Upgrade Internet Identity Frontend Canister to 8d3e876b0

Frontend Canister Upgrade

Users who sign in with Apple can now share their verified email with apps, except Apple’s private relay addresses, which apps can’t send mail to. OpenID and SSO sign-ins are no longer wrongly treated as cancelled when the sign-in popup closes before its result reaches Internet Identity.

What's Changed

_Since proposal-frontend-144355_

• feat(be,fe): verified emails from Apple, except private relay addresses (#4427)
• fix(fe): don't drop the OpenID callback when the popup closes before its message lands (#4440)

Full release notes

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull  # to ensure you have the latest changes.
git checkout 8d3e876b074a5a93e167cb09a550a3c20f4c3ed8
./scripts/verify-hash --iife-hash 45bb284c221052dae12d0918fcd01ac9b99bcd44f29a6c46788390cdd5a577e7

Frontend Argument Verification

Run the following command to verify the frontend upgrade argument hash:

didc encode -d ./src/internet_identity_frontend/internet_identity_frontend.did -t '(InternetIdentityFrontendInit)' '(record {
  backend_canister_id = principal "rdmx6-jaaaa-aaaaa-aaadq-cai";
  backend_origin = "https://backend.id.ai";
  related_origins = opt vec {
    "https://id.ai";
    "https://identity.ic0.app";
    "https://identity.internetcomputer.org";
    "https://identity.icp0.io";
    "https://identity.icp.net";
  };
  analytics_config = opt opt variant {
    Plausible = record {
      domain = opt "identity.internetcomputer.org";
    }
  };
  featured_dashboard_apps = opt vec {
    "https://caffeine.ai";
    "https://oisy.com";
    "https://oc.app";
    "https://multidex.ai";
    "https://opencloud.org";
  };
})' | xxd -r -p | sha256sum

The output should match the argument hash.