Don't do Negotiate with GSSAPI if default credentials are not allowed.

net/http/http_auth_handler_factory_unittest.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/scoped_ptr.h"
 #include "net/base/net_errors.h"
 #include "net/http/http_auth_handler.h"
 #include "net/http/http_auth_handler_factory.h"
+#include "net/http/url_security_manager.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace net {
 
+namespace {
+
 class MockHttpAuthHandlerFactory : public HttpAuthHandlerFactory {
  public:
   explicit MockHttpAuthHandlerFactory(int return_code) :
       return_code_(return_code) {}
   virtual ~MockHttpAuthHandlerFactory() {}
 
   virtual int CreateAuthHandler(HttpAuth::ChallengeTokenizer* challenge,
                                 HttpAuth::Target target,
                                 const GURL& origin,
                                 CreateReason reason,
                                 int nonce_count,
                                 const BoundNetLog& net_log,
                                 scoped_ptr<HttpAuthHandler>* handler) {
     handler->reset();
     return return_code_;
   }
 
  private:
   int return_code_;
 };
 
+}  // namespace
+
 TEST(HttpAuthHandlerFactoryTest, RegistryFactory) {
   HttpAuthHandlerRegistryFactory registry_factory;
   GURL gurl("www.google.com");
   const int kBasicReturnCode = ERR_INVALID_SPDY_STREAM;
   MockHttpAuthHandlerFactory* mock_factory_basic =
       new MockHttpAuthHandlerFactory(kBasicReturnCode);
 
   const int kDigestReturnCode = ERR_PAC_SCRIPT_FAILED;
   MockHttpAuthHandlerFactory* mock_factory_digest =
       new MockHttpAuthHandlerFactory(kDigestReturnCode);
@@ skipping 39 matching lines @@
   EXPECT_EQ(kBasicReturnCode,
             registry_factory.CreateAuthHandlerFromString(
                 "Basic", HttpAuth::AUTH_SERVER, gurl, BoundNetLog(), &handler));
   EXPECT_EQ(kDigestReturnCodeReplace,
             registry_factory.CreateAuthHandlerFromString(
                 "Digest", HttpAuth::AUTH_SERVER, gurl, BoundNetLog(),
                 &handler));
 }
 
 TEST(HttpAuthHandlerFactoryTest, DefaultFactory) {
-  scoped_ptr<HttpAuthHandlerFactory> http_auth_handler_factory(
+  URLSecurityManagerAllow url_security_manager;
+  scoped_ptr<HttpAuthHandlerRegistryFactory> http_auth_handler_factory(
       HttpAuthHandlerFactory::CreateDefault());
-
+  http_auth_handler_factory->SetURLSecurityManager(
+      "negotiate", &url_security_manager);
   GURL server_origin("http://www.example.com");
   GURL proxy_origin("http://cache.example.com:3128");
   {
     scoped_ptr<HttpAuthHandler> handler;
     int rv = http_auth_handler_factory->CreateAuthHandlerFromString(
         "Basic realm=\"FooBar\"",
         HttpAuth::AUTH_SERVER,
         server_origin,
         BoundNetLog(),
         &handler);
@@ skipping 60 matching lines @@
     EXPECT_FALSE(handler.get() == NULL);
     EXPECT_STREQ("negotiate", handler->scheme().c_str());
     EXPECT_STREQ("", handler->realm().c_str());
     EXPECT_EQ(HttpAuth::AUTH_SERVER, handler->target());
     EXPECT_TRUE(handler->encrypts_identity());
     EXPECT_TRUE(handler->is_connection_based());
   }
 }
 
 }  // namespace net