Releases: dfinity/internet-identity
release-2024-11-08: Allow only registrations with passkeys
This is Internet Identity release release-2024-11-08 for commit 81a2a7090fafa11e4ef15aaa2ef59cd743dda954.
This release comes with two main updates:
- The registration flow uses only passkeys and pin registrations have been deprecated. However, logins with pin are still allowed for backwards compatibility.
- Improvements in the calculation of rates for the dynamic captcha.
The sha256 of production asset internet_identity_production.wasm.gz is 4491f9286f83b53f57a2df4131b58492c14d62bb2e04320b89fce255483fdb96.
What's Changed
- Update release in README by @gix-bot in #2682
- Update dapps list by @gix-bot in #2685
- Change dynamic captcha registration rates calculation by @lmuntaner in #2684
- Fix test-canisters script when no arguments by @lmuntaner in #2686
- Remove screen to select authentication method: passkey or pin by @lmuntaner in #2687
- Fix dynamic captcha when config changes to longer intervals by @lmuntaner in #2688
Full Changelog: release-2024-11-01...release-2024-11-08
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 81a2a7090fafa11e4ef15aaa2ef59cd743dda954
./scripts/verify-hash --ii-hash 4491f9286f83b53f57a2df4131b58492c14d62bb2e04320b89fce255483fdb96
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-11-01: Onboarding improvements and new passkey usage timestamp
This is Internet Identity release release-2024-11-01 for commit f69b5fe20f4e72e22da6543b19359616a11ce244.
The sha256 of production asset internet_identity_production.wasm.gz is 9fcac1fe34fbc180ba4648c47655a14d990bc8e870144fbfa81e60d31d2dae84.
This release incluses text improvements to help users that are registering and also adds the last time a passkey was used in the devices list.
What's Changed
- Update release in README by @gix-bot in #2670
- remove first_time_subtitle from first-time known-dapp auth modal by @LXIF in #2671
- Fix typo in docs by @lmuntaner in #2676
- Update dapps list by @gix-bot in #2674
- Remove mobile footer title and text by @LXIF in #2672
- Simplify Text shown after creating Internet Identity by @LXIF in #2673
- add bugfix learnings to readme and hacking by @LXIF in #2677
- Update dapps list by @gix-bot in #2678
- Rename metrics for stable and heap memory bytes by @lmuntaner in #2679
- Change landing page title by @lmuntaner in #2681
- Display timestamp of last usage for each Passkey device in PAsskey device selector by @LXIF in #2680
Full Changelog: release-2024-10-25...release-2024-11-01
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout f69b5fe20f4e72e22da6543b19359616a11ce244
./scripts/verify-hash --ii-hash 9fcac1fe34fbc180ba4648c47655a14d990bc8e870144fbfa81e60d31d2dae84 --archive-hash 6b8c93a9c7d9d187b186b8d8bc7ee3f617265f070125b4ca0e5a72e0bb4cd045
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-10-25: Improve id alias credential verification
This is Internet Identity release release-2024-10-25 for commit 34d593f727f16e4432e147f785c84c829831752a.
The sha256 of production asset internet_identity_production.wasm.gz is 41fbbb7a47342cf0169bdf5599f52fa4239409ea3882e955243a02ce3c730680.
This release adds a new field in the id alias credential that should be used to ensure that user's principal comes from the expected derivation origin.
What's Changed
- Update release in README by @gix-bot in #2663
- Add "derivationOrigin" to id_alias credential by @lmuntaner in #2664
- Add test-canisters.sh script to CI by @lmuntaner in #2655
- Update e2e test documentation in HACKING.md by @frederikrothenberger in #2665
- Update II spec with new registration flow by @frederikrothenberger in #2666
- Update ii-spec.mdx by @LXIF in #2667
- Update dfx by @gix-bot in #2668
- Update vc-spec.md by @LXIF in #2669
New Contributors
Full Changelog: release-2024-10-18...release-2024-10-25
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 34d593f727f16e4432e147f785c84c829831752a
./scripts/verify-hash --ii-hash 41fbbb7a47342cf0169bdf5599f52fa4239409ea3882e955243a02ce3c730680 --archive-hash 5cc69b679e8a51cb4b1449258b0939389b919774c2d7461256d62182574c7759
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-10-18: Dynamic captcha
This is Internet Identity release release-2024-10-18 for commit 14cbf0f3c15eaa476d2b42e8754188328448b5f5.
The sha256 of production asset internet_identity_production.wasm.gz is 6bd39a8f4730e9590ca144b3d618d9e3a7dfea389720fa81c9d2928a714623b5.
