Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ | 5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ |
| 6 #define CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ | 6 #define CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ |
| 7 #pragma once | 7 #pragma once |
| 8 | 8 |
| 9 #include <string> | 9 #include <string> |
| 10 #include <vector> | 10 #include <vector> |
| 11 | 11 |
| 12 #include "base/compiler_specific.h" | 12 #include "base/compiler_specific.h" |
| 13 #include "base/memory/ref_counted.h" | 13 #include "base/memory/ref_counted.h" |
| 14 #include "chrome/browser/chromeos/login/owner_manager.h" | 14 #include "chrome/browser/chromeos/login/owner_manager.h" |
| 15 | 15 |
| 16 // There are two categories of operations that can be performed on the | 16 // There are two operations that can be performed on the Chrome OS owner-signed |
| 17 // Chrome OS owner-signed settings store: | 17 // settings store: Storing and Retrieving the policy blob. |
|
Mattias Nissler (ping if slow)
2011/11/30 11:22:44
Now that this is much simpler, is it still useful
pastarmovj
2011/11/30 17:21:16
Maybe if we rename the SignedSettingsHelper to Sig
| |
| 18 // 1) doing stuff to the whitelist (adding/removing/checking) | |
| 19 // 2) Storing/Retrieving arbitrary name=value pairs | |
| 20 // | 18 // |
| 21 // Unfortunately, it is currently a limitation that only one of each | |
| 22 // category can be in-flight at a time. You can be doing exactly one thing | |
| 23 // to the whitelist, and exactly one thing to the property store at a time. | |
| 24 // I've filed an issue on me to remove that restriction. | |
| 25 // http://code.google.com/p/chromium-os/issues/detail?id=6415 | |
| 26 | |
| 27 // The pattern of use here is that the caller instantiates some | 19 // The pattern of use here is that the caller instantiates some |
| 28 // subclass of SignedSettings by calling one of the create | 20 // subclass of SignedSettings by calling one of the create |
| 29 // methods. Then, call Execute() on this object from the UI | 21 // methods. Then, call Execute() on this object from the UI |
| 30 // thread. It'll go off and do work (on the FILE thread and over DBus), | 22 // thread. It'll go off and do work (on the FILE thread and over DBus), |
| 31 // and then call the appropriate method of the Delegate you passed in | 23 // and then call the appropriate method of the Delegate you passed in |
| 32 // -- again, on the UI thread. | 24 // -- again, on the UI thread. |
| 33 | 25 |
| 34 namespace base { | 26 namespace base { |
| 35 class Value; | 27 class Value; |
| 36 } // namespace base | 28 } // namespace base |
| 37 | 29 |
| 38 namespace enterprise_management { | 30 namespace enterprise_management { |
| 39 class PolicyFetchResponse; | 31 class PolicyFetchResponse; |
| 40 class PolicyData; | 32 class PolicyData; |
| 41 } // namespace enterprise_management | 33 } // namespace enterprise_management |
| 42 namespace em = enterprise_management; | 34 namespace em = enterprise_management; |
| 43 | 35 |
| 44 namespace chromeos { | 36 namespace chromeos { |
| 45 class OwnershipService; | 37 class OwnershipService; |
| 46 | 38 |
| 39 extern const char kDevicePolicyType[]; | |
| 40 | |
| 47 class SignedSettings : public base::RefCountedThreadSafe<SignedSettings>, | 41 class SignedSettings : public base::RefCountedThreadSafe<SignedSettings>, |
| 48 public OwnerManager::Delegate { | 42 public OwnerManager::Delegate { |
| 49 public: | 43 public: |
| 50 enum ReturnCode { | 44 enum ReturnCode { |
| 51 SUCCESS, | 45 SUCCESS, |
| 52 NOT_FOUND, // Email address or property name not found. | 46 NOT_FOUND, // Email address or property name not found. |
| 53 KEY_UNAVAILABLE, // Owner key not yet configured. | 47 KEY_UNAVAILABLE, // Owner key not yet configured. |
| 54 OPERATION_FAILED, // IPC to signed settings daemon failed. | 48 OPERATION_FAILED, // IPC to signed settings daemon failed. |
| 55 BAD_SIGNATURE // Signature verification failed. | 49 BAD_SIGNATURE // Signature verification failed. |
| 56 }; | 50 }; |
| 57 | 51 |
| 58 template <class T> | 52 template <class T> |
| 59 class Delegate { | 53 class Delegate { |
| 60 public: | 54 public: |
