113 lines
4 KiB
JavaScript
113 lines
4 KiB
JavaScript
// META: timeout=long
|
|
// META: script=/common/get-host-info.sub.js
|
|
// META: script=/common/utils.js
|
|
// META: script=/common/dispatcher/dispatcher.js
|
|
// META: script=/service-workers/service-worker/resources/test-helpers.sub.js
|
|
// META: script=./resources/common.js
|
|
|
|
const same_origin = get_host_info().HTTPS_ORIGIN;
|
|
const cross_origin = get_host_info().HTTPS_REMOTE_ORIGIN;
|
|
const cookie_key = "credentialless_service_worker";
|
|
const cookie_same_origin = "same_origin";
|
|
const cookie_cross_origin = "cross_origin";
|
|
|
|
promise_test(async t => {
|
|
await Promise.all([
|
|
setCookie(same_origin, cookie_key, cookie_same_origin +
|
|
cookie_same_site_none),
|
|
setCookie(cross_origin, cookie_key, cookie_cross_origin +
|
|
cookie_same_site_none),
|
|
]);
|
|
|
|
// One iframe with DIP:none. (control)
|
|
const w_control_token = token();
|
|
const w_control_url = same_origin + executor_path +
|
|
dip_none + `&uuid=${w_control_token}`
|
|
const w_control = document.createElement("iframe");
|
|
w_control.src = w_control_url;
|
|
document.body.appendChild(w_control);
|
|
|
|
// One iframe with DIP:credentialless. (experiment)
|
|
const w_credentialless_token = token();
|
|
const w_credentialless_url = same_origin + executor_path +
|
|
dip_credentialless + `&uuid=${w_credentialless_token}`;
|
|
const w_credentialless = document.createElement("iframe");
|
|
w_credentialless.src = w_credentialless_url;
|
|
document.body.appendChild(w_credentialless);
|
|
|
|
const serviceWorkerTest = function(
|
|
description, origin, dip_for_worker,
|
|
expected_cookies_control,
|
|
expected_cookies_credentialless)
|
|
{
|
|
promise_test(async test => {
|
|
// Create workers for both window.
|
|
const control_worker_token = token();
|
|
const credentialless_worker_token = token();
|
|
|
|
const w_control_worker_src = same_origin + executor_worker_path +
|
|
dip_for_worker + `&uuid=${control_worker_token}`;
|
|
const w_control_worker_reg =
|
|
await service_worker_unregister_and_register(
|
|
test, w_control_worker_src, w_control_url);
|
|
|
|
const w_credentialless_worker_src = same_origin + executor_worker_path +
|
|
dip_for_worker + `&uuid=${credentialless_worker_token}`;
|
|
const w_credentialless_worker_reg =
|
|
await service_worker_unregister_and_register(
|
|
test, w_credentialless_worker_src, w_credentialless_url);
|
|
|
|
// Fetch resources from the workers.
|
|
const control_request_token = token();
|
|
const credentialless_request_token = token();
|
|
const control_request_url = showRequestHeaders(origin, control_request_token);
|
|
const credentialless_request_url = showRequestHeaders(origin, credentialless_request_token);
|
|
send(control_worker_token, `
|
|
fetch("${control_request_url}", {
|
|
mode: 'no-cors',
|
|
credentials: 'include'
|
|
})
|
|
`);
|
|
send(credentialless_worker_token, `
|
|
fetch("${credentialless_request_url}", {
|
|
mode: 'no-cors',
|
|
credentials: 'include'
|
|
})
|
|
`);
|
|
|
|
// Retrieve the resource request headers.
|
|
const headers_control = JSON.parse(await receive(control_request_token));
|
|
const headers_credentialless = JSON.parse(await receive(credentialless_request_token));
|
|
|
|
assert_equals(parseCookies(headers_control)[cookie_key],
|
|
expected_cookies_control,
|
|
"dip:none => ");
|
|
assert_equals(parseCookies(headers_credentialless)[cookie_key],
|
|
expected_cookies_credentialless,
|
|
"dip:credentialless => ");
|
|
|
|
w_control_worker_reg.unregister();
|
|
w_credentialless_worker_reg.unregister();
|
|
}, `fetch ${description}`)
|
|
};
|
|
|
|
serviceWorkerTest("same-origin",
|
|
same_origin, dip_none,
|
|
cookie_same_origin,
|
|
cookie_same_origin);
|
|
|
|
serviceWorkerTest("same-origin + credentialless worker",
|
|
same_origin, dip_credentialless,
|
|
cookie_same_origin,
|
|
cookie_same_origin);
|
|
|
|
serviceWorkerTest("cross-origin",
|
|
cross_origin, dip_none,
|
|
cookie_cross_origin,
|
|
cookie_cross_origin);
|
|
|
|
serviceWorkerTest("cross-origin + credentialless worker",
|
|
cross_origin, dip_credentialless,
|
|
undefined,
|
|
undefined);
|
|
})
|