This release adds a new functionality that will improve the onboarding experience: dynamic captcha.
The captcha during the registration flow is considered a significant source of friction for onboarding new users.
The dynamic captcha aims to balance usability and resilience against bots by making it a dynamic element in the registration flow; only required when the registration rate is suspiciously high.
Update For Developers
If no configuration is passed, the captcha is enabled. However, developers can add the init_arg in their dfx.json to disable the captcha for their development environments. We updated the example to use the new argument.
What's Changed
- Wait longer for e2e test window to close by @frederikrothenberger in #2636
- Update release in README by @gix-bot in #2637
- Track registration rate and expose metrics by @frederikrothenberger in #2634
- Only require captcha if threshold rate is exceeded by @frederikrothenberger in #2638
- Remove unnecessary counters from persistent state by @frederikrothenberger in #2639
- Remove interface check breaking change exception by @frederikrothenberger in #2640
- Update node version by @gix-bot in #2641
- Update dfx by @gix-bot in #2642
- Update dapps list by @gix-bot in #2643
- Update dapps list by @gix-bot in #2644
- Update dapps list by @gix-bot in #2645
- Update dapps list by @gix-bot in #2646
- Update dapps list by @gix-bot in #2649
- Bump astro from 4.5.0 to 4.16.1 by @dependabot in #2648
- Make identity metadata update synchronous by @frederikrothenberger in #2651
- Add new metrics to monitor memory by @lmuntaner in #2650
- Add script test canisters by @lmuntaner in #2652
- Update lit-html by @frederikrothenberger in #2653
- Switch II front-end to API v2 for registration by @frederikrothenberger in #2654
- Run e2e tests with captcha disabled by @frederikrothenberger in #2656
- Remove registration stepper by @frederikrothenberger in #2657
- Add loader animation on registration completion by @frederikrothenberger in #2658
- Update rust version by @gix-bot in #2659
- Update instructions for dev-build without captcha by @frederikrothenberger in #2661
- Change how dynamic captcha stores data by @lmuntaner in #2660
- Add dfx deps default init args by @frederikrothenberger in #2662
Full Changelog: release-2024-10-01...release-2024-10-18
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 14cbf0f3c15eaa476d2b42e8754188328448b5f5
./scripts/verify-hash --ii-hash 6bd39a8f4730e9590ca144b3d618d9e3a7dfea389720fa81c9d2928a714623b5
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-10-01: Dependency dapp Logo Updates
This is Internet Identity release release-2024-10-01 for commit bfb63bd8ecb8093eb684778685b01770cc84eb46.
This Internet Identity release contains several front-end dependency upgrades as well as updated logos for ecosystem dapps.
The sha256 of production asset internet_identity_production.wasm.gz is 2b3e9f48257a8aebb34ad7d0ad0b058354874e5831e15a3fa8ca42e14bfb2812.
What's Changed
- Update release in README by @gix-bot in #2613
- Bump vite from 5.2.10 to 5.4.6 by @dependabot in #2615
- Bump vite from 5.2.10 to 5.2.14 in /demos/using-dev-build by @dependabot in #2614
- Bump vite from 4.5.3 to 4.5.5 by @dependabot in #2617
- Derive default for
State
by @frederikrothenberger in #2616 - Refactor temp_keys in preparation for dynamic captcha registration flow by @frederikrothenberger in #2618
- Extract captcha logic into new module by @frederikrothenberger in #2619
- Update dapps list by @gix-bot in #2620
- Bump rollup from 4.16.3 to 4.22.4 in /demos/using-dev-build by @dependabot in #2621
- Refactor captcha module to separate state handling from solution checking by @frederikrothenberger in #2622
- Revert "Bump vite from 4.5.3 to 4.5.5 (#2617)" by @frederikrothenberger in #2623
- Update agent-js by @frederikrothenberger in #2624
- Remove outdated vite dependency from package-lock.json by @frederikrothenberger in #2625
- Update package-lock.json by @frederikrothenberger in #2626
- Simplify authorization error by @frederikrothenberger in #2627
- Consistently use // instead of /// in candid files by @frederikrothenberger in #2628
- Use stable BTreeMap directly to report stats by @frederikrothenberger in #2631
- Change registration on API v2 to flow with 3 steps by @frederikrothenberger in #2629
- Revert "Refactor temp_keys in preparation for dynamic captcha registration flow (#2618)" by @frederikrothenberger in #2632
- Allow fractions in helper
assert_metric
helper by @frederikrothenberger in #2633 - Update agent-js to latest version by @frederikrothenberger in #2635
Full Changelog: release-2024-09-17...release-2024-10-01
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout bfb63bd8ecb8093eb684778685b01770cc84eb46
./scripts/verify-hash --ii-hash 2b3e9f48257a8aebb34ad7d0ad0b058354874e5831e15a3fa8ca42e14bfb2812
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-09-17: Maintenance Changes
This is Internet Identity release release-2024-09-17 for commit 4a54888023a537f6b4c6c26f8789ac93d3fa9d60.
