Releases: dfinity/internet-identity
release-2025-04-16: Dark UI and Preparation for Discoverable Credentials
This is Internet Identity release release-2025-04-16 for commit e9fbf1c840046fbd90df0593ac08f69699ca264d.
The sha256 of production asset internet_identity_production.wasm.gz is 270fa41cf6e4c27a094f5fb7893946953d980c9496a528c2ac7e3dcf165e0ce8.
In this (somewhat delayed) release, we are changing the II theme to be dark and laying the groundwork for using discoverable passkeys.
What's Changed
- Exclude frontend lib from .prettierignore and format all files by @sea-snake in #2999
- Override feature flags with query params. by @sea-snake in #2995
- Update release in README by @pr-automation-bot-public in #2994
- Bump vite from 6.2.4 to 6.2.5 by @dependabot in #3000
- Setup Skeleton and Tailwind by @lmuntaner in #3008
- Lookup identity by device credential id in storage. by @sea-snake in #3006
- Lookup device key with credential id by @sea-snake in #3012
- Add NNS Dapp new origin by @lmuntaner in #3013
- Bump vite from 5.4.16 to 5.4.17 in /demos/using-dev-build by @dependabot in #3010
- Bump tokio from 1.40.0 to 1.44.2 by @dependabot in #3011
- Refactor Feature Flags functionality to be more in line with svelte patterns by @LXIF in #3007
- Add name to anchor in storage by @sea-snake in #3009
- Store name in registration finish and return in anchor info by @sea-snake in #3014
- Exclude generated idl from prettier by @sea-snake in #3017
- Add rerouting to new flow based on feature flag by @LXIF in #3015
- Add events for identities list or new user by @lmuntaner in #3016
- Set up basic flow for Discoverable Credentials by @LXIF in #3022
- Adjust copy by @LXIF in #3027
- Update new authorize UX flow by @sea-snake in #3029
- Dark design update by @LXIF in #3028
- Bump @sveltejs/kit from 2.20.2 to 2.20.6 by @dependabot in #3030
- Update dfx by @gix-bot in #3021
- Bump vite from 5.4.17 to 5.4.18 in /demos/using-dev-build by @dependabot in #3024
- Bump vite from 6.2.5 to 6.2.6 by @dependabot in #3025
- Bump crossbeam-channel from 0.5.13 to 0.5.15 by @dependabot in #3020
- Split authentication flow into state and respective components. by @sea-snake in #3033
- Add "Manage your Identity" copy on top of the Identity picker by @LXIF in #3032
Full Changelog: release-2025-04-04-v3...release-2025-04-16
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout e9fbf1c840046fbd90df0593ac08f69699ca264d
./scripts/verify-hash --ii-hash 270fa41cf6e4c27a094f5fb7893946953d980c9496a528c2ac7e3dcf165e0ce8 --archive-hash aa1b463967d83d6211a96a2aaeb09aa77e61b8b7dc2d591d16486b5fd16aecbb
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-04-04: Upgrade dependencies
This is Internet Identity release release-2025-04-04-v3 for commit 21fa4bb4cc68cfb562710acd28f3cfa249378896.
The sha256 of production asset internet_identity_production.wasm.gz is 05397b81c016559b37f3d7be8ea3fcccf4cdba5eb97e8c621260ac83b706b49d.
This release updates dependencies in preparation for the migration to Svelte. It also cleans up analytics events to make them more maintainable.
