Upgrade Internet Identity Backend Canister to b9a8aaf43

Backend Canister Upgrade

This release introduces app notifications, users can now receive notifications from apps they've signed into after granting them permission to notify them. This feature is not available yet on iOS in this first rollout. The relevant libraries and documentation for this feature will be available soon.

Big thanks for @MRmarioruci who's been leading and building this feature behind the scenes over the past months.

What's Changed

_Since proposal-backend-144120_

• feat: one feature flag for notifications, and Applications rows that open the app (#4400)
• feat: an Applications page for the apps an identity signs in to (#4393)
• feat: show app notifications, pulled by the service worker (#4389)
• fix(be): accept an OpenID token only when its client is the sole audience (#4388)
• feat(be): accept apps' notifications into the backlog (#4382)
• feat(be): give a service worker its next notification and let it remove it (#4380)
• feat(be): add the send pass that fills browser queues and wakes browsers (#4381)
• feat(be): add the notification backlog, a fair queue per app (#4360)

Full release notes

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull  # to ensure you have the latest changes.
git checkout b9a8aaf43977adc1a2edf6ce98729826fc45133c
./scripts/verify-hash \
    --ii-hash 67a1cadff8105890630c847676fed88dbf2c2e6715f9354e057523c1cb76fdf0 \
    --archive-hash 2fb71dd58c701ffd5f75f4bd950255d2f77b805e39352133bcdece7723d0f9d8

Backend Argument Verification

Run the following command to verify the backend upgrade argument hash:

didc encode -d ./src/internet_identity/internet_identity.did -t '(opt InternetIdentityInit)' '(
  opt record {
    notifications_enabled = opt true;
  },
)' | xxd -r -p | sha256sum

The output should match the argument hash.