From 4195d08c8dfbd2e2e25de62d731bff5b43ef51ca Mon Sep 17 00:00:00 2001
From: npm1 <npm@chromium.org>
Date: Sat, 20 Jan 2024 20:48:09 +0000
Subject: [PATCH] Add isAutoSelected (#500)

SHA: 6bc6819a94e1998ad904b978461a9e8d01e9437c
Reason: push, by pull[bot]

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 index.html | 46 +++++++++++++++++++++++++++++++---------------
 1 file changed, 31 insertions(+), 15 deletions(-)

diff --git a/index.html b/index.html
index 9043c11f..ecd29098 100644
--- a/index.html
+++ b/index.html
@@ -6,7 +6,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/cg-draft" rel="stylesheet">
   <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
   <link href="https://fedidcg.github.io/FedCM/" rel="canonical">
-  <meta content="b3674e5b29186f6dd96dd7942d8fd30378cf369d" name="document-revision">
+  <meta content="6bc6819a94e1998ad904b978461a9e8d01e9437c" name="document-revision">
 <style>
 dl.domintro dt {
     font-family: Menlo, Consolas, "DejaVu Sans Mono", Monaco, monospace;
@@ -917,7 +917,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1 class="p-name no-ref" id="title">Federated Credential Management API</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#CG-DRAFT">Draft Community Group Report</a>, <time class="dt-updated" datetime="2024-01-18">18 January 2024</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#CG-DRAFT">Draft Community Group Report</a>, <time class="dt-updated" datetime="2024-01-20">20 January 2024</time></p>
    <div data-fill-with="spec-metadata">
     <dl>
      <dt>This version:
@@ -1471,6 +1471,7 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential
 <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identitycredential"><code><c- g>IdentityCredential</c-></code></dfn> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential①"><c- n>Credential</c-></a> {
   <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise①"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined①"><c- b>undefined</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="method" data-export data-lt="disconnect(options)|disconnect()" id="dom-identitycredential-disconnect"><code><c- g>disconnect</c-></code></dfn>(<c- b>optional</c-> <a data-link-type="idl-name" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions"><c- n>IdentityCredentialDisconnectOptions</c-></a> <dfn class="idl-code" data-dfn-for="IdentityCredential/disconnect(options), IdentityCredential/disconnect()" data-dfn-type="argument" data-export id="dom-identitycredential-disconnect-options-options"><code><c- g>options</c-></code><a class="self-link" href="#dom-identitycredential-disconnect-options-options"></a></dfn> = {});
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①"><c- b>USVString</c-></a>? <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="attribute" data-export data-readonly data-type="USVString?" id="dom-identitycredential-token"><code><c- g>token</c-></code></dfn>;
+  <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean"><c- b>boolean</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="attribute" data-export data-readonly data-type="boolean" id="dom-identitycredential-isautoselected"><code><c- g>isAutoSelected</c-></code></dfn>;
 };
 </pre>
    <dl>
@@ -1481,12 +1482,17 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential
     <dd data-md>
      <p>The <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token①">token</a></code>'s attribute getter returns the value it is set to.
