v137 · webauthn · payments
Credential Flow Simulator
Step through Secure Payment Confirmation credential creation paths and see the one Chrome 137 rename: a payment credential create call from a cross-origin iframe without transient user activation changes from SecurityError to the WebAuthn-aligned NotAllowedError. Other denial paths remain NotAllowedError or succeed.
Simulate a flow
credentials API: checking
PaymentRequest: checking
Chrome 137+: NotAllowedError
Step detail
Click a step or run the flow to see the exact pre-v137 and Chrome 137+ outcome.
Error alignment: before vs after
The rename is intentionally narrow. Secure Payment Confirmation used to special-case one no-activation cross-origin iframe path as SecurityError. WebAuthn expects NotAllowedError for the same missing-activation denial, so Chrome 137 aligns payment credential creation with non-payment credential creation.