What's Changed
- Update rust version by @gix-bot in #2966
- Add handlers first in init test app function by @lmuntaner in #2968
- Fix link to github CI job run id by @lmuntaner in #2969
- Update dfx by @gix-bot in #2972
- Add sveltekit and update deps by @sea-snake in #2965
- Format all files with updated prettier. by @sea-snake in #2973
- Update main II domain in docs and showcase by @lmuntaner in #2978
- Bump vite from 6.2.3 to 6.2.4 by @dependabot in #2975
- Bump vite from 5.4.12 to 5.4.16 in /demos/using-dev-build by @dependabot in #2974
- New analytics directory by @lmuntaner in #2977
- Registration Funnel by @lmuntaner in #2979
- Add login funnel by @lmuntaner in #2984
- Add properties to Funnel by @lmuntaner in #2982
- Use origin on login and registration funnel by @lmuntaner in #2985
- Extra step to share Slack message with proposal by @lmuntaner in #2987
- Add JWT verification to OpenID Connect registration flow by @LXIF in #2988
- Add missing registration event by @lmuntaner in #2989
- Increase time to show "Check ongoing issues" by @lmuntaner in #2986
- Install imagemagick for dapps update by @nmattia in #2990
- Render in SvelteKit by @sea-snake in #2983
- Update release in README by @pr-automation-bot-public in #2967
- Update rust version by @gix-bot in #2991
- Add authorize client funnel analytics and replace direct analytics calls by @lmuntaner in #2993
- New webauthAuthorizationFunnel to clean up events without funnel by @lmuntaner in #2992
- Add document title by @lmuntaner in #2996
- Cache all assets with "immutable" in the url path instead of "cacheable" by @sea-snake in #2998
- Downgrade WebdriverIO from v9 back to v8. by @sea-snake in #2997
Full Changelog: release-2025-03-28...release-2025-04-04-v3
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 21fa4bb4cc68cfb562710acd28f3cfa249378896
./scripts/verify-hash --ii-hash 05397b81c016559b37f3d7be8ea3fcccf4cdba5eb97e8c621260ac83b706b49d --archive-hash 00938525433bd9030797186182226350572f768a975c7f17de4c8fa861d6e518
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-03-28: OpenID Connect Bookkeeping and Plausible Improvements
This is Internet Identity release release-2025-03-28 for commit 2db15c19bf67f83de50839951648b37b114e35bb.
The sha256 of production asset internet_identity_production.wasm.gz is dc7ef81c2c20fef4c932e54fbe841ca842d0211622350207ce6a4f27d1255a6b.
This release implements OpenID Connect bookkeeping to keep track of new OpenID stats along the existing device stats. Further work has been put into improving the Plausible integration, these improvements help us to better measure user flows and thus analyze and improve the UX experience.
What's Changed
- Update release in README by @pr-automation-bot-public in #2961
- OpenID credential bookkeeping by @sea-snake in #2954
- Funnel class to track funnel events by @lmuntaner in #2962
- OpenID bookkeeping integration tests by @sea-snake in #2963
- Calculate and send flow duration in Funnel class by @lmuntaner in #2964
Full Changelog: release-2025-03-21...release-2025-03-28
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 2db15c19bf67f83de50839951648b37b114e35bb
./scripts/verify-hash --ii-hash dc7ef81c2c20fef4c932e54fbe841ca842d0211622350207ce6a4f27d1255a6b
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-03-21: OpenID Connect Integration, Enhanced Device Management, and Production Features
This is Internet Identity release release-2025-03-21 for commit 2945cd50c60312fe0f5ebf5fa700b490f97e4579.
The sha256 of production asset internet_identity_production.wasm.gz is bee6b85bc739781957292dc7485bc38a1951d0824e17523be8865c00c0165886.
This release introduces registration with Google via OpenID Connect (still behind feature flag), improved device management UX, additional tests and behind-the-scenes preparations for future upgrades.
What's Changed
- Update readme to use latest release in example dfx.json by @lmuntaner in #2923
- Use unlink account confirmation page by @sea-snake in #2929
- Update Passkey AAGUID data by @pr-automation-bot-public in #2934
- Improve upgrade proposal script by @lmuntaner in #2930
- Update readme file with latest release tag by @lmuntaner in #2931
- Update readme only on release tags by @lmuntaner in #2938
- Support multiple window session trackeres by @lmuntaner in #2935
- Create update PR only on release by @lmuntaner in #2942
- Disable registration using related_origins configuration by @lmuntaner in #2945
- Registration via Google OIDC backend and interface changes by @LXIF in #2933
- Send slack message on review requested by @lmuntaner in #2947
- Add is_production config field by @lmuntaner in #2946
- Use is_production to hide or show banner by @lmuntaner in #2949
- OpenID Registration: Extend JWT validity by @LXIF in #2952
- Improve Slack message for reviewer by @lmuntaner in #2957
- Remove add current device screen by @lmuntaner in #2956
- Add missing tests for dapps_explorer_enabled config filed by @lmuntaner in #2955
- OpenID Registration: add choose-registration-method view and copy by @LXIF in #2950
- OpenID Registration: Extend Connection class by @LXIF in #2951
- OpenID Registration: Glue together flow and functionality by @LXIF in #2958
- OpenID: Improve Anchor Management by @LXIF in #2960
Full Changelog: release-2025-03-14...release-2025-03-21
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 2945cd50c60312fe0f5ebf5fa700b490f97e4579
./scripts/verify-hash --ii-hash bee6b85bc739781957292dc7485bc38a1951d0824e17523be8865c00c0165886 --archive-hash b75ec8ab20c8f0d11cb0ebf1a2d05041d8fc947bb2df732ca188587ea7d80590
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-03-14: Improve configurability
This is Internet Identity release release-2025-03-14 for commit c9ac4d60ac9fa026c318dc0ac3b15a3619011ad4.
