Headers: Permissions-Policy.publickey-credentials-get
Permissions-Policy: publickey-credentials-get directive
Limited availability
This feature is not Baseline because it does not work in some of the most widely-used browsers.
Experimental: This is an experimental technology
Check the Browser compatibility table carefully before using this in production.
The HTTP Permissions-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials, i.e., via navigator.credentials.get({publicKey}).
Specifically, where a defined policy blocks the use of this feature, the Promise returned by navigator.credentials.get({publicKey}) will reject with a NotAllowedError DOMException.
Syntax
Permissions-Policy: publickey-credentials-get=<allowlist>;
<allowlist>-
A list of origins for which permission is granted to use the feature. See
Permissions-Policy> Syntax for more details.
Default policy
The default allowlist for publickey-credentials-get is self.
Specifications
Browser compatibility
| Desktop | Mobile | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Chrome | Edge | Firefox | Opera | Safari | Chrome Android | Firefox for Android | Opera Android | Safari on IOS | Samsung Internet | WebView Android | WebView on iOS | |
publickey-credentials-get |
88 | 88 | No | No | No | 88 | No | No | No | 15.0 | 88 | No |
See also
-
Permissions-Policyheader - Permissions Policy
- Web Authentication API
-
PublicKeyCredentialinterface
© 2005–2025 MDN contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Permissions-Policy/publickey-credentials-get