Skip to content

FF145 Storage Access HTTP headers#41614

Merged
chrisdavidmills merged 10 commits intomdn:mainfrom
hamishwillee:ff145_storage_access_http
Nov 7, 2025
Merged

FF145 Storage Access HTTP headers#41614
chrisdavidmills merged 10 commits intomdn:mainfrom
hamishwillee:ff145_storage_access_http

Conversation

@hamishwillee
Copy link
Copy Markdown
Collaborator

@hamishwillee hamishwillee commented Oct 21, 2025 •
edited
Loading

FF145 supports the HTTP headers Activate-Storage-Access and Sec-Fetch-Storage-Access in nightly, and they are already supported in Chrome 133.

This adds docs. Bit of a slog. Mostly untangling the language we use around accessing the permission in the normal API docs.
The Sec-Fetch-Storage-Access language makes this easier by clearly separating the permission that is granted to a particular embedded/embedder site key, and activating that permission for a particular context.

I've tried to rewrite the how it works and add sequences that shows how this works. For the headers, Activate-Storage-Access
has lots of docs and is linked from Sec-Fetch-Storage-Access.
I have not updated "Using" doc. I probably should, but might do that when this is actually released.

Spec is https://privacycg.github.io/storage-access-headers , explainer is https://github.com/privacycg/storage-access-headers/blob/d73c092919f0ca44c02c0890c078046ef8a63a88/README.md

Related docs work can be tracked in #41499

@hamishwillee hamishwillee requested a review from a team as a code owner October 21, 2025 06:38
@hamishwillee hamishwillee requested review from bsmth and removed request for a team October 21, 2025 06:38
@github-actions github-actions bot added the Content:HTTP HTTP docs label Oct 21, 2025
@hamishwillee hamishwillee marked this pull request as draft October 21, 2025 06:39
@github-actions github-actions bot added the size/m [PR only] 51-500 LoC changed label Oct 21, 2025
@hamishwillee hamishwillee mentioned this pull request Oct 21, 2025
Closed
8 tasks
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Oct 21, 2025 •
edited
Loading

Preview URLs

Flaws (6)

Note! 2 documents with no flaws that don't need to be listed. 🎉

URL: /en-US/docs/Web/HTTP/Reference/Headers
Title: HTTP headers
Flaw count: 3

  • macros:
    • Can't resolve /en-US/docs/Web/HTTP/Reference/Headers/Accept-Signature
    • Can't resolve /en-US/docs/Web/HTTP/Reference/Headers/Signature
    • Can't resolve /en-US/docs/Web/HTTP/Reference/Headers/Signed-Headers

URL: /en-US/docs/Web/HTTP/Reference/Headers/Sec-Fetch-Storage-Access
Title: Sec-Fetch-Storage-Access header
Flaw count: 3

  • unknown:
    • No generic content config found
    • no blog root
    • no blog root
External URLs (2)

URL: /en-US/docs/Web/API/Storage_Access_API
Title: Storage Access API

URL: /en-US/docs/Web/HTTP/Reference/Headers/Sec-Fetch-Storage-Access
Title: Sec-Fetch-Storage-Access header

(comment last updated: 2025-11-07 09:28:59)

@chrisdavidmills chrisdavidmills removed their request for review October 21, 2025 07:31
@chrisdavidmills
Copy link
Copy Markdown
Contributor

chrisdavidmills commented Oct 21, 2025

@hamishwillee removing myself for now. When this is finished, feel free to add me back to review; happy to do so.

@bsmth bsmth removed their request for review October 21, 2025 09:41
@bsmth
Copy link
Copy Markdown
Member

bsmth commented Oct 21, 2025

Ditto! Add me back on as a reviewer when you're ready for a look 👀

@github-actions github-actions bot added the Content:WebAPI Web API docs label Oct 27, 2025
@hamishwillee hamishwillee force-pushed the ff145_storage_access_http branch 2 times, most recently from 8b0c4d6 to 17f04c2 Compare November 4, 2025 05:35
@github-actions github-actions bot added size/l [PR only] 501-1000 LoC changed and removed size/m [PR only] 51-500 LoC changed labels Nov 4, 2025
hamishwillee
hamishwillee commented Nov 4, 2025
View reviewed changes
@hamishwillee hamishwillee marked this pull request as ready for review November 4, 2025 05:46
@hamishwillee hamishwillee requested review from a team as code owners November 4, 2025 05:46
@hamishwillee
Copy link
Copy Markdown
Collaborator Author

hamishwillee commented Nov 4, 2025

@chrisdavidmills @bsmth I've added you back as reviewers as this is a reasonable first shot.

Apologies that it is a bit rough - I have not yet self-subedited. Given I'm away after Friday this is the only way I can be sure it has a chance of being ready for the release. If it is simply not close to good enough we can wait though, as I did the release not separately.

@sideshowbarker sideshowbarker removed request for a team November 5, 2025 01:14
chrisdavidmills
chrisdavidmills requested changes Nov 5, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@chrisdavidmills chrisdavidmills left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hamishwillee this is a truly heroic bit of work. I've got a whole bunch of nitpicky language comments, but it largely makes sense.

hamishwillee and others added 6 commits November 7, 2025 10:37
@hamishwillee
FF145 Storage Access HTTP headers
93f8b8c
@hamishwillee @github-actions
Update files/en-us/web/http/reference/headers/sec-fetch-storage-acces…
765c0c3 
…s/index.md

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@hamishwillee
Delete files/en-us/web/http/reference/headers/sec-fetch-storage-acces…
0012f6a 
…s/mermaid_iframe.svg
@hamishwillee @chrisdavidmills
Apply easy suggestions from code review
51d783d 
Co-authored-by: Chris Mills <chrisdavidmills@gmail.com>
@hamishwillee @chrisdavidmills
Apply suggestions from code review - two more easy ones
042495a 
Co-authored-by: Chris Mills <chrisdavidmills@gmail.com>
@hamishwillee
Clear up activate-storage-access no permission example
45aeaf2
@hamishwillee hamishwillee force-pushed the ff145_storage_access_http branch from 39a12f3 to 45aeaf2 Compare November 7, 2025 01:04
@hamishwillee
Copy link
Copy Markdown
Collaborator Author

hamishwillee commented Nov 7, 2025

@hamishwillee this is a truly heroic bit of work. I've got a whole bunch of nitpicky language comments, but it largely makes sense.

THanks @chrisdavidmills - and thanks for your timely and heroic review. I did find it hard - the previous terminology didn't lend itself to integrating this update.

Should be good to look at again. I have accepted pretty much all your suggestions. Only not reduced the description of the ActivateX... header - as noted, I don't think I can and leave it useful.

@hamishwillee
Copy link
Copy Markdown
Collaborator Author

hamishwillee commented Nov 7, 2025

PS Feel free to merge if remaining fixes end up being nits :-). I'm away so if it is essentially good enough then better to get it in.

chrisdavidmills
chrisdavidmills approved these changes Nov 7, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@chrisdavidmills chrisdavidmills left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hamishwillee hurrah, I think this is ready to go in! Great work, man.

@chrisdavidmills chrisdavidmills merged commit 4e011ae into mdn:main Nov 7, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] left review comments

@chrisdavidmills chrisdavidmills chrisdavidmills approved these changes

@bsmth bsmth Awaiting requested review from bsmth

Assignees

No one assigned

Labels

Content:HTTP HTTP docs Content:WebAPI Web API docs size/l [PR only] 501-1000 LoC changed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@hamishwillee @chrisdavidmills @bsmth @mdn-bot