 It represents the minted <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token">token</a></code> provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③">IDP</a>.</p>
+    <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-isautoselected" id="ref-for-dom-identitycredential-isautoselected">isAutoSelected</a></code></b>
+    <dd data-md>
+     <p><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-isautoselected" id="ref-for-dom-identitycredential-isautoselected①">isAutoSelected</a></code>'s attribute getter returns the value it is
+set to. It represents whether the user’s identity credential was automatically selected when
+going through the UI flow which resulted in this <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential②">IdentityCredential</a></code>.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot" id="ref-for-dom-credential-type-slot">[[type]]</a></code></b>
     <dd data-md>
-     <p>The <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential②">IdentityCredential</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot" id="ref-for-dom-credential-type-slot①">[[type]]</a></code>'s value is "<b>identity</b>".</p>
+     <p>The <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential③">IdentityCredential</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot" id="ref-for-dom-credential-type-slot①">[[type]]</a></code>'s value is "<b>identity</b>".</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot" id="ref-for-dom-credential-discovery-slot">[[discovery]]</a></code></b>
     <dd data-md>
-     <p>The <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential③">IdentityCredential</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot" id="ref-for-dom-credential-discovery-slot①">[[discovery]]</a></code>'s value is <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote" id="ref-for-dom-credential-discovery-remote">remote</a></code>.</p>
+     <p>The <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential④">IdentityCredential</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot" id="ref-for-dom-credential-discovery-slot①">[[discovery]]</a></code>'s value is <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote" id="ref-for-dom-credential-discovery-remote">remote</a></code>.</p>
    </dl>
    <p>The main entrypoint in this specification is through the entrypoints exposed
 by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management</cite></a> API.</p>
@@ -1720,7 +1726,7 @@ <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-reques
    </dl>
    <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span class="secno">2.3.3. </span><span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span><a class="self-link" href="#browser-api-rp-sign-in"></a></h4>
    <p>The <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot" id="ref-for-dom-credential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> algorithm runs in parallel inside <a href="https://w3c.github.io/webappsec-credential-management/#algorithm-request"><cite>Credential Management 1</cite> § 2.5.1 Request a Credential</a> to request
-credentials and returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential④">IdentityCredential</a></code> or an error.</p>
+credentials and returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑤">IdentityCredential</a></code> or an error.</p>
    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots">internal method</a> accepts three arguments:</p>
    <dl>
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"><code>origin</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"></a></dfn>
@@ -1740,7 +1746,7 @@ <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span
    <p>The <var>options</var>.<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal" id="ref-for-dom-credentialrequestoptions-signal">signal</a></code> is used as an abort signal for the
 requests.</p>
    <div class="algorithm" data-algorithm="[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)">
-     When the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑤">IdentityCredential</a></code>'s <dfn class="idl-code" data-dfn-for="IdentityCredential" data-dfn-type="method" data-export id="dom-identitycredential-discoverfromexternalsource-slot"><code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-slot"></a></dfn> algorithm is invoked, the user agent MUST execute the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑥">IdentityCredential</a></code> (or throws an error to the caller). 
+     When the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑥">IdentityCredential</a></code>'s <dfn class="idl-code" data-dfn-for="IdentityCredential" data-dfn-type="method" data-export id="dom-identitycredential-discoverfromexternalsource-slot"><code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-slot"></a></dfn> algorithm is invoked, the user agent MUST execute the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑦">IdentityCredential</a></code> (or throws an error to the caller). 
     <ol>
      <li data-md>
       <p class="assertion">Assert: These steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel②">in parallel</a>.</p>
@@ -1791,9 +1797,9 @@ <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span
    </div>
    <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><span class="secno">2.3.4. </span><span class="content">Create an IdentityCredential</span><a class="self-link" href="#create-identity-credential"></a></h4>
    <p>The <a data-link-type="dfn" href="#create-an-identitycredential" id="ref-for-create-an-identitycredential①">create an IdentityCredential</a> algorithm invokes the various FedCM fetches, shows the user
-agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑦">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a>.</p>
+agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑧">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a>.</p>
    <div class="algorithm" data-algorithm="create an IdentityCredential">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-an-identitycredential">create an IdentityCredential</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions①">IdentityProviderRequestOptions</a></code> <var>provider</var>, a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions" id="ref-for-dictdef-credentialrequestoptions③">CredentialRequestOptions</a></code> <var>options</var>, and a <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑧">IdentityCredential</a></code> or a pair (failure, bool), where the bool indicates whether to skip delaying
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-an-identitycredential">create an IdentityCredential</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions①">IdentityProviderRequestOptions</a></code> <var>provider</var>, a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions" id="ref-for-dictdef-credentialrequestoptions③">CredentialRequestOptions</a></code> <var>options</var>, and a <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑨">IdentityCredential</a></code> or a pair (failure, bool), where the bool indicates whether to skip delaying
 the exception thrown. 
