Index: chrome/common/net/gaia/oauth2_revocation_fetcher.cc |
=================================================================== |
--- chrome/common/net/gaia/oauth2_revocation_fetcher.cc (revision 0) |
+++ chrome/common/net/gaia/oauth2_revocation_fetcher.cc (revision 0) |
@@ -0,0 +1,163 @@ |
+// Copyright (c) 2011 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "chrome/common/net/gaia/oauth2_revocation_fetcher.h" |
+ |
+#include <algorithm> |
+#include <string> |
+#include <vector> |
+ |
+#include "base/json/json_reader.h" |
+#include "base/string_util.h" |
+#include "base/stringprintf.h" |
+#include "base/values.h" |
+#include "chrome/common/net/gaia/gaia_urls.h" |
+#include "chrome/common/net/gaia/google_service_auth_error.h" |
+#include "chrome/common/net/http_return.h" |
+#include "net/base/escape.h" |
+#include "net/base/load_flags.h" |
+#include "net/url_request/url_request_context_getter.h" |
+#include "net/url_request/url_request_status.h" |
+ |
+using content::URLFetcher; |
+using content::URLFetcherDelegate; |
+using net::ResponseCookies; |
+using net::URLRequestContextGetter; |
+using net::URLRequestStatus; |
+ |
+namespace { |
+static const char kOAuth2RevokeTokenURL[] = |
+ "https://www.googleapis.com/oauth2/v2/RevokeToken"; |
+ |
+static const char kAuthorizationHeaderFormat[] = |
+ "Authorization: Bearer %s"; |
+ |
+static const char kRevocationBodyFormat[] = |
+ "client_id=%s&origin=%s"; |
+ |
+static GoogleServiceAuthError CreateAuthError(URLRequestStatus status) { |
+ CHECK(!status.is_success()); |
+ if (status.status() == URLRequestStatus::CANCELED) { |
+ return GoogleServiceAuthError(GoogleServiceAuthError::REQUEST_CANCELED); |
+ } else { |
+ DLOG(WARNING) << "Could not reach Google Accounts servers: errno " |
+ << status.error(); |
+ return GoogleServiceAuthError::FromConnectionError(status.error()); |
+ } |
+} |
+ |
+static URLFetcher* CreateFetcher(URLRequestContextGetter* getter, |
+ const GURL& url, |
+ const std::string& header, |
+ const std::string& body, |
+ URLFetcherDelegate* delegate) { |
+ bool empty_body = body.empty(); |
+ URLFetcher* result = URLFetcher::Create( |
+ 0, url, |
+ empty_body ? URLFetcher::GET : URLFetcher::POST, |
+ delegate); |
+ |
+ result->SetRequestContext(getter); |
+ result->SetLoadFlags(net::LOAD_DO_NOT_SEND_COOKIES | |
+ net::LOAD_DO_NOT_SAVE_COOKIES); |
+ if (!header.empty()) |
+ result->SetExtraRequestHeaders(header); |
+ |
+ if (!empty_body) |
+ result->SetUploadData("application/x-www-form-urlencoded", body); |
+ |
+ return result; |
+} |
+} // namespace |
+ |
+OAuth2RevocationFetcher::OAuth2RevocationFetcher( |
+ OAuth2RevocationConsumer* consumer, |
+ URLRequestContextGetter* getter) |
+ : consumer_(consumer), |
+ getter_(getter), |
+ state_(INITIAL) { } |
+ |
+OAuth2RevocationFetcher::~OAuth2RevocationFetcher() { } |
+ |
+void OAuth2RevocationFetcher::CancelRequest() { |
+ fetcher_.reset(); |
+} |
+ |
+void OAuth2RevocationFetcher::Start(const std::string& access_token, |
+ const std::string& client_id, |
+ const std::string& origin) { |
+ access_token_ = access_token; |
+ client_id_ = client_id; |
+ origin_ = origin; |
+ StartRevocation(); |
+} |
+ |
+void OAuth2RevocationFetcher::StartRevocation() { |
+ CHECK_EQ(INITIAL, state_); |
+ state_ = REVOCATION_STARTED; |
+ fetcher_.reset(CreateFetcher( |
+ getter_, |
+ MakeRevocationUrl(), |
+ MakeRevocationHeader(access_token_), |
+ MakeRevocationBody(client_id_, origin_), |
+ this)); |
+ fetcher_->Start(); // OnURLFetchComplete will be called. |
+} |
+ |
+void OAuth2RevocationFetcher::EndRevocation(const URLFetcher* source) { |
+ CHECK_EQ(REVOCATION_STARTED, state_); |
+ state_ = REVOCATION_DONE; |
+ |
+ URLRequestStatus status = source->GetStatus(); |
+ if (!status.is_success()) { |
+ OnRevocationFailure(CreateAuthError(status)); |
+ return; |
+ } |
+ |
+ if (source->GetResponseCode() != RC_REQUEST_OK_EMPTY_BODY) { |
zel
2011/12/06 01:18:19
what do you get here on regular 200 code?
Munjal (Google)
2011/12/06 01:36:14
We don't get a regular 200 code from this API. It
|
+ OnRevocationFailure(GoogleServiceAuthError( |
+ GoogleServiceAuthError::INVALID_GAIA_CREDENTIALS)); |
+ return; |
+ } |
+ |
+ OnRevocationSuccess(); |
+} |
+ |
+void OAuth2RevocationFetcher::OnRevocationSuccess() { |
+ consumer_->OnRevocationSuccess(); |
+} |
+ |
+void OAuth2RevocationFetcher::OnRevocationFailure( |
+ GoogleServiceAuthError error) { |
+ state_ = ERROR_STATE; |
+ consumer_->OnRevocationFailure(error); |
+} |
+ |
+void OAuth2RevocationFetcher::OnURLFetchComplete(const URLFetcher* source) { |
+ CHECK(source); |
+ EndRevocation(source); |
+} |
+ |
+// static |
+GURL OAuth2RevocationFetcher::MakeRevocationUrl() { |
+ return GURL(kOAuth2RevokeTokenURL); |
+} |
+ |
+// static |
+std::string OAuth2RevocationFetcher::MakeRevocationHeader( |
+ const std::string& access_token) { |
+ return StringPrintf(kAuthorizationHeaderFormat, access_token.c_str()); |
+} |
+ |
+// static |
+std::string OAuth2RevocationFetcher::MakeRevocationBody( |
+ const std::string& client_id, |
+ const std::string& origin) { |
+ std::string enc_client_id = net::EscapeUrlEncodedData(client_id, true); |
+ std::string enc_origin = net::EscapeUrlEncodedData(origin, true); |
+ return StringPrintf( |
+ kRevocationBodyFormat, |
+ enc_client_id.c_str(), |
+ enc_origin.c_str()); |
+} |