12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 57dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "base/callback.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/command_line.h" 72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/file_path.h" 81320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci#include "base/files/file_util.h" 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/scoped_temp_dir.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/path_service.h" 122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/prefs/pref_service.h" 132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/run_loop.h" 14868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/strings/stringprintf.h" 15c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch#include "base/time/time.h" 162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/browser_process.h" 177dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/chrome_notification_types.h" 18d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/fake_invalidation_service.h" 19f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "chrome/browser/invalidation/profile_invalidation_provider_factory.h" 20c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector.h" 21c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector_factory.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test/local_policy_test_server.h" 232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/ui/browser.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/test/base/in_process_browser_test.h" 265f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "components/invalidation/invalidation.h" 27f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/invalidation/invalidation_service.h" 28f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/invalidation/profile_invalidation_provider.h" 29f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/keyed_service/core/keyed_service.h" 305d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/browser/browser_policy_connector.h" 31a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_client.h" 32a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_constants.h" 33a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/mock_cloud_policy_client.h" 34f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/external_data_fetcher.h" 35f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/policy_map.h" 36a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_service.h" 375d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/policy_switches.h" 38a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_test_utils.h" 392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_service.h" 402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_source.h" 412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/test/test_utils.h" 42d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "net/url_request/url_request_context_getter.h" 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/policy_constants.h" 442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/chrome_settings.pb.h" 452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/cloud_policy.pb.h" 462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gmock/include/gmock/gmock.h" 472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h" 48eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "url/gurl.h" 492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" 52c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.h" 53c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chromeos/chromeos_paths.h" 54a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles)#include "chromeos/dbus/cryptohome_client.h" 55116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "chromeos/login/user_names.h" 562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 595d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/cloud/user_cloud_policy_manager.h" 60e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch#include "components/signin/core/browser/signin_manager.h" 612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::AnyNumber; 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::InvokeWithoutArgs; 652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Mock; 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Return; 672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::_; 682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 69f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)namespace content { 70f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)class BrowserContext; 71f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 72f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace em = enterprise_management; 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace policy { 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace { 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 79f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)KeyedService* BuildFakeProfileInvalidationProvider( 80f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) content::BrowserContext* context) { 81f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return new invalidation::ProfileInvalidationProvider( 82f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) scoped_ptr<invalidation::InvalidationService>( 83f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) new invalidation::FakeInvalidationService)); 84f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 85f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const char* GetTestUser() { 872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 88116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch return chromeos::login::kStubUser; 892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return "user@example.com"; 912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetEmptyPolicy() { 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kEmptyPolicy[] = 962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {}," 992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {}" 1002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 1032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": 0" 1042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf( 1072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kEmptyPolicy, dm_protocol::kChromeUserPolicyType, GetTestUser()); 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 110d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)std::string GetTestPolicy(const char* homepage, int key_version) { 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kTestPolicy[] = 1122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 1132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 1142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {" 1152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"ShowHomeButton\": true," 116c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) " \"RestoreOnStartup\": 4," 117d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"URLBlacklist\": [ \"dev.chromium.org\", \"youtube.com\" ]," 118d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"MaxInvalidationFetchDelay\": 1000" 1192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {" 121d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"HomepageLocation\": \"%s\"" 1222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }" 1232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 126d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"current_key_index\": %d," 127d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_source\": 16," 128d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_name\": \"test_policy\"" 1292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf(kTestPolicy, 1322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) dm_protocol::kChromeUserPolicyType, 133d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) homepage, 1342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetTestUser(), 1352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_version); 1362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1380529e5d033099cbfc42635f6f6183833b09dff6eBen Murdochvoid GetExpectedDefaultPolicy(PolicyMap* policy_map) { 1390529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1405f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) policy_map->Set(key::kChromeOsMultiProfileUserBehavior, 1415f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_LEVEL_MANDATORY, 1425f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_SCOPE_USER, 1431320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci new base::StringValue("primary-only"), 1441320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci NULL); 1451320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci policy_map->Set(key::kEasyUnlockAllowed, 1461320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci POLICY_LEVEL_MANDATORY, 1471320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci POLICY_SCOPE_USER, 1481320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci new base::FundamentalValue(false), 1495f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) NULL); 1500529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1510529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch} 1520529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch 153d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)void GetExpectedTestPolicy(PolicyMap* expected, const char* homepage) { 154116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch expected->Set(key::kShowHomeButton, 155116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch POLICY_LEVEL_MANDATORY, 156116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch POLICY_SCOPE_USER, 157116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch new base::FundamentalValue(true), 158116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch NULL); 1595f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) expected->Set(key::kRestoreOnStartup, 1605f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_LEVEL_MANDATORY, 1615f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_SCOPE_USER, 1625f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) new base::FundamentalValue(4), 1635f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) NULL); 1642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ListValue list; 1652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("dev.chromium.org"); 1662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("youtube.com"); 1672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kURLBlacklist, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1697dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch