v148 · Origin Trial · Identity

Session State Inspector

Inspect a live FedCM-shaped token lifecycle against the showcase backend — IdP session setup, config discovery, accounts endpoint, assertion token issuance, server-side validation, refresh, and revocation.

Session State

Status Signed out

IdP —

Account —

Token issued —

Token expires —

Refresh count 0

No token.

Choose IdP account

Token Lifecycle

Discover

Account

Issue

Active

Refresh

Revoke

What an agent does

The primary button first tries navigator.credentials.get({ identity: ... }). If this browser or origin cannot run FedCM, it calls the same IdP endpoints directly and clearly labels the endpoint trace.

Event Log

[ready] Inspector loaded. Click "Get identity token" to begin.

API shape

// Agentic FedCM login — agent calls this, not DOM-actuates the IdP page
const cred = await navigator.credentials.get({
  identity: {
    providers: [{
      configURL: location.origin + '/v148/agentic-federated-login/fedcm/config.json',
      clientId: 'chrome-platform-showcase',
      fields: ['name', 'email', 'picture'],
      params: { nonce: crypto.randomUUID(), scope: 'openid email profile' },
      mode: 'active',
    }],
  }
});

// cred.token is a signed JWT from the IdP
// No DOM actuation, no UI scripting, no brittle selectors
console.log(cred.token);  // eyJhbGci...

references

implementation reference

Need the exact API surface, compatibility boundaries, errors, lifecycle, and source links? Read the matching gendn reference ↗