Chrome-side lockbox bindings

chrome/browser/chromeos/login/enterprise_enrollment_view.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/login/enterprise_enrollment_view.h"
 
 #include "base/json/json_writer.h"
 #include "base/values.h"
+#include "chrome/browser/chromeos/cros/cros_library.h"
+#include "chrome/browser/chromeos/cros/cryptohome_library.h"
 #include "chrome/browser/chromeos/login/enterprise_enrollment_screen.h"
 #include "chrome/browser/chromeos/login/helper.h"
 #include "chrome/browser/chromeos/login/rounded_rect_painter.h"
 #include "chrome/browser/profiles/profile_manager.h"
 #include "chrome/browser/ui/webui/chromeos/enterprise_enrollment_ui.h"
 #include "chrome/common/url_constants.h"
 #include "content/browser/renderer_host/render_view_host.h"
 #include "content/browser/site_instance.h"
 #include "content/browser/tab_contents/tab_contents_delegate.h"
 #include "grit/generated_resources.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "views/border.h"
 #include "views/layout/layout_constants.h"
 
 namespace chromeos {
 
 namespace {
 
+// Retry for lockbox initialization every 500ms.
+const int kLockboxRetryInterval = 500;
+
 // Layout constants.
 const int kBorderSize = 30;
 
 // Renders the registration page.
 class EnrollmentDomView : public WebPageDomView,
                           public TabContentsDelegate {
  public:
   EnrollmentDomView() {}
   virtual ~EnrollmentDomView() {}
 
@@ skipping 31 matching lines @@
       NavigationType::Type navigation_type) {
     return false;
   }
   virtual void MoveContents(TabContents* source, const gfx::Rect& pos) {}
   virtual void ToolbarSizeChanged(TabContents* source, bool is_animating) {}
   virtual bool HandleContextMenu(const ContextMenuParams& params) {
     return true;
   }
 
  private:
+
   DISALLOW_COPY_AND_ASSIGN(EnrollmentDomView);
 };
 
 }  // namespace
 
 EnterpriseEnrollmentView::EnterpriseEnrollmentView(
     EnterpriseEnrollmentController* controller)
-    : controller_(controller) {}
+    : controller_(controller),
+      ALLOW_THIS_IN_INITIALIZER_LIST(runnable_method_factory_(this)) {}
 
 EnterpriseEnrollmentView::~EnterpriseEnrollmentView() {}
 
 void EnterpriseEnrollmentView::Init() {
   // Use rounded rect background.
   views::Painter* painter =
       CreateWizardPainter(&BorderDefinition::kScreenBorder);
   set_background(views::Background::CreateBackgroundPainter(true, painter));
 
   // Create the view that hosts the enrollment page.
@@ skipping 44 matching lines @@
 }
 
 void EnterpriseEnrollmentView::ShowNetworkEnrollmentError() {
   ShowError(IDS_ENTERPRISE_ENROLLMENT_NETWORK_ENROLLMENT_ERROR);
 }
 
 void EnterpriseEnrollmentView::OnAuthSubmitted(const std::string& user,
                                                const std::string& password,
                                                const std::string& captcha,
                                                const std::string& access_code) {
+  user_ = user;
   controller_->Authenticate(user, password, captcha, access_code);
 }
 
 void EnterpriseEnrollmentView::OnAuthCancelled() {
   controller_->CancelEnrollment();
 }
 
 void EnterpriseEnrollmentView::OnConfirmationClosed() {
   controller_->CloseConfirmation();
 }
@@ skipping 14 matching lines @@
   args.SetInteger("error", GoogleServiceAuthError::NONE);
   args.SetBoolean("editable_user", true);
   args.SetString("error_message", l10n_util::GetStringUTF16(message_id));
   UpdateGaiaLogin(args);
 }
 
 void EnterpriseEnrollmentView::Layout() {
   enrollment_page_view_->SetBoundsRect(GetContentsBounds());
 }
 
+
+void EnterpriseEnrollmentView::WriteLockboxData() {
+  // Since this method is also called directly.
+  runnable_method_factory_.RevokeAll();
+
+  chromeos::CryptohomeLibrary* cryptohome =
+      chromeos::CrosLibrary::Get()->GetCryptohomeLibrary();
+  // TODO(pastarmovj): This is being done either on the eula screen or on first
+  // login so maybe we should do it already here? If not remove.
+  if (cryptohome->TpmIsEnabled() && !cryptohome->TpmIsBeingOwned()) {
+    if (cryptohome->TpmIsOwned())
+      cryptohome->TpmClearStoredPassword();
+    else
+      cryptohome->TpmCanAttemptOwnership();
+  }
+
+  if (!cryptohome->InstallAttributesIsReady()) {

[kmixter1, 2011/04/14 16:52:22]

How does this look to the user?  Do they provide credentials and then the
login/authenticate seems to take a long time, do we say we're waiting for
hardware, etc?

+    // Lockbox is not read yet, reschedule pulling.
+    LOG(INFO) << "Lockbox is not ready yet will retry in "
+              << kLockboxRetryInterval << "ms.";
+    MessageLoop::current()->PostDelayedTask(
+        FROM_HERE,
+        runnable_method_factory_.NewRunnableMethod(
+            &EnterpriseEnrollmentView::WriteLockboxData),
+        kLockboxRetryInterval);
+  } else {
+    // Set values in the lockbox and lock it.
+    /*

[kmixter1, 2011/04/14 16:52:22]

remove?

+    DCHECK(cryptohome->InstallAttributesIsFirstInstall());
+    cryptohome->InstallAttributesSet("enterprise.owned", "true");
+    cryptohome->InstallAttributesSet("enterprise.user", user_);
+    DCHECK(cryptohome->InstallAttributesCount() == 2);
+    cryptohome->InstallAttributesFinalize();
+    DCHECK(cryptohome->InstallAttributesIsSecure());
+    */
+
+    // The same code but much more verbose for debugging!
+    LOG(ERROR) << "### FI : " << cryptohome->InstallAttributesIsFirstInstall();

[kmixter1, 2011/04/14 16:52:22]

remove?

+    LOG(ERROR) << "### count : " << cryptohome->InstallAttributesCount();
+    LOG(ERROR) << "### set : "
+               << cryptohome->InstallAttributesSet("enterprise.owned", "true");
+    LOG(ERROR) << "### set : "
+               << cryptohome->InstallAttributesSet("enterprise.user", user_);
+    LOG(ERROR) << "### count : " << cryptohome->InstallAttributesCount();
+    std::string test;
+    LOG(ERROR) << "### get owned : "
+               << cryptohome->InstallAttributesGet("enterprise.owned", &test);
+    LOG(ERROR) << "###       " << test;
+    LOG(ERROR) << "### get user  : "
+               << cryptohome->InstallAttributesGet("enterprise.user", &test);
+    LOG(ERROR) << "###       " << test;
+    LOG(ERROR) << "### stat : " << cryptohome->InstallAttributesIsSecure();
+    LOG(ERROR) << "### lock : " << cryptohome->InstallAttributesFinalize();
+    LOG(ERROR) << "### stat : " << cryptohome->InstallAttributesIsSecure();
+
+    ShowConfirmationScreen();
+  }
+}
+
+
+
 }  // namespace chromeos