| 61 // This method will be called on the UI thread. | 55 // This method will be called on the UI thread. |
| 62 virtual void OnSettingsOpCompleted(ReturnCode code, T value) {} | 56 virtual void OnSettingsOpCompleted(ReturnCode code, T value) {} |
| 63 }; | 57 }; |
| 64 | 58 |
| 65 SignedSettings(); | 59 SignedSettings(); |
| 66 virtual ~SignedSettings(); | 60 virtual ~SignedSettings(); |
| 67 | 61 |
| 68 // These are both "property" operations, and only one instance of | |
| 69 // one type can be in flight at a time. | |
| 70 static SignedSettings* CreateStorePropertyOp( | |
| 71 const std::string& name, | |
| 72 const base::Value& value, | |
| 73 SignedSettings::Delegate<bool>* d); | |
| 74 | |
| 75 static SignedSettings* CreateRetrievePropertyOp( | |
| 76 const std::string& name, | |
| 77 SignedSettings::Delegate<const base::Value*>* d); | |
| 78 | |
| 79 // These are both "policy" operations, and only one instance of | 62 // These are both "policy" operations, and only one instance of |
| 80 // one type can be in flight at a time. | 63 // one type can be in flight at a time. |
| 81 static SignedSettings* CreateStorePolicyOp( | 64 static SignedSettings* CreateStorePolicyOp( |
| 82 em::PolicyFetchResponse* policy, | 65 em::PolicyFetchResponse* policy, |
| 83 SignedSettings::Delegate<bool>* d); | 66 SignedSettings::Delegate<bool>* d); |
| 84 | 67 |
| 85 static SignedSettings* CreateRetrievePolicyOp( | 68 static SignedSettings* CreateRetrievePolicyOp( |
| 86 SignedSettings::Delegate<const em::PolicyFetchResponse&>* d); | 69 SignedSettings::Delegate<const em::PolicyFetchResponse&>* d); |
| 87 | 70 |
| 88 static ReturnCode MapKeyOpCode(OwnerManager::KeyOpCode code); | 71 static ReturnCode MapKeyOpCode(OwnerManager::KeyOpCode code); |
| 89 | 72 |
| 90 virtual void Execute() = 0; | 73 virtual void Execute() = 0; |
| 91 | 74 |
| 92 virtual void Fail(ReturnCode code) = 0; | 75 virtual void Fail(ReturnCode code) = 0; |
| 93 | 76 |
| 94 // Implementation of OwnerManager::Delegate | 77 // Implementation of OwnerManager::Delegate |
| 95 virtual void OnKeyOpComplete(const OwnerManager::KeyOpCode return_code, | 78 virtual void OnKeyOpComplete(const OwnerManager::KeyOpCode return_code, |
| 96 const std::vector<uint8>& payload) = 0; | 79 const std::vector<uint8>& payload) = 0; |
| 97 | 80 |
| 98 protected: | 81 protected: |
| 99 static bool PolicyIsSane(const em::PolicyFetchResponse& value, | 82 static bool PolicyIsSane(const em::PolicyFetchResponse& value, |
| 100 em::PolicyData* poldata); | 83 em::PolicyData* poldata); |
| 101 | 84 |
| 102 void set_service(OwnershipService* service) { service_ = service; } | 85 void set_service(OwnershipService* service) { service_ = service; } |
| 103 | 86 |
| 104 void TryToFetchPolicyAndCallBack(); | |
| 105 | |
| 106 OwnershipService* service_; | 87 OwnershipService* service_; |
| 107 | 88 |
| 108 private: | 89 private: |
| 109 friend class SignedSettingsTest; | 90 friend class SignedSettingsTest; |
| 110 friend class SignedSettingsHelperTest; | 91 friend class SignedSettingsHelperTest; |
| 111 | 92 |
| 112 class Relay | |
| 113 : public SignedSettings::Delegate<const em::PolicyFetchResponse&> { | |
| 114 public: | |
| 115 // |s| must outlive your Relay instance. | |
| 116 explicit Relay(SignedSettings* s); | |
| 117 virtual ~Relay(); | |
| 118 // Implementation of SignedSettings::Delegate | |
| 119 virtual void OnSettingsOpCompleted( | |
| 120 SignedSettings::ReturnCode code, | |
| 121 const em::PolicyFetchResponse& value) OVERRIDE; | |
| 122 private: | |
| 123 SignedSettings* settings_; | |
| 124 DISALLOW_COPY_AND_ASSIGN(Relay); | |
| 125 }; | |
| 126 | |
| 127 // Format of this string is documented in device_management_backend.proto. | |
| 128 static const char kDevicePolicyType[]; | |
| 129 | |
| 130 scoped_ptr<Relay> relay_; | |
| 131 scoped_refptr<SignedSettings> polfetcher_; | |
| 132 DISALLOW_COPY_AND_ASSIGN(SignedSettings); | 93 DISALLOW_COPY_AND_ASSIGN(SignedSettings); |
| 133 }; | 94 }; |
| 134 | 95 |
| 135 } // namespace chromeos | 96 } // namespace chromeos |
| 136 | 97 |
| 137 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ | 98 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_SIGNED_SETTINGS_H_ |
| OLD | NEW |