GitLab

Before this patch, invoking PaymentRequest API with secure payment
confirmation method in a cross-origin iframe would display the secure
payment confirmation dialog UI, but proceeding to verify the payment
with WebAuthn would return NOT_ALLOWED_ERROR.

This patch creates autofill::InternalAuthenticator on the top-level
RenderFrameHost of the WebContents instead of the RenderFrameHost of the
exact iframe that invoked PaymentRequest API.

After this patch, it is possible to use secure payment confirmation
method in a cross-origin iframe.

Bug: 1123217
Change-Id: Ifc3ec58a5bb57a2544c51d15aaa1035b15da6190
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2383452Reviewed-by: Ken Buchanan <kenrb@chromium.org>
Reviewed-by: Nick Burris <nburris@chromium.org>
Commit-Queue: Rouslan Solomakhin <rouslan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#802974}