release-2023-09-21: Add Non-Passkey Auth Option on Apple Devices

This is Internet Identity release release-2023-09-21 for commit fe2784179b43dbb2e9a24e4ef62dc6d294e6db69.

This release includes a feature to help Apple users without an iCloud account: it is now possible (as a low barrier to entry and to test out the ecosystem) to create an Internet Identity with a pin protected browser local key rather than a passkey.
Note: identities created that way should not hold any assets.

The sha256 of production asset internet_identity_production.wasm.gz is 76f2c88c38487e29cdf26b626fa5f223034963008e05f7601d895351cca80187.

What's Changed

• Clarify authentication flows by @nmattia in #1860
• Add screens for non-passkey flow by @nmattia in #1862
• Remove stray console.log by @nmattia in #1863
• Add PIN screens to showcase by @nmattia in #1864
• Update commit of IC artefacts by @gix-bot in #1865
• Fix typo in PBKDF2 iterations by @frederikrothenberger in #1866
• Introduce Pin variation of the create passkey screen by @frederikrothenberger in #1867
• Add workaround for node errors in showcase by @frederikrothenberger in #1869
• Showcase fixes by @frederikrothenberger in #1870
• Remove dfx metadata infrastructure from release build check by @frederikrothenberger in #1868
• Add fake indexeddb to support testing pin input by @frederikrothenberger in #1873
• Add support for dynamic error keys to pin input component by @frederikrothenberger in #1872
• Always autosubmit when PIN input is filled by @frederikrothenberger in #1876
• Provide verify function externally to usePin flow by @frederikrothenberger in #1874
• Add Support for PIN Identity to AuthBox by @frederikrothenberger in #1877
• Refactor register to allow setting key type by @frederikrothenberger in #1878
• Allow pin registration for Apple devices by @frederikrothenberger in #1879
• Show pin protected keys in a separate list on the management page by @frederikrothenberger in #1880
• Introduce information page for temporary keys by @frederikrothenberger in #1881
• Enable pin info page by @frederikrothenberger in #1882
• Extract temporary key template and copy by @frederikrothenberger in #1883
• Add warning to PIN info screen by @frederikrothenberger in #1885
• Add TempKey Security Warning to Management Screen by @frederikrothenberger in #1884
• Change PIN registration stepper to 3 steps by @frederikrothenberger in #1886
• Make stepper on registration finish step dependent on the auth flow by @frederikrothenberger in #1887
• Move temp keys section above passkeys section in manage view by @frederikrothenberger in #1889
• Highlight recovery box on no recoveries by @frederikrothenberger in #1888
• Highlight passkey warning only on 0 passkeys by @frederikrothenberger in #1890
• Update commit of IC artefacts by @gix-bot in #1891
• Update selenium docker container by @frederikrothenberger in #1892
• Fix dapps update job not creating a PR by @frederikrothenberger in #1893
• Fix formatting of updated dapps.json file by @frederikrothenberger in #1895
• Install dependencies in dapps update by @frederikrothenberger in #1897
• Convert JPG to webp on dapp update by @frederikrothenberger in #1899
• Fix issue with SVG conversion in dapp update by @frederikrothenberger in #1900
• Remove openssl install step in canister tests CI job by @frederikrothenberger in #1896
• Update dapps list by @gix-bot in #1894
• Add basic e2e test for PIN protected key registration by @frederikrothenberger in #1901
• Add PIN login e2e test by @frederikrothenberger in #1904
• Remove recovery phrase warning banner by @frederikrothenberger in #1905
• Update node version by @gix-bot in #1903
• HTML Semantic & CSS Changes for pin workflow by @meodai in #1906
• Fix being prompted for PIN input after temporary key is removed by @frederikrothenberger in #1907
• Improve confirm pin flow on pin mismatch by @frederikrothenberger in #1908
• Add more e2e tests for non-passkey auth by @frederikrothenberger in #1909
• Add header slot to warn box by @frederikrothenberger in #1912
• Use warnbox helper for temp key warning by @frederikrothenberger in #1913
• Make action on temp key warning optional by @frederikrothenberger in #1915
• Add temp key warning to registration success screen by @frederikrothenberger in #1916

Full Changelog: release-2023-09-08...release-2023-09-21

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	76f2c88c38487e29cdf26b626fa5f223034963008e05f7601d895351cca80187
internet_identity_dev.wasm.gz	8d9dda91b15c6a21260dff7ad4cc748b717718e0020f24c455a7569fab1a4ecc
internet_identity_test.wasm.gz	ac8aa3388888135c797add894abc105cdc5d39111d93cf311ab92de1ac719c8b
archive.wasm.gz	edf9dfc55537adda9f9c2f325de9f65428f854638b0ed34913dc203f7ecc99b9

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout fe2784179b43dbb2e9a24e4ef62dc6d294e6db69
./scripts/verify-hash --ii-hash 76f2c88c38487e29cdf26b626fa5f223034963008e05f7601d895351cca80187