Releases: dfinity/internet-identity
2025-01-31: Upgrade dependencies
This is Internet Identity release release-2025-01-31 for commit 6332e23a70669efbbcb64b1ec3c442d311d674c8.
The sha256 of production asset internet_identity_production.wasm.gz is f1731eda0283d2dcba80974e371b445780f16eb21c5e80aba1228ca6bcfd3fcb.
This release includes a few dependencies upgraded. Additionally, this release includes work in progress on OpenID integration and the domains compatibility features (behind flag).
What's Changed
- Common origin when registering by @lmuntaner in #2819
- Add and remove OpenID credentials from anchor by @sea-snake in #2810
- Bump vite from 5.2.14 to 5.4.12 in /demos/using-dev-build by @dependabot in #2803
- Fix security vulnerabilities by @lmuntaner in #2820
- Bump undici from 5.28.4 to 5.28.5 by @dependabot in #2821
- Better error for PIN identities in other domains by @lmuntaner in #2823
- Copy WebAuthIdentity from agent-js by @lmuntaner in #2824
- Clean up cancelled RP IDs if no filtered credentials by @lmuntaner in #2822
- Update rust version by @gix-bot in #2828
Full Changelog: release-2025-01-24...release-2025-01-31
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 6332e23a70669efbbcb64b1ec3c442d311d674c8
./scripts/verify-hash --ii-hash f1731eda0283d2dcba80974e371b445780f16eb21c5e80aba1228ca6bcfd3fcb --archive-hash ee9666e45c01d9c94ff79fd3a5fc1bba804f4eb9cd8e484b248ac6bb6baf5ad5
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
2025-01-26: Fix device recovery and work in progress behind flag
This is Internet Identity release release-2025-01-24 for commit 6819061c9a2ac31e3179c5d9729530d222b01696.
The sha256 of production asset internet_identity_production.wasm.gz is 118558e053b39fcdabc99cbfaddbffd6f346719d1c35193e117310f0e54ab4b1.
This release includes a fix for the device recovery flow. Previously this flow gave an error that there are multiple devices and blocked the flow as a result. This has now been resolved by excluding the recovery seed phrase from the count.
Additionally this release includes work in progress on OpenID integration and the domains compatibility features (behind flag).
What's Changed
- Clean up cancelled RP IDs after removing device by @lmuntaner in #2786
- Persist cancelled RP IDs by @lmuntaner in #2787
- Expose origin of adding a device by @lmuntaner in #2788
- Add rpId to createOptions for new devices by @lmuntaner in #2789
- Fix device recovery flow, filter out recovery methods that aren't devices by @sea-snake in #2791
- Implement device recovery e2e test by @sea-snake in #2790
- Fix device recovery e2e test being flaky, remove old duplicate line. by @sea-snake in #2797
- Pass all credentials when logging in by @lmuntaner in #2794
- Util getCredentialsOrigin by @lmuntaner in #2793
- Add setLastShownAddCurrentDevicePage field by @lmuntaner in #2799
- Expose origin of add iiConnection by @lmuntaner in #2800
- Show add current device page only once by @lmuntaner in #2801
- Add origin to addCurrentDevice function by @lmuntaner in #2802
- Improve text add current device page by @lmuntaner in #2807
- Use devices' origin in add new device from recovery wizard by @lmuntaner in #2808
- Fix bug in
addmethod of authenticated connection by @lmuntaner in #2809 - Use devices origin when setting up recovery by @lmuntaner in #2811
- Change the warning icon in devices list by @lmuntaner in #2806
- Do not use cancelled RP IDs for recovery device by @lmuntaner in #2813
- Pass
origintoaddcall in addCurrentDevice by @lmuntaner in #2815 - Check devices origin in the post recovery flow by @lmuntaner in #2814
- Add seed phrase to same origin as devices by @lmuntaner in #2818
Full Changelog: release-2025-01-17...release-2025-01-24
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 6819061c9a2ac31e3179c5d9729530d222b01696
./scripts/verify-hash --ii-hash 118558e053b39fcdabc99cbfaddbffd6f346719d1c35193e117310f0e54ab4b1
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
2025-01-17: Work in progress behind flag
This is Internet Identity release release-2025-01-17 for commit 3ee7ece82ca66885b85b7d3e89dde5ff62c4fb90.
