cloud_policy_browsertest.cc revision 0529e5d033099cbfc42635f6f6183833b09dff6e
12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 57dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "base/callback.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/command_line.h" 72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/file_util.h" 82a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/file_path.h" 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/scoped_temp_dir.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/path_service.h" 122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/prefs/pref_service.h" 132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/run_loop.h" 14868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/strings/stringprintf.h" 15c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch#include "base/time/time.h" 162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/browser_process.h" 177dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/chrome_notification_types.h" 18d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/fake_invalidation_service.h" 19d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/invalidation_service_factory.h" 20c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector.h" 21c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector_factory.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test/local_policy_test_server.h" 232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/ui/browser.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/test/base/in_process_browser_test.h" 265d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/browser/browser_policy_connector.h" 27a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_client.h" 28a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_constants.h" 29a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/mock_cloud_policy_client.h" 30f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/external_data_fetcher.h" 31f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/policy_map.h" 32a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_service.h" 335d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/policy_switches.h" 34a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_test_utils.h" 352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_service.h" 362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_source.h" 372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/test/test_utils.h" 38d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "net/url_request/url_request_context_getter.h" 392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/policy_constants.h" 402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/chrome_settings.pb.h" 412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/cloud_policy.pb.h" 424e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include "sync/internal_api/public/base/invalidation.h" 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gmock/include/gmock/gmock.h" 442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h" 45eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "url/gurl.h" 462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/login/user_manager.h" 492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" 50c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.h" 51c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chromeos/chromeos_paths.h" 52a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles)#include "chromeos/dbus/cryptohome_client.h" 532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" 552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 565d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/cloud/user_cloud_policy_manager.h" 57e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch#include "components/signin/core/browser/signin_manager.h" 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::AnyNumber; 612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::InvokeWithoutArgs; 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Mock; 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Return; 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::_; 652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace em = enterprise_management; 672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace policy { 692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace { 712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const char* GetTestUser() { 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return chromeos::UserManager::kStubUser; 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return "user@example.com"; 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetEmptyPolicy() { 812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kEmptyPolicy[] = 822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {}," 852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {}" 862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": 0" 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf( 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kEmptyPolicy, dm_protocol::kChromeUserPolicyType, GetTestUser()); 942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 96d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)std::string GetTestPolicy(const char* homepage, int key_version) { 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kTestPolicy[] = 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 1002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {" 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"ShowHomeButton\": true," 102c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) " \"RestoreOnStartup\": 4," 103d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"URLBlacklist\": [ \"dev.chromium.org\", \"youtube.com\" ]," 104d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"MaxInvalidationFetchDelay\": 1000" 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {" 107d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"HomepageLocation\": \"%s\"" 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }" 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 112d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"current_key_index\": %d," 113d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_source\": 16," 114d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_name\": \"test_policy\"" 1152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf(kTestPolicy, 1182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) dm_protocol::kChromeUserPolicyType, 119d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) homepage, 1202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetTestUser(), 1212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_version); 1222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1240529e5d033099cbfc42635f6f6183833b09dff6eBen Murdochvoid GetExpectedDefaultPolicy(PolicyMap* policy_map) { 1250529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1260529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch policy_map->Set( 1270529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch key::kChromeOsMultiProfileUserBehavior, POLICY_LEVEL_MANDATORY, 1280529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch POLICY_SCOPE_USER, base::Value::CreateStringValue("primary-only"), NULL); 1290529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1300529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch} 1310529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch 132d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)void GetExpectedTestPolicy(PolicyMap* expected, const char* homepage) { 1332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set(key::kShowHomeButton, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1347dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch base::Value::CreateBooleanValue(true), NULL); 135c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) expected->Set(key::kRestoreOnStartup, POLICY_LEVEL_MANDATORY, 1367dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch POLICY_SCOPE_USER, base::Value::CreateIntegerValue(4), NULL); 1372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ListValue list; 1382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("dev.chromium.org"); 1392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("youtube.com"); 1402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kURLBlacklist, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1427dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch list.DeepCopy(), NULL); 1432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 144d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) key::kMaxInvalidationFetchDelay, POLICY_LEVEL_MANDATORY, 145d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateIntegerValue(1000), NULL); 146d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) expected->Set( 1472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kHomepageLocation, POLICY_LEVEL_RECOMMENDED, 148d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateStringValue(homepage), NULL); 1490529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1500529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch expected->Set( 1510529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch key::kChromeOsMultiProfileUserBehavior, POLICY_LEVEL_MANDATORY, 1520529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch POLICY_SCOPE_USER, base::Value::CreateStringValue("primary-only"), NULL); 1530529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace 1572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Tests the cloud policy stack(s). 