cloud_policy_browsertest.cc revision f8ee788a64d60abd8f2d742a5fdedde054ecd910
12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 57dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "base/callback.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/command_line.h" 72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/file_util.h" 82a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/file_path.h" 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/scoped_temp_dir.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/path_service.h" 122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/prefs/pref_service.h" 132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/run_loop.h" 14868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/strings/stringprintf.h" 15c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch#include "base/time/time.h" 162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/browser_process.h" 177dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "chrome/browser/chrome_notification_types.h" 18d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "chrome/browser/invalidation/fake_invalidation_service.h" 19f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "chrome/browser/invalidation/profile_invalidation_provider_factory.h" 20c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector.h" 21c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector_factory.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test/local_policy_test_server.h" 232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/ui/browser.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/test/base/in_process_browser_test.h" 26f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/invalidation/invalidation_service.h" 27f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/invalidation/profile_invalidation_provider.h" 28f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)#include "components/keyed_service/core/keyed_service.h" 295d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/browser/browser_policy_connector.h" 30a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_client.h" 31a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/cloud_policy_constants.h" 32a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/cloud/mock_cloud_policy_client.h" 33f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/external_data_fetcher.h" 34f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles)#include "components/policy/core/common/policy_map.h" 35a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_service.h" 365d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/policy_switches.h" 37a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles)#include "components/policy/core/common/policy_test_utils.h" 382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_service.h" 392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_source.h" 402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/test/test_utils.h" 41d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)#include "net/url_request/url_request_context_getter.h" 422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/policy_constants.h" 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/chrome_settings.pb.h" 442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/cloud_policy.pb.h" 454e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include "sync/internal_api/public/base/invalidation.h" 462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gmock/include/gmock/gmock.h" 472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h" 48eb525c5499e34cc9c4b825d6d9e75bb07cc06aceBen Murdoch#include "url/gurl.h" 492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 51cedac228d2dd51db4b79ea1e72c7f249408ee061Torne (Richard Coles)#include "chrome/browser/chromeos/login/users/user_manager.h" 522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" 53c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.h" 54c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chromeos/chromeos_paths.h" 55a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles)#include "chromeos/dbus/cryptohome_client.h" 562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 595d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "components/policy/core/common/cloud/user_cloud_policy_manager.h" 60e5d81f57cb97b3b6b7fccc9c5610d21eb81db09dBen Murdoch#include "components/signin/core/browser/signin_manager.h" 612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::AnyNumber; 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::InvokeWithoutArgs; 652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Mock; 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Return; 672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::_; 682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 69f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)namespace content { 70f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)class BrowserContext; 71f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 72f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace em = enterprise_management; 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace policy { 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace { 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 79f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)KeyedService* BuildFakeProfileInvalidationProvider( 80f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) content::BrowserContext* context) { 81f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) return new invalidation::ProfileInvalidationProvider( 82f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) scoped_ptr<invalidation::InvalidationService>( 83f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) new invalidation::FakeInvalidationService)); 84f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles)} 85f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) 862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const char* GetTestUser() { 872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return chromeos::UserManager::kStubUser; 892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return "user@example.com"; 912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetEmptyPolicy() { 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kEmptyPolicy[] = 962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {}," 992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {}" 1002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 1032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": 0" 1042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf( 1072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kEmptyPolicy, dm_protocol::kChromeUserPolicyType, GetTestUser()); 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 110d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)std::string GetTestPolicy(const char* homepage, int key_version) { 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kTestPolicy[] = 1122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 1132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 1142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {" 1152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"ShowHomeButton\": true," 116c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) " \"RestoreOnStartup\": 4," 117d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"URLBlacklist\": [ \"dev.chromium.org\", \"youtube.com\" ]," 118d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"MaxInvalidationFetchDelay\": 1000" 1192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {" 121d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"HomepageLocation\": \"%s\"" 1222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }" 1232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 