Upgrade Internet Identity Backend Canister to 2f175eb56

Backend Canister Upgrade

SSO sign-in is faster and leaner: discovery results are now kept for a week, keys are fetched during sign-in, and the SSO caches hold only the data that verification needs. Failed SSO discoveries are now reported, apps can see a status for each domain, and the apps list shows only apps you’ve given a permission to and lets you forget them.

What's Changed

_Since proposal-backend-144196_

• feat(be,fe): list only apps you gave a permission to, and let you forget them (#4425)
• feat(be,fe): report a failed SSO discovery, and an app-facing domain status (#4421)
• feat(be,fe): keep SSO discovery results for a week, fetch keys during sign-in (#4414)
• refactor(be): keep only what verification reads in the SSO caches (#4413)

Full release notes

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull  # to ensure you have the latest changes.
git checkout 2f175eb56a339458618e218f8862fa121a621502
./scripts/verify-hash \
    --ii-hash a0e242ae7c802b688cfe18977878a56701eb92576aa75fef27da7a001b5a430c \
    --archive-hash 86d8e6fc493bba3513379e5df4a420efbdd531e2f8bf3589a4025afbcfaa693b

Backend Argument Verification

Run the following command to verify the backend upgrade argument hash:

didc encode -d ./src/internet_identity/internet_identity.did -t '(opt InternetIdentityInit)' '(
  opt record {
    archive_config = opt record {
      polling_interval_ns = 15_000_000_000 : nat64;
      entries_buffer_limit = 10_000 : nat64;
      module_hash = blob "\86\d8\e6\fc\49\3b\ba\35\13\37\9e\5d\f4\a4\20\ef\bd\d5\31\e2\f8\bf\35\89\a4\02\5a\fb\cf\aa\69\3b";
      entries_fetch_limit = 1_000 : nat16;
    };
  },
)' | xxd -r -p | sha256sum

The output should match the argument hash.