     <ol>
      <li data-md>
@@ -1942,13 +1948,15 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
         <p>If <var>accState</var> is <a data-link-type="dfn" href="#compute-the-connection-status-connected" id="ref-for-compute-the-connection-status-connected②">connected</a>, set <var>registeredAccount</var> to <var>acc</var> and increase <var>numRegisteredAccounts</var> by 1.</p>
       </ol>
      <li data-md>
-      <p>Let <var>permission</var> and <var>disclosureTextShown</var> both be false.</p>
+      <p>Let <var>permission</var>, <var>disclosureTextShown</var>, and <var>isAutoSelected</var> be set to false.</p>
      <li data-md>
       <p>If <var>mediation</var> is not "<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-required" id="ref-for-dom-credentialmediationrequirement-required">required</a></code>", <var>requiresUserMediation</var> is false, and <var>numRegisteredAccounts</var> is equal to 1:</p>
       <ol>
        <li data-md>
         <p>Set <var>account</var> to <var>registeredAccount</var> and <var>accountState</var> to the result of running <a data-link-type="dfn" href="#compute-the-connection-status" id="ref-for-compute-the-connection-status②">compute the connection status</a> algorithm given <var>provider</var> and <var>account</var>. When doing this,
 the user agent MAY show some UI to the user indicating that they are being <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="auto-reauthenticated">auto-reauthenticated</dfn>.</p>
+       <li data-md>
+        <p>Set <var>isAutoSelected</var> to true.</p>
       </ol>
      <li data-md>
       <p>Otherwise, if <var>mediation</var> is "<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent" id="ref-for-dom-credentialmediationrequirement-silent①">silent</a></code>", return (failure, true).</p>
@@ -1997,7 +2005,7 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
      <li data-md>
       <p>If <var>permission</var> is false, then return (failure, true).</p>
      <li data-md>
-      <p>Let <var>credential</var> be the result of running the <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion">fetch an identity assertion</a> algorithm with <var>account</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id②">id</a></code>, <var>disclosureTextShown</var>, <var>provider</var>, <var>config</var>, and <var>globalObject</var>.</p>
+      <p>Let <var>credential</var> be the result of running the <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion">fetch an identity assertion</a> algorithm with <var>account</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id②">id</a></code>, <var>disclosureTextShown</var>, <var>isAutoSelected</var>, <var>provider</var>, <var>config</var>, and <var>globalObject</var>.</p>
      <li data-md>
       <p>Return <var>credential</var>.</p>
     </ol>
@@ -2325,9 +2333,8 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
 use FedCM with a specific <a data-link-type="dfn" href="#idp" id="ref-for-idp②④">IDP</a> account. It fetches the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint">identity assertion endpoint</a> to obtain
 the token that will be provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②②">RP</a>.</p>
    <div class="algorithm" data-algorithm="fetch an identity assertion">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-an-identity-assertion">fetch an identity assertion</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②③">USVString</a></code> <var>accountId</var>, a boolean <var>disclosureTextShown</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions④">IdentityProviderRequestOptions</a></code> <var>provider</var>,
-    an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig③">IdentityProviderAPIConfig</a></code> <var>config</var>, and <var>globalObject</var>, run the following steps. This
-    returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑨">IdentityCredential</a></code> or failure. 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-an-identity-assertion">fetch an identity assertion</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②③">USVString</a></code> <var>accountId</var>, a boolean <var>disclosureTextShown</var>, a boolean <var>isAutoSelected</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions④">IdentityProviderRequestOptions</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig③">IdentityProviderAPIConfig</a></code> <var>config</var>,
+    and <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①⓪">IdentityCredential</a></code> or failure. 
