device_local_account.cc revision 90dce4d38c5ff5333bea97d859d4e484e27edf0c
15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2013 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/browser/chromeos/policy/device_local_account.h" 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <set> 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/logging.h" 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/memory/scoped_ptr.h" 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/strings/string_number_conversions.h" 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/values.h" 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/browser/chromeos/settings/cros_settings.h" 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/browser/chromeos/settings/cros_settings_names.h" 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "google_apis/gaia/gaia_auth_util.h" 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace policy { 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace { 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kPublicAccountDomainPrefix[] = "public-accounts"; 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kKioskAppAccountDomainPrefix[] = "kiosk-apps"; 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kDeviceLocalAccountDomainSuffix[] = ".device-local.localhost"; 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)DeviceLocalAccount::DeviceLocalAccount(Type type, 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::string& account_id, 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::string& kiosk_app_id, 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::string& kiosk_app_update_url) 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) : type(type), 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) account_id(account_id), 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) user_id(GenerateDeviceLocalAccountUserId(account_id, type)), 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kiosk_app_id(kiosk_app_id), 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kiosk_app_update_url(kiosk_app_update_url) { 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)DeviceLocalAccount::~DeviceLocalAccount() { 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)std::string GenerateDeviceLocalAccountUserId(const std::string& account_id, 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) DeviceLocalAccount::Type type) { 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string domain_prefix; 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) switch (type) { 455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case DeviceLocalAccount::TYPE_PUBLIC_SESSION: 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) domain_prefix = kPublicAccountDomainPrefix; 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) break; 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case DeviceLocalAccount::TYPE_KIOSK_APP: 495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) domain_prefix = kKioskAppAccountDomainPrefix; 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) break; 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case DeviceLocalAccount::TYPE_COUNT: 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) NOTREACHED(); 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) break; 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return base::HexEncode(account_id.c_str(), account_id.size()) + "@" + 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) domain_prefix + kDeviceLocalAccountDomainSuffix; 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool IsKioskAppUser(const std::string& user_id) { 605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return gaia::ExtractDomainName(user_id) == 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string(kKioskAppAccountDomainPrefix) + 625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kDeviceLocalAccountDomainSuffix; 635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)void SetDeviceLocalAccounts( 665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) chromeos::CrosSettings* cros_settings, 675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::vector<DeviceLocalAccount>& accounts) { 685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) base::ListValue list; 695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (std::vector<DeviceLocalAccount>::const_iterator it = accounts.begin(); 705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) it != accounts.end(); ++it) { 715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) scoped_ptr<base::DictionaryValue> entry(new base::DictionaryValue); 725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) entry->SetStringWithoutPathExpansion( 735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) chromeos::kAccountsPrefDeviceLocalAccountsKeyId, 74 it->account_id); 75 entry->SetIntegerWithoutPathExpansion( 76 chromeos::kAccountsPrefDeviceLocalAccountsKeyType, 77 it->type); 78 if (it->type == DeviceLocalAccount::TYPE_KIOSK_APP) { 79 entry->SetStringWithoutPathExpansion( 80 chromeos::kAccountsPrefDeviceLocalAccountsKeyKioskAppId, 81 it->kiosk_app_id); 82 if (!it->kiosk_app_update_url.empty()) { 83 entry->SetStringWithoutPathExpansion( 84 chromeos::kAccountsPrefDeviceLocalAccountsKeyKioskAppUpdateURL, 85 it->kiosk_app_update_url); 86 } 87 } 88 list.Append(entry.release()); 89 } 90 91 cros_settings->Set(chromeos::kAccountsPrefDeviceLocalAccounts, list); 92} 93 94std::vector<DeviceLocalAccount> GetDeviceLocalAccounts( 95 chromeos::CrosSettings* cros_settings) { 96 std::vector<DeviceLocalAccount> accounts; 97 98 const base::ListValue* list = NULL; 99 cros_settings->GetList(chromeos::kAccountsPrefDeviceLocalAccounts, &list); 100 if (!list) 101 return accounts; 102 103 std::set<std::string> account_ids; 104 for (size_t i = 0; i < list->GetSize(); ++i) { 105 const base::DictionaryValue* entry = NULL; 106 if (!list->GetDictionary(i, &entry)) { 107 LOG(ERROR) << "Corrupt entry in device-local account list at index " << i 108 << "."; 109 continue; 110 } 111 112 std::string account_id; 113 if (!entry->GetStringWithoutPathExpansion( 114 chromeos::kAccountsPrefDeviceLocalAccountsKeyId, &account_id) || 115 account_id.empty()) { 116 LOG(ERROR) << "Missing account ID in device-local account list at index " 117 << i << "."; 118 continue; 119 } 120 121 int type; 122 if (!entry->GetIntegerWithoutPathExpansion( 123 chromeos::kAccountsPrefDeviceLocalAccountsKeyType, &type) || 124 type < 0 || type >= DeviceLocalAccount::TYPE_COUNT) { 125 LOG(ERROR) << "Missing or invalid account type in device-local account " 126 << "list at index " << i << "."; 127 continue; 128 } 129 130 std::string kiosk_app_id; 131 std::string kiosk_app_update_url; 132 if (type == DeviceLocalAccount::TYPE_KIOSK_APP) { 133 if (!entry->GetStringWithoutPathExpansion( 134 chromeos::kAccountsPrefDeviceLocalAccountsKeyKioskAppId, 135 &kiosk_app_id)) { 136 LOG(ERROR) << "Missing app ID in device-local account entry at index " 137 << i << "."; 138 continue; 139 } 140 entry->GetStringWithoutPathExpansion( 141 chromeos::kAccountsPrefDeviceLocalAccountsKeyKioskAppUpdateURL, 142 &kiosk_app_update_url); 143 } 144 145 if (!account_ids.insert(account_id).second) { 146 LOG(ERROR) << "Duplicate entry in device-local account list at index " 147 << i << ": " << account_id << "."; 148 continue; 149 } 150 151 accounts.push_back(DeviceLocalAccount( 152 static_cast<DeviceLocalAccount::Type>(type), 153 account_id, kiosk_app_id, kiosk_app_update_url)); 154 } 155 return accounts; 156} 157 158} // namespace policy 159