1884833 - [wpt-sync] Sync PR 45033 - Disable digital credential API when called from cross-origin <iframe>

Status: RESOLVED FIXED

(Core :: DOM: Credential Management, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 45033 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/45033
Details from upstream follow.

Peter Kotwicz <[e-mail]> wrote:

Disable digital credential API when called from cross-origin <iframe>

BUG=325425533

Change-Id: Ib6032b35175072883afaff4806cf5b1e59a5429a

Reviewed-on: https://chromium-review.googlesource.com/5363035
WPT-Export-Revision: f2edb1aa482e5a34c8bf500af33b372e858a4076

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=569cde2fdf3ec4e590d92911ed7c44bc2ff582ed

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 11 subtests

Status Summary

Firefox

OK : 1
PASS: 2
FAIL: 9

Chrome

OK : 1
PASS: 4
FAIL: 7

Safari

OK : 1
FAIL: 11

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /credential-management/digital-identity.https.html [wpt.fyi]: OK [GitHub], SKIP [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt] (Chrome: OK, Safari: OK)
  • navigator.credentials.get() API works in toplevel frame.: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.credentials.get() API fails if IdentityCredentialRequestOptions::providers is not specified.: FAIL (Chrome: PASS, Safari: FAIL)
  • navigator.credentials.get() API fails if there are no providers.: FAIL (Chrome: PASS, Safari: FAIL)
  • navigator.identity.get() API works in toplevel frame.: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.identity.get() API fails if DigitalCredentialRequestOptions::providers is not specified.: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.identity.get() API fails if there is more than one provider.: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.identity.get() promise is rejected when the page aborts the request.: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.identity.get() succeeds in same-origin iframe: FAIL (Chrome: FAIL, Safari: FAIL)
  • navigator.identity.get() fails in cross-origin iframe: FAIL (Chrome: FAIL, Safari: FAIL)

Tests Disabled in Gecko Infrastructure

• /credential-management/digital-identity.https.html [wpt.fyi]: OK [GitHub], SKIP [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt] (Chrome: OK, Safari: OK)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4e6c4a96376d
[wpt PR 45033] - Disable digital credential API when called from cross-origin <iframe>, a=testonly

Comment 4

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/4e6c4a96376d