159d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)class CloudPolicyTest : public InProcessBrowserTest, 160d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) public PolicyService::Observer { 1612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) protected: 1622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CloudPolicyTest() {} 1632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual ~CloudPolicyTest() {} 1642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpInProcessBrowserTestFixture() OVERRIDE { 1662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); 1672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetEmptyPolicy())); 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) test_server_.reset(new LocalPolicyTestServer(policy_file_path())); 1702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(test_server_->Start()); 1712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string url = test_server_->GetServiceURL().spec(); 1732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CommandLine* command_line = CommandLine::ForCurrentProcess(); 1752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) command_line->AppendSwitchASCII(switches::kDeviceManagementUrl, url); 176d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 177d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::InvalidationServiceFactory::GetInstance()-> 178a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) RegisterTestingFactory(invalidation::FakeInvalidationService::Build); 1792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpOnMainThread() OVERRIDE { 1822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(PolicyServiceIsEmpty(g_browser_process->policy_service())) 1832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) << "Pre-existing policies in this machine will make this test fail."; 1842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) BrowserPolicyConnector* connector = 1862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) g_browser_process->browser_policy_connector(); 1872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->ScheduleServiceInitialization(0); 1882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 1902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerChromeOS* policy_manager = 191c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) UserCloudPolicyManagerFactoryChromeOS::GetForProfile( 192c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) browser()->profile()); 1932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 1942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 1952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Mock a signed-in user. This is used by the UserCloudPolicyStore to pass 1962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // the username to the UserCloudPolicyValidator. 1972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManager* signin_manager = 1982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManagerFactory::GetForProfile(browser()->profile()); 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(signin_manager); 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) signin_manager->SetAuthenticatedUsername(GetTestUser()); 2012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager* policy_manager = 203f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) UserCloudPolicyManagerFactory::GetForBrowserContext( 204f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) browser()->profile()); 2052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 206a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) policy_manager->Connect( 207a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->local_state(), 208a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context(), 209a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) UserCloudPolicyManager::CreateCloudPolicyClient( 210a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) connector->device_management_service(), 211a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context()).Pass()); 2122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif // defined(OS_CHROMEOS) 2132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager->core()->client()); 2152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) MockCloudPolicyClientObserver observer; 2172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_CALL(observer, OnRegistrationStateChanged(_)).WillOnce( 2182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit)); 2192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->AddObserver(&observer); 2202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Give a bogus OAuth token to the |policy_manager|. This should make its 2222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // CloudPolicyClient fetch the DMToken. 223c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ASSERT_FALSE(policy_manager->core()->client()->is_registered()); 224c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::Type registration_type = 225c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 226c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::USER; 227c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#else 228c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::BROWSER; 229c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 230c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) policy_manager->core()->client()->Register( 231effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch registration_type, "bogus", std::string(), false, std::string(), 232effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch std::string()); 2332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) Mock::VerifyAndClearExpectations(&observer); 2352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->RemoveObserver(&observer); 236c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXPECT_TRUE(policy_manager->core()->client()->is_registered()); 2372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 239a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) // Get the path to the user policy key file. 240a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_dir; 241a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) ASSERT_TRUE( 242a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) PathService::Get(chromeos::DIR_USER_POLICY_KEYS, &user_policy_key_dir)); 243a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) std::string sanitized_username = 244a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) chromeos::CryptohomeClient::GetStubSanitizedUsername(GetTestUser()); 245a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) user_policy_key_file_ = user_policy_key_dir.AppendASCII(sanitized_username) 246a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) .AppendASCII("policy.pub"); 2472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 248a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) } 2492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 250c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* GetPolicyService() { 251c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnector* profile_connector = 252c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnectorFactory::GetForProfile(browser()->profile()); 253c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return profile_connector->policy_service(); 254c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 255c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 256d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::FakeInvalidationService* GetInvalidationService() { 257d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) return static_cast<invalidation::FakeInvalidationService*>( 258d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::InvalidationServiceFactory::GetForProfile( 259d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) browser()->profile())); 260d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 261d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) void SetServerPolicy(const std::string& policy) { 263a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) int result = base::WriteFile(policy_file_path(), policy.data(), 264a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) policy.size()); 2652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_EQ(static_cast<int>(policy.size()), result); 2662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::FilePath policy_file_path() const { 2692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return temp_dir_.path().AppendASCII("policy.json"); 2702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 272d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyUpdated(const PolicyNamespace& ns, 273d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& previous, 274d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& current) OVERRIDE { 275d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) if (!on_policy_updated_.is_null()) { 276d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Run(); 277d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Reset(); 