Permissions-Policy: identity-credentials-get directive
Experimental: This is an experimental technology
Check the Browser compatibility table carefully before using this in production.
The HTTP Permissions-Policy header identity-credentials-get directive controls whether the current document is allowed to use the Federated Credential Management API (FedCM), and more specifically usage of the following methods:
navigator.credentials.get()(when used with theidentityoption)IdentityCredential.disconnect()IdentityProvider.getUserInfo()
Where this policy forbids use of the API, Promises returned by these methods will reject with a NotAllowedError DOMException.
Syntax
http
Permissions-Policy: identity-credentials-get=<allowlist>;
<allowlist>-
A list of origins for which permission is granted to use the feature. See
Permissions-Policy> Syntax for more details.
Default policy
The default allowlist for identity-credentials-get is self.
Specifications
| Specification |
|---|
| Federated Credential Management API # permissions-policy-integration |
Browser compatibility
Loading…