DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

JMVR

Smacker

HashEra

Install, reinstall or upgrade code of a canister controlled by the NNS.

# Frontend Canister Upgrade

This frontend upgrade augments II's curated dapps.json with a permissionless /.well-known/ii-app-metadata document, so any app can supply its own name, description and logo on the authorize screens, and it fixes three ways sign-in could fail or mislead: legacy-domain ICRC-25 requests now redirect to id.ai before the handshake, a stale passkey ceremony is aborted instead of blocking every later attempt, and the Once-click OpenID resume no longer flashes a picker that throws.

## What's Changed

_Since `release-2026-08-11`_

- fix(fe): don't establish the authorize channel while redirecting to the primary origin (#4260)
- Increase maximum number of alternative origins to 100 (#4261)
- test(fe): fix flaky gated-SSO 1-click e2e test (#4216)
- feat(fe): permissionless app metadata for the authorize flow (#4221)

[Full release notes](https://github.com/dfinity/internet-identity/releases/tag/release-2026-08-21)

## Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the [Internet Identity repository](https://github.com/dfinity/internet-identity):

```
git pull  # to ensure you have the latest changes.
git checkout 4c934d1f8a8def8acf6bcc5cc192724ad1999664
./scripts/verify-hash --iife-hash 1b028cc9ec9e7d121a2d8a0bf01328dfb331c6fd34aac8cb968de208dc0d5b4d
```

## Frontend Argument Verification

Run the following command to verify the frontend upgrade argument hash:

```
didc encode -d ./src/internet_identity_frontend/internet_identity_frontend.did -t '(InternetIdentityFrontendInit)' '(record {
  backend_canister_id = principal "rdmx6-jaaaa-aaaaa-aaadq-cai";
  backend_origin = "https://backend.id.ai";
  related_origins = opt vec {
    "https://id.ai";
    "https://identity.ic0.app";
    "https://identity.internetcomputer.org";
    "https://identity.icp0.io";
    "https://identity.icp.net";
  };
  analytics_config = opt opt variant {
    Plausible = record {
      domain = opt "identity.internetcomputer.org";
    }
  };
  featured_dashboard_apps = opt vec {
    "https://caffeine.ai";
    "https://oisy.com";
    "https://oc.app";
    "https://multidex.ai";
    "https://opencloud.org";
  };
})' | xxd -r -p | sha256sum
```

The output should match the argument hash.


Upgrade Internet Identity Frontend Canister to 4c934d1f8