Remove static "set_fixed_cnonce" in favor of NonceGenerator objects....

net/http/http_auth_handler_digest.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_HANDLER_DIGEST_H_
 #define NET_HTTP_HTTP_AUTH_HANDLER_DIGEST_H_
 #pragma once
 
 #include <string>
 
 #include "base/gtest_prod_util.h"
+#include "base/scoped_ptr.h"
 #include "base/string16.h"
 #include "net/http/http_auth_handler.h"
 #include "net/http/http_auth_handler_factory.h"
 
 namespace net {
 
 // Code for handling http digest authentication.
 class HttpAuthHandlerDigest : public HttpAuthHandler {
  public:
+  class NonceGenerator {
+   public:
+    virtual ~NonceGenerator();
+    virtual std::string GenerateNonce() const = 0;
+  };
+
+  class DynamicNonceGenerator : public NonceGenerator {
+   public:
+    virtual std::string GenerateNonce() const;
+  };
+
+  // For unit tests
+  class FixedNonceGenerator : public NonceGenerator {
+   public:
+    explicit FixedNonceGenerator(const std::string& nonce);
+
+    virtual std::string GenerateNonce() const;
+
+   private:
+    std::string nonce_;

[eroman, 2010/11/16 00:02:35]

nit: const

+  };
+
   class Factory : public HttpAuthHandlerFactory {
    public:
     Factory();
     virtual ~Factory();
 
     virtual int CreateAuthHandler(HttpAuth::ChallengeTokenizer* challenge,

[eroman, 2010/11/16 00:02:35]

Important: this creates a new dependency which I don't believe is documented in
HttpAuthHandlerFactory::CreateAuthHandler.

Notably, any auth handler created must NOT outlive the Factory that created it
(since it holds a pointer to memory scoped to the Factory).

I am not sure this is a restriction we want to add to the interface, however if
we have it it should at least be documented.

                                   HttpAuth::Target target,
                                   const GURL& origin,
                                   CreateReason reason,
                                   int digest_nonce_count,
                                   const BoundNetLog& net_log,
                                   scoped_ptr<HttpAuthHandler>* handler);
+
+    void set_nonce_generator(const NonceGenerator* nonce_generator);

[eroman, 2010/11/16 00:02:35]

should mention ownership.

(even though it is a const pointer, we still delete it).

+
+   private:
+    scoped_ptr<const NonceGenerator> nonce_generator_;
   };
 
   HttpAuth::AuthorizationResult HandleAnotherChallenge(
       HttpAuth::ChallengeTokenizer* challenge);
 
  protected:
   virtual bool Init(HttpAuth::ChallengeTokenizer* challenge);
 
   virtual int GenerateAuthTokenImpl(const string16* username,
                                     const string16* password,
@@ skipping 20 matching lines @@
     ALGORITHM_MD5_SESS,
   };
 
   // Possible values for QualityOfProtection.
   // auth-int is not supported, see http://crbug.com/62890 for justification.
   enum QualityOfProtection {
     QOP_UNSPECIFIED,
     QOP_AUTH,
   };
 
-  explicit HttpAuthHandlerDigest(int nonce_count);
+  HttpAuthHandlerDigest(int nonce_count, const NonceGenerator* nonce_generator);

[eroman, 2010/11/16 00:02:35]

Please mention ownerhsip model.

   ~HttpAuthHandlerDigest();
 
   // Parse the challenge, saving the results into this instance.
   // Returns true on success.
   bool ParseChallenge(HttpAuth::ChallengeTokenizer* challenge);
 
   // Parse an individual property. Returns true on success.
   bool ParseChallengeProperty(const std::string& name,
                               const std::string& value);
 
@@ skipping 19 matching lines @@
                                      const std::string& nc) const;
 
   // Build up  the value for (Authorization/Proxy-Authorization).
   std::string AssembleCredentials(const std::string& method,
                                   const std::string& path,
                                   const string16& username,
                                   const string16& password,
                                   const std::string& cnonce,
                                   int nonce_count) const;
 
-  // Forces cnonce to be the same each time. This is used for unit tests.
-  static void SetFixedCnonce(bool fixed_cnonce) {
-    fixed_cnonce_ = fixed_cnonce;
-  }
-
   // Information parsed from the challenge.
   std::string nonce_;
   std::string domain_;
   std::string opaque_;
   bool stale_;
   DigestAlgorithm algorithm_;
   QualityOfProtection qop_;
 
   int nonce_count_;
-
-  // Forces the cnonce to be the same each time, for unit tests.
-  static bool fixed_cnonce_;
+  const NonceGenerator* nonce_generator_;
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_HANDLER_DIGEST_H_