webauthn/getcredential-ui-mode-immediate.https.html

<!DOCTYPE html>
<meta charset="utf-8">
<title>WebAuthn uiMode: 'immediate' Tests</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script src=helpers.js></script>
<body></body>
<script>
"use strict";

// Test uiMode: 'immediate' with mediation: 'optional' (Success case with Resident Key).
virtualAuthenticatorPromiseTest(async t => {
  const credential = await createCredential({
    options: {
      publicKey: {
        authenticatorSelection: {
          residentKey: "required",
          requireResidentKey: true,
        }
      }
    }
  });
  await test_driver.bless("activate immediate mode");
  const assertion = await navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
    },
    uiMode: "immediate",
  });
  assert_class_string(assertion, "PublicKeyCredential");
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  isUserVerified: true,
  transport: "internal",
}, "Immediate mediation (optional) with a resident credential");

// Test uiMode: 'immediate' with mediation: 'required' (Success case).
virtualAuthenticatorPromiseTest(async t => {
  const credential = await createCredential({
    options: {
      publicKey: {
        authenticatorSelection: {
          residentKey: "required",
          requireResidentKey: true,
        }
      }
    }
  });
  await test_driver.bless("activate immediate mode");
  const assertion = await navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
    },
    uiMode: "immediate",
    mediation: "required"
  });
  assert_class_string(assertion, "PublicKeyCredential");
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  isUserVerified: true,
  transport: "internal",
}, "Immediate mediation (required) with a resident credential");

// Test uiMode: 'immediate' failure when allowCredentials is provided.
virtualAuthenticatorPromiseTest(async t => {
  const credential = await createCredential();
  await test_driver.bless("activate immediate mode");
  const promise = navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
      allowCredentials: [{
        type: "public-key",
        id: credential.rawId,
      }],
    },
    uiMode: "immediate",
  });
  return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  isUserVerified: true,
  transport: "internal",
}, "Immediate mediation fails if allowCredentials is not empty");

// Test uiMode: 'immediate' failure without user activation.
virtualAuthenticatorPromiseTest(async t => {
  const credential = await createCredential();

  const promise = navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
    },
    uiMode: "immediate",
  });
  return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  isUserVerified: true,
  transport: "internal",
}, "Immediate mediation fails without user activation");

// Test uiMode: 'immediate' when no credentials are available.
virtualAuthenticatorPromiseTest(async t => {
  await test_driver.bless("activate immediate mode");
  const promise = navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
    },
    uiMode: "immediate",
    mediation: "optional"
  });
  return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  transport: "internal",
}, "Immediate mediation (optional) with no credentials");

// Test uiMode: 'immediate' incompatibility with mediation: 'conditional'.
virtualAuthenticatorPromiseTest(async t => {
  const promise = navigator.credentials.get({
    publicKey: {
      challenge: new Uint8Array(16),
      rpId: window.location.hostname,
    },
    uiMode: "immediate",
    mediation: "conditional"
  });
  return promise_rejects_dom(t, "NotSupportedError", promise);
}, {
  protocol: "ctap2",
  hasResidentKey: true,
  hasUserVerification: true,
  transport: "internal",
}, "Immediate mediation is incompatible with conditional mediation");

</script>