OLD | NEW |
| (Empty) |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_SSL_SSL_CLIENT_AUTH_HANDLER_H_ | |
6 #define CHROME_BROWSER_SSL_SSL_CLIENT_AUTH_HANDLER_H_ | |
7 #pragma once | |
8 | |
9 #include "base/basictypes.h" | |
10 #include "base/memory/ref_counted.h" | |
11 #include "content/browser/browser_thread.h" | |
12 #include "content/common/notification_observer.h" | |
13 #include "content/common/notification_registrar.h" | |
14 #include "net/base/ssl_cert_request_info.h" | |
15 | |
16 namespace net { | |
17 class URLRequest; | |
18 class X509Certificate; | |
19 } // namespace net | |
20 | |
21 // This class handles the approval and selection of a certificate for SSL client | |
22 // authentication by the user. | |
23 // It is self-owned and deletes itself when the UI reports the user selection or | |
24 // when the net::URLRequest is cancelled. | |
25 class SSLClientAuthHandler | |
26 : public base::RefCountedThreadSafe<SSLClientAuthHandler, | |
27 BrowserThread::DeleteOnIOThread> { | |
28 public: | |
29 SSLClientAuthHandler(net::URLRequest* request, | |
30 net::SSLCertRequestInfo* cert_request_info); | |
31 | |
32 // Asks the user to select a certificate and resumes the URL request with that | |
33 // certificate. | |
34 // Should only be called on the IO thread. | |
35 void SelectCertificate(); | |
36 | |
37 // Invoked when the request associated with this handler is cancelled. | |
38 // Should only be called on the IO thread. | |
39 void OnRequestCancelled(); | |
40 | |
41 // Calls DoCertificateSelected on the I/O thread. | |
42 // Called on the UI thread after the user has made a selection (which may | |
43 // be long after DoSelectCertificate returns, if the UI is modeless/async.) | |
44 void CertificateSelected(net::X509Certificate* cert); | |
45 | |
46 // Like CertificateSelected, but does not send SSL_CLIENT_AUTH_CERT_SELECTED | |
47 // notification. Used to avoid notification re-spamming when other | |
48 // certificate selectors act on a notification matching the same host. | |
49 void CertificateSelectedNoNotify(net::X509Certificate* cert); | |
50 | |
51 // Returns the SSLCertRequestInfo for this handler. | |
52 net::SSLCertRequestInfo* cert_request_info() { return cert_request_info_; } | |
53 | |
54 private: | |
55 friend class BrowserThread; | |
56 friend class DeleteTask<SSLClientAuthHandler>; | |
57 | |
58 virtual ~SSLClientAuthHandler(); | |
59 | |
60 // Notifies that the user has selected a cert. | |
61 // Called on the IO thread. | |
62 void DoCertificateSelected(net::X509Certificate* cert); | |
63 | |
64 // Calls the SSL helper on the UI thread. | |
65 void ShowClientCertificateRequestDialog(int render_process_host_id, | |
66 int render_view_host_id); | |
67 | |
68 // The net::URLRequest that triggered this client auth. | |
69 net::URLRequest* request_; | |
70 | |
71 // The certs to choose from. | |
72 scoped_refptr<net::SSLCertRequestInfo> cert_request_info_; | |
73 | |
74 DISALLOW_COPY_AND_ASSIGN(SSLClientAuthHandler); | |
75 }; | |
76 | |
77 class SSLClientAuthObserver : public NotificationObserver { | |
78 public: | |
79 SSLClientAuthObserver(net::SSLCertRequestInfo* cert_request_info, | |
80 SSLClientAuthHandler* handler); | |
81 virtual ~SSLClientAuthObserver(); | |
82 | |
83 // UI should implement this to close the dialog. | |
84 virtual void OnCertSelectedByNotification() = 0; | |
85 | |
86 // NotificationObserver implementation: | |
87 virtual void Observe(NotificationType type, | |
88 const NotificationSource& source, | |
89 const NotificationDetails& details); | |
90 | |
91 // Begins observing notifications from other SSLClientAuthHandler instances. | |
92 // If another instance chooses a cert for a matching SSLCertRequestInfo, we | |
93 // will also use the same cert and OnCertSelectedByNotification will be called | |
94 // so that the cert selection UI can be closed. | |
95 void StartObserving(); | |
96 | |
97 // Stops observing notifications. We will no longer act on client auth | |
98 // notifications. | |
99 void StopObserving(); | |
100 | |
101 private: | |
102 scoped_refptr<net::SSLCertRequestInfo> cert_request_info_; | |
103 | |
104 scoped_refptr<SSLClientAuthHandler> handler_; | |
105 | |
106 NotificationRegistrar notification_registrar_; | |
107 | |
108 DISALLOW_COPY_AND_ASSIGN(SSLClientAuthObserver); | |
109 }; | |
110 | |
111 #endif // CHROME_BROWSER_SSL_SSL_CLIENT_AUTH_HANDLER_H_ | |
OLD | NEW |