identity_api.cc revision 6e8cce623b6e4fe0c9e4af605d675dd9d0338c38
15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/browser/extensions/api/identity/identity_api.h" 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 7c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include <set> 8c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include <string> 990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)#include <utility> 10c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include <vector> 11c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 125f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "base/debug/trace_event.h" 132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/lazy_instance.h" 14868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/prefs/pref_service.h" 1590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)#include "base/strings/string_number_conversions.h" 165e3f23d412006dc4db4e659864679f29341e113fTorne (Richard Coles)#include "base/strings/stringprintf.h" 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/values.h" 18c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/app_mode/app_mode_utils.h" 19868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "chrome/browser/browser_process.h" 207dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/chrome_notification_types.h" 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/browser/extensions/extension_service.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 237dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/signin/profile_oauth2_token_service_factory.h" 245d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 25116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "chrome/browser/ui/webui/signin/login_ui_service_factory.h" 26c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/common/extensions/api/identity.h" 272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/common/extensions/api/identity/oauth2_manifest_handler.h" 28868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "chrome/common/pref_names.h" 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "chrome/common/url_constants.h" 30effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch#include "components/signin/core/browser/profile_oauth2_token_service.h" 31e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch#include "components/signin/core/browser/signin_manager.h" 32cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)#include "components/signin/core/common/profile_management_switches.h" 33f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "extensions/browser/event_router.h" 34a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles)#include "extensions/browser/extension_function_dispatcher.h" 35f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "extensions/common/extension.h" 36116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "extensions/common/permissions/permission_set.h" 37116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "extensions/common/permissions/permissions_data.h" 38eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "google_apis/gaia/gaia_urls.h" 397dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "url/gurl.h" 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 41c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 42116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "chrome/browser/chromeos/login/session/user_session_manager.h" 435d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "chrome/browser/chromeos/policy/browser_policy_connector_chromeos.h" 44eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "chrome/browser/chromeos/settings/device_oauth2_token_service.h" 45eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "chrome/browser/chromeos/settings/device_oauth2_token_service_factory.h" 466e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles)#include "components/user_manager/user_manager.h" 478bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles)#include "google_apis/gaia/gaia_constants.h" 48c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 49c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace extensions { 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace identity_constants { 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kInvalidClientId[] = "Invalid OAuth2 Client ID."; 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kInvalidScopes[] = "Invalid OAuth2 scopes."; 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kAuthFailure[] = "OAuth2 request failed: "; 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kNoGrant[] = "OAuth2 not granted or revoked."; 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kUserRejected[] = "The user did not approve access."; 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kUserNotSignedIn[] = "The user is not signed in."; 59c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const char kInteractionRequired[] = "User interaction required."; 605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)const char kInvalidRedirect[] = "Did not redirect to the right URL."; 61c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const char kOffTheRecord[] = "Identity API is disabled in incognito windows."; 62868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)const char kPageLoadFailure[] = "Authorization page could not be loaded."; 63e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst char kCanceled[] = "canceled"; 64c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 65c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const int kCachedIssueAdviceTTLSeconds = 1; 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace identity_constants 675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 68c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)namespace { 69c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 70c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)static const char kChromiumDomainRedirectUrlPattern[] = 71c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) "https://%s.chromiumapp.org/"; 72c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 73a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles)std::string GetPrimaryAccountId(content::BrowserContext* context) { 745d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) SigninManagerBase* signin_manager = 75a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) SigninManagerFactory::GetForProfile(Profile::FromBrowserContext(context)); 765d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) return signin_manager->GetAuthenticatedAccountId(); 775d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)} 785d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) 79c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} // namespace 80c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 81c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)namespace identity = api::identity; 825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 83e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityTokenCacheValue::IdentityTokenCacheValue() 84e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch : status_(CACHE_STATUS_NOTFOUND) {} 85e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 86e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityTokenCacheValue::IdentityTokenCacheValue( 87e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch const IssueAdviceInfo& issue_advice) 88e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch : status_(CACHE_STATUS_ADVICE), issue_advice_(issue_advice) { 89e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch expiration_time_ = 90e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch base::Time::Now() + base::TimeDelta::FromSeconds( 91e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch identity_constants::kCachedIssueAdviceTTLSeconds); 92e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 93e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 94e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityTokenCacheValue::IdentityTokenCacheValue(const std::string& token, 95e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch base::TimeDelta time_to_live) 96e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch : status_(CACHE_STATUS_TOKEN), token_(token) { 97e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch // Remove 20 minutes from the ttl so cached tokens will have some time 98e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch // to live any time they are returned. 99e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch time_to_live -= base::TimeDelta::FromMinutes(20); 100e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 101e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch base::TimeDelta zero_delta; 102e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch if (time_to_live < zero_delta) 103e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch time_to_live = zero_delta; 104e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 105e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch expiration_time_ = base::Time::Now() + time_to_live; 106e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 107e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 108e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityTokenCacheValue::~IdentityTokenCacheValue() {} 109e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 110e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityTokenCacheValue::CacheValueStatus IdentityTokenCacheValue::status() 111e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch const { 112e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch if (is_expired()) 113e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return IdentityTokenCacheValue::CACHE_STATUS_NOTFOUND; 114e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch else 115e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return status_; 116e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 117e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 118e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst IssueAdviceInfo& IdentityTokenCacheValue::issue_advice() const { 