fix: II init args in PocketIC (#10344)

Author: mraszyk

rs/pocket_ic_server/src/external_canister_types.rs

@@ -126,6 +126,25 @@ pub struct DummyAuthConfig {
     pub prompt_for_index: bool,
 }
 
+#[derive(CandidType)]
+pub struct DnssecRootAnchor {
+    pub key_tag: u16,
+    pub algorithm: u8,
+    pub digest_type: u8,
+    pub digest: Vec<u8>,
+}
+
+#[derive(CandidType)]
+pub struct DnssecConfig {
+    pub root_anchors: Vec<DnssecRootAnchor>,
+}
+
+#[derive(CandidType)]
+pub struct DohConfig {
+    pub allowed_domains: Vec<String>,
+    pub max_cache_age_secs: Option<u64>,
+}
+
 #[derive(CandidType)]
 pub struct InternetIdentityFrontendInit {
     pub backend_canister_id: Principal,
@@ -154,4 +173,6 @@ pub struct InternetIdentityInit {
     pub backend_canister_id: Option<Principal>,
     pub backend_origin: Option<String>,
     pub sso_discoverable_domains: Option<Vec<String>>,
+    pub dnssec_config: Option<Option<DnssecConfig>>,
+    pub doh_config: Option<Option<DohConfig>>,
 }

rs/pocket_ic_server/src/pocket_ic.rs

@@ -2058,6 +2058,10 @@ impl PocketIcSubnets {
             // The initial values have been adapted from the mainnet values obtained by calling
             // `dfx canister call rdmx6-jaaaa-aaaaa-aaadq-cai config --ic`:
             //     record {
+            //       doh_config = opt opt record {
+            //         max_cache_age_secs = opt (3_600 : nat64);
+            //         allowed_domains = vec { "gmail.com"; "googlemail.com"; "outlook.com"; "hotmail.com"; "msn.com"; "live.com"; "icloud.com"; "me.com"; "mac.com"; "yahoo.com"; "ymail.com"; "aol.com"; "zoho.com"; "fastmail.com"; "fastmail.fm"; "hey.com"; "yandex.com"; "yandex.ru"; "mail.ru"; "qq.com"; "163.com"; "126.com"; "naver.com"; "daum.net";};
+            //       };
             //       is_production = opt true;
             //       backend_canister_id = opt principal "rdmx6-jaaaa-aaaaa-aaadq-cai";
             //       enable_dapps_explorer = opt false;
@@ -2066,10 +2070,27 @@ impl PocketIcSubnets {
             //         7_569_744 : nat64;
             //       };
             //       new_flow_origins = opt vec { "https://id.ai" };
+            //       dnssec_config = opt opt record {
+            //         root_anchors = vec {
+            //           record {
+            //             algorithm = 8 : nat8;
+            //             key_tag = 20_326 : nat16;
+            //             digest_type = 2 : nat8;
+            //             digest = blob "\e0\6d\44\b8\0b\8f\1d\39\a9\5c\0b\0d\7c\65\d0\84\58\e8\80\40\9b\bc\68\34\57\10\42\37\c7\f8\ec\8d";
+            //           };
+            //           record {
+            //             algorithm = 8 : nat8;
+            //             key_tag = 38_696 : nat16;
+            //             digest_type = 2 : nat8;
+            //             digest = blob "\68\3d\2d\0a\cb\8c\9b\71\2a\19\48\b2\7f\74\12\19\29\8d\0a\45\0d\61\2c\48\3a\f4\44\a4\c0\fb\2b\16";
+            //           };
+            //         };
+            //       };
+            //       sso_discoverable_domains = null;
             //       archive_config = opt record {
             //         polling_interval_ns = 15_000_000_000 : nat64;
             //         entries_buffer_limit = 10_000 : nat64;
-            //         module_hash = blob "\97\44\02\c9\03\a7\ff\da\36\20\8b\cc\5e\05\9d\df\2a\b0\d0\fa\8b\ef\19\a3\1a\d8\c9\99\1f\5b\db\9a";
+            //         module_hash = blob "\00\73\a8\b8\4e\b1\57\86\da\34\9e\b3\98\0a\84\cb\c7\fb\f0\35\88\d9\d0\9c\52\37\a8\99\70\45\1d\98";
             //         entries_fetch_limit = 1_000 : nat16;
             //       };
             //       canister_creation_cycles_cost = opt (0 : nat64);
@@ -2083,10 +2104,10 @@ impl PocketIcSubnets {
             //       };
             //       related_origins = opt vec {
             //         "https://id.ai";
-            //         "https://backend.id.ai";
             //         "https://identity.ic0.app";
             //         "https://identity.internetcomputer.org";
             //         "https://identity.icp0.io";
+            //         "https://identity.icp.net";
             //       };
             //       openid_configs = opt vec {
             //         record {
@@ -2180,6 +2201,8 @@ impl PocketIcSubnets {
                 backend_canister_id: Some(IDENTITY_CANISTER_ID.get().0),
                 backend_origin: None,
                 sso_discoverable_domains: None,
+                dnssec_config: None, // DIFFERENT FROM ICP MAINNET
+                doh_config: None,    // DIFFERENT FROM ICP MAINNET
             });
             ii_subnet
                 .state_machine