Alternative derivation origins limit

Developers internet-identity
1

Hey everyone, Taggr recently introduced a new feature that allows anyone to set their own domain and filter whatever content they feel like whitelisting. I’m not going to go too much into the details, you can learn more about this feature here if you’re interested.

The point of this post is that we bumped into an issue, which is the max 10 alternative origins limit. We now have more than 10 domains pointing to the Taggr canister and the only way to login is through the canister address, all other registered domains show an Invalid Derivation Origin error when trying to login with InternetIdentity. Is there any way to bypass this limit?

IMG_1638
IMG_16381206×1622 87.5 KB

Edit: @Severin can you unhide this post please? We need to understand if there’s a workaround because users will face a disservice.

7 Likes
6

I’ve shared a link with your team to setup a call to discuss the Taggr implementation in more detail, understand the underlying implementation, possible security implications and their mitigations.

6 Likes
7

I support this question. We’d prefer not to give up on signing in via Internet Identity, as it’s quite convenient. At the same time, having a separate domain/REALM looks like a logical next step for TAGGR. Are there any possible workarounds? Or is this a strict limitation?

PS: for the record: an extensive response from II team provided by @seasnake

Thank you for your prompt assistance!

3 Likes