119e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return issue_advice_; 120e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 121e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 122e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst std::string& IdentityTokenCacheValue::token() const { return token_; } 123e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 124e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochbool IdentityTokenCacheValue::is_expired() const { 125e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return status_ == CACHE_STATUS_NOTFOUND || 126e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch expiration_time_ < base::Time::Now(); 127e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 128e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 129e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst base::Time& IdentityTokenCacheValue::expiration_time() const { 130e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return expiration_time_; 131e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 132e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 133e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityAPI::IdentityAPI(content::BrowserContext* context) 134e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch : browser_context_(context), 135116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch profile_identity_provider_( 136116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch SigninManagerFactory::GetForProfile( 137116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch Profile::FromBrowserContext(context)), 138116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch ProfileOAuth2TokenServiceFactory::GetForProfile( 139116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch Profile::FromBrowserContext(context)), 140116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch LoginUIServiceFactory::GetForProfile( 141116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch Profile::FromBrowserContext(context))), 142116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch account_tracker_(&profile_identity_provider_, 143116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch g_browser_process->system_request_context()) { 144e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch account_tracker_.AddObserver(this); 145e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 146e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 147e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityAPI::~IdentityAPI() {} 148e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 149e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochIdentityMintRequestQueue* IdentityAPI::mint_queue() { return &mint_queue_; } 150e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 151e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::SetCachedToken(const ExtensionTokenKey& key, 152e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch const IdentityTokenCacheValue& token_data) { 153e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CachedTokens::iterator it = token_cache_.find(key); 154e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch if (it != token_cache_.end() && it->second.status() <= token_data.status()) 155e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch token_cache_.erase(it); 156e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 157e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch token_cache_.insert(std::make_pair(key, token_data)); 158e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 159e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 160e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::EraseCachedToken(const std::string& extension_id, 161e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch const std::string& token) { 162e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CachedTokens::iterator it; 163e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch for (it = token_cache_.begin(); it != token_cache_.end(); ++it) { 164e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch if (it->first.extension_id == extension_id && 165e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch it->second.status() == IdentityTokenCacheValue::CACHE_STATUS_TOKEN && 166e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch it->second.token() == token) { 167e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch token_cache_.erase(it); 168e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch break; 169e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch } 170e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch } 171e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 172e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 173e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::EraseAllCachedTokens() { token_cache_.clear(); } 174e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 175e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst IdentityTokenCacheValue& IdentityAPI::GetCachedToken( 176e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch const ExtensionTokenKey& key) { 177e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return token_cache_[key]; 178e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 179e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 180e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochconst IdentityAPI::CachedTokens& IdentityAPI::GetAllCachedTokens() { 181e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return token_cache_; 182e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 183e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 184cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)std::vector<std::string> IdentityAPI::GetAccounts() const { 18546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) const std::string primary_account_id = GetPrimaryAccountId(browser_context_); 186116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch const std::vector<gaia::AccountIds> ids = account_tracker_.GetAccounts(); 187cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) std::vector<std::string> gaia_ids; 188cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 189cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) if (switches::IsExtensionsMultiAccount()) { 190116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch for (std::vector<gaia::AccountIds>::const_iterator it = ids.begin(); 191cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) it != ids.end(); 192cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) ++it) { 193cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) gaia_ids.push_back(it->gaia); 194cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) } 195cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) } else if (ids.size() >= 1) { 196cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) gaia_ids.push_back(ids[0].gaia); 197cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) } 198cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 199cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) return gaia_ids; 200cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)} 201cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 20246d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)std::string IdentityAPI::FindAccountKeyByGaiaId(const std::string& gaia_id) { 203116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch return account_tracker_.FindAccountIdsByGaiaId(gaia_id).account_key; 204e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 205e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 206e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::Shutdown() { 207e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch FOR_EACH_OBSERVER(ShutdownObserver, shutdown_observer_list_, OnShutdown()); 208e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch account_tracker_.RemoveObserver(this); 209e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch account_tracker_.Shutdown(); 210e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 211e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 212e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochstatic base::LazyInstance<BrowserContextKeyedAPIFactory<IdentityAPI> > 213e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch g_factory = LAZY_INSTANCE_INITIALIZER; 214e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 215e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch// static 216e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen MurdochBrowserContextKeyedAPIFactory<IdentityAPI>* IdentityAPI::GetFactoryInstance() { 217e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return g_factory.Pointer(); 218e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 219e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 220116680a4aac90f2aa7413d9095a592090648e557Ben Murdochvoid IdentityAPI::OnAccountAdded(const gaia::AccountIds& ids) { 221116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch} 222e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 223116680a4aac90f2aa7413d9095a592090648e557Ben Murdochvoid IdentityAPI::OnAccountRemoved(const gaia::AccountIds& ids) { 224116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch} 225e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 226116680a4aac90f2aa7413d9095a592090648e557Ben Murdochvoid IdentityAPI::OnAccountSignInChanged(const gaia::AccountIds& ids, 227e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch bool is_signed_in) { 228e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch api::identity::AccountInfo account_info; 229e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch account_info.id = ids.gaia; 230e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 231e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch scoped_ptr<base::ListValue> args = 232e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch api::identity::OnSignInChanged::Create(account_info, is_signed_in); 233e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch scoped_ptr<Event> event(new Event(api::identity::OnSignInChanged::kEventName, 234e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch args.Pass(), 235e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch