Is it possible to change the size of the credential handler window?

[gjgd]

Its width seems to be set at 600px, is there a way to make it bigger?

[dlongley]

@gjgd, this is being explored. It is very likely that we will make it full screen with an animation in the next release.

[gjgd]

Sweet! Any idea of when the next release will be, and is there any workarounds in the meantime?

[dlongley]

@gjgd, no workarounds for right now -- but we are considering adding an advanced/developer option on the mediator site (authn.io) to configure different window sizes (would be per user) for usability testing. If I can find some spare cycles I may look into implementing a larger size this weekend -- which means the earliest release would be next week sometime. But it could get pushed another week or so.

[gjgd]

Sounds good, let me know if I can help

[gjgd]

Just noticed that now, the chapi window is full screen by default. That's an improvement, but is there a way to control the size of the modal by passing a size parameter when first loading the polyfill for example?

[dlongley]

@gjgd,

That's an improvement, but is there a way to control the size of the modal by passing a size parameter when first loading the polyfill for example?

There's no way to control it just yet and the mechanism for control would not be via the handler polyfill.

As of right now, we expect that it may be harmful to users for credential handler window sizes to be different across websites. We also don't expect browsers to grant handlers the ability to control the size of the window at this time -- and the polyfill tries to approximate what browser vendors would do. Browser vendors prefer to give their users a consistent experience across sites when it comes to browser chrome/browser mediated flows. This is based on what we heard in the Web Payments WG. Of course, credential handlers may render whatever they like inside of the handler window.

However, as mentioned above, we may add the ability to configure the size of the window via a cookie on the mediator website (authn.io) -- to enable usability testing that would create a consistent UI for each user, but different users could potentially experience different sizes. For now, we've gone full screen for all users because it is not at all clear what a better smaller size would be without usability testing.

[dlongley]

Instead of having the RP decide the credential handler window size (for reasons mentioned above), we may allow credential handler providers to express a preferred size in their manifest.json credential_handler section. This preference would only come into play when CHAPI is used desktop (on mobile full screen would always be used).