Releases: dfinity/internet-identity
Release-2025-03-07: Improved Passkey name detection and new remove confirmation screen
This is Internet Identity release release-2025-03-07-v2 for commit f0c16410951530a0e1cada8967bcd7f30df8896a.
The sha256 of production asset internet_identity_production.wasm.gz is a1d0f14c3a276d0b74eef211570a7d22b599590da8f8da58ee2c562580ed652d.
This release includes improved Passkey name detection, now your Passkeys are named more accurately based on their source e.g. iCloud Keychain, 1Password, etc. Also new in this release in a new remove confirmation screen when you remove a Passkey, users are now shown details of their Passkey and asked to type it's name to make sure no mistakes can be made.
What's Changed
- Fix remove device button by @sea-snake in #2905
- Add checkout to AAGUID workflow by @sea-snake in #2887
- Use tmp files for AAGUID data update. by @sea-snake in #2889
- Add flows diagrams document by @lmuntaner in #2890
- Fix update AAGUID data script by @sea-snake in #2891
- Omit PR author from job by @sea-snake in #2895
- Update Passkey AAGUID data by @pr-automation-bot-public in #2896
- Fix bootstrap script and upgrade Rust by @lmuntaner in #2898
- Fix recommend cleanup by @sea-snake in #2888
- Add new onRemoveDevice to recovery device by @lmuntaner in #2893
- Update node version by @gix-bot in #2805
- Handle current device message in confirm remove device by @lmuntaner in #2894
- Remove whitespace previously added due to IDE misconfiguration. by @sea-snake in #2899
- OpenID Connect JWT Delegations by @LXIF in #2852
- Fix bootstrap script and make it more robust by @lmuntaner in #2901
- Use new screen when removing passkeys and recovery devices by @lmuntaner in #2900
- Add e2e test to remove devices by @lmuntaner in #2902
- Add login and registration flow events by @lmuntaner in #2904
New Contributors
- @pr-automation-bot-public made their first contribution in #2896
Full Changelogs: release-2025-02-28...release-2025-03-07-v2
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout f0c16410951530a0e1cada8967bcd7f30df8896a
./scripts/verify-hash --ii-hash a1d0f14c3a276d0b74eef211570a7d22b599590da8f8da58ee2c562580ed652d --archive-hash d266e6db2e64d025651b001b8341f769518b9d8fb11d3933c8c8ef205bd093cd
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
(Superseded) Release-2025-03-07: Improved Passkey name detection and new remove confirmation screen
This release has been superseded by 2025-03-07-v2 before it was submitted for voting to the NNS.
This is Internet Identity release release-2025-03-07 for commit d4e3b0d6d02bae622b95eab33d3a4f66ba776531.
The sha256 of production asset internet_identity_production.wasm.gz is 0ae57e58bb2ea8e4f0b2713e76ce7962ac9244a71bcc9458cd764cf541b32bf1.
This release includes improved Passkey name detection, now your Passkeys are named more accurately based on their source e.g. iCloud Keychain, 1Password, etc. Also new in this release in a new remove confirmation screen when you remove a Passkey, users are now shown details of their Passkey and asked to type it's name to make sure no mistakes can be made.
What's Changed
- Add checkout to AAGUID workflow by @sea-snake in #2887
- Use tmp files for AAGUID data update. by @sea-snake in #2889
- Add flows diagrams document by @lmuntaner in #2890
- Fix update AAGUID data script by @sea-snake in #2891
- Omit PR author from job by @sea-snake in #2895
- Update Passkey AAGUID data by @pr-automation-bot-public in #2896
- Fix bootstrap script and upgrade Rust by @lmuntaner in #2898
- Fix recommend cleanup by @sea-snake in #2888
- Add new onRemoveDevice to recovery device by @lmuntaner in #2893
- Update node version by @gix-bot in #2805
- Handle current device message in confirm remove device by @lmuntaner in #2894
- Remove whitespace previously added due to IDE misconfiguration. by @sea-snake in #2899
- OpenID Connect JWT Delegations by @LXIF in #2852
- Fix bootstrap script and make it more robust by @lmuntaner in #2901
- Use new screen when removing passkeys and recovery devices by @lmuntaner in #2900
- Add e2e test to remove devices by @lmuntaner in #2902
- Add login and registration flow events by @lmuntaner in #2904
New Contributors
- @pr-automation-bot-public made their first contribution in #2896
Full Changelog: release-2025-02-28...release-2025-03-07
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout d4e3b0d6d02bae622b95eab33d3a4f66ba776531
./scripts/verify-hash --ii-hash 0ae57e58bb2ea8e4f0b2713e76ce7962ac9244a71bcc9458cd764cf541b32bf1 --archive-hash d266e6db2e64d025651b001b8341f769518b9d8fb11d3933c8c8ef205bd093cd
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-02-28: Domains Compatibility Updates and Script Optimizations
This is Internet Identity release release-2025-02-28 for commit aa94ce4e196b7551d40262675e57ace94bba8772.