browser_context_)); 236e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 2370529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EventRouter::Get(browser_context_)->BroadcastEvent(event.Pass()); 238e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 239e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 240e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::AddShutdownObserver(ShutdownObserver* observer) { 241e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch shutdown_observer_list_.AddObserver(observer); 242e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 243e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 244e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityAPI::RemoveShutdownObserver(ShutdownObserver* observer) { 245e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch shutdown_observer_list_.RemoveObserver(observer); 246e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 247e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 248116680a4aac90f2aa7413d9095a592090648e557Ben Murdochvoid IdentityAPI::SetAccountStateForTest(gaia::AccountIds ids, 249116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch bool is_signed_in) { 250cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) account_tracker_.SetAccountStateForTest(ids, is_signed_in); 251cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)} 252cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 253e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochtemplate <> 254e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid BrowserContextKeyedAPIFactory<IdentityAPI>::DeclareFactoryDependencies() { 255e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch DependsOn(ExtensionsBrowserClient::Get()->GetExtensionSystemFactory()); 256e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch DependsOn(ProfileOAuth2TokenServiceFactory::GetInstance()); 257e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 258e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 259cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)IdentityGetAccountsFunction::IdentityGetAccountsFunction() { 260cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)} 261cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 262cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)IdentityGetAccountsFunction::~IdentityGetAccountsFunction() { 263cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)} 264cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 265cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)ExtensionFunction::ResponseAction IdentityGetAccountsFunction::Run() { 266cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) if (GetProfile()->IsOffTheRecord()) { 267cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) return RespondNow(Error(identity_constants::kOffTheRecord)); 268cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) } 269cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 270cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) std::vector<std::string> gaia_ids = 271cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) IdentityAPI::GetFactoryInstance()->Get(GetProfile())->GetAccounts(); 272cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) DCHECK(gaia_ids.size() < 2 || switches::IsExtensionsMultiAccount()); 273cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 274cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) base::ListValue* infos = new base::ListValue(); 275cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 276cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) for (std::vector<std::string>::const_iterator it = gaia_ids.begin(); 277cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) it != gaia_ids.end(); 278cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) ++it) { 279cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) api::identity::AccountInfo account_info; 280cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) account_info.id = *it; 281cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) infos->Append(account_info.ToValue().release()); 282cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) } 283cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 284cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) return RespondNow(OneArgument(infos)); 285cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)} 286cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles) 2875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)IdentityGetAuthTokenFunction::IdentityGetAuthTokenFunction() 2885d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) : OAuth2TokenService::Consumer("extensions_identity_api"), 2895d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) should_prompt_for_scopes_(false), 2905f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) should_prompt_for_signin_(false) { 2915f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_BEGIN1("identity", 2925f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 2935f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 2945f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "extension", 2955f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) extension()->id()); 2965f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)} 297c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 2985f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)IdentityGetAuthTokenFunction::~IdentityGetAuthTokenFunction() { 2995f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_END0("identity", "IdentityGetAuthTokenFunction", this); 3005f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)} 3015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 302010d83a9304c5a91596085d917d248abff47903aTorne (Richard Coles)bool IdentityGetAuthTokenFunction::RunAsync() { 3031e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) if (GetProfile()->IsOffTheRecord()) { 304c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kOffTheRecord; 305c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return false; 306c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 307c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 308c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) scoped_ptr<identity::GetAuthToken::Params> params( 309c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) identity::GetAuthToken::Params::Create(*args_)); 3105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) EXTENSION_FUNCTION_VALIDATE(params.get()); 311c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) bool interactive = params->details.get() && 312c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) params->details->interactive.get() && 313c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *params->details->interactive; 314c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 315c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) should_prompt_for_scopes_ = interactive; 316c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) should_prompt_for_signin_ = interactive; 3175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 3185f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const OAuth2Info& oauth2_info = OAuth2Info::GetOAuth2Info(extension()); 3195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 320c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Check that the necessary information is present in the manifest. 321eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch oauth2_client_id_ = GetOAuth2ClientId(); 322eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch if (oauth2_client_id_.empty()) { 3235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) error_ = identity_constants::kInvalidClientId; 3245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 3255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 327a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) std::set<std::string> scopes(oauth2_info.scopes.begin(), 328a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) oauth2_info.scopes.end()); 32946d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) 33046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) std::string account_key = GetPrimaryAccountId(GetProfile()); 33146d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) 332f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (params->details.get()) { 333f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (params->details->account.get()) { 334f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) std::string detail_key = 335f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) extensions::IdentityAPI::GetFactoryInstance() 336f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) ->Get(GetProfile()) 337f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) ->FindAccountKeyByGaiaId(params->details->account->id); 338f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 339f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (detail_key != account_key) { 340f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (detail_key.empty() || !switches::IsExtensionsMultiAccount()) { 341f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) // TODO(courage): should this be a different error? 342f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) error_ = identity_constants::kUserNotSignedIn; 343f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return false; 344f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) } 345f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 346f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) account_key = detail_key; 34746d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) } 348f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) } 34946d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) 350f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (params->details->scopes.get()) { 351f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) scopes = std::set<std::string>(params->details->scopes->begin(), 352f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) params->details->scopes->end()); 35346d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) } 35446d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) } 35546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) 356f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (scopes.size() == 0) { 357f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) error_ = identity_constants::kInvalidScopes; 358f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return false; 359f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) } 360f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 36146d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) token_key_.reset( 3625f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) new ExtensionTokenKey(extension()->id(), account_key, scopes)); 363a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) 364e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch // From here on out, results must be returned asynchronously. 