[wpt-sync] Sync PR 44055 - [FedCM] Allow setting login status from a same-site request
Categories
(Core :: DOM: Credential Management, task, P4)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox124 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream])
Attachments
(1 file)
|
79.01 KB,
text/plain
|
Details |
Sync web-platform-tests PR 44055 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/44055
Details from upstream follow.
Christian Biesinger <cbiesinger@chromium.org> wrote:
[FedCM] Allow setting login status from a same-site request
This relaxes the same-origin requirement to same-site for processing
the login status header. This is useful for IDPs who process IDP
logins on a different host than the FedCM endpoint.This is behind a default-enabled flag so we can easily disable this
in case of issues.The virtual test suite explicitly enables the flag so that the test
will keep working in case the flag has to be turned off.Approved by Security & Privacy in
https://docs.google.com/document/d/1vZiEh4Q45gleW0lmtfgxMflqarMkcTk0Itwoo6724Vo/edit?resourcekey=0-WjqaM1SrhAoFbhmGNyyyJA&tab=t.0Bug: 1516640
Change-Id: I8825e66b43d7d3a6fae7db2447281502fb8015c9Reviewed-on: https://chromium-review.googlesource.com/5207174
WPT-Export-Revision: 9dd3aece31aefc173775e7dc1b93dc73a57a67dd
| Assignee | ||
Updated•2 years ago
|
| Assignee | ||
Comment 1•2 years ago
|
||
| Assignee | ||
Comment 2•2 years ago
|
||
Comment 4•2 years ago
|
||
| bugherder | ||
Description
•