demo · v132

Continuation API: the popup hand-off

An IdP responds to credentials.get() with a continue_on URL instead of a token. The browser opens that URL in a managed popup — the user grants extra scopes, the popup closes via IdentityProvider.resolve(), and the original promise finally settles. Step through the flow below.

checking IdentityCredential…

requested scopes (RP side)

profile
calendar.read
drive.write
contacts

flow

1RP calls get()params.scope = selected
2IdP returns continue_on(not a token)
3browser opens popupuser reviews scopes
4IdentityProvider.resolve(token)promise settles

IdP ID-assertion response (what the IdP just returned)

(awaiting flow start)

continuation popup (simulated)

log

see also