cloud_policy_browsertest.cc revision a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7
12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 57dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "base/callback.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/command_line.h" 72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/file_util.h" 82a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/file_path.h" 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/scoped_temp_dir.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/path_service.h" 122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/prefs/pref_service.h" 132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/run_loop.h" 14868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/strings/stringprintf.h" 152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/browser_process.h" 167dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/chrome_notification_types.h" 17d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/fake_invalidation_service.h" 18d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/invalidation_service_factory.h" 192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/browser_policy_connector.h" 20c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector.h" 21c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector_factory.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test/local_policy_test_server.h" 232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/ui/browser.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/common/chrome_switches.h" 262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/test/base/in_process_browser_test.h" 27a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_client.h" 28a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_constants.h" 29a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/mock_cloud_policy_client.h" 30f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/external_data_fetcher.h" 31f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/policy_map.h" 32a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_service.h" 33a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_test_utils.h" 342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/browser_thread.h" 352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_service.h" 362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_source.h" 372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/test/test_utils.h" 38d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "net/url_request/url_request_context_getter.h" 392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/policy_constants.h" 402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/chrome_settings.pb.h" 412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/cloud_policy.pb.h" 424e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include "sync/internal_api/public/base/invalidation.h" 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gmock/include/gmock/gmock.h" 442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h" 45eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "url/gurl.h" 462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/login/user_manager.h" 492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" 50c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.h" 51c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chromeos/chromeos_paths.h" 52a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles)#include "chromeos/dbus/cryptohome_client.h" 532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager.h" 552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" 562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager.h" 572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::AnyNumber; 612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::InvokeWithoutArgs; 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Mock; 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Return; 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::_; 652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace em = enterprise_management; 672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace policy { 692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace { 712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const char* GetTestUser() { 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return chromeos::UserManager::kStubUser; 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return "user@example.com"; 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetEmptyPolicy() { 812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kEmptyPolicy[] = 822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {}," 852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {}" 862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": 0" 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf( 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kEmptyPolicy, dm_protocol::kChromeUserPolicyType, GetTestUser()); 942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 96d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)std::string GetTestPolicy(const char* homepage, int key_version) { 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kTestPolicy[] = 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 1002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {" 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"ShowHomeButton\": true," 102c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) " \"RestoreOnStartup\": 4," 103d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"URLBlacklist\": [ \"dev.chromium.org\", \"youtube.com\" ]," 104d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"MaxInvalidationFetchDelay\": 1000" 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {" 107d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"HomepageLocation\": \"%s\"" 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }" 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 112d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"current_key_index\": %d," 113d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_source\": 16," 114d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_name\": \"test_policy\"" 1152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf(kTestPolicy, 1182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) dm_protocol::kChromeUserPolicyType, 119d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) homepage, 1202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetTestUser(), 1212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_version); 1222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 124d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)void GetExpectedTestPolicy(PolicyMap* expected, const char* homepage) { 1252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set(key::kShowHomeButton, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1267dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch base::Value::CreateBooleanValue(true), NULL); 127c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) expected->Set(key::kRestoreOnStartup, POLICY_LEVEL_MANDATORY, 1287dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch POLICY_SCOPE_USER, base::Value::CreateIntegerValue(4), NULL); 1292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ListValue list; 1302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("dev.chromium.org"); 1312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("youtube.com"); 1322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kURLBlacklist, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1347dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch list.DeepCopy(), NULL); 1352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 136d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) key::kMaxInvalidationFetchDelay, POLICY_LEVEL_MANDATORY, 137d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateIntegerValue(1000), NULL); 138d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) expected->Set( 1392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kHomepageLocation, POLICY_LEVEL_RECOMMENDED, 140d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateStringValue(homepage), NULL); 1412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace 1442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Tests the cloud policy stack(s). 