The sha256 of production asset internet_identity_production.wasm.gz is e0cb520b1a93e6cbdde1f45823eb00b6088ce8e85f5e46b372d9ee69a9582a4c.
This release improves the configuration of Internet Identity, for example, allowing hiding the dapps explorer with a configuration parameter.
What's Changed
- Refactor config integration tests. by @sea-snake in #2785
- Bump ring from 0.17.8 to 0.17.13 by @dependabot in #2906
- Update Passkey AAGUID data by @pr-automation-bot-public in #2907
- Add config to fetch root key by @lmuntaner in #2908
- bump rustup by @LXIF in #2911
- Bump prismjs from 1.29.0 to 1.30.0 by @dependabot in #2913
- Add Dapps Explorer config field by @lmuntaner in #2910
- Use config to fetch root key by @lmuntaner in #2909
- More granular events in login and registration by @lmuntaner in #2914
- Fix Deploy II job by @lmuntaner in #2917
- OpenID Connect Google Login by @LXIF in #2903
- Fix CI job to deploy test dapp and issuer by @lmuntaner in #2919
- Track starting and ending session windows helpers by @lmuntaner in #2918
- Fix Deploy archive from CI by @lmuntaner in #2920
- Use config to render dapps explorer by @lmuntaner in #2916
- Fix linking Google account after register. by @sea-snake in #2922
- Certify /callback URL by @sea-snake in #2921
- Update GH job to use Github App instead of gix-bot by @lmuntaner in #2915
- Use related origins to show banner by @lmuntaner in #2925
- Add unlink account page by @sea-snake in #2926
- Add indicator for current account by @sea-snake in #2928
- Update node version by @gix-bot in #2927
Full Changelog: release-2025-03-07-v2...release-2025-03-14
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout c9ac4d60ac9fa026c318dc0ac3b15a3619011ad4
./scripts/verify-hash --ii-hash e0cb520b1a93e6cbdde1f45823eb00b6088ce8e85f5e46b372d9ee69a9582a4c --archive-hash 415ee4fb100af000530f5e7a0bbc6daddba6aa1cf07dc896e2aabd74e0aa5419
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
Release-2025-03-07: Improved Passkey name detection and new remove confirmation screen
This is Internet Identity release release-2025-03-07-v2 for commit f0c16410951530a0e1cada8967bcd7f30df8896a.
The sha256 of production asset internet_identity_production.wasm.gz is a1d0f14c3a276d0b74eef211570a7d22b599590da8f8da58ee2c562580ed652d.
This release includes improved Passkey name detection, now your Passkeys are named more accurately based on their source e.g. iCloud Keychain, 1Password, etc. Also new in this release in a new remove confirmation screen when you remove a Passkey, users are now shown details of their Passkey and asked to type it's name to make sure no mistakes can be made.