365e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch StartAsyncRun(); 3665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 367eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#if defined(OS_CHROMEOS) 3685d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) policy::BrowserPolicyConnectorChromeOS* connector = 3695d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) g_browser_process->platform_part()->browser_policy_connector_chromeos(); 3706e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles) if (user_manager::UserManager::Get()->IsLoggedInAsKioskApp() && 3715d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) connector->IsEnterpriseManaged()) { 372eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch StartMintTokenFlow(IdentityMintRequestQueue::MINT_TYPE_NONINTERACTIVE); 373eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch return true; 374eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch } 375eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#endif 376eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 3775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!HasLoginToken()) { 378c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!should_prompt_for_signin_) { 379e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CompleteFunctionWithError(identity_constants::kUserNotSignedIn); 380e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch return true; 3815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 382c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Display a login prompt. 383c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartSigninFlow(); 3845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else { 385c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartMintTokenFlow(IdentityMintRequestQueue::MINT_TYPE_NONINTERACTIVE); 3865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 387c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 388c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return true; 3895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 3905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 391e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityGetAuthTokenFunction::StartAsyncRun() { 392e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch // Balanced in CompleteAsyncRun 393e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch AddRef(); 394e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch extensions::IdentityAPI::GetFactoryInstance() 395e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->Get(GetProfile()) 396e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->AddShutdownObserver(this); 397e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 398e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 399e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityGetAuthTokenFunction::CompleteAsyncRun(bool success) { 400e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch extensions::IdentityAPI::GetFactoryInstance() 401e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->Get(GetProfile()) 402e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->RemoveShutdownObserver(this); 403e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 404e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch SendResponse(success); 405e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch Release(); // Balanced in StartAsyncRun 406e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 407e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 408c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::CompleteFunctionWithResult( 4095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::string& access_token) { 410e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 4113551c9c881056c480085172ff9840cab31610854Torne (Richard Coles) SetResult(new base::StringValue(access_token)); 412e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CompleteAsyncRun(true); 4135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 4145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 415c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::CompleteFunctionWithError( 416c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const std::string& error) { 4175f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST1("identity", 4185f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 4195f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 4205f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "CompleteFunctionWithError", 4215f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "error", 4225f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) error); 423c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = error; 424e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CompleteAsyncRun(false); 4255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 4265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 427c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::StartSigninFlow() { 428c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // All cached tokens are invalid because the user is not signed in. 429c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityAPI* id_api = 430a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) extensions::IdentityAPI::GetFactoryInstance()->Get(GetProfile()); 431c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) id_api->EraseAllCachedTokens(); 432c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Display a login prompt. If the subsequent mint fails, don't display the 433c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // login prompt again. 434c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) should_prompt_for_signin_ = false; 435c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ShowLoginPopup(); 4365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 4375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 438c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::StartMintTokenFlow( 439c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityMintRequestQueue::MintType type) { 440c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) mint_token_flow_type_ = type; 441c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 442c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Flows are serialized to prevent excessive traffic to GAIA, and 443c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // to consolidate UI pop-ups. 444c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityAPI* id_api = 445a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) extensions::IdentityAPI::GetFactoryInstance()->Get(GetProfile()); 446c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 447c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!should_prompt_for_scopes_) { 448c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Caller requested no interaction. 449c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 450c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (type == IdentityMintRequestQueue::MINT_TYPE_INTERACTIVE) { 451c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // GAIA told us to do a consent UI. 452c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithError(identity_constants::kNoGrant); 453c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return; 454c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 455c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!id_api->mint_queue()->empty( 456a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) IdentityMintRequestQueue::MINT_TYPE_INTERACTIVE, *token_key_)) { 457c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Another call is going through a consent UI. 458c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithError(identity_constants::kNoGrant); 459c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return; 460c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 4615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 462a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) id_api->mint_queue()->RequestStart(type, *token_key_, this); 4635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 4645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 465c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::CompleteMintTokenFlow() { 466c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityMintRequestQueue::MintType type = mint_token_flow_type_; 4675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 4681e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) extensions::IdentityAPI::GetFactoryInstance() 469a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) ->Get(GetProfile()) 4701e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) ->mint_queue() 471a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) ->RequestComplete(type, *token_key_, this); 4725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 4735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 474c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::StartMintToken( 475c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityMintRequestQueue::MintType type) { 4765f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST1("identity", 4775f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 4785f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 4795f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "StartMintToken", 