146d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)class CloudPolicyTest : public InProcessBrowserTest, 147d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) public PolicyService::Observer { 1482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) protected: 1492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CloudPolicyTest() {} 1502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual ~CloudPolicyTest() {} 1512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpInProcessBrowserTestFixture() OVERRIDE { 1532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); 1542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetEmptyPolicy())); 1552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) test_server_.reset(new LocalPolicyTestServer(policy_file_path())); 1572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(test_server_->Start()); 1582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string url = test_server_->GetServiceURL().spec(); 1602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CommandLine* command_line = CommandLine::ForCurrentProcess(); 1622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) command_line->AppendSwitchASCII(switches::kDeviceManagementUrl, url); 163d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 164d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::InvalidationServiceFactory::GetInstance()-> 165d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) SetBuildOnlyFakeInvalidatorsForTest(true); 1662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpOnMainThread() OVERRIDE { 1692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(PolicyServiceIsEmpty(g_browser_process->policy_service())) 1702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) << "Pre-existing policies in this machine will make this test fail."; 1712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) BrowserPolicyConnector* connector = 1732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) g_browser_process->browser_policy_connector(); 1742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->ScheduleServiceInitialization(0); 1752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 1772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerChromeOS* policy_manager = 178c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) UserCloudPolicyManagerFactoryChromeOS::GetForProfile( 179c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) browser()->profile()); 1802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 1812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 1822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Mock a signed-in user. This is used by the UserCloudPolicyStore to pass 1832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // the username to the UserCloudPolicyValidator. 1842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManager* signin_manager = 1852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManagerFactory::GetForProfile(browser()->profile()); 1862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(signin_manager); 1872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) signin_manager->SetAuthenticatedUsername(GetTestUser()); 1882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager* policy_manager = 190f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) UserCloudPolicyManagerFactory::GetForBrowserContext( 191f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) browser()->profile()); 1922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 193a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) policy_manager->Connect( 194a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->local_state(), 195a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context(), 196a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) UserCloudPolicyManager::CreateCloudPolicyClient( 197a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) connector->device_management_service(), 198a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context()).Pass()); 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif // defined(OS_CHROMEOS) 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager->core()->client()); 2022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) MockCloudPolicyClientObserver observer; 2042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_CALL(observer, OnRegistrationStateChanged(_)).WillOnce( 2052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit)); 2062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->AddObserver(&observer); 2072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Give a bogus OAuth token to the |policy_manager|. This should make its 2092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // CloudPolicyClient fetch the DMToken. 210c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ASSERT_FALSE(policy_manager->core()->client()->is_registered()); 211c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::Type registration_type = 212c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 213c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::USER; 214c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#else 215c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::BROWSER; 216c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 217c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) policy_manager->core()->client()->Register( 21890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) registration_type, "bogus", std::string(), false, std::string()); 2192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) Mock::VerifyAndClearExpectations(&observer); 2212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->RemoveObserver(&observer); 222c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXPECT_TRUE(policy_manager->core()->client()->is_registered()); 2232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 225a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) // Get the path to the user policy key file. 226a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_dir; 227a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) ASSERT_TRUE( 228a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) PathService::Get(chromeos::DIR_USER_POLICY_KEYS, &user_policy_key_dir)); 229a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) std::string sanitized_username = 230a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) chromeos::CryptohomeClient::GetStubSanitizedUsername(GetTestUser()); 231a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) user_policy_key_file_ = user_policy_key_dir.AppendASCII(sanitized_username) 232a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) .AppendASCII("policy.pub"); 2332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 234a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) } 2352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 236c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* GetPolicyService() { 237c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnector* profile_connector = 238c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnectorFactory::GetForProfile(browser()->profile()); 239c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return profile_connector->policy_service(); 240c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 241c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 242d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::FakeInvalidationService* GetInvalidationService() { 243d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) return static_cast<invalidation::FakeInvalidationService*>( 244d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::InvalidationServiceFactory::GetForProfile( 245d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) browser()->profile())); 246d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 247d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) void SetServerPolicy(const std::string& policy) { 2492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) int result = file_util::WriteFile(policy_file_path(), policy.data(), 2502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy.size()); 2512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_EQ(static_cast<int>(policy.size()), result); 2522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::FilePath policy_file_path() const { 2552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return temp_dir_.path().AppendASCII("policy.json"); 2562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 258d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyUpdated(const PolicyNamespace& ns, 259d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& previous, 260d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& current) OVERRIDE { 261d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) if (!on_policy_updated_.is_null()) { 262d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Run(); 263d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Reset(); 264d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 265d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 266d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 267d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyServiceInitialized(PolicyDomain