diff --git a/explainer.md b/explainer.md index 918da52..c67d247 100644 --- a/explainer.md +++ b/explainer.md @@ -56,6 +56,14 @@ Here is an example of how theĀ  the API might be used in practice: ``` You can read a more detailed and technical description of the API in the [specification draft](https://wicg.github.io/digital-identities/). +### Using the API from another origin + +The specification allows usage of the API from a remote/third-party origin via the "digital-credentials-get" Permissions Policy. This is useful for scenarios where a website wants to request digital credentials from a wallet provider that is hosted on a different origin. The Permissions Policy can be set on an iframe that embeds the website that wants to use the API. Here is an example of how the Permissions Policy can be set on an iframe: + +```HTML + +``` + ## Horizontal reviews * [Security and privacy TAG Questionnaire](horizontal-reviews/security-privacy.md) diff --git a/index.html b/index.html index 772e366..c06d523 100644 --- a/index.html +++ b/index.html @@ -309,6 +309,27 @@

[[\discovery]] whose value is "remote".

+
+

+ User consent +

+

+ The Digital Credential API is a [=powerful feature=] that + requires [=express permission=] from an end-user. This requirement is + normatively enforced when calling {{CredentialsContainer}}'s + {{CredentialsContainer/get()}} method. +

+
+
+

+ Permissions Policy integration +

+

+ This specification defines a [=policy-controlled feature=] identified + by the string "digital-credentials-get". + Its [=policy-controlled feature/default allowlist=] is [=allowlist/'self'=]. +

+

Registry of protocols for requesting digital credential