Upgrade Internet Identity Frontend Canister to 4c934d1f8

Frontend Canister Upgrade

This frontend upgrade augments II's curated dapps.json with a permissionless /.well-known/ii-app-metadata document, so any app can supply its own name, description and logo on the authorize screens, and it fixes three ways sign-in could fail or mislead: legacy-domain ICRC-25 requests now redirect to id.ai before the handshake, a stale passkey ceremony is aborted instead of blocking every later attempt, and the Once-click OpenID resume no longer flashes a picker that throws.

What's Changed

_Since release-2026-08-11_

• fix(fe): don't establish the authorize channel while redirecting to the primary origin (#4260)
• Increase maximum number of alternative origins to 100 (#4261)
• test(fe): fix flaky gated-SSO 1-click e2e test (#4216)
• feat(fe): permissionless app metadata for the authorize flow (#4221)

Full release notes

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull  # to ensure you have the latest changes.
git checkout 4c934d1f8a8def8acf6bcc5cc192724ad1999664
./scripts/verify-hash --iife-hash 1b028cc9ec9e7d121a2d8a0bf01328dfb331c6fd34aac8cb968de208dc0d5b4d

Frontend Argument Verification

Run the following command to verify the frontend upgrade argument hash:

didc encode -d ./src/internet_identity_frontend/internet_identity_frontend.did -t '(InternetIdentityFrontendInit)' '(record {
  backend_canister_id = principal "rdmx6-jaaaa-aaaaa-aaadq-cai";
  backend_origin = "https://backend.id.ai";
  related_origins = opt vec {
    "https://id.ai";
    "https://identity.ic0.app";
    "https://identity.internetcomputer.org";
    "https://identity.icp0.io";
    "https://identity.icp.net";
  };
  analytics_config = opt opt variant {
    Plausible = record {
      domain = opt "identity.internetcomputer.org";
    }
  };
  featured_dashboard_apps = opt vec {
    "https://caffeine.ai";
    "https://oisy.com";
    "https://oc.app";
    "https://multidex.ai";
    "https://opencloud.org";
  };
})' | xxd -r -p | sha256sum

The output should match the argument hash.