What's Changed
- Fix remove device button by @sea-snake in #2905
- Add checkout to AAGUID workflow by @sea-snake in #2887
- Use tmp files for AAGUID data update. by @sea-snake in #2889
- Add flows diagrams document by @lmuntaner in #2890
- Fix update AAGUID data script by @sea-snake in #2891
- Omit PR author from job by @sea-snake in #2895
- Update Passkey AAGUID data by @pr-automation-bot-public in #2896
- Fix bootstrap script and upgrade Rust by @lmuntaner in #2898
- Fix recommend cleanup by @sea-snake in #2888
- Add new onRemoveDevice to recovery device by @lmuntaner in #2893
- Update node version by @gix-bot in #2805
- Handle current device message in confirm remove device by @lmuntaner in #2894
- Remove whitespace previously added due to IDE misconfiguration. by @sea-snake in #2899
- OpenID Connect JWT Delegations by @LXIF in #2852
- Fix bootstrap script and make it more robust by @lmuntaner in #2901
- Use new screen when removing passkeys and recovery devices by @lmuntaner in #2900
- Add e2e test to remove devices by @lmuntaner in #2902
- Add login and registration flow events by @lmuntaner in #2904
New Contributors
- @pr-automation-bot-public made their first contribution in #2896
Full Changelogs: release-2025-02-28...release-2025-03-07-v2
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout f0c16410951530a0e1cada8967bcd7f30df8896a
./scripts/verify-hash --ii-hash a1d0f14c3a276d0b74eef211570a7d22b599590da8f8da58ee2c562580ed652d --archive-hash d266e6db2e64d025651b001b8341f769518b9d8fb11d3933c8c8ef205bd093cd
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
(Superseded) Release-2025-03-07: Improved Passkey name detection and new remove confirmation screen
This release has been superseded by 2025-03-07-v2 before it was submitted for voting to the NNS.
This is Internet Identity release release-2025-03-07 for commit d4e3b0d6d02bae622b95eab33d3a4f66ba776531.
The sha256 of production asset internet_identity_production.wasm.gz is 0ae57e58bb2ea8e4f0b2713e76ce7962ac9244a71bcc9458cd764cf541b32bf1.
This release includes improved Passkey name detection, now your Passkeys are named more accurately based on their source e.g. iCloud Keychain, 1Password, etc. Also new in this release in a new remove confirmation screen when you remove a Passkey, users are now shown details of their Passkey and asked to type it's name to make sure no mistakes can be made.
What's Changed
- Add checkout to AAGUID workflow by @sea-snake in #2887
- Use tmp files for AAGUID data update. by @sea-snake in #2889
- Add flows diagrams document by @lmuntaner in #2890
- Fix update AAGUID data script by @sea-snake in #2891
- Omit PR author from job by @sea-snake in #2895
- Update Passkey AAGUID data by @pr-automation-bot-public in #2896
- Fix bootstrap script and upgrade Rust by @lmuntaner in #2898
- Fix recommend cleanup by @sea-snake in #2888
- Add new onRemoveDevice to recovery device by @lmuntaner in #2893
- Update node version by @gix-bot in #2805
- Handle current device message in confirm remove device by @lmuntaner in #2894
- Remove whitespace previously added due to IDE misconfiguration. by @sea-snake in #2899
- OpenID Connect JWT Delegations by @LXIF in #2852
- Fix bootstrap script and make it more robust by @lmuntaner in #2901
- Use new screen when removing passkeys and recovery devices by @lmuntaner in #2900
- Add e2e test to remove devices by @lmuntaner in #2902
- Add login and registration flow events by @lmuntaner in #2904
New Contributors
- @pr-automation-bot-public made their first contribution in #2896
Full Changelog: release-2025-02-28...release-2025-03-07
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout d4e3b0d6d02bae622b95eab33d3a4f66ba776531
./scripts/verify-hash --ii-hash 0ae57e58bb2ea8e4f0b2713e76ce7962ac9244a71bcc9458cd764cf541b32bf1 --archive-hash d266e6db2e64d025651b001b8341f769518b9d8fb11d3933c8c8ef205bd093cd
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-02-28: Domains Compatibility Updates and Script Optimizations
This is Internet Identity release release-2025-02-28 for commit aa94ce4e196b7551d40262675e57ace94bba8772.
The sha256 of production asset internet_identity_production.wasm.gz is 281bfd7f57c926cd307fd4cf585bd0eae1f39014f3639dacdfbdc16eec5e2956.
This release includes improvements to the deployment script, many new subfeatures for Domains Compatibility and some preliminary setup for the upcoming Google Signin.