4805f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "type", 4815f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) type); 4825f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 4835f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const OAuth2Info& oauth2_info = OAuth2Info::GetOAuth2Info(extension()); 484a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) IdentityAPI* id_api = IdentityAPI::GetFactoryInstance()->Get(GetProfile()); 485a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) IdentityTokenCacheValue cache_entry = id_api->GetCachedToken(*token_key_); 486c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityTokenCacheValue::CacheValueStatus cache_status = 487c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cache_entry.status(); 488c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 489c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (type == IdentityMintRequestQueue::MINT_TYPE_NONINTERACTIVE) { 490c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) switch (cache_status) { 491c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case IdentityTokenCacheValue::CACHE_STATUS_NOTFOUND: 492868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#if defined(OS_CHROMEOS) 493868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // Always force minting token for ChromeOS kiosk app. 4946e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles) if (user_manager::UserManager::Get()->IsLoggedInAsKioskApp()) { 4958bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) gaia_mint_token_mode_ = OAuth2MintTokenFlow::MODE_MINT_TOKEN_FORCE; 4965d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) policy::BrowserPolicyConnectorChromeOS* connector = 4975d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) g_browser_process->platform_part() 4985d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) ->browser_policy_connector_chromeos(); 4995d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) if (connector->IsEnterpriseManaged()) { 5008bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) StartDeviceLoginAccessTokenRequest(); 501eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch } else { 5027dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch StartLoginAccessTokenRequest(); 503eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch } 504868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return; 505868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 506868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#endif 507eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 5087d4cd473f85ac64c3747c96c277f9e506a0d2246Torne (Richard Coles) if (oauth2_info.auto_approve) 5097d4cd473f85ac64c3747c96c277f9e506a0d2246Torne (Richard Coles) // oauth2_info.auto_approve is protected by a whitelist in 5107d4cd473f85ac64c3747c96c277f9e506a0d2246Torne (Richard Coles) // _manifest_features.json hence only selected extensions take 5117d4cd473f85ac64c3747c96c277f9e506a0d2246Torne (Richard Coles) // advantage of forcefully minting the token. 5127dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch gaia_mint_token_mode_ = OAuth2MintTokenFlow::MODE_MINT_TOKEN_FORCE; 5137d4cd473f85ac64c3747c96c277f9e506a0d2246Torne (Richard Coles) else 5147dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch gaia_mint_token_mode_ = OAuth2MintTokenFlow::MODE_MINT_TOKEN_NO_FORCE; 5157dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch StartLoginAccessTokenRequest(); 516c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 517c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 518c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case IdentityTokenCacheValue::CACHE_STATUS_TOKEN: 519c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 520c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithResult(cache_entry.token()); 521c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 522c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 523c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case IdentityTokenCacheValue::CACHE_STATUS_ADVICE: 524c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 525c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) should_prompt_for_signin_ = false; 526c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) issue_advice_ = cache_entry.issue_advice(); 527c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartMintTokenFlow(IdentityMintRequestQueue::MINT_TYPE_INTERACTIVE); 528c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 529c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 530c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } else { 531c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) DCHECK(type == IdentityMintRequestQueue::MINT_TYPE_INTERACTIVE); 532c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 533c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (cache_status == IdentityTokenCacheValue::CACHE_STATUS_TOKEN) { 534c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 535c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithResult(cache_entry.token()); 536c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } else { 537c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ShowOAuthApprovalDialog(issue_advice_); 538c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 5395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 540c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 5415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 542c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::OnMintTokenSuccess( 543c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const std::string& access_token, int time_to_live) { 5445f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST0("identity", 5455f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 5465f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 5475f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnMintTokenSuccess"); 5485f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 549c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) IdentityTokenCacheValue token(access_token, 550c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) base::TimeDelta::FromSeconds(time_to_live)); 551a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) IdentityAPI::GetFactoryInstance()->Get(GetProfile())->SetCachedToken( 552a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) *token_key_, token); 553c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 554c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 555c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithResult(access_token); 5565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 5575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 558c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::OnMintTokenFailure( 559c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const GoogleServiceAuthError& error) { 5605f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST1("identity", 5615f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 5625f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 5635f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnMintTokenFailure", 5645f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "error", 5655f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) error.ToString()); 566c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 567c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 568c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) switch (error.state()) { 569c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case GoogleServiceAuthError::INVALID_GAIA_CREDENTIALS: 570c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case GoogleServiceAuthError::ACCOUNT_DELETED: 571c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case GoogleServiceAuthError::ACCOUNT_DISABLED: 572116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch // TODO(courage): flush ticket and retry once 573c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (should_prompt_for_signin_) { 574c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Display a login prompt and try again (once). 575c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartSigninFlow(); 576c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return; 577c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 578c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 579c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) default: 580c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Return error to caller. 581c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 5825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 5835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 584c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithError( 585c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) std::string(identity_constants::kAuthFailure) + error.ToString()); 5865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 5875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 588c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::OnIssueAdviceSuccess( 589c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const IssueAdviceInfo& issue_advice) { 5905f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST0("identity", 5915f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 5925f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 5935f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnIssueAdviceSuccess"); 5945f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 595a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) IdentityAPI::GetFactoryInstance()->Get(GetProfile())->SetCachedToken( 596a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) *token_key_, IdentityTokenCacheValue(issue_advice)); 597c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 598c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 599c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) should_prompt_for_signin_ = false; 600c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Existing grant was revoked and we used NO_FORCE, so we got info back 601c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // instead. Start a consent UI if we can. 