domain) OVERRIDE {} 268d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ScopedTempDir temp_dir_; 2702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) scoped_ptr<LocalPolicyTestServer> test_server_; 271a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_file_; 272d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::Closure on_policy_updated_; 2732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}; 2742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicy) { 276c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 2772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 2802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap empty; 2852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(empty.Equals(policy_service->GetPolicies( 2862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 288d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 2892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 290d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 2912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies, using the same key. 2942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 2982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 301d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, InvalidatePolicy) { 302d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 303d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->AddObserver(POLICY_DOMAIN_CHROME, this); 304d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 305d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Perform the initial fetch. 306d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 307d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 308d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 309d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 310d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 311d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 312d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 313d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Update the homepage in the policy and trigger an invalidation. 314d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("youtube.com", 0))); 315d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetInvalidationService()->EmitInvalidationForTest( 3164e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) syncer::Invalidation::Init( 3174e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) invalidation::ObjectId(16, "test_policy"), 3184e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) 1 /* version */, 3194e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) "payload")); 320d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 321d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 322d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_ = run_loop.QuitClosure(); 323d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 324d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 325d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 326d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Check that the updated policy was fetched. 327d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyMap expected; 328d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "youtube.com"); 329d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 330d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 331d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 332d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RemoveObserver(POLICY_DOMAIN_CHROME, this); 333d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)} 334d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 3362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicyWithRotatedKey) { 337c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Read the initial key. 3462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string initial_key; 34758537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &initial_key)); 3482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap empty; 3502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(empty.Equals(policy_service->GetPolicies( 3512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Set the new policies and a new key at the server. 354d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 1))); 3552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 356d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies and does a key rotation. 3602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Verify that the key was rotated. 3672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string rotated_key; 36858537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &rotated_key)); 3692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_NE(rotated_key, initial_key); 3702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Another refresh using the same key won't rotate it again. 3722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string current_key; 38058537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, ¤t_key)); 3812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(rotated_key, current_key); 3822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 3842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(CloudPolicyProtoTest, VerifyProtobufEquivalence) { 3862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // There are 2 protobufs that can be used for user cloud policy: 3872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // cloud_policy.proto and chrome_settings.proto. chrome_settings.proto is the 3882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // version used by the server, but generates one proto message per policy; to 3892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // save binary size on the client, the other version shares proto messages for 3902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // policies of the same type. They generate the same bytes on the wire though, 3912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // so they are compatible. This test verifies that that stays true. 3922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build a ChromeSettingsProto message with one policy of each supported type. 3942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::ChromeSettingsProto chrome_settings; 3952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_homepagelocation()->set_homepagelocation( 3962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "chromium.org"); 3972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_showhomebutton()->set_showhomebutton(true); 398c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) chrome_settings.mutable_restoreonstartup()->set_restoreonstartup(4); 3992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::StringList* list = 4002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disabledschemes()->mutable_disabledschemes(); 4012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Try explicitly setting a policy mode too. 4042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->set_disablespdy(false); 4052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->mutable_policy_options()->set_mode( 4062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->set_syncdisabled(true); 4082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build an equivalent CloudPolicySettings message. 4122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::CloudPolicySettings cloud_policy; 4132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_homepagelocation()->set_value("chromium.org"); 4142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_showhomebutton()->set_value(true); 415c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cloud_policy.mutable_restoreonstartup()->set_value(4); 4162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list = cloud_policy.mutable_disabledschemes()->mutable_value(); 4172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->set_value(false); 4202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->mutable_policy_options()->set_mode( 4212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->set_value(true); 4232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // They should now serialize to the same bytes. 4272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string chrome_settings_serialized; 4282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string cloud_policy_serialized; 4292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(chrome_settings.SerializeToString(&chrome_settings_serialized)); 4302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(cloud_policy.SerializeToString(&cloud_policy_serialized)); 4312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(chrome_settings_serialized, cloud_policy_serialized); 4322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace policy 435