list.DeepCopy(), NULL); 1705f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) expected->Set(key::kMaxInvalidationFetchDelay, 1715f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_LEVEL_MANDATORY, 1725f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_SCOPE_USER, 1735f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) new base::FundamentalValue(1000), 1745f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) NULL); 1755f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) expected->Set(key::kHomepageLocation, 1765f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_LEVEL_RECOMMENDED, 1775f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_SCOPE_USER, 1785f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) new base::StringValue(homepage), 1795f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) NULL); 1800529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1815f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) expected->Set(key::kChromeOsMultiProfileUserBehavior, 1825f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_LEVEL_MANDATORY, 1835f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) POLICY_SCOPE_USER, 1841320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci new base::StringValue("primary-only"), 1851320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci NULL); 1861320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci expected->Set(key::kEasyUnlockAllowed, 1871320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci POLICY_LEVEL_MANDATORY, 1881320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci POLICY_SCOPE_USER, 1891320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci new base::FundamentalValue(false), 1905f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) NULL); 1910529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace 1952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Tests the cloud policy stack(s). 197d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)class CloudPolicyTest : public InProcessBrowserTest, 198d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) public PolicyService::Observer { 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) protected: 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CloudPolicyTest() {} 2012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual ~CloudPolicyTest() {} 2022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpInProcessBrowserTestFixture() OVERRIDE { 2042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); 2052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetEmptyPolicy())); 2062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) test_server_.reset(new LocalPolicyTestServer(policy_file_path())); 2082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(test_server_->Start()); 2092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string url = test_server_->GetServiceURL().spec(); 2112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CommandLine* command_line = CommandLine::ForCurrentProcess(); 2132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) command_line->AppendSwitchASCII(switches::kDeviceManagementUrl, url); 214d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 215f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) invalidation::ProfileInvalidationProviderFactory::GetInstance()-> 216f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) RegisterTestingFactory(BuildFakeProfileInvalidationProvider); 2172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpOnMainThread() OVERRIDE { 2202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(PolicyServiceIsEmpty(g_browser_process->policy_service())) 2212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) << "Pre-existing policies in this machine will make this test fail."; 2222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) BrowserPolicyConnector* connector = 2242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) g_browser_process->browser_policy_connector(); 2252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->ScheduleServiceInitialization(0); 2262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 2282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerChromeOS* policy_manager = 229c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) UserCloudPolicyManagerFactoryChromeOS::GetForProfile( 230c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) browser()->profile()); 2312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 2322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 2332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Mock a signed-in user. This is used by the UserCloudPolicyStore to pass 2342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // the username to the UserCloudPolicyValidator. 2352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManager* signin_manager = 2362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManagerFactory::GetForProfile(browser()->profile()); 2372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(signin_manager); 2382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) signin_manager->SetAuthenticatedUsername(GetTestUser()); 2392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager* policy_manager = 241f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) UserCloudPolicyManagerFactory::GetForBrowserContext( 242f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) browser()->profile()); 2432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 244a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) policy_manager->Connect( 245a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->local_state(), 246a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context(), 247a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) UserCloudPolicyManager::CreateCloudPolicyClient( 248a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) connector->device_management_service(), 249a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context()).Pass()); 2502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif // defined(OS_CHROMEOS) 2512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager->core()->client()); 2532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) MockCloudPolicyClientObserver observer; 2552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_CALL(observer, OnRegistrationStateChanged(_)).WillOnce( 2562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit)); 2572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->AddObserver(&observer); 2582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Give a bogus OAuth token to the |policy_manager|. This should make its 2602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // CloudPolicyClient fetch the DMToken. 261c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ASSERT_FALSE(policy_manager->core()->client()->is_registered()); 262c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::Type registration_type = 263c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 264c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::USER; 265c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#else 266c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::BROWSER; 267c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 268c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) policy_manager->core()->client()->Register( 269effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch registration_type, "bogus", std::string(), false, std::string(), 270effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch std::string()); 2712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) Mock::VerifyAndClearExpectations(&observer); 2732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->RemoveObserver(&observer); 274c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXPECT_TRUE(policy_manager->core()->client()->is_registered()); 2752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 277a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) // Get the path to the user policy key file. 278a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_dir; 279a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) ASSERT_TRUE( 280a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) PathService::Get(chromeos::DIR_USER_POLICY_KEYS, &user_policy_key_dir)); 281a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) std::string sanitized_username = 282a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) chromeos::CryptohomeClient::GetStubSanitizedUsername(GetTestUser()); 283a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) user_policy_key_file_ = user_policy_key_dir.AppendASCII(sanitized_username) 284a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) .AppendASCII("policy.pub"); 2852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 286a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) } 2872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 288c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* GetPolicyService() { 289c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnector* profile_connector = 290c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnectorFactory::GetForProfile(browser()->profile()); 291c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return profile_connector->policy_service(); 292c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 293c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 294d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::FakeInvalidationService* GetInvalidationService() { 295d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) return static_cast<invalidation::FakeInvalidationService*>( 296f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) static_cast<invalidation::ProfileInvalidationProvider*>( 297f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) invalidation::ProfileInvalidationProviderFactory::GetInstance()-> 298f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) GetForProfile(browser()->profile()))->GetInvalidationService()); 299d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 300d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) void SetServerPolicy(const std::string& policy) { 302a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) int result = base::WriteFile(policy_file_path(), policy.data(), 303a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) policy.size()); 3042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_EQ(static_cast<int>(policy.size()), result); 3052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::FilePath policy_file_path() const { 