Browser capability (top window)
Secure context
PaymentRequest API
ApplePaySession defined
canMakePayments()
Google Pay (PR)
Permissions: payment
These checks run on the parent page. Behavior inside the iframe can differ — open DevTools and switch the JS context to the device.egovapps.com frame to test there.
iframe controls

Quick reference:
• Google Pay — needs allow="payment" on the iframe.
• Apple Pay — needs allow="payment" AND merchant domain device.egovapps.com registered with Apple (see .well-known/apple-developer-merchantid-domain-association).
• Apple Pay JS in cross-origin iframes is supported on Safari 14+ only.
• The embedded site's response can also send Permissions-Policy: payment=* — check it in Network tab.
Debug log