     <ol>
      <li data-md>
       <p>Let <var>tokenUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url③">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-id_assertion_endpoint" id="ref-for-dom-identityproviderapiconfig-id_assertion_endpoint①">id_assertion_endpoint</a></code>"], and <var>globalObject</var>.</p>
@@ -2344,6 +2351,8 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
         <p>("account_id", <var>accountId</var>)</p>
        <li data-md>
         <p>("disclosure_text_shown", <var>disclosureTextShown</var>)</p>
+       <li data-md>
+        <p>("is_auto_selected", <var>isAutoSelected</var>)</p>
       </ol>
      <li data-md>
       <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①②">request</a> as follows:</p>
@@ -2400,9 +2409,11 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
         <p>If one of the previous two steps threw an exception, set <var>credential</var> to failure
 and return.</p>
        <li data-md>
-        <p>Let <var>credential</var> be a new <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①⓪">IdentityCredential</a></code> given <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm" id="ref-for-concept-global-object-realm">realm</a>.</p>
+        <p>Let <var>credential</var> be a new <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①①">IdentityCredential</a></code> given <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm" id="ref-for-concept-global-object-realm">realm</a>.</p>
        <li data-md>
         <p>Set <var>credential</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token②">token</a></code> to <var>token</var>.</p>
+       <li data-md>
+        <p>Set <var>credential</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-isautoselected" id="ref-for-dom-identitycredential-isautoselected②">isAutoSelected</a></code> to <var>isAutoSelected</var>.</p>
       </ol>
      <li data-md>
       <p>Wait for <var>credential</var> to be set.</p>
@@ -4619,6 +4630,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#dictdef-identityproviderwellknown">IdentityProviderWellKnown</a><span>, in § 2.3.5</span>
    <li><a href="#dictdef-identityuserinfo">IdentityUserInfo</a><span>, in § 2.4</span>
    <li><a href="#idp">IDP</a><span>, in § 1</span>
+   <li><a href="#dom-identitycredential-isautoselected">isAutoSelected</a><span>, in § 2.3</span>
    <li><a href="#dom-loginstatus-logged-in">"logged-in"</a><span>, in § 2.1.3</span>
    <li><a href="#logged-in">logged-in</a><span>, in § 2.1.1</span>
    <li><a href="#dom-loginstatus-logged-out">"logged-out"</a><span>, in § 2.1.3</span>
@@ -4896,6 +4908,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="c3e881ef">SecurityError</span>
      <li><span class="dfn-paneled" id="b0d7f3c3">USVString</span>
      <li><span class="dfn-paneled" id="d0b4a948">a promise rejected with</span>
+     <li><span class="dfn-paneled" id="5372cca8">boolean</span>
      <li><span class="dfn-paneled" id="cadf5fe9">converted to an idl value</span>
      <li><span class="dfn-paneled" id="bec98d30">dictionary</span>
      <li><span class="dfn-paneled" id="b262501e">reject</span>
@@ -4993,6 +5006,7 @@ <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">I
 <c- b>interface</c-> <a href="#identitycredential"><code><c- g>IdentityCredential</c-></code></a> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential"><c- n>Credential</c-></a> {
   <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined"><c- b>undefined</c-></a>> <a href="#dom-identitycredential-disconnect"><code><c- g>disconnect</c-></code></a>(<c- b>optional</c-> <a data-link-type="idl-name" href="#dictdef-identitycredentialdisconnectoptions"><c- n>IdentityCredentialDisconnectOptions</c-></a> <a href="#dom-identitycredential-disconnect-options-options"><code><c- g>options</c-></code></a> = {});
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a>? <a data-readonly data-type="USVString?" href="#dom-identitycredential-token"><code><c- g>token</c-></code></a>;
+  <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean"><c- b>boolean</c-></a> <a data-readonly data-type="boolean" href="#dom-identitycredential-isautoselected"><code><c- g>isAutoSelected</c-></code></a>;
 };
 
 <c- b>dictionary</c-> <a href="#dictdef-disconnectedaccount"><code><c- g>DisconnectedAccount</c-></code></a> {
