tree 9e8cd151f08253daedea5038a08f3ca4504d7759
parent 31f8a108d11161086292d3c262b73da3357135b5
author Nick Burris <nburris@chromium.org> 1652277973 +0000
committer Chromium LUCI CQ <chromium-scoped@luci-project-accounts.iam.gserviceaccount.com> 1652277973 +0000

[SPC] Require user activation for cross-origin enrollment

This adds a user activation check and consumption for the enrollment of
a credential with the payment extension in a cross-origin frame.

Test coverage is added to the SPC iframe enrollment WPTs, and the
existing SPC authentication WPTs validate that this does not apply to
same-origin credential enrollments. Also tested manually on
https://rsolomakhin.github.io/pr/spc-iframe-no-ph/.

Intent to ship:
https://groups.google.com/a/chromium.org/g/blink-dev/c/GSoWLFb_jF0

Bug: 1322603
Change-Id: I5bca6d3fdf9a8687fa5d9d08b162287e1e7e4f98
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3584295
Commit-Queue: Nick Burris <nburris@chromium.org>
Reviewed-by: Stephen McGruer <smcgruer@chromium.org>
Reviewed-by: Ken Buchanan <kenrb@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1002052}