The sha256 of production asset internet_identity_production.wasm.gz is 7f0ef7368b703bfcd9f643a5a5f7e69f8058d1414c551b248c5cfd31e9564e97.
This release doesn't contain new functionality of fixes in production. Only code that is behind a flag has been updated in this new release.
What's Changed
- Implement Google certs HTTP outcall and transform by @sea-snake in #2766
- Add dapps explorere assets to BOT_APPROVED_FILES by @lmuntaner in #2777
- Implement timers to fetch Google certs. by @sea-snake in #2774
- Update dapps list by @gix-bot in #2775
- Improve comment util supportsWebauthRoR by @lmuntaner in #2779
- Functionality to add current device to current origin by @lmuntaner in #2778
- Implement Google JWT verification and OpenID Google client id init parameter. by @sea-snake in #2780
- Update rust version by @lmuntaner in #2782
- Wrap Google open id config in option so it can be disabled. by @sea-snake in #2783
- Add storage utils to persist cancelled RP IDs by @lmuntaner in #2784
Full Changelog: release-2025-01-10...release-2025-01-17
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 3ee7ece82ca66885b85b7d3e89dde5ff62c4fb90
./scripts/verify-hash --ii-hash 7f0ef7368b703bfcd9f643a5a5f7e69f8058d1414c551b248c5cfd31e9564e97
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-01-10: Bugfixes and testing features
This is Internet Identity release release-2025-01-10 for commit 8671b4f4c61a3b641a08b2ffb25053201e37e512.
The sha256 of production asset internet_identity_production.wasm.gz is 377b17ef2f5c83ecdc78292373fbb3a1e632755b4de3910a8d96d0e64d657753.
This release includes a bugfix for veteran II users on Windows as well as testing functionality for upcoming features and issues arising from the recent macOS update.
What's Changed
- Update dapps list by @gix-bot in #2750
- Add tests to make sure .well-known routes are not cached by @LXIF in #2749
- Refactor finding rpId for login by @lmuntaner in #2751
- Add bot approved files policy by @lmuntaner in #2752
- Retry with differen rp id by @lmuntaner in #2753
- Add nice UX when passkey is not found in that RP ID by @lmuntaner in #2754
- Bump astro from 4.16.1 to 4.16.17 by @dependabot in #2756
- Append https:// in front of RP ID when excluding devices by @lmuntaner in #2755
- Bump astro from 4.16.17 to 4.16.18 by @dependabot in #2758
- UI Page to add current device to the current origin by @lmuntaner in #2757
- Add new field to LoginSuccess to show add current device screen by @lmuntaner in #2759
- Fix authentication with (older) identities that have devices without a (valid) credential id. by @sea-snake in #2760
- Implement mock openID actor methods by @sea-snake in #2761
- Implement OpenID add/remove accounts in identity management by @sea-snake in #2762
- Fix e2e CI job by downgrading runner by @lmuntaner in #2764
- Add readme.md to BOT_APPROVED_FILES by @lmuntaner in #2763
- Update release in README by @gix-bot in #2747
- Update dapps list by @gix-bot in #2765
- Yubikey test feature by @LXIF in #2769
- Andri/yubikey test feature by @LXIF in #2772
Full Changelog: release-2024-12-13...release-2025-01-10
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 8671b4f4c61a3b641a08b2ffb25053201e37e512
./scripts/verify-hash --ii-hash 377b17ef2f5c83ecdc78292373fbb3a1e632755b4de3910a8d96d0e64d657753
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-12-13: Bug fixes
This is Internet Identity release release-2024-12-13 for commit 411ed8a69ce74fd5617e292f86773ce5555aba8f.