The sha256 of production asset internet_identity_production.wasm.gz is 281bfd7f57c926cd307fd4cf585bd0eae1f39014f3639dacdfbdc16eec5e2956.
This release includes improvements to the deployment script, many new subfeatures for Domains Compatibility and some preliminary setup for the upcoming Google Signin.
What's Changed
- Improve verify hash script by @lmuntaner in #2871
- Update dfx by @gix-bot in #2872
- Added new internal google client id for testing and local development by @LXIF in #2877
- Improve upgrade proposal script by @sea-snake in #2880
- Highlight current passkey by @lmuntaner in #2879
- Show device domains if multiple are found by @sea-snake in #2874
- Suggest old passkey cleanup by @sea-snake in #2875
- Refactor removing devices by @lmuntaner in #2881
- Sort lookup devices by most recently used by @sea-snake in #2882
- Create WebAuthn flows based on device order (recently used). by @sea-snake in #2883
- Fix deploy RC action by @lmuntaner in #2884
- Confirm Remove Device Page by @lmuntaner in #2885
- Passkey alias from known AAGUID data list by @sea-snake in #2886
Full Changelog: release-2025-02-21...release-2025-02-28
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout aa94ce4e196b7551d40262675e57ace94bba8772
./scripts/verify-hash --ii-hash 281bfd7f57c926cd307fd4cf585bd0eae1f39014f3639dacdfbdc16eec5e2956
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-01-21: Bugfixes and improvements
This is Internet Identity release release-2025-02-21 for commit 7da7c102e0fbab7f9e82125a0aea58d06bcbd569.
The sha256 of production asset internet_identity_production.wasm.gz is 14f8a69dabd069e5738cd61d42b39b84194fa7a24694620ae2bb7d19c4bbb54f.
This release includes bugfixes and implements tracking of page visits to better understand where the user lands when visiting Internet Identity.
What's Changed
- Disable button on limit of authenticators by @lmuntaner in #2868
- Use config related origins by @lmuntaner in #2862
- Update Chrome and disable sandbox explicitly by @sea-snake in #2867
- Deployment script by @lmuntaner in #2866
- Add event per page by @lmuntaner in #2869
- Update CI runner to ubuntu-latest by @sea-snake in #2865
- Bump dompurify from 3.1.3 to 3.2.4 by @dependabot in #2870
Full Changelog: release-2025-02-14...release-2025-02-21
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 7da7c102e0fbab7f9e82125a0aea58d06bcbd569
./scripts/verify-hash --ii-hash 14f8a69dabd069e5738cd61d42b39b84194fa7a24694620ae2bb7d19c4bbb54f
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-02-14: Domains Compatibility
This is Internet Identity release release-2025-02-14 for commit 789aa561748fb270bcb6ee0d9a02ecba195b0b79.
The sha256 of production asset internet_identity_production.wasm.gz is af3713edd0895832e74dd7d5e5e144ceb4f9538a3e482934e52a3e40e021c358.
This upgrade includes a new feature developed over the last months, which we are excited to announce: Domains Compatibility.
Moreover, this upgrade also includes the analytics setup, as agreed in a previous forum post.
What's Changed
- Retry different RP ID in VC flow by @lmuntaner in #2845
- Remove userAgent from
getCredentialsOriginby @lmuntaner in #2847 - Fix width toast in small devices by @lmuntaner in #2848
- Implement related origins e2e tests by @sea-snake in #2846
- Bump serialize-javascript and mocha in /demos/using-dev-build by @dependabot in #2849
- Bump vitest from 1.6.0 to 1.6.1 by @dependabot in #2850
- Add analytics config by @lmuntaner in #2851
- Fix flaky test by checking all console logs messages instead of only last message by @sea-snake in #2858
- Add canister config to html output by @sea-snake in #2854
- Read canister config from html by @sea-snake in #2859
- standardize candid whitespacing / formatting by @LXIF in #2855
- Install Plausible Tracking WebAuthn Flow by @lmuntaner in #2860
- Enable domains compatibility by @lmuntaner in #2861
- Fix related origins edge case handling by @lmuntaner in #2863
Full Changelog: release-2025-02-07...release-2025-02-14
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 789aa561748fb270bcb6ee0d9a02ecba195b0b79
./scripts/verify-hash --ii-hash af3713edd0895832e74dd7d5e5e144ceb4f9538a3e482934e52a3e40e021c358 --archive-hash a1583735594df2a694c10980d20674e22a7ae4295686019d79f2be0a35afe99a
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-02-07: Bugfixes and improvements
This is Internet Identity release release-2025-02-07 for commit d3d11ec3ada74ed919a5c60f091301b638b7ffae.