What's Changed
- Improve verify hash script by @lmuntaner in #2871
- Update dfx by @gix-bot in #2872
- Added new internal google client id for testing and local development by @LXIF in #2877
- Improve upgrade proposal script by @sea-snake in #2880
- Highlight current passkey by @lmuntaner in #2879
- Show device domains if multiple are found by @sea-snake in #2874
- Suggest old passkey cleanup by @sea-snake in #2875
- Refactor removing devices by @lmuntaner in #2881
- Sort lookup devices by most recently used by @sea-snake in #2882
- Create WebAuthn flows based on device order (recently used). by @sea-snake in #2883
- Fix deploy RC action by @lmuntaner in #2884
- Confirm Remove Device Page by @lmuntaner in #2885
- Passkey alias from known AAGUID data list by @sea-snake in #2886
Full Changelog: release-2025-02-21...release-2025-02-28
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout aa94ce4e196b7551d40262675e57ace94bba8772
./scripts/verify-hash --ii-hash 281bfd7f57c926cd307fd4cf585bd0eae1f39014f3639dacdfbdc16eec5e2956
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-01-21: Bugfixes and improvements
This is Internet Identity release release-2025-02-21 for commit 7da7c102e0fbab7f9e82125a0aea58d06bcbd569.
The sha256 of production asset internet_identity_production.wasm.gz is 14f8a69dabd069e5738cd61d42b39b84194fa7a24694620ae2bb7d19c4bbb54f.
This release includes bugfixes and implements tracking of page visits to better understand where the user lands when visiting Internet Identity.
What's Changed
- Disable button on limit of authenticators by @lmuntaner in #2868
- Use config related origins by @lmuntaner in #2862
- Update Chrome and disable sandbox explicitly by @sea-snake in #2867
- Deployment script by @lmuntaner in #2866
- Add event per page by @lmuntaner in #2869
- Update CI runner to ubuntu-latest by @sea-snake in #2865
- Bump dompurify from 3.1.3 to 3.2.4 by @dependabot in #2870
Full Changelog: release-2025-02-14...release-2025-02-21
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 7da7c102e0fbab7f9e82125a0aea58d06bcbd569
./scripts/verify-hash --ii-hash 14f8a69dabd069e5738cd61d42b39b84194fa7a24694620ae2bb7d19c4bbb54f
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.
Contributors
Assets 9
release-2025-02-14: Domains Compatibility
This is Internet Identity release release-2025-02-14 for commit 789aa561748fb270bcb6ee0d9a02ecba195b0b79.
The sha256 of production asset internet_identity_production.wasm.gz is af3713edd0895832e74dd7d5e5e144ceb4f9538a3e482934e52a3e40e021c358.
This upgrade includes a new feature developed over the last months, which we are excited to announce: Domains Compatibility.
Moreover, this upgrade also includes the analytics setup, as agreed in a previous forum post.
What's Changed
- Retry different RP ID in VC flow by @lmuntaner in #2845
- Remove userAgent from
getCredentialsOriginby @lmuntaner in #2847 - Fix width toast in small devices by @lmuntaner in #2848
- Implement related origins e2e tests by @sea-snake in #2846
- Bump serialize-javascript and mocha in /demos/using-dev-build by @dependabot in #2849
- Bump vitest from 1.6.0 to 1.6.1 by @dependabot in #2850
- Add analytics config by @lmuntaner in #2851
- Fix flaky test by checking all console logs messages instead of only last message by @sea-snake in #2858
- Add canister config to html output by @sea-snake in #2854
- Read canister config from html by @sea-snake in #2859
- standardize candid whitespacing / formatting by @LXIF in #2855
- Install Plausible Tracking WebAuthn Flow by @lmuntaner in #2860
- Enable domains compatibility by @lmuntaner in #2861
- Fix related origins edge case handling by @lmuntaner in #2863
Full Changelog: release-2025-02-07...release-2025-02-14
Build flavors
For more information please see the Build flavors section of the README.
Wasm Verification
To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:
git pull # to ensure you have the latest changes.
git checkout 789aa561748fb270bcb6ee0d9a02ecba195b0b79
./scripts/verify-hash --ii-hash af3713edd0895832e74dd7d5e5e144ceb4f9538a3e482934e52a3e40e021c358 --archive-hash a1583735594df2a694c10980d20674e22a7ae4295686019d79f2be0a35afe99a
Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.