1768553 - [wpt-sync] Sync PR 34012 - [SPC] Require user activation for cross-origin enrollment

Status: RESOLVED FIXED

(Testing :: web-platform-tests, task, P4)

Description

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 34012 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/34012
Details from upstream follow.

Nick Burris <[e-mail]> wrote:

[SPC] Require user activation for cross-origin enrollment

This adds a user activation check and consumption for the enrollment of
a credential with the payment extension in a cross-origin frame.

Test coverage is added to the SPC iframe enrollment WPTs, and the
existing SPC authentication WPTs validate that this does not apply to
same-origin credential enrollments. Also tested manually on
https://rsolomakhin.github.io/pr/spc-iframe-no-ph/.

Bug: 1322603
Change-Id: I5bca6d3fdf9a8687fa5d9d08b162287e1e7e4f98

Reviewed-on: https://chromium-review.googlesource.com/3584295
WPT-Export-Revision: 8da9d094be22d58669c2156736e51df62d1d8e0a

Comment 1

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=056e78006520b7966a3ae6a7373bdeb2411ab611

Comment 2

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

CI Results

Ran 11 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 2 tests and 3 subtests

Status Summary

Firefox

OK : 1
FAIL : 3
TIMEOUT: 3

Chrome

TIMEOUT: 3
ERROR : 1

Safari

TIMEOUT: 3
ERROR : 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /permissions-policy/payment-extension-allowed-by-permissions-policy-attribute.https.sub.html [wpt.fyi]: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
  • permissions policy "payment" is not supported in cross-origin iframe without allow="payment" attribute: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
  • permissions policy "payment" can be enabled in cross-origin iframe using allow="payment" attribute: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
• /secure-payment-confirmation/enrollment-in-iframe.sub.https.html [wpt.fyi]
  • SPC enrollment in cross-origin iframe: FAIL
  • SPC enrollment in cross-origin iframe fails without user activation: FAIL
  • SPC enrollment in cross-origin iframe without payment permission: FAIL

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e53553da8283
[wpt PR 34012] - [SPC] Require user activation for cross-origin enrollment, a=testonly
https://hg.mozilla.org/integration/autoland/rev/ad1efc99d733
[wpt PR 34012] - Update wpt metadata, a=testonly

Comment 4

[Atila Butkovits]

https://hg.mozilla.org/mozilla-central/rev/e53553da8283
https://hg.mozilla.org/mozilla-central/rev/ad1efc99d733