The sha256 of production asset internet_identity_production.wasm.gz is 8e9ed096c1ce86f45feed6e8142c3ba47a6f06920bb621d3e941ef5f6b1cd06b.
This release includes bugfixes, many new improvements and additions to the upcoming domain compatibility feature (currently behind feature flag) as well as a small copy change on the landing page.
What's Changed
- Use RP ID in WebAuthIdentity sign by @lmuntaner in #2827
- Remove persisted cancelled RP IDs by @lmuntaner in #2830
- Helper to find webauthn steps by @lmuntaner in #2833
- Iframe webauthn postmessage by @sea-snake in #2825
- Use iframe workaround when needed by @lmuntaner in #2834
- Rename WebAuthnSteps to WebAuthnFlows by @lmuntaner in #2836
- Rename PossiblyWrongRPID to PossiblyWrongWebAuthnFlow by @lmuntaner in #2835
- Use devices origin if ROR is supported by @lmuntaner in #2840
- Improve post message interface by @sea-snake in #2838
- Change copy by @LXIF in #2841
- Fix forward error from iframe by @lmuntaner in #2843
- Check for Password Manager extensions when adding new devices by @lmuntaner in #2842
Full Changelog: release-2025-01-31...release-2025-02-07
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout d3d11ec3ada74ed919a5c60f091301b638b7ffae
./scripts/verify-hash --ii-hash 8e9ed096c1ce86f45feed6e8142c3ba47a6f06920bb621d3e941ef5f6b1cd06b
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
2025-01-31: Upgrade dependencies
This is Internet Identity release release-2025-01-31 for commit 6332e23a70669efbbcb64b1ec3c442d311d674c8.
The sha256 of production asset internet_identity_production.wasm.gz is f1731eda0283d2dcba80974e371b445780f16eb21c5e80aba1228ca6bcfd3fcb.
This release includes a few dependencies upgraded. Additionally, this release includes work in progress on OpenID integration and the domains compatibility features (behind flag).
What's Changed
- Common origin when registering by @lmuntaner in #2819
- Add and remove OpenID credentials from anchor by @sea-snake in #2810
- Bump vite from 5.2.14 to 5.4.12 in /demos/using-dev-build by @dependabot in #2803
- Fix security vulnerabilities by @lmuntaner in #2820
- Bump undici from 5.28.4 to 5.28.5 by @dependabot in #2821
- Better error for PIN identities in other domains by @lmuntaner in #2823
- Copy WebAuthIdentity from agent-js by @lmuntaner in #2824
- Clean up cancelled RP IDs if no filtered credentials by @lmuntaner in #2822
- Update rust version by @gix-bot in #2828
Full Changelog: release-2025-01-24...release-2025-01-31
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 6332e23a70669efbbcb64b1ec3c442d311d674c8
./scripts/verify-hash --ii-hash f1731eda0283d2dcba80974e371b445780f16eb21c5e80aba1228ca6bcfd3fcb --archive-hash ee9666e45c01d9c94ff79fd3a5fc1bba804f4eb9cd8e484b248ac6bb6baf5ad5
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
2025-01-26: Fix device recovery and work in progress behind flag
This is Internet Identity release release-2025-01-24 for commit 6819061c9a2ac31e3179c5d9729530d222b01696.
The sha256 of production asset internet_identity_production.wasm.gz is 118558e053b39fcdabc99cbfaddbffd6f346719d1c35193e117310f0e54ab4b1.
This release includes a fix for the device recovery flow. Previously this flow gave an error that there are multiple devices and blocked the flow as a result. This has now been resolved by excluding the recovery seed phrase from the count.
Additionally this release includes work in progress on OpenID integration and the domains compatibility features (behind flag).
