| <!DOCTYPE html> | 
 | <title>Federated Credential Management API getUserInfo() tests.</title> | 
 | <link rel="help" href="https://fedidcg.github.io/FedCM"> | 
 | <script src="/resources/testharness.js"></script> | 
 | <script src="/resources/testharnessreport.js"></script> | 
 | <script src="/resources/testdriver.js"></script> | 
 | <script src="/resources/testdriver-vendor.js"></script> | 
 |  | 
 | <body> | 
 |  | 
 | <script type="module"> | 
 | import {alt_manifest_origin, | 
 |         alt_request_options_with_mediation_required, | 
 |         fedcm_test, | 
 |         fedcm_get_and_select_first_account} from './support/fedcm-helper.sub.js'; | 
 |  | 
 | async function createIframeWithPermissionPolicyAndWaitForMessage(test, iframeUrl) { | 
 |     const messageWatcher = new EventWatcher(test, window, "message"); | 
 |     let iframe = document.createElement("iframe"); | 
 |     iframe.src = iframeUrl; | 
 |     iframe.allow = "identity-credentials-get"; | 
 |     document.body.appendChild(iframe); | 
 |     let message = null; | 
 |     // Ignore internal "testdriver-complete" messages. | 
 |     do { | 
 |         message = await messageWatcher.wait_for("message"); | 
 |     } while (!("result" in message.data)); | 
 |     return message.data; | 
 | } | 
 |  | 
 | fedcm_test(async t => { | 
 |   const cred = await fedcm_get_and_select_first_account(t, alt_request_options_with_mediation_required()); | 
 |   assert_equals(cred.token, "token"); | 
 |  | 
 |   const iframe_in_idp_scope = `${alt_manifest_origin}/\ | 
 | fedcm/support/fedcm/userinfo-iframe.html`; | 
 |   const message = await createIframeWithPermissionPolicyAndWaitForMessage(t, iframe_in_idp_scope); | 
 |   assert_equals(message.result, "Pass"); | 
 |   assert_equals(message.numAccounts, 1); | 
 |   assert_equals(message.firstAccountEmail, "john_doe@idp.example"); | 
 |   assert_equals(message.firstAccountName, "John Doe"); | 
 |   assert_equals(message.firstAccountGivenName, "John"); | 
 |   assert_equals(message.firstAccountPicture, "https://idp.example/profile/123"); | 
 | }, 'Test basic User InFo API flow'); | 
 |  | 
 | fedcm_test(async t => { | 
 |   const cred = await fedcm_get_and_select_first_account(t, alt_request_options_with_mediation_required()); | 
 |   assert_equals(cred.token, "token"); | 
 |  | 
 |   const iframe_in_idp_scope = `support/fedcm/userinfo-iframe.html`; | 
 |   const message = await createIframeWithPermissionPolicyAndWaitForMessage(t, iframe_in_idp_scope); | 
 |   assert_equals(message.result, "Fail"); | 
 | }, 'Test that User Info API only works when invoked from iframe that is same origin as the IDP'); | 
 |  | 
 | fedcm_test(async t => { | 
 |   const cred = await fedcm_get_and_select_first_account(t, alt_request_options_with_mediation_required()); | 
 |   assert_equals(cred.token, "token"); | 
 |  | 
 |   const manifest_path = `${alt_manifest_origin}/\ | 
 | fedcm/support/fedcm/manifest.py`; | 
 |   await promise_rejects_dom(t, 'InvalidStateError', | 
 |     IdentityProvider.getUserInfo({ | 
 |       configURL: manifest_path, | 
 |       // Approved client | 
 |       clientId: '123', | 
 |     })) | 
 | }, 'Test that User Info API does not work in the top frame'); | 
 |  | 
 | </script> |