if there’s a certificate already
• Fix SSL Chain tests

CoronaCheck 2.3.1

Hotfix:

Contains a fix to support fallback URLs for DigiD deeplinks when a custom external browser is set (e.g. Chrome. Edge). Redirect universal links don’t work in custom browsers. Currently in production the fallback URL redirect is replaced by a fallback webpage with a button, which users can tap to manual trigger universal links in custom browsers. The app is already live, so we have to make a separate flow where the fallback URL redirect is in use. This also allows us to test in production.
As we have to keep the fallback webpage alive, until every user has updated to the latest version, we have to support a new universal link (path ends in /app/auth2). iOS and Android will implement this both.
In other words, the new universal link DigiD flow contains a fallback link for custom browsers, which is now recognized in the app.

CoronaCheck Scanner 2.3.0

Verifier

• Updated the go library v3 QRs
• Implemented CAS changes: for people from the CAS islands, the app now also scans QR codes for use within the Netherlands
• Updated animations for scan instructions

Bug fixes:

• The animation glitches on the 'Waar moet ik op letten' screen
• Flip the VWS flag in the splash screen
• Onboarding flow: 'Vorige' weg uit Back button

CoronaCheck 2.3.0

Holder

• Added a link about the contribution of the European Commission to the colophon in the ‘Read more’ section under ‘About this app’
• Migrated oauth return Uris to universal links
• Formatted all individual errors with a meaningful code
• More work on app integration / deeplinks

Design improvements:

• Changed font weight of active tab on tab bar
• Changed card design to differentiate the cards better

Error states:

• Config and public keys
• Pairing code
• Retrieving event_provider data from the config call
• TVS / DigiD call
• Access tokens call
• Event provider unomi / event calls
• Get Credentials call / prepareIssue call
• Test provider / result call

Bug fixes:

• Screenshot blocking now works better with Voiceover
• Checked Janssen with 0 credentials
• Changed clock skew detection
• Refactored spaghetti code for validity strings on the dashboard
• Removed big space/line break between the explanation text and the link on the dashboard
• Information in notification bar incorrect color
• Cleaning function for expired events was missing
• Fix SSL chain tests
• Handle timeout without showing ‘No internet connection’
• Screen capture enabled on ACC
• Remove link to malfunctions on commercial test error state
• Wrong step by failing unomi and no events
• Dialog 'are you sure you want to stop' swap order stop / continue in NL

Exploratory findings:

• Doublecheck strippen behavior
• Wrong copy on ‘Server busy’ message
• Wrong state for at least one successful call, received no events and call(s) failing
• Wrong error code get_test_result 500
• Copy TVS Afgebroken translations

CoronaCheck Scanner 2.2.0

Verifier

• Implemented various design improvements
• Fixed an issue with float values in DCCs from Ireland

Bug fixes:

• Gebruikersvoorwaarden-checkbox-block should be 32px above the button
• Checkbox on consent page should be 40 px above 'Volgende' button (not directly underneath the bulleted list)
• Hyperlink colors should be the same
• Unchecked checkbox in consent page should be white inside circle
• Crash in Onboarding

CoronaCheck 2.2.2

Holder

bug fix:

• fixed false positive clock skew warnings

CoronaCheck Scanner 2.1.2

Verifier

• Updates of the go library (US #1249)
• Errorstates with config and public keys call (US #1378)

CoronaCheck 2.2.1

Holder

• Users now get a warning if the device time deviates from the actual time
• Added functionality for integration/deeplinks in ticket apps
• Updated the ‘Wat is er opgehaald’ screen with HPK codes and hidden empty fields
• Fetched vaccination events from different databases (e.g. RIVM and GGD) are now combined
• Adjusted the validity info on cards
• Changed bottomsheet for Dutch and International to 2 tabs at the top of the screen
• If the user makes a screenshot of the QR code, the app shows text saying a screenshot is not a valid proof and counts down from 3 minutes after which the QR wil reappear
• The amount of seconds it takes before the QR code is refreshed can now be configured
• Changed the method for comparing holder initials to determine if holders of different events are the same
• Updated the information on the QR details screen

Bug fixes:

• SSL fixes
• Async retrieval of config
• 'Add certificate' doesn't work when default browser is other than Safari
• Crash in makeFromHtml
• Crash: do not initiate database
• EventStartView does not scroll
• Change warning when using expired deeplink
• Invalid encoding of the signature caused spinner of death

CoronaCheck 2.2.0

Holder

• Paper QR codes can now be scanned in the app for a digital QR
• There is a new animation underneath the QR code for the Netherlands
• Added a new label for vaccination dose on ‘Wat is er opgehaald’ screen in the vaccination flow
• Information now has Dutch and English labels on the ‘?’-screen for DCC’s
• Conflicting certificates are matched based on birth date/initials. No match: user chooses whether to discard the new certificate, or keep it and delete all other certificates.
• Various design improvements
• Various copy improvements

Bug fixes:

• Some providers failed on the server SSL check
• SSL fixes: platform verification not used, certificate comparison based on certificate metadata, certificate SAN checking, response signature checking, function result not checked
• Crash after all strippen have depleted and you reopen the app
• Testflight deploy fails if there are missing English copy strings
• Retrieving vaccination details in airplane mode leads to “request busy” alert
• English copy needs importing
• [Backend] Sending a test with coupling code does not return origins
• Sensitive information stored in log