What's Changed
- Clean up cancelled RP IDs after removing device by @lmuntaner in #2786
- Persist cancelled RP IDs by @lmuntaner in #2787
- Expose origin of adding a device by @lmuntaner in #2788
- Add rpId to createOptions for new devices by @lmuntaner in #2789
- Fix device recovery flow, filter out recovery methods that aren't devices by @sea-snake in #2791
- Implement device recovery e2e test by @sea-snake in #2790
- Fix device recovery e2e test being flaky, remove old duplicate line. by @sea-snake in #2797
- Pass all credentials when logging in by @lmuntaner in #2794
- Util getCredentialsOrigin by @lmuntaner in #2793
- Add setLastShownAddCurrentDevicePage field by @lmuntaner in #2799
- Expose origin of add iiConnection by @lmuntaner in #2800
- Show add current device page only once by @lmuntaner in #2801
- Add origin to addCurrentDevice function by @lmuntaner in #2802
- Improve text add current device page by @lmuntaner in #2807
- Use devices' origin in add new device from recovery wizard by @lmuntaner in #2808
- Fix bug in
addmethod of authenticated connection by @lmuntaner in #2809 - Use devices origin when setting up recovery by @lmuntaner in #2811
- Change the warning icon in devices list by @lmuntaner in #2806
- Do not use cancelled RP IDs for recovery device by @lmuntaner in #2813
- Pass
origintoaddcall in addCurrentDevice by @lmuntaner in #2815 - Check devices origin in the post recovery flow by @lmuntaner in #2814
- Add seed phrase to same origin as devices by @lmuntaner in #2818
Full Changelog: release-2025-01-17...release-2025-01-24
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 6819061c9a2ac31e3179c5d9729530d222b01696
./scripts/verify-hash --ii-hash 118558e053b39fcdabc99cbfaddbffd6f346719d1c35193e117310f0e54ab4b1
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
2025-01-17: Work in progress behind flag
This is Internet Identity release release-2025-01-17 for commit 3ee7ece82ca66885b85b7d3e89dde5ff62c4fb90.
The sha256 of production asset internet_identity_production.wasm.gz is 7f0ef7368b703bfcd9f643a5a5f7e69f8058d1414c551b248c5cfd31e9564e97.
This release doesn't contain new functionality of fixes in production. Only code that is behind a flag has been updated in this new release.
What's Changed
- Implement Google certs HTTP outcall and transform by @sea-snake in #2766
- Add dapps explorere assets to BOT_APPROVED_FILES by @lmuntaner in #2777
- Implement timers to fetch Google certs. by @sea-snake in #2774
- Update dapps list by @gix-bot in #2775
- Improve comment util supportsWebauthRoR by @lmuntaner in #2779
- Functionality to add current device to current origin by @lmuntaner in #2778
- Implement Google JWT verification and OpenID Google client id init parameter. by @sea-snake in #2780
- Update rust version by @lmuntaner in #2782
- Wrap Google open id config in option so it can be disabled. by @sea-snake in #2783
- Add storage utils to persist cancelled RP IDs by @lmuntaner in #2784
Full Changelog: release-2025-01-10...release-2025-01-17
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 3ee7ece82ca66885b85b7d3e89dde5ff62c4fb90
./scripts/verify-hash --ii-hash 7f0ef7368b703bfcd9f643a5a5f7e69f8058d1414c551b248c5cfd31e9564e97
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-01-10: Bugfixes and testing features
This is Internet Identity release release-2025-01-10 for commit 8671b4f4c61a3b641a08b2ffb25053201e37e512.
The sha256 of production asset internet_identity_production.wasm.gz is 377b17ef2f5c83ecdc78292373fbb3a1e632755b4de3910a8d96d0e64d657753.
This release includes a bugfix for veteran II users on Windows as well as testing functionality for upcoming features and issues arising from the recent macOS update.
What's Changed
- Update dapps list by @gix-bot in #2750
- Add tests to make sure .well-known routes are not cached by @LXIF in #2749
- Refactor finding rpId for login by @lmuntaner in #2751
- Add bot approved files policy by @lmuntaner in #2752
- Retry with differen rp id by @lmuntaner in #2753
- Add nice UX when passkey is not found in that RP ID by @lmuntaner in #2754
- Bump astro from 4.16.1 to 4.16.17 by @dependabot in #2756
- Append https:// in front of RP ID when excluding devices by @lmuntaner in #2755
- Bump astro from 4.16.17 to 4.16.18 by @dependabot in #2758
- UI Page to add current device to the current origin by @lmuntaner in #2757
- Add new field to LoginSuccess to show add current device screen by @lmuntaner in #2759
- Fix authentication with (older) identities that have devices without a (valid) credential id. by @sea-snake in #2760
- Implement mock openID actor methods by @sea-snake in #2761
- Implement OpenID add/remove accounts in identity management by @sea-snake in #2762
- Fix e2e CI job by downgrading runner by @lmuntaner in #2764
- Add readme.md to BOT_APPROVED_FILES by @lmuntaner in #2763
- Update release in README by @gix-bot in #2747
- Update dapps list by @gix-bot in #2765
- Yubikey test feature by @LXIF in #2769
- Andri/yubikey test feature by @LXIF in #2772
Full Changelog: release-2024-12-13...release-2025-01-10
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 8671b4f4c61a3b641a08b2ffb25053201e37e512
./scripts/verify-hash --ii-hash 377b17ef2f5c83ecdc78292373fbb3a1e632755b4de3910a8d96d0e64d657753
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.