Private API for extensions like ssh-client that need access to TCP.

chrome/browser/extensions/extension_internal_auth_api.cc

+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/extensions/extension_internal_auth_api.h"
+
+#include "base/logging.h"
+#include "base/values.h"
+#include "chrome/browser/internal_auth.h"
+
+namespace {
+
+// Checks credentials and in case of positive check fills var=value map.
+bool CheckCredentials(
+    const std::string& extension_id,
+    const std::vector<std::string>& arg_list,
+    std::map<std::string, std::string>* out) {
+  DCHECK(out);
+  out->clear();
+
+  char k90ttyExtensionId[] = "cigbjabahnfnnmplhmjeolnhobhfjggp";

[Aaron Boodman, 2011/03/29 18:38:34]

Why is this hard-coded? The convention is to just restrict private APIs to
component extensions.

[Denis Lagno, 2011/04/04 18:18:02]

I removed it.  However it may reappear in future -- this API is expected to be
provided to several extensions and we may want to restrict port range in
different ways for different extensions.

+  if (extension_id != k90ttyExtensionId)
+    return false;
+
+  std::map<std::string, std::string> map;
+  if (!browser::ConvertArgListToVarValueMap(arg_list, &map))

[Aaron Boodman, 2011/03/29 18:38:34]

Where is this defined? I don't see it in the current source or in your patch.

It looks really weird. Chrome extensions APIs support named parameters. Why not
just use that? Like:

chrome.internalWhatever.doThing({foo:"bar", hot:"dog"});

Or, depending on your needs, just use normal parameters:

chrome.internalWhatever.doThing("bar", "dog");

[Denis Lagno, 2011/04/04 18:18:02]

It was declared in chrome/browser/internal_auth.h and defined in
chrome/browser/internal_auth.cc
However it is not needed anymore and was removed.
Done.

+    return false;
+  if (map.size() != 2 ||
+      map["port"] != "22" ||
+      map["hostname"].empty()) {
+    return false;
+  }
+  out->swap(map);
+  return true;
+}
+
+}  // namespace
+
+bool InternalAuthGetTokenFunction::RunImpl() {
+  std::vector<std::string> arg_list;
+  for (size_t i = 0; i < args_->GetSize(); ++i) {
+    arg_list.push_back(std::string());
+    EXTENSION_FUNCTION_VALIDATE(args_->GetString(i, &arg_list.back()));
+  }
+
+  std::map<std::string, std::string> map;
+  std::string id = extension_id();
+  if (CheckCredentials(id, arg_list, &map)) {
+    StringValue* token = Value::CreateStringValue(
+        browser::InternalAuthGeneration::GenerateToken(id, map));
+    result_.reset(token);
+  }
+  return true;
+}
+