This release contains a lot of maintenance changes, such as updating dependencies, adding a config (query) endpoint or removing outdated stable memory limits.
The sha256 of production asset internet_identity_production.wasm.gz is aa9f313f565ff998fc8522a63a6e0e01553aeca70a89d9f8ed6a66ca487a4cad.
What's Changed
- Update dapps list by @gix-bot in #2596
- Update release in README by @gix-bot in #2595
- Update dapps list by @gix-bot in #2597
- Upgrade dependencies by @frederikrothenberger in #2598
- Update ic-wasm by @frederikrothenberger in #2599
- Remove archive stable memory limit by @frederikrothenberger in #2600
- Update the II spec by @frederikrothenberger in #2582
- Remove unnecessary candid annotations by @frederikrothenberger in #2601
- Fix ic-wasm action failing on wrong version by @frederikrothenberger in #2604
- Add config endpoint by @frederikrothenberger in #2602
- fix: relative link in vc-spec.md by @jessiemongeon1 in #2605
- Bump dset from 3.1.3 to 3.1.4 by @dependabot in #2606
- Add CI job to update dfx by @frederikrothenberger in #2607
- Update dfx by @gix-bot in #2608
- Upgrade PocketIC by @frederikrothenberger in #2609
- Fix broken note blocks in documentation by @frederikrothenberger in #2611
- Add configuration options for upcoming dynamic captcha feature by @frederikrothenberger in #2610
- Bump dompurify from 3.0.6 to 3.1.3 by @dependabot in #2612
Full Changelog: release-2024-09-06...release-2024-09-17
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 4a54888023a537f6b4c6c26f8789ac93d3fa9d60
./scripts/verify-hash --ii-hash aa9f313f565ff998fc8522a63a6e0e01553aeca70a89d9f8ed6a66ca487a4cad
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-09-06: Dependency updates
This is Internet Identity release release-2024-09-06 for commit b1efb490781647928d55dafb0cd8c299c6279950.
Main changes of this release are updates on dependencies.
The sha256 of production asset internet_identity_production.wasm.gz is 61391f16ae85d88a58a3294499d1ca747f2aba6598d93bc6b87c620496e1ca9d.
What's Changed
- Update release in README by @gix-bot in #2580
- Fix erroneous comments by @frederikrothenberger in #2581
- Read canister id from 500 status response by @lmuntaner in #2526
- Remove unused vc_util_js crate by @frederikrothenberger in #2583
- Replace
vc_util
andcanister_sig_util
with external crates by @frederikrothenberger in #2584 - Remove dependency on the
ic-crypto-standalone-sig-verifier
by @frederikrothenberger in #2586 - Change landing page title and byline by @frederikrothenberger in #2590
- Update quinn-proto to fix dependabot alert by @frederikrothenberger in #2589
- Update rust dependencies by @frederikrothenberger in #2591
- Update vc_issuer dependencies by @frederikrothenberger in #2592
- Update dfx by @frederikrothenberger in #2593
- Update rust version by @gix-bot in #2594
Full Changelog: release-2024-08-30...release-2024-09-06
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout b1efb490781647928d55dafb0cd8c299c6279950
./scripts/verify-hash --ii-hash 61391f16ae85d88a58a3294499d1ca747f2aba6598d93bc6b87c620496e1ca9d --archive-hash ea23653a50f7b35ca0e37eceb6b8f63c50da82ff3bd2e71bedaf8bf3ad49e66c
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-08-30: Allow dapp to auto-select last used identities on re-authentication
This is Internet Identity release release-2024-08-30 for commit fd5486afabb4e0eead403f771d63d8752f95ab17.
The main change of this release is a new feature that allows dapps to streamline re-authentication: Dapps may supply a principal to Internet Identity when sending the authorize-client
message. If that principal belongs to the last used identity on that client application origin, then the identity will be selected automatically. The user will then be presented with the passkey interaction immediately, making the actual authentication the only user interaction required to complete the re-authentication process.
The sha256 of production asset internet_identity_production.wasm.gz is 9ea1df5ffd63367080ee1bc342eeff47a020da280845612b47aba5afc6cb3fe1.