602c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) issue_advice_ = issue_advice; 603c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartMintTokenFlow(IdentityMintRequestQueue::MINT_TYPE_INTERACTIVE); 6045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 6055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 6067dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdochvoid IdentityGetAuthTokenFunction::SigninSuccess() { 6075f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST0("identity", 6085f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 6095f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 6105f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "SigninSuccess"); 6115f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 6125f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) // If there was no account associated this profile before the 6135f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) // sign-in, we may not have an account_id in the token_key yet. 6145f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (token_key_->account_id.empty()) { 6155f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) token_key_->account_id = GetPrimaryAccountId(GetProfile()); 6165f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } 6175f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 618c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StartMintTokenFlow(IdentityMintRequestQueue::MINT_TYPE_NONINTERACTIVE); 6195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 6205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 621c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::SigninFailed() { 6225f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST0("identity", 6235f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 6245f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 6255f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "SigninFailed"); 626c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteFunctionWithError(identity_constants::kUserNotSignedIn); 627c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 628c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 62990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)void IdentityGetAuthTokenFunction::OnGaiaFlowFailure( 63090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) GaiaWebAuthFlow::Failure failure, 63190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) GoogleServiceAuthError service_error, 63290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const std::string& oauth_error) { 63390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) CompleteMintTokenFlow(); 63490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) std::string error; 63590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 63690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) switch (failure) { 63790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) case GaiaWebAuthFlow::WINDOW_CLOSED: 63890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) error = identity_constants::kUserRejected; 63990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 64090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 64190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) case GaiaWebAuthFlow::INVALID_REDIRECT: 64290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) error = identity_constants::kInvalidRedirect; 64390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 64490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 64590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) case GaiaWebAuthFlow::SERVICE_AUTH_ERROR: 64690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) error = std::string(identity_constants::kAuthFailure) + 64790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) service_error.ToString(); 64890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 64990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 65090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) case GaiaWebAuthFlow::OAUTH_ERROR: 65190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) error = MapOAuth2ErrorToDescription(oauth_error); 65290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 65390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 654868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) case GaiaWebAuthFlow::LOAD_FAILED: 655868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) error = identity_constants::kPageLoadFailure; 656868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) break; 657868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 65890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) default: 65990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) NOTREACHED() << "Unexpected error from gaia web auth flow: " << failure; 66090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) error = identity_constants::kInvalidRedirect; 66190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 66290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) } 66390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 66490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) CompleteFunctionWithError(error); 665c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 666c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 66790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)void IdentityGetAuthTokenFunction::OnGaiaFlowCompleted( 66890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const std::string& access_token, 66990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const std::string& expiration) { 6705f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST0("identity", 6715f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 6725f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 6735f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnGaiaFlowCompleted"); 67490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) int time_to_live; 67590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) if (!expiration.empty() && base::StringToInt(expiration, &time_to_live)) { 67690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) IdentityTokenCacheValue token_value( 67790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) access_token, base::TimeDelta::FromSeconds(time_to_live)); 678a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) IdentityAPI::GetFactoryInstance()->Get(GetProfile())->SetCachedToken( 679a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) *token_key_, token_value); 68090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) } 68190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 682c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CompleteMintTokenFlow(); 68390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) CompleteFunctionWithResult(access_token); 684c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 6855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 686eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdochvoid IdentityGetAuthTokenFunction::OnGetTokenSuccess( 687eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch const OAuth2TokenService::Request* request, 688eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch const std::string& access_token, 689eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch const base::Time& expiration_time) { 6905f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST1("identity", 6915f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 6925f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 6935f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnGetTokenSuccess", 6945f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "account", 6955f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) request->GetAccountId()); 6968bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) login_token_request_.reset(); 6978bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) StartGaiaRequest(access_token); 698eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch} 699eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 700eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdochvoid IdentityGetAuthTokenFunction::OnGetTokenFailure( 701eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch const OAuth2TokenService::Request* request, 702eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch const GoogleServiceAuthError& error) { 7035f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) TRACE_EVENT_ASYNC_STEP_PAST1("identity", 7045f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "IdentityGetAuthTokenFunction", 7055f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) this, 7065f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "OnGetTokenFailure", 7075f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) "error", 7085f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) error.ToString()); 7098bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) login_token_request_.reset(); 710eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch OnGaiaFlowFailure(GaiaWebAuthFlow::SERVICE_AUTH_ERROR, error, std::string()); 711eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch} 712eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 713e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdochvoid IdentityGetAuthTokenFunction::OnShutdown() { 714e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch gaia_web_auth_flow_.reset(); 715e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch signin_flow_.reset(); 716e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch login_token_request_.reset(); 717e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch extensions::IdentityAPI::GetFactoryInstance() 718e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->Get(GetProfile()) 719e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->mint_queue() 720e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch ->RequestCancel(*token_key_, this); 721e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch CompleteFunctionWithError(identity_constants::kCanceled); 722e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch} 723e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch 7248bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles)#if defined(OS_CHROMEOS) 7258bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles)void IdentityGetAuthTokenFunction::StartDeviceLoginAccessTokenRequest() { 726a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) chromeos::DeviceOAuth2TokenService* service = 727a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) chromeos::DeviceOAuth2TokenServiceFactory::Get(); 7288bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) // Since robot account refresh tokens are scoped down to [any-api] only, 7298bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) // request access token for [any-api] instead of login. 