@@ -5621,6 +5635,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['c3e881ef'] = {"dfnID": "c3e881ef", "url": "https://webidl.spec.whatwg.org/#securityerror", "dfnText": "SecurityError", "refSections": [{"refs": [{"id": "ref-for-securityerror"}], "title": "2.1.3. JavaScript API"}], "external": true};
 window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}, {"id": "ref-for-idl-USVString\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2461"}, {"id": "ref-for-idl-USVString\u2462"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}, {"id": "ref-for-idl-USVString\u2465"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-USVString\u2466"}, {"id": "ref-for-idl-USVString\u2467"}, {"id": "ref-for-idl-USVString\u2468"}, {"id": "ref-for-idl-USVString\u2460\u24ea"}, {"id": "ref-for-idl-USVString\u2460\u2460"}, {"id": "ref-for-idl-USVString\u2460\u2461"}, {"id": "ref-for-idl-USVString\u2460\u2462"}, {"id": "ref-for-idl-USVString\u2460\u2463"}, {"id": "ref-for-idl-USVString\u2460\u2464"}, {"id": "ref-for-idl-USVString\u2460\u2465"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2466"}, {"id": "ref-for-idl-USVString\u2460\u2467"}, {"id": "ref-for-idl-USVString\u2460\u2468"}, {"id": "ref-for-idl-USVString\u2461\u24ea"}, {"id": "ref-for-idl-USVString\u2461\u2460"}, {"id": "ref-for-idl-USVString\u2461\u2461"}], "title": "2.3.6. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2462"}, {"id": "ref-for-idl-USVString\u2461\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2464"}, {"id": "ref-for-idl-USVString\u2461\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2467"}, {"id": "ref-for-idl-USVString\u2461\u2468"}, {"id": "ref-for-idl-USVString\u2462\u24ea"}, {"id": "ref-for-idl-USVString\u2462\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2461"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2462"}, {"id": "ref-for-idl-USVString\u2462\u2463"}, {"id": "ref-for-idl-USVString\u2462\u2464"}, {"id": "ref-for-idl-USVString\u2462\u2465"}, {"id": "ref-for-idl-USVString\u2462\u2466"}, {"id": "ref-for-idl-USVString\u2462\u2467"}, {"id": "ref-for-idl-USVString\u2462\u2468"}, {"id": "ref-for-idl-USVString\u2463\u24ea"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2460"}, {"id": "ref-for-idl-USVString\u2463\u2461"}, {"id": "ref-for-idl-USVString\u2463\u2462"}, {"id": "ref-for-idl-USVString\u2463\u2463"}, {"id": "ref-for-idl-USVString\u2463\u2464"}, {"id": "ref-for-idl-USVString\u2463\u2465"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2466"}, {"id": "ref-for-idl-USVString\u2463\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2464\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
 window.dfnpanelData['d0b4a948'] = {"dfnID": "d0b4a948", "url": "https://webidl.spec.whatwg.org/#a-promise-rejected-with", "dfnText": "a promise rejected with", "refSections": [{"refs": [{"id": "ref-for-a-promise-rejected-with"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['5372cca8'] = {"dfnID": "5372cca8", "url": "https://webidl.spec.whatwg.org/#idl-boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-idl-boolean"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
 window.dfnpanelData['cadf5fe9'] = {"dfnID": "cadf5fe9", "url": "https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value", "dfnText": "converted to an idl value", "refSections": [{"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460"}, {"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2462"}], "title": "2.3.6. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2464"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2465"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2466"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
 window.dfnpanelData['bec98d30'] = {"dfnID": "bec98d30", "url": "https://webidl.spec.whatwg.org/#dfn-dictionary", "dfnText": "dictionary", "refSections": [{"refs": [{"id": "ref-for-dfn-dictionary"}], "title": "5.5. Account list"}], "external": true};
 window.dfnpanelData['b262501e'] = {"dfnID": "b262501e", "url": "https://webidl.spec.whatwg.org/#reject", "dfnText": "reject", "refSections": [{"refs": [{"id": "ref-for-reject"}, {"id": "ref-for-reject\u2460"}, {"id": "ref-for-reject\u2461"}, {"id": "ref-for-reject\u2462"}, {"id": "ref-for-reject\u2463"}, {"id": "ref-for-reject\u2464"}, {"id": "ref-for-reject\u2465"}, {"id": "ref-for-reject\u2466"}, {"id": "ref-for-reject\u2467"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-reject\u2468"}, {"id": "ref-for-reject\u2460\u24ea"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
