GitLab

Before this patch, paying via secure payment confirmation method would
always return {"status": "success"} without invoking WebAuthn.

This patch checks that the platform authenticator is user-verifying and
invokes WebAuthn with stubbed out options. The
autofill::InternalAuthenticator is being used because it provides a
cross-platform abstraction that fits neatly into the cross-platform
payment apps and factories of Web Payment.

After this patch, only devices with user-verifying authenticators would
display a payment app and invoking that app will always fail because of
the stub credential identifier.

Design: https://bit.ly/secure-payment-confirmation
Explainer: https://github.com/rsolomakhin/secure-payment-confirmation

Bug: 1110320
Change-Id: I8adabf2938ae5a65a6a87c9bc5f6df275b833f24
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2364813Reviewed-by: Mike West <mkwst@chromium.org>
Reviewed-by: Ken Buchanan <kenrb@chromium.org>
Reviewed-by: Nick Burris <nburris@chromium.org>
Commit-Queue: Rouslan Solomakhin <rouslan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#800572}