126d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"current_key_index\": %d," 127d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_source\": 16," 128d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) " \"invalidation_name\": \"test_policy\"" 1292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf(kTestPolicy, 1322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) dm_protocol::kChromeUserPolicyType, 133d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) homepage, 1342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetTestUser(), 1352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_version); 1362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1380529e5d033099cbfc42635f6f6183833b09dff6eBen Murdochvoid GetExpectedDefaultPolicy(PolicyMap* policy_map) { 1390529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1400529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch policy_map->Set( 1410529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch key::kChromeOsMultiProfileUserBehavior, POLICY_LEVEL_MANDATORY, 1420529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch POLICY_SCOPE_USER, base::Value::CreateStringValue("primary-only"), NULL); 1430529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1440529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch} 1450529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch 146d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)void GetExpectedTestPolicy(PolicyMap* expected, const char* homepage) { 1472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set(key::kShowHomeButton, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1487dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch base::Value::CreateBooleanValue(true), NULL); 149c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) expected->Set(key::kRestoreOnStartup, POLICY_LEVEL_MANDATORY, 1507dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch POLICY_SCOPE_USER, base::Value::CreateIntegerValue(4), NULL); 1512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ListValue list; 1522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("dev.chromium.org"); 1532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("youtube.com"); 1542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kURLBlacklist, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1567dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch list.DeepCopy(), NULL); 1572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 158d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) key::kMaxInvalidationFetchDelay, POLICY_LEVEL_MANDATORY, 159d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateIntegerValue(1000), NULL); 160d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) expected->Set( 1612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kHomepageLocation, POLICY_LEVEL_RECOMMENDED, 162d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateStringValue(homepage), NULL); 1630529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#if defined(OS_CHROMEOS) 1640529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch expected->Set( 1650529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch key::kChromeOsMultiProfileUserBehavior, POLICY_LEVEL_MANDATORY, 1660529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch POLICY_SCOPE_USER, base::Value::CreateStringValue("primary-only"), NULL); 1670529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch#endif 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace 1712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Tests the cloud policy stack(s). 173d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)class CloudPolicyTest : public InProcessBrowserTest, 174d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) public PolicyService::Observer { 1752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) protected: 1762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CloudPolicyTest() {} 1772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual ~CloudPolicyTest() {} 1782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpInProcessBrowserTestFixture() OVERRIDE { 1802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); 1812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetEmptyPolicy())); 1822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) test_server_.reset(new LocalPolicyTestServer(policy_file_path())); 1842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(test_server_->Start()); 1852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string url = test_server_->GetServiceURL().spec(); 1872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CommandLine* command_line = CommandLine::ForCurrentProcess(); 1892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) command_line->AppendSwitchASCII(switches::kDeviceManagementUrl, url); 190d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 191f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) invalidation::ProfileInvalidationProviderFactory::GetInstance()-> 192f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) RegisterTestingFactory(BuildFakeProfileInvalidationProvider); 1932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpOnMainThread() OVERRIDE { 1962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(PolicyServiceIsEmpty(g_browser_process->policy_service())) 1972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) << "Pre-existing policies in this machine will make this test fail."; 1982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) BrowserPolicyConnector* connector = 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) g_browser_process->browser_policy_connector(); 2012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->ScheduleServiceInitialization(0); 2022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 2042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerChromeOS* policy_manager = 205c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) UserCloudPolicyManagerFactoryChromeOS::GetForProfile( 206c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) browser()->profile()); 2072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 2082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 2092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Mock a signed-in user. This is used by the UserCloudPolicyStore to pass 2102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // the username to the UserCloudPolicyValidator. 2112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManager* signin_manager = 2122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManagerFactory::GetForProfile(browser()->profile()); 2132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(signin_manager); 2142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) signin_manager->SetAuthenticatedUsername(GetTestUser()); 2152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager* policy_manager = 217f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) UserCloudPolicyManagerFactory::GetForBrowserContext( 218f2477e01787aa58f445919b809d89e252beef54fTorne (Richard Coles) browser()->profile()); 2192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 220a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) policy_manager->Connect( 221a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->local_state(), 222a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context(), 223a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) UserCloudPolicyManager::CreateCloudPolicyClient( 224a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) connector->device_management_service(), 225a3f6a49ab37290eeeb8db0f41ec0f1cb74a68be7Torne (Richard Coles) g_browser_process->system_request_context()).Pass()); 2262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif // defined(OS_CHROMEOS) 2272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager->core()->client()); 2292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) MockCloudPolicyClientObserver observer; 2312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_CALL(observer, OnRegistrationStateChanged(_)).WillOnce( 2322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit)); 2332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->AddObserver(&observer); 2342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Give a bogus OAuth token to the |policy_manager|. This should make its 2362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // CloudPolicyClient fetch the DMToken. 