What's Changed
- Update release in README by @gix-bot in #2565
- Update node version by @gix-bot in #2566
- Migrate integration tests to PocketIC by @frederikrothenberger in #2557
- Remove obsolete IC commit file by @frederikrothenberger in #2568
- Simplify identity metadata repository by @frederikrothenberger in #2567
- fix: broken link in II spec by @jessiemongeon1 in #2569
- Implement API to auto-select identity based on known principal by @frederikrothenberger in #2563
- Move sig-verifier-js tests out of e2e by @frederikrothenberger in #2571
- Bump outdated github script action by @frederikrothenberger in #2572
- Replace login error page with toast by @frederikrothenberger in #2570
- Move and fix dapps explorer by @lmuntaner in #2573
- Extract error toast from authn box by @frederikrothenberger in #2574
- Fix errors in the alternative origins documentation by @frederikrothenberger in #2575
- Remove unnecessary dependency by @lmuntaner in #2577
- Separate principal and origin information in IndexedDB storage by @frederikrothenberger in #2578
- Only allow the most recently used identity to be auto-selected by @frederikrothenberger in #2579
Full Changelog: release-2024-08-21...release-2024-08-30
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout fd5486afabb4e0eead403f771d63d8752f95ab17
./scripts/verify-hash --ii-hash 9ea1df5ffd63367080ee1bc342eeff47a020da280845612b47aba5afc6cb3fe1
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-08-21: Small fixes and dapp explorer updates
This is Internet Identity release release-2024-08-21 for commit 6e0f8574125554f69c23c487b2301c7b7b5f85b3.
This release fixes a compatibility issue with KeepassXC passkeys, which prevented users to register. In addition, the landing page text of Internet Identity and a few dapp logos have been updated.
The sha256 of production asset internet_identity_production.wasm.gz is 86ab08ea53e4da5bba4f27baa931e2edc5ab2a1f228c204a5340992c16389f66.
What's Changed
- Update release in README by @gix-bot in #2553
- Update dapps list by @gix-bot in #2554
- Update dapps list by @gix-bot in #2555
- Update dapps list by @gix-bot in #2556
- Update dapps list by @gix-bot in #2558
- Change landing page text by @frederikrothenberger in #2559
- Change WebAuthn create challenge to 16 random bytes by @frederikrothenberger in #2561
- Update dapps list by @gix-bot in #2562
- Bump ic-cdk version by @frederikrothenberger in #2564
Full Changelog: release-2024-08-08...release-2024-08-21
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 6e0f8574125554f69c23c487b2301c7b7b5f85b3
./scripts/verify-hash \
--ii-hash 86ab08ea53e4da5bba4f27baa931e2edc5ab2a1f228c204a5340992c16389f66 \
--archive-hash 7ac9c94fd2f18b4b09b8758d6e51a85d0197bbf2fc53d0cef60a88a089831a7d
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
release-2024-08-08: Improved recovery device reminder page
This is Internet Identity release release-2024-08-08 for commit ce331167c49b61b48ee9a2a7ebb0a25522d67f8f.
This release improves the recovery device reminder page:
- if a user has multiple passkeys it won't be shown at all
- it can be suppressed entirely ("Do not show again")
- it encourages users to add another passkey rather than setting up a recovery phrase
The sha256 of production asset internet_identity_production.wasm.gz is 195e8fc12ad640a231498b272ff663820716595e7f4075b363ac6e953a026c3b.
What's Changed
- Update release in README by @gix-bot in #2539
- Clean up after new landing pages by @lmuntaner in #2540
- Disable macos release build check due to flakyness by @frederikrothenberger in #2541
- fix: Candid file rendering in spec by @jessiemongeon1 in #2543
- fix: link in spec by @jessiemongeon1 in #2544
- Add beta domains to ic-domains by @lmuntaner in #2547
- Update node version by @gix-bot in #2546
- Fix Rust comments format by @lmuntaner in #2549
- Update rust version by @gix-bot in #2548
- Create warning page to add a device by @lmuntaner in #2550
- Improve spacing in landing page mobile by @lmuntaner in #2552
- Update dapps list by @gix-bot in #2545
- Use new warning page and change the rendering logic by @lmuntaner in #2551
New Contributors
- @jessiemongeon1 made their first contribution in #2543
Full Changelog: release-2024-07-12...release-2024-08-08
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout ce331167c49b61b48ee9a2a7ebb0a25522d67f8f
./scripts/verify-hash --ii-hash 195e8fc12ad640a231498b272ff663820716595e7f4075b363ac6e953a026c3b
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.