7308bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) OAuth2TokenService::ScopeSet scopes; 7318bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) scopes.insert(GaiaConstants::kAnyApiOAuth2Scope); 7328bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) login_token_request_ = 7338bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) service->StartRequest(service->GetRobotAccountId(), 7348bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) scopes, 7358bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) this); 7368bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles)} 7378bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles)#endif 7388bcbed890bc3ce4d7a057a8f32cab53fa534672eTorne (Richard Coles) 7397dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdochvoid IdentityGetAuthTokenFunction::StartLoginAccessTokenRequest() { 740a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) ProfileOAuth2TokenService* service = 7411e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) ProfileOAuth2TokenServiceFactory::GetForProfile(GetProfile()); 742a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)#if defined(OS_CHROMEOS) 743a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) if (chrome::IsRunningInForcedAppMode()) { 744a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) std::string app_client_id; 745a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) std::string app_client_secret; 746116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch if (chromeos::UserSessionManager::GetInstance()-> 747116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch GetAppModeChromeClientOAuthInfo(&app_client_id, 748116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch &app_client_secret)) { 749a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) login_token_request_ = 75046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) service->StartRequestForClient(token_key_->account_id, 75168043e1e95eeb07d5cae7aca370b26518b0867d6Torne (Richard Coles) app_client_id, 752a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) app_client_secret, 753a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) OAuth2TokenService::ScopeSet(), 754a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) this); 755a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) return; 756a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) } 757a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) } 758a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)#endif 75968043e1e95eeb07d5cae7aca370b26518b0867d6Torne (Richard Coles) login_token_request_ = service->StartRequest( 76046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) token_key_->account_id, OAuth2TokenService::ScopeSet(), this); 7617dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch} 7627dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch 763c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::StartGaiaRequest( 7647dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch const std::string& login_access_token) { 7657dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch DCHECK(!login_access_token.empty()); 7667dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch mint_token_flow_.reset(CreateMintTokenFlow(login_access_token)); 767c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) mint_token_flow_->Start(); 768c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 769c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 770c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityGetAuthTokenFunction::ShowLoginPopup() { 7711e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) signin_flow_.reset(new IdentitySigninFlow(this, GetProfile())); 772c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) signin_flow_->Start(); 7735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 7745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 7755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)void IdentityGetAuthTokenFunction::ShowOAuthApprovalDialog( 7765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const IssueAdviceInfo& issue_advice) { 777868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const std::string locale = g_browser_process->local_state()->GetString( 778868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) prefs::kApplicationLocale); 77990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 780f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) gaia_web_auth_flow_.reset(new GaiaWebAuthFlow( 781f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) this, GetProfile(), token_key_.get(), oauth2_client_id_, locale)); 78290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) gaia_web_auth_flow_->Start(); 7835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 7845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 7855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)OAuth2MintTokenFlow* IdentityGetAuthTokenFunction::CreateMintTokenFlow( 7867dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch const std::string& login_access_token) { 7871e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) OAuth2MintTokenFlow* mint_token_flow = new OAuth2MintTokenFlow( 7881e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) GetProfile()->GetRequestContext(), 7891e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) this, 790f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) OAuth2MintTokenFlow::Parameters( 791f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) login_access_token, 7925f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) extension()->id(), 793f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) oauth2_client_id_, 794f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) std::vector<std::string>(token_key_->scopes.begin(), 795f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) token_key_->scopes.end()), 796f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) gaia_mint_token_mode_)); 797c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return mint_token_flow; 7985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 7995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 8005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool IdentityGetAuthTokenFunction::HasLoginToken() const { 80168043e1e95eeb07d5cae7aca370b26518b0867d6Torne (Richard Coles) ProfileOAuth2TokenService* token_service = 8021e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) ProfileOAuth2TokenServiceFactory::GetForProfile(GetProfile()); 80346d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles) return token_service->RefreshTokenIsAvailable(token_key_->account_id); 8045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 8055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 80690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)std::string IdentityGetAuthTokenFunction::MapOAuth2ErrorToDescription( 80790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const std::string& error) { 80890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const char kOAuth2ErrorAccessDenied[] = "access_denied"; 80990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) const char kOAuth2ErrorInvalidScope[] = "invalid_scope"; 81090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 81190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) if (error == kOAuth2ErrorAccessDenied) 81290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) return std::string(identity_constants::kUserRejected); 81390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) else if (error == kOAuth2ErrorInvalidScope) 81490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) return std::string(identity_constants::kInvalidScopes); 81590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) else 81690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) return std::string(identity_constants::kAuthFailure) + error; 81790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)} 81890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 819eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdochstd::string IdentityGetAuthTokenFunction::GetOAuth2ClientId() const { 8205f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const OAuth2Info& oauth2_info = OAuth2Info::GetOAuth2Info(extension()); 821eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch std::string client_id = oauth2_info.client_id; 822eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 823eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch // Component apps using auto_approve may use Chrome's client ID by 824eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch // omitting the field. 