@@ -5649,9 +5664,10 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['remove-all-connections'] = {"dfnID": "remove-all-connections", "url": "#remove-all-connections", "dfnText": "remove all connections", "refSections": [{"refs": [{"id": "ref-for-remove-all-connections"}, {"id": "ref-for-remove-all-connections\u2460"}], "title": "2.3.1. The disconnect method"}], "external": false};
 window.dfnpanelData['dictdef-identitycredentialdisconnectoptions'] = {"dfnID": "dictdef-identitycredentialdisconnectoptions", "url": "#dictdef-identitycredentialdisconnectoptions", "dfnText": "IdentityCredentialDisconnectOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2462"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
 window.dfnpanelData['dom-identitycredentialdisconnectoptions-accounthint'] = {"dfnID": "dom-identitycredentialdisconnectoptions-accounthint", "url": "#dom-identitycredentialdisconnectoptions-accounthint", "dfnText": "accountHint", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialdisconnectoptions-accounthint"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
-window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2463"}, {"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2466"}, {"id": "ref-for-identitycredential\u2467"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2468"}, {"id": "ref-for-identitycredential\u2460\u24ea"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}, {"id": "ref-for-identitycredential\u2463"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}, {"id": "ref-for-identitycredential\u2466"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2467"}, {"id": "ref-for-identitycredential\u2468"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2460\u24ea"}, {"id": "ref-for-identitycredential\u2460\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
 window.dfnpanelData['dom-identitycredential-disconnect'] = {"dfnID": "dom-identitycredential-disconnect", "url": "#dom-identitycredential-disconnect", "dfnText": "disconnect", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-disconnect"}, {"id": "ref-for-dom-identitycredential-disconnect\u2460"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2461"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2462"}], "title": "3.6. Disconnect endpoint"}], "external": false};
 window.dfnpanelData['dom-identitycredential-token'] = {"dfnID": "dom-identitycredential-token", "url": "#dom-identitycredential-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-token"}, {"id": "ref-for-dom-identitycredential-token\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-token\u2461"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identitycredential-isautoselected'] = {"dfnID": "dom-identitycredential-isautoselected", "url": "#dom-identitycredential-isautoselected", "dfnText": "isAutoSelected", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-isautoselected"}, {"id": "ref-for-dom-identitycredential-isautoselected\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-isautoselected\u2461"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
 window.dfnpanelData['attempt-to-disconnect'] = {"dfnID": "attempt-to-disconnect", "url": "#attempt-to-disconnect", "dfnText": "attempt to disconnect", "refSections": [{"refs": [{"id": "ref-for-attempt-to-disconnect"}], "title": "2.3.1. The disconnect method"}], "external": false};
 window.dfnpanelData['send-a-disconnect-request'] = {"dfnID": "send-a-disconnect-request", "url": "#send-a-disconnect-request", "dfnText": "send a disconnect request", "refSections": [{"refs": [{"id": "ref-for-send-a-disconnect-request"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-send-a-disconnect-request\u2460"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
 window.dfnpanelData['dictdef-disconnectedaccount'] = {"dfnID": "dictdef-disconnectedaccount", "url": "#dictdef-disconnectedaccount", "dfnText": "DisconnectedAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-disconnectedaccount"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dictdef-disconnectedaccount\u2460"}], "title": "3.6. Disconnect endpoint"}], "external": false};