Hi @lmuntaner, thank you for the reply. That makes sense, so I can extend the client session with maxTimeToLive. If this time has elapsed I should then run disconnect and warn the user their session has expired.
I wonder if you can also help me with setting the derivationOrigin. I want to have the same principal generated when connecting with II to my frontend running locally as when it is deployed to a canister. I have tried to do this by setting the derivationOrigin to my deployed canister and adding this in my alternativeOrigins as detailed here Alternative frontend origins | Internet Computer.
Here is my II connection code
import { Actor, HttpAgent } from '@dfinity/agent';
import type { Identity } from '@dfinity/agent';
import { AuthClient, IdbStorage } from '@dfinity/auth-client';
import { persistentAtom } from '@nanostores/persistent';
import internetIdentityIcon from '../../../assets/icons/connectors/internet-identity.svg';
import { ConnectorType } from './connector-type.enum';
import {
ConnectorMetadata,
CreateActorArgs,
IConnector,
WalletConnectorConfig,
} from './connector.interface';
const EXPIRE_TIME_MS = 7 * 24 * 3600 * 1000; // 7 days
const $expiry = persistentAtom<string | undefined>('ii-expire-time', undefined);
export class InternetIdentityConnector extends IConnector<ConnectorType.INTERNET_IDENTITY> {
private identity?: Identity;
private principal?: string;
private client?: AuthClient;
static type = ConnectorType.INTERNET_IDENTITY;
static meta: ConnectorMetadata = {
name: 'Internet Identity',
logo: internetIdentityIcon,
deviceType: 'both',
};
public get getPrincipal() {
return this.principal;
}
constructor(config: WalletConnectorConfig) {
super(config);
this.config.providerUrl = 'https://identity.ic0.app';
}
async isConnected(): Promise<boolean> {
return Boolean(await this.client?.isAuthenticated());
}
async createActor<Service>({ canisterId, interfaceFactory }: CreateActorArgs) {
if (!this.identity) {
throw new Error('Identity not found');
}
const agent = new HttpAgent({
...this.config,
identity: this.identity,
});
if (this.config.dev) {
// Fetch root key for certificate validation during development
agent.fetchRootKey().catch(err => {
console.warn(
'Unable to fetch root key. Check to ensure that your local replica is running',
);
console.error(err);
});
}
return Actor.createActor<Service>(interfaceFactory, {
agent,
canisterId,
});
}
async init() {
if (!this.client) {
this.client = await AuthClient.create({
storage: new IdbStorage(),
idleOptions: {
disableDefaultIdleCallback: true,
},
});
}
}
async connect() {
if (!this.client) {
throw new Error('[Internet Identity] AuthClient not initialized');
}
const isConnected = await this.isConnected();
if (isConnected) {
this.identity = this.client.getIdentity();
this.principal = this.identity?.getPrincipal().toString();
return;
}
await new Promise<void>((resolve, reject) => {
this.client?.login({
identityProvider: this.config.providerUrl,
derivationOrigin: 'https://laskf-jkdsd-aaaan-itwoi-cai.ic0.app',
onSuccess: () => resolve(),
onError: reject,
maxTimeToLive: BigInt(EXPIRE_TIME_MS * 1000 * 1000), // in nanoseconds
});
});
$expiry.set((new Date().getTime() + EXPIRE_TIME_MS).toString());
this.identity = this.client.getIdentity();
this.principal = this.identity.getPrincipal().toString();
}
async disconnect() {
await this.client?.logout();
}
async expired() {
const iiExpireTime = $expiry.get();
if (!iiExpireTime) return true;
return new Date().getTime() >= Number(iiExpireTime);
}
}
with my alternativeOrigin set as so
and ic-assets-json
but the II login page that opens in a new tab gives the following error:
Invalid Derivation Origin
“https://laskf-jkdsd-aaaan-itwoi-cai.ic0.app” is not a valid derivation origin for “https://localhost:5173”
Error details:
An error occurred while validating the derivationOrigin “https://laskf-jkdsd-aaaan-itwoi-cai.ic0.app”: Unexpected token ‘<’, "<!doctype "… is not valid JSON
Any ideas why this is? I want to set a custom domain to my derivation origin so that I can have different canisters all generate the same principal for II login as well as locally.
Thanks again