278d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 279d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 280d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 281d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyServiceInitialized(PolicyDomain domain) OVERRIDE {} 282d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ScopedTempDir temp_dir_; 2842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) scoped_ptr<LocalPolicyTestServer> test_server_; 285a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_file_; 286d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::Closure on_policy_updated_; 2872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}; 2882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicy) { 290c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 2912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 2942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2980529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 2990529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 3000529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 3012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 303d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 3042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 305d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies, using the same key. 3092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 316d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, InvalidatePolicy) { 317d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 318d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->AddObserver(POLICY_DOMAIN_CHROME, this); 319d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 320d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Perform the initial fetch. 321d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 322d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 323d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 324d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 325d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 326d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 327d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 328d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Update the homepage in the policy and trigger an invalidation. 329d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("youtube.com", 0))); 330c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::TimeDelta now = 331c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::Time::NowFromSystemTime() - base::Time::UnixEpoch(); 332d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetInvalidationService()->EmitInvalidationForTest( 3334e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) syncer::Invalidation::Init( 3344e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) invalidation::ObjectId(16, "test_policy"), 335c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch now.InMicroseconds() /* version */, 3364e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) "payload")); 337d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 338d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 339d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_ = run_loop.QuitClosure(); 340d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 341d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 342d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 343d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Check that the updated policy was fetched. 344d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyMap expected; 345d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "youtube.com"); 346d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 347d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 348d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 349d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RemoveObserver(POLICY_DOMAIN_CHROME, this); 350d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)} 351d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 3532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicyWithRotatedKey) { 354c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Read the initial key. 3632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string initial_key; 36458537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &initial_key)); 3652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3660529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 3670529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 3680529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 3692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Set the new policies and a new key at the server. 372d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 1))); 3732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 374d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies and does a key rotation. 3782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Verify that the key was rotated. 3852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string rotated_key; 38658537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &rotated_key)); 3872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_NE(rotated_key, initial_key); 3882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Another refresh using the same key won't rotate it again. 3902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string current_key; 39858537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, ¤t_key)); 3992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(rotated_key, current_key); 4002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 4022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(CloudPolicyProtoTest, VerifyProtobufEquivalence) { 4042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // There are 2 protobufs that can be used for user cloud policy: 4052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // cloud_policy.proto and chrome_settings.proto. chrome_settings.proto is the 4062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // version used by the server, but generates one proto message per policy; to 4072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // save binary size on the client, the other version shares proto messages for 4082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // policies of the same type. They generate the same bytes on the wire though, 4092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // so they are compatible. This test verifies that that stays true. 4102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build a ChromeSettingsProto message with one policy of each supported type. 4122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::ChromeSettingsProto chrome_settings; 4132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_homepagelocation()->set_homepagelocation( 4142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "chromium.org"); 4152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_showhomebutton()->set_showhomebutton(true); 416c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) chrome_settings.mutable_restoreonstartup()->set_restoreonstartup(4); 4172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::StringList* list = 4182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disabledschemes()->mutable_disabledschemes(); 4192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Try explicitly setting a policy mode too. 4222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->set_disablespdy(false); 4232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->mutable_policy_options()->set_mode( 4242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->set_syncdisabled(true); 4262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build an equivalent CloudPolicySettings message. 4302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::CloudPolicySettings cloud_policy; 4312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_homepagelocation()->set_value("chromium.org"); 4322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_showhomebutton()->set_value(true); 433c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cloud_policy.mutable_restoreonstartup()->set_value(4); 4342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list = cloud_policy.mutable_disabledschemes()->mutable_value(); 4352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->set_value(false); 4382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->mutable_policy_options()->set_mode( 4392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->set_value(true); 4412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // They should now serialize to the same bytes. 4452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string chrome_settings_serialized; 4462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string cloud_policy_serialized; 4472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(chrome_settings.SerializeToString(&chrome_settings_serialized)); 4482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(cloud_policy.SerializeToString(&cloud_policy_serialized)); 4492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(chrome_settings_serialized, cloud_policy_serialized); 4502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace policy 453