The sha256 of production asset internet_identity_production.wasm.gz is 80ad01307faa306950a7e5cb0a60564171f090b5864f32b540b63badfc1f3b9d.
This release includes a bug fix for users logging in Internet Identity with PIN. We also updated dependencies to fix some minor vulnerability issues.
What's Changed
- Helper to find the RP ID given users' devices and current origin by @lmuntaner in #2729
- Update release in README by @gix-bot in #2732
- docs: fix typo in Dockerfile comment by @peterpeterparker in #2733
- Fix log in with PIN in Internet Identity page by @lmuntaner in #2735
- Fix comment by @lmuntaner in #2738
- Use lookupAll instead of lookupCredentials in recovery flow by @lmuntaner in #2737
- Change codeowners by @lmuntaner in #2739
- Update dapps list by @gix-bot in #2741
- Add helper to check browser version by @lmuntaner in #2743
- Share CredentialData param type of fromCredentials by @lmuntaner in #2742
- Change findWebAuthnRpId signature and return by @lmuntaner in #2744
- Resolve npm vulnerabilities by @lmuntaner in #2745
- Use dynamic RP ID by @lmuntaner in #2746
Full Changelog: release-2024-12-06...release-2024-12-13
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 411ed8a69ce74fd5617e292f86773ce5555aba8f
./scripts/verify-hash --ii-hash 80ad01307faa306950a7e5cb0a60564171f090b5864f32b540b63badfc1f3b9d
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-12-06: Maintenance and UI fixes
This is Internet Identity release release-2024-12-06 for commit 4118aae6255204f01786f112cf94f06858643488.
The sha256 of production asset internet_identity_production.wasm.gz is 0c1fdf559056aabfbc054590b4532534bbdb40cf0274e34eeec17747d308b5e6.
There aren't major user facing changes in this release except for a UI fix and reduce size of some icons.
What's Changed
- Update release in README by @gix-bot in #2718
- Improve Verifiable Credential docs by @lmuntaner in #2719
- Improve VC docs with domain separator extension by @lmuntaner in #2721
- Improve PR Template by @lmuntaner in #2722
- Update dfx by @gix-bot in #2723
- Update dapps list by @gix-bot in #2726
- Fix button text only color on hover by @lmuntaner in #2724
- Updated Discord Link by @lmuntaner in #2728
- Add Related Origins Requests to Config by @lmuntaner in #2725
- Update dapps list by @gix-bot in #2731
- Runtime frontend feature flags. by @sea-snake in #2730
- Add well-known asset for Related Origin Requests by @lmuntaner in #2720
Full Changelog: release-2024-11-29...release-2024-12-06
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 4118aae6255204f01786f112cf94f06858643488
./scripts/verify-hash --ii-hash 0c1fdf559056aabfbc054590b4532534bbdb40cf0274e34eeec17747d308b5e6
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-11-29: UI and UX improvements
This is Internet Identity release release-2024-11-29 for commit 10f15a13bdfe0e9e3f3699d0fb5a5282bddd452c.
The sha256 of production asset internet_identity_production.wasm.gz is d5842563b375450026584fa45a9c82336b28e07afe48ea4f8ce752102a21fbec.
This release includes improvements in caching of assets and fixes a minor UI issue. It also re-enables some e2e tests that were disabled as well as clean up some code after removing the functionality to register with PIN.
