Add a disconnect method

spec/index.bs

@@ -494,17 +494,21 @@ To <dfn>create a connection between the RP and the IdP account</dfn> given an
 </div>
 
 <div algorithm>
-To <dfn>remove a connection</dfn> given |accountId|, |rpOrigin|, |idpOrigin|, run the following
-steps. It returns whether a connection matching the |accountId| was found and removed:
-    1. If |accountId| is not failure:
-        1. Let |triple| be (|rpOrigin|, |idpOrigin|, |accountId|).
-        1. If [=connected accounts set=] [=list/contains=] |triple|:
-            1. [=list/Remove=] |triple| from the [=connected accounts set=].
-            1. Return true.
-    1. For every (|rp|, |idp|, |accountId|) |triple| in the [=connected accounts set=]:
+To <dfn>remove the connection</dfn> given |accountId|, |rpOrigin|, and |idpOrigin|, run the
+following steps. It returns whether the |accountId| connection was successfully removed.
+    1. Let |triple| be (|rpOrigin|, |idpOrigin|, |accountId|).
+    1. If [=connected accounts set=] [=list/contains=] |triple|:
+        1. [=list/Remove=] |triple| from the [=connected accounts set=].
+        1. Return true.
+    1. Return false.
+</div>
+
+<div algorithm>
+To <dfn>remove all connections</dfn> given |rpOrigin| and |idpOrigin|, run the following steps:
+    1. For every (|rp|, |idp|, <var ignore="">accountId</var>) |triple| in the
+        [=connected accounts set=]:
         1. If |rp| equals |rpOrigin| and |idp| equals |idpOrigin|, [=list/remove=] |triple| from the
             [=connected accounts set=].
-    1. Return false.
 </div>
 
 <!-- ============================================================ -->
@@ -553,10 +557,6 @@ When the static {{IdentityCredential/disconnect}} method is invoked, given an
     1. Let |document| be |globalObject|'s [=associated Document=].
     1. If |document| is not [=allowed to use=] the [=identity-credentials-get=]
         [=policy-controlled feature=], throw a "{{NotAllowedError}}" {{DOMException}}.
-    1. If any of the following members from |options| are empty, throw a new {{TypeError}}:
-        * {{IdentityProviderConfig/configURL}}
-        * {{IdentityProviderConfig/clientId}}
-        * {{IdentityCredentialDisconnectOptions/accountHint}}
     1. Let |promise| be a new {{Promise}}.
     1. [=In parallel=], [=attempt to disconnect=] given |options|, |promise|, and |globalObject|.
     1. Return |promise|.
@@ -594,13 +594,18 @@ When asked to <dfn>attempt to disconnect</dfn> given an {{IdentityCredentialDisc
     1. If |disconnectUrl| is failure, [=reject=] |promise| with a "{{NetworkError}}"
         {{DOMException}}.
     1. [=Send a disconnect request=] with |disconnectUrl|, |options|, and |globalObject|, and let
-        |accountId| be the result.
+        |result| be the result.
     1. Let |idpOrigin| be the [=url/origin=] corresponding to |configUrl|.
     1. Let |rpOrigin| be |globalObject|'s [=associated Document=]'s [=Document/origin=].
-    1. [=Remove a connection=] for |accountId|, |rpOrigin|, and |idpOrigin| and let |foundAccount|
-        be the result.
-    1. If |foundAccount|, [=resolve=] |promise|, otherwise [=reject=] |promise| with a
-        "{{NetworkError}}" {{DOMException}}.
+    1. If |result| is failure:
+        1. [=Remove all connections=] given |rpOrigin| and |idpOrigin|.
+        1. [=Reject=] |promise| with a "{{NetworkError}}" {{DOMException}}.
+        1. Return.
+    1. Let |accountId| be |result| (note that it is not failure).
+    1. [=Remove the connection=] given |accountId|, |rpOrigin|, and |idpOrigin| and let
+        |wasAccountRemoved| be the result.
+    1. If |wasAccountRemoved| is false, [=remove all connections=] given |rpOrigin| and |idpOrigin|.
+    1. [=Resolve=] |promise|.
 </div>
 
 <!-- ============================================================ -->