8255f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (client_id.empty() && extension()->location() == Manifest::COMPONENT && 826eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch oauth2_info.auto_approve) { 827eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch client_id = GaiaUrls::GetInstance()->oauth2_chrome_client_id(); 828eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch } 829eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch return client_id; 830eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch} 831eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch 832f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)IdentityGetProfileUserInfoFunction::IdentityGetProfileUserInfoFunction() { 833f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 834f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 835f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)IdentityGetProfileUserInfoFunction::~IdentityGetProfileUserInfoFunction() { 836f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 837f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 838f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)ExtensionFunction::ResponseAction IdentityGetProfileUserInfoFunction::Run() { 839f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) if (GetProfile()->IsOffTheRecord()) { 840f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return RespondNow(Error(identity_constants::kOffTheRecord)); 841f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) } 842f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 843f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) api::identity::ProfileUserInfo profile_user_info; 8445f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (extension()->permissions_data()->HasAPIPermission( 845116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch APIPermission::kIdentityEmail)) { 846116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch profile_user_info.email = 847116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch GetProfile()->GetPrefs()->GetString(prefs::kGoogleServicesUsername); 848116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch } 849f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) profile_user_info.id = 850f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) GetProfile()->GetPrefs()->GetString(prefs::kGoogleServicesUserAccountId); 851f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 852f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return RespondNow(OneArgument(profile_user_info.ToValue().release())); 853f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 854f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 855c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)IdentityRemoveCachedAuthTokenFunction::IdentityRemoveCachedAuthTokenFunction() { 856c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 857c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 858c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)IdentityRemoveCachedAuthTokenFunction:: 859c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ~IdentityRemoveCachedAuthTokenFunction() { 860c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 861c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 8625c02ac1a9c1b504631c0a3d2b6e737b5d738bae1Bo Liubool IdentityRemoveCachedAuthTokenFunction::RunSync() { 8631e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) if (GetProfile()->IsOffTheRecord()) { 864c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kOffTheRecord; 865c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return false; 866c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 867c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 868c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) scoped_ptr<identity::RemoveCachedAuthToken::Params> params( 869c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) identity::RemoveCachedAuthToken::Params::Create(*args_)); 870c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXTENSION_FUNCTION_VALIDATE(params.get()); 871a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) IdentityAPI::GetFactoryInstance()->Get(GetProfile())->EraseCachedToken( 8725f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) extension()->id(), params->details.token); 873c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return true; 874c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 875c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 8765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)IdentityLaunchWebAuthFlowFunction::IdentityLaunchWebAuthFlowFunction() {} 87790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 87890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)IdentityLaunchWebAuthFlowFunction::~IdentityLaunchWebAuthFlowFunction() { 87990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) if (auth_flow_) 88090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) auth_flow_.release()->DetachDelegateAndDelete(); 88190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)} 8825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 883010d83a9304c5a91596085d917d248abff47903aTorne (Richard Coles)bool IdentityLaunchWebAuthFlowFunction::RunAsync() { 8841e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) if (GetProfile()->IsOffTheRecord()) { 885c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kOffTheRecord; 886c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return false; 887c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 888c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 889c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) scoped_ptr<identity::LaunchWebAuthFlow::Params> params( 890c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) identity::LaunchWebAuthFlow::Params::Create(*args_)); 8915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) EXTENSION_FUNCTION_VALIDATE(params.get()); 8925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 893c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) GURL auth_url(params->details.url); 8945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) WebAuthFlow::Mode mode = 895c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) params->details.interactive && *params->details.interactive ? 8965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) WebAuthFlow::INTERACTIVE : WebAuthFlow::SILENT; 8975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 898c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // Set up acceptable target URLs. (Does not include chrome-extension 899c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // scheme for this version of the API.) 9005f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) InitFinalRedirectURLPrefix(extension()->id()); 901c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 9025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) AddRef(); // Balanced in OnAuthFlowSuccess/Failure. 9032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 9041e9bf3e0803691d0a228da41fc608347b6db4340Torne (Richard Coles) auth_flow_.reset(new WebAuthFlow(this, GetProfile(), auth_url, mode)); 9055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) auth_flow_->Start(); 9065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 9075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 9085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 909b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void IdentityLaunchWebAuthFlowFunction::InitFinalRedirectURLPrefixForTest( 910c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const std::string& extension_id) { 911b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) InitFinalRedirectURLPrefix(extension_id); 912c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 913c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 914b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void IdentityLaunchWebAuthFlowFunction::InitFinalRedirectURLPrefix( 915c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const std::string& extension_id) { 916b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (final_url_prefix_.is_empty()) { 917b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) final_url_prefix_ = GURL(base::StringPrintf( 918b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) kChromiumDomainRedirectUrlPattern, extension_id.c_str())); 919b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 920c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 921c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 922c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityLaunchWebAuthFlowFunction::OnAuthFlowFailure( 923c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) WebAuthFlow::Failure failure) { 924c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) switch (failure) { 925c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case WebAuthFlow::WINDOW_CLOSED: 926c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kUserRejected; 927c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 928c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) case WebAuthFlow::INTERACTION_REQUIRED: 929c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kInteractionRequired; 930c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 931868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) case WebAuthFlow::LOAD_FAILED: 932868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) error_ = identity_constants::kPageLoadFailure; 933868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) break; 934c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) default: 935c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) NOTREACHED() << "Unexpected error from web auth flow: " << failure; 936c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) error_ = identity_constants::kInvalidRedirect; 937c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 938c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 9395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) SendResponse(false); 940010d83a9304c5a91596085d917d248abff47903aTorne (Richard Coles) Release(); // Balanced in RunAsync. 9415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 9425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 943c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void IdentityLaunchWebAuthFlowFunction::OnAuthFlowURLChange( 944c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const GURL& redirect_url) { 945b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (redirect_url.GetWithEmptyPath() == final_url_prefix_) { 9463551c9c881056c480085172ff9840cab31610854Torne (Richard Coles) SetResult(new base::StringValue(redirect_url.spec())); 947c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) SendResponse(true); 948010d83a9304c5a91596085d917d248abff47903aTorne (Richard Coles) Release(); // Balanced in RunAsync. 949c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 950c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 951c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 9525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace extensions 953