237c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ASSERT_FALSE(policy_manager->core()->client()->is_registered()); 238c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::Type registration_type = 239c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 240c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::USER; 241c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#else 242c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::BROWSER; 243c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 244c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) policy_manager->core()->client()->Register( 245effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch registration_type, "bogus", std::string(), false, std::string(), 246effb81e5f8246d0db0270817048dc992db66e9fbBen Murdoch std::string()); 2472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) Mock::VerifyAndClearExpectations(&observer); 2492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->RemoveObserver(&observer); 250c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXPECT_TRUE(policy_manager->core()->client()->is_registered()); 2512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 253a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) // Get the path to the user policy key file. 254a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_dir; 255a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) ASSERT_TRUE( 256a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) PathService::Get(chromeos::DIR_USER_POLICY_KEYS, &user_policy_key_dir)); 257a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) std::string sanitized_username = 258a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) chromeos::CryptohomeClient::GetStubSanitizedUsername(GetTestUser()); 259a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) user_policy_key_file_ = user_policy_key_dir.AppendASCII(sanitized_username) 260a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) .AppendASCII("policy.pub"); 2612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 262a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) } 2632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 264c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* GetPolicyService() { 265c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnector* profile_connector = 266c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnectorFactory::GetForProfile(browser()->profile()); 267c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return profile_connector->policy_service(); 268c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 269c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 270d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) invalidation::FakeInvalidationService* GetInvalidationService() { 271d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) return static_cast<invalidation::FakeInvalidationService*>( 272f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) static_cast<invalidation::ProfileInvalidationProvider*>( 273f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) invalidation::ProfileInvalidationProviderFactory::GetInstance()-> 274f8ee788a64d60abd8f2d742a5fdedde054ecd910Torne (Richard Coles) GetForProfile(browser()->profile()))->GetInvalidationService()); 275d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 276d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) void SetServerPolicy(const std::string& policy) { 278a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) int result = base::WriteFile(policy_file_path(), policy.data(), 279a1401311d1ab56c4ed0a474bd38c108f75cb0cd9Torne (Richard Coles) policy.size()); 2802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_EQ(static_cast<int>(policy.size()), result); 2812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::FilePath policy_file_path() const { 2842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return temp_dir_.path().AppendASCII("policy.json"); 2852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 287d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyUpdated(const PolicyNamespace& ns, 288d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& previous, 289d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) const PolicyMap& current) OVERRIDE { 290d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) if (!on_policy_updated_.is_null()) { 291d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Run(); 292d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_.Reset(); 293d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 294d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 295d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 296d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) virtual void OnPolicyServiceInitialized(PolicyDomain domain) OVERRIDE {} 297d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 2982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ScopedTempDir temp_dir_; 2992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) scoped_ptr<LocalPolicyTestServer> test_server_; 300a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_file_; 301d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::Closure on_policy_updated_; 3022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}; 3032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicy) { 305c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3130529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 3140529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 3150529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 3162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 318d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 3192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 320d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies, using the same key. 3242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 331d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, InvalidatePolicy) { 332d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 333d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->AddObserver(POLICY_DOMAIN_CHROME, this); 334d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 335d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Perform the initial fetch. 336d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 0))); 337d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 338d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 339d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 340d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 341d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 342d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 343d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Update the homepage in the policy and trigger an invalidation. 