What's Changed
- Update release in README by @gix-bot in #2704
- Add caching and cache-busting to dapp icons by @LXIF in #2697
- Fix loader in showcase and add it to screenshots by @sea-snake in #2710
- Enable PIN registration with query param by @lmuntaner in #2711
- Update dapps list by @gix-bot in #2713
- Remove "false" label from loader screen by @sea-snake in #2712
- Clean up and enable tests after PIN teste enabled by @lmuntaner in #2714
- Upgrade Rust and fix clippy issues by @lmuntaner in #2717
Full Changelog: release-2024-11-22...release-2024-11-29
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 10f15a13bdfe0e9e3f3699d0fb5a5282bddd452c
./scripts/verify-hash --ii-hash d5842563b375450026584fa45a9c82336b28e07afe48ea4f8ce752102a21fbec
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-11-22: Speed up improvements
This is Internet Identity release release-2024-11-22 for commit 437124a8b9583f80dc183a739626ddc07efb66d6.
The sha256 of production asset internet_identity_production.wasm.gz is 071544d27d3ac1ce82b1046e63459ce50c2fd1cc9bf18cfc3a8cdb92fc057780.
This release includes performance improvements to speed up Internet Identity by compressing assets and caching them.
What's Changed
- Update dfx by @gix-bot in #2693
- Update release in README by @gix-bot in #2692
- Optimized file sizes of the dapp icons. by @sea-snake in #2696
- Andri/last used by @LXIF in #2683
- Improved caching for better load times by @LXIF in #2695
- Update node version by @gix-bot in #2699
- Show support links on loading and error screens. by @sea-snake in #2702
New Contributors
- @sea-snake made their first contribution in #2696
Full Changelog: release-2024-11-15...release-2024-11-22
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 437124a8b9583f80dc183a739626ddc07efb66d6
./scripts/verify-hash --ii-hash 071544d27d3ac1ce82b1046e63459ce50c2fd1cc9bf18cfc3a8cdb92fc057780
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-11-15: Speed up onboarding process
This is Internet Identity release release-2024-11-15 for commit 0770646b614ac6b91b56a8b64fbcac88dea47ca5.
The sha256 of production asset internet_identity_production.wasm.gz is 5f409f7b2ce3bf04400cffd15db1a1b50462397fbc5c1e93df49c94ca135e013.
The main improvement in this release is faster onboarding process thanks to parallelizing two calls instead of making them in sequence. This release also includes a UI fix setting the width of the login box for mobile devices.
What's Changed
- Update release in README by @gix-bot in #2689
- make the c-landingPage__container fixed width by @LXIF in #2690
- Speed up the onboarding process by parallelizing calls by @LXIF in #2691
Full Changelog: release-2024-11-08...release-2024-11-15
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 0770646b614ac6b91b56a8b64fbcac88dea47ca5
./scripts/verify-hash --ii-hash 5f409f7b2ce3bf04400cffd15db1a1b50462397fbc5c1e93df49c94ca135e013
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2024-11-08: Allow only registrations with passkeys
This is Internet Identity release release-2024-11-08 for commit 81a2a7090fafa11e4ef15aaa2ef59cd743dda954.
This release comes with two main updates:
- The registration flow uses only passkeys and pin registrations have been deprecated. However, logins with pin are still allowed for backwards compatibility.
- Improvements in the calculation of rates for the dynamic captcha.
The sha256 of production asset internet_identity_production.wasm.gz is 4491f9286f83b53f57a2df4131b58492c14d62bb2e04320b89fce255483fdb96.
What's Changed
- Update release in README by @gix-bot in #2682
- Update dapps list by @gix-bot in #2685
- Change dynamic captcha registration rates calculation by @lmuntaner in #2684
- Fix test-canisters script when no arguments by @lmuntaner in #2686
- Remove screen to select authentication method: passkey or pin by @lmuntaner in #2687
- Fix dynamic captcha when config changes to longer intervals by @lmuntaner in #2688
Full Changelog: release-2024-11-01...release-2024-11-08
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 81a2a7090fafa11e4ef15aaa2ef59cd743dda954
./scripts/verify-hash --ii-hash 4491f9286f83b53f57a2df4131b58492c14d62bb2e04320b89fce255483fdb96
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.