3082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return temp_dir_.path().AppendASCII("policy.json"); 3092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 311d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyUpdated(const PolicyNamespace& ns, 312d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& previous, 313d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& current) OVERRIDE { 314d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) if (!on_policy_updated_.is_null()) { 315d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Run(); 316d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Reset(); 317d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 318d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 319d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 320d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyServiceInitialized(PolicyDomain domain) OVERRIDE {} 321d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ScopedTempDir temp_dir_; 3232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) scoped_ptr<LocalPolicyTestServer> test_server_; 324a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_file_; 325d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::Closure on_policy_updated_; 3262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}; 3272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicy) { 329c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3370529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 3380529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 3390529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 3402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 342d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 3432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 344d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies, using the same key. 3482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 355d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, InvalidatePolicy) { 356d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 357d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->AddObserver(POLICY_DOMAIN_CHROME, this); 358d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 359d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Perform the initial fetch. 360d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 361d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 362d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 363d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 364d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 365d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 366d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 367d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Update the homepage in the policy and trigger an invalidation. 368d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("youtube.com", 0))); 369c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::TimeDelta now = 370c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::Time::NowFromSystemTime() - base::Time::UnixEpoch(); 371d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetInvalidationService()->EmitInvalidationForTest( 3724e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) syncer::Invalidation::Init( 3734e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) invalidation::ObjectId(16, "test_policy"), 374c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch now.InMicroseconds() /* version */, 3754e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) "payload")); 376d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 377d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 378d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_ = run_loop.QuitClosure(); 379d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 380d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 381d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 382d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Check that the updated policy was fetched. 383d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyMap expected; 384d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "youtube.com"); 385d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 386d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 387d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 388d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RemoveObserver(POLICY_DOMAIN_CHROME, this); 389d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)} 390d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 3922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicyWithRotatedKey) { 393c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Read the initial key. 4022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string initial_key; 40358537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &initial_key)); 4042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4050529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 4060529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 4070529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 4082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 4092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Set the new policies and a new key at the server. 411d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 1))); 4122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 413d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 4142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 4152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 4162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies and does a key rotation. 4172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 4182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 4192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 4212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 4222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Verify that the key was rotated. 4242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string rotated_key; 42558537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &rotated_key)); 4262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_NE(rotated_key, initial_key); 4272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Another refresh using the same key won't rotate it again. 4292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 4302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 4312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 4322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 4332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 4352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 4362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string current_key; 43758537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, ¤t_key)); 4382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(rotated_key, current_key); 4392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 4412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(CloudPolicyProtoTest, VerifyProtobufEquivalence) { 4432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // There are 2 protobufs that can be used for user cloud policy: 4442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // cloud_policy.proto and chrome_settings.proto. chrome_settings.proto is the 4452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // version used by the server, but generates one proto message per policy; to 4462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // save binary size on the client, the other version shares proto messages for 4472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // policies of the same type. They generate the same bytes on the wire though, 4482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // so they are compatible. This test verifies that that stays true. 4492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build a ChromeSettingsProto message with one policy of each supported type. 4512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::ChromeSettingsProto chrome_settings; 4522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_homepagelocation()->set_homepagelocation( 4532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "chromium.org"); 4542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_showhomebutton()->set_showhomebutton(true); 455c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) chrome_settings.mutable_restoreonstartup()->set_restoreonstartup(4); 4562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::StringList* list = 4572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disabledschemes()->mutable_disabledschemes(); 4582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Try explicitly setting a policy mode too. 4612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->set_disablespdy(false); 4622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->mutable_policy_options()->set_mode( 4632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->set_syncdisabled(true); 4652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build an equivalent CloudPolicySettings message. 4692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::CloudPolicySettings cloud_policy; 4702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_homepagelocation()->set_value("chromium.org"); 4712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_showhomebutton()->set_value(true); 472c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cloud_policy.mutable_restoreonstartup()->set_value(4); 4732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list = cloud_policy.mutable_disabledschemes()->mutable_value(); 4742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->set_value(false); 4772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->mutable_policy_options()->set_mode( 4782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->set_value(true); 4802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // They should now serialize to the same bytes. 4842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string chrome_settings_serialized; 4852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string cloud_policy_serialized; 4862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(chrome_settings.SerializeToString(&chrome_settings_serialized)); 4872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(cloud_policy.SerializeToString(&cloud_policy_serialized)); 4882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(chrome_settings_serialized, cloud_policy_serialized); 4892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace policy 492