Encrypted OAuth1 all access token and secret with system salt for now, will replace this with use...

chrome/browser/chromeos/login/parallel_authenticator.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_PARALLEL_AUTHENTICATOR_H_
 #define CHROME_BROWSER_CHROMEOS_LOGIN_PARALLEL_AUTHENTICATOR_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 129 matching lines @@
       const GaiaAuthConsumer::ClientLoginResult& credentials) OVERRIDE;
   virtual void ResyncEncryptedData(
       const GaiaAuthConsumer::ClientLoginResult& credentials) OVERRIDE;
   virtual void RetryAuth(Profile* profile,
                          const std::string& username,
                          const std::string& password,
                          const std::string& login_token,
                          const std::string& login_captcha) OVERRIDE;
   virtual void VerifyOAuth1AccessToken(const std::string& oauth1_access_token,
       const std::string& oauth1_secret) OVERRIDE;
+  virtual std::string EncryptToken(const std::string& token) OVERRIDE;
+  virtual std::string DecryptToken(const std::string& encrypted_token) OVERRIDE;
 
   // AuthAttemptStateResolver overrides.
   // Attempts to make a decision and call back |consumer_| based on
   // the state we have gathered at the time of call.  If a decision
   // can't be made, defers until the next time this is called.
   // When a decision is made, will call back to |consumer_| on the UI thread.
   //
   // Must be called on the IO thread.
   virtual void Resolve() OVERRIDE;
 
@@ skipping 71 matching lines @@
 
   // Records OAuth1 access token verification failure for |user_account|.
   void RecordOAuthCheckFailure(const std::string& user_account);
 
   // Stores a hash of |password|, salted with the ascii of |system_salt_|.
   std::string HashPassword(const std::string& password);
 
   // Returns the ascii encoding of the system salt.
   std::string SaltAsAscii();
 
-  // Converts the binary data |binary| into an ascii hex string and stores
-  // it in |hex_string|.  Not guaranteed to be NULL-terminated.
-  // Returns false if |hex_string| is too small, true otherwise.
-  static bool BinaryToHex(const std::vector<unsigned char>& binary,
-                          const unsigned int binary_len,
-                          char* hex_string,
-                          const unsigned int len);
+  // Returns the ascii encoding of user supplemental key.
+  std::string UserSupplementalKeyAsAscii();

[Chris Masone, 2011/08/09 04:19:32]

It'd be good to file an issue for converting this to a key stored in NSS, and
then put a TODO here

 
   // Signal login completion status for cases when a new user is added via
   // an external authentication provider (i.e. GAIA extension).
   void ResolveLoginCompletionStatus();
 
     // Name of a file, next to chrome, that contains a local account username.
   static const char kLocalaccountFile[];
 
   // Milliseconds until we timeout our attempt to hit ClientLogin.
   static const int kClientLoginTimeoutMs;
@@ skipping 40 matching lines @@
   FRIEND_TEST_ALL_PREFIXES(ParallelAuthenticatorTest, ReadLocalaccount);
   FRIEND_TEST_ALL_PREFIXES(ParallelAuthenticatorTest,
                            ReadLocalaccountTrailingWS);
   FRIEND_TEST_ALL_PREFIXES(ParallelAuthenticatorTest, ReadNoLocalaccount);
   DISALLOW_COPY_AND_ASSIGN(ParallelAuthenticator);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_LOGIN_PARALLEL_AUTHENTICATOR_H_