344d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("youtube.com", 0))); 345c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::TimeDelta now = 346c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch base::Time::NowFromSystemTime() - base::Time::UnixEpoch(); 347d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetInvalidationService()->EmitInvalidationForTest( 3484e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) syncer::Invalidation::Init( 3494e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) invalidation::ObjectId(16, "test_policy"), 350c5cede9ae108bb15f6b7a8aea21c7e1fefa2834cBen Murdoch now.InMicroseconds() /* version */, 3514e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles) "payload")); 352d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) { 353d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) base::RunLoop run_loop; 354d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) on_policy_updated_ = run_loop.QuitClosure(); 355d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) run_loop.Run(); 356d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) } 357d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 358d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) // Check that the updated policy was fetched. 359d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyMap expected; 360d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "youtube.com"); 361d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 362d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 363d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 364d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) policy_service->RemoveObserver(POLICY_DOMAIN_CHROME, this); 365d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles)} 366d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) 3672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 3682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicyWithRotatedKey) { 369c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 3702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 3732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Read the initial key. 3782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string initial_key; 37958537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &initial_key)); 3802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3810529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch PolicyMap default_policy; 3820529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch GetExpectedDefaultPolicy(&default_policy); 3830529e5d033099cbfc42635f6f6183833b09dff6eBen Murdoch EXPECT_TRUE(default_policy.Equals(policy_service->GetPolicies( 3842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Set the new policies and a new key at the server. 387d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy("google.com", 1))); 3882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 389d0247b1b59f9c528cb6df88b4f2b9afaf80d181eTorne (Richard Coles) GetExpectedTestPolicy(&expected, "google.com"); 3902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies and does a key rotation. 3932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Verify that the key was rotated. 4002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string rotated_key; 40158537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, &rotated_key)); 4022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_NE(rotated_key, initial_key); 4032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Another refresh using the same key won't rotate it again. 4052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 4062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 4072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 4082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 4092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 4112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 4122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string current_key; 41358537e28ecd584eab876aee8be7156509866d23aTorne (Richard Coles) ASSERT_TRUE(base::ReadFileToString(user_policy_key_file_, ¤t_key)); 4142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(rotated_key, current_key); 4152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 4172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(CloudPolicyProtoTest, VerifyProtobufEquivalence) { 4192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // There are 2 protobufs that can be used for user cloud policy: 4202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // cloud_policy.proto and chrome_settings.proto. chrome_settings.proto is the 4212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // version used by the server, but generates one proto message per policy; to 4222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // save binary size on the client, the other version shares proto messages for 4232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // policies of the same type. They generate the same bytes on the wire though, 4242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // so they are compatible. This test verifies that that stays true. 4252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build a ChromeSettingsProto message with one policy of each supported type. 4272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::ChromeSettingsProto chrome_settings; 4282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_homepagelocation()->set_homepagelocation( 4292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "chromium.org"); 4302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_showhomebutton()->set_showhomebutton(true); 431c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) chrome_settings.mutable_restoreonstartup()->set_restoreonstartup(4); 4322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::StringList* list = 4332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disabledschemes()->mutable_disabledschemes(); 4342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Try explicitly setting a policy mode too. 4372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->set_disablespdy(false); 4382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->mutable_policy_options()->set_mode( 4392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->set_syncdisabled(true); 4412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build an equivalent CloudPolicySettings message. 4452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::CloudPolicySettings cloud_policy; 4462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_homepagelocation()->set_value("chromium.org"); 4472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_showhomebutton()->set_value(true); 448c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cloud_policy.mutable_restoreonstartup()->set_value(4); 4492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list = cloud_policy.mutable_disabledschemes()->mutable_value(); 4502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 4512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 4522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->set_value(false); 4532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->mutable_policy_options()->set_mode( 4542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 4552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->set_value(true); 4562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->mutable_policy_options()->set_mode( 4572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 4582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // They should now serialize to the same bytes. 4602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string chrome_settings_serialized; 4612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string cloud_policy_serialized; 4622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(chrome_settings.SerializeToString(&chrome_settings_serialized)); 4632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(cloud_policy.SerializeToString(&cloud_policy_serialized)); 4642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(chrome_settings_serialized, cloud_policy_serialized); 4652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 4672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace policy 468