1815358 - [wpt-sync] Sync PR 38384 - [FedCM] Add wpt test for auto re-authn

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 38384 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/38384
Details from upstream follow.

Yi Gu <[e-mail]> wrote:

[FedCM] Add wpt test for auto re-authn

This patch adds wpt test for auto re-authn. In addition, it enables the
feature on the browser side in preparation for origin trials / tests.

Note that actual exposure of the API to web content is controlled by the
flag in RuntimeEnabledFeatures on the blink side.

Bug: 1412649
Change-Id: I39418aff77f4239c2a01e7f9b2470b394aae472f
Reviewed-on: https://chromium-review.googlesource.com/4225724
WPT-Export-Revision: fbcb6606e775809f10d192411a4ef643c481adba

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=0f0670d2544049d9cffeff4e8cee277f3b42c914

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 16 tests and 19 subtests

Status Summary

Firefox

OK : 5
FAIL : 33
TIMEOUT: 4
ERROR : 11

Chrome

OK : 3
PASS : 3
FAIL : 3
TIMEOUT: 15
ERROR : 9
NOTRUN : 20

Safari

OK : 7
FAIL : 33
TIMEOUT: 6
ERROR : 7

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /credential-management/fedcm-cross-origin-policy.https.html [wpt.fyi]
  • Test that COEP policy do not apply to FedCM requests: FAIL (Chrome: TIMEOUT, Safari: FAIL)
• /credential-management/fedcm-csp.https.html [wpt.fyi]
  • Provider configURL should honor Content-Security-Policy.: FAIL (Chrome: PASS, Safari: FAIL)
• /credential-management/fedcm-iframe.https.html [wpt.fyi]
  • FedCM disabled in cross origin iframe without permissions policy: FAIL (Chrome: PASS, Safari: FAIL)
  • FedCM enabled in 2 level deep nested iframe. FedCM should be enabled regardless of iframe nesting depth: FAIL (Chrome: TIMEOUT, Safari: FAIL)
  • FedCM disabled in 2 level deep nested iframe where middle iframe does not have permission policy: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • FedCM disabled in 2 level deep nested iframe where innermost iframe does not have permission policy: FAIL (Chrome: NOTRUN, Safari: FAIL)
• /credential-management/fedcm-multi-idp/abort-multiple-gets-through-first-idp.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • Test abort signal for a multi IDP request by aborting the first IDP: FAIL (Chrome: PASS, Safari: FAIL)
• /credential-management/fedcm-multi-idp/abort-multiple-gets-through-second-idp.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • Test abort signal for a multi IDP request by aborting the second IDP: FAIL (Chrome: TIMEOUT, Safari: FAIL)
• /credential-management/fedcm-multi-idp/get-before-and-after-onload.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: OK)
  • When there's a get call before onload, a get call which occurs after onload but before the first get call resolves, should be rejected.: FAIL (Chrome: TIMEOUT, Safari: FAIL)
• /credential-management/fedcm-multi-idp/get-before-and-during-onload.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • A get call before onload and a get call during onload should be combined.: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
• /credential-management/fedcm-multi-idp/get-before-onload-and-during-dom-content-loaded.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • A get call before onload and a get call during DOMContentLoaded event should combine despite being called from different tasks.: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
• /credential-management/fedcm-multi-idp/multiple-gets-after-abort.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • Multiple gets after aborting a multi IDP request should work: FAIL (Chrome: TIMEOUT, Safari: FAIL)
• /credential-management/fedcm-multi-idp/multiple-gets-after-onload.https.html [wpt.fyi]
  • No get calls before or during onload, multiple get calls after onload in the same task are allowed.: FAIL (Chrome: FAIL, Safari: FAIL)
• /credential-management/fedcm-multi-idp/multiple-gets-before-onload.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: OK)
  • Multiple get calls before window onload are allowed.: FAIL (Chrome: FAIL, Safari: FAIL)
• /credential-management/fedcm-multi-idp/multiple-gets-during-onload.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: TIMEOUT)
  • No get calls before onload, multiple get calls during onload are allowed.: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
• /credential-management/fedcm-multi-idp/single-get-after-onload.https.html [wpt.fyi]
  • Single get call after onload is allowed.: FAIL (Chrome: TIMEOUT, Safari: FAIL)
• /credential-management/fedcm-multi-idp/single-get-before-onload.https.html [wpt.fyi]: ERROR (Chrome: OK, Safari: ERROR)
  • Single get call before onload is allowed.: FAIL (Chrome: FAIL, Safari: FAIL)
• /credential-management/fedcm-multi-idp/single-get-during-onload.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: TIMEOUT)
  • Single get call during onload is allowed.: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)
• /credential-management/fedcm-network-requests.https.html [wpt.fyi]: ERROR (Chrome: TIMEOUT, Safari: ERROR)
  • Successfully obtaining token should resolve the promise.: FAIL (Chrome: TIMEOUT, Safari: FAIL)
  • When there's a pending request, a second get call should be rejected. : FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Reject when provider list is empty: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Reject when configURL is missing: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Reject when configURL is invalid: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Reject when clientId is empty: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • nonce is not required in FederatedIdentityProvider.: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Reject when clientId is missing: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test the abort signal: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Get after abort should work: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that the promise is rejected if the manifest is not in the manifest list: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that promise is rejected if accounts endpoint redirects: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that token endpoint does not follow redirects: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test client_metadata request: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that service worker cannot observe fetches performed by FedCM API: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test basic User InFo API flow: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that User Info API only works when invoked from iframe that is same origin as the IDP: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that User Info API does not work in the top frame: FAIL (Chrome: NOTRUN, Safari: FAIL)
  • Test that the returning account from the two accounts will be auto re-authenticated.: FAIL (Chrome: NOTRUN, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/d0de593e16cd
[wpt PR 38384] - [FedCM] Add wpt test for auto re-authn, a=testonly

Comment 4

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/d0de593e16cd