1 files changed, 80 insertions, 0 deletions
diff --git a/testing/web-platform/tests/webauthn/getcredential-extensions.https.html b/testing/web-platform/tests/webauthn/getcredential-extensions.https.html
new file mode 100644
index 0000000000..16c1e57457
--- /dev/null
+++ b/testing/web-platform/tests/webauthn/getcredential-extensions.https.html
@@ -0,0 +1,80 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>WebAuthn navigator.credentials.get() extensions Tests</title>
+<meta name="timeout" content="long">
+<link rel="author" title="Adam Powers" href="mailto:adam@fidoalliance.org">
+<link rel="help" href="https://w3c.github.io/webauthn/#iface-credential">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/resources/testdriver.js"></script>
+<script src="/resources/testdriver-vendor.js"></script>
+<script src=helpers.js></script>
+<body></body>
+<script>
+standardSetup(function() {
+    "use strict";
+
+    var credPromise = createCredential();
+    var dummyExtension = {
+        foo: true,
+        bar: "yup"
+    };
+    var badExtId = {};
+    badExtId[createRandomString(65)] = dummyExtension;
+
+    // bad extension values
+    new GetCredentialsTest("options.publicKey.extensions", "hi mom")
+        .addCredential(credPromise)
+        .runTest("Bad extensions: extensions is string", TypeError);
+
+    // empty extensions
+    new GetCredentialsTest("options.publicKey.extensions", null)
+        .addCredential(credPromise)
+        .runTest("extensions is null");
+    new GetCredentialsTest("options.publicKey.extensions", [])
+        .addCredential(credPromise)
+        .runTest("extensions is empty Array");
+    new GetCredentialsTest("options.publicKey.extensions", new ArrayBuffer(0))
+        .addCredential(credPromise)
+        .runTest("extensions is empty ArrayBuffer");
+
+    // unknown extensions should be ignored
+    new GetCredentialsTest("options.publicKey.extensions", {foo: dummyExtension})
+        .addCredential(credPromise)
+        .runTest("ignored extension");
+    new GetCredentialsTest("options.publicKey.extensions", {badExtId: dummyExtension})
+        .addCredential(credPromise)
+        .runTest("extension ID too long");
+
+    new GetCredentialsTest("options.publicKey.extensions", {credProps: true})
+        .addCredential(credPromise)
+        .runTest("credProps is only supported at registration", "NotSupportedError");
+
+    new GetCredentialsTest("options.publicKey.extensions", {payment: {isPayment:true}})
+        .addCredential(credPromise)
+        .runTest("Payment extension is only supported at registration", "NotAllowedError");
+
+    promise_test(async t => {
+      const id = (await credPromise).rawId;
+      const assertion = await navigator.credentials.get({publicKey: {
+        challenge: new Uint8Array(),
+        allowCredentials: [{
+          id: id,
+          type: "public-key",
+        }],
+        extensions: {
+          prf: {
+            eval: {
+              first: new Uint8Array([1,2,3,4]).buffer,
+            },
+          },
+        },
+      }});
+
+      assert_not_own_property(assertion.getClientExtensionResults().prf, 'results');
+    }, "navigator.credentials.get() with prf requested but no support in authenticator");
+});
+
+/* JSHINT */
+/* globals standardSetup, GetCredentialsTest, createRandomString, createCredential */
+</script>