Added Me2Me-specific authenticator factory.

remoting/protocol/me2me_host_authenticator_factory.cc

Index: remoting/protocol/me2me_host_authenticator_factory.cc
diff --git a/remoting/protocol/me2me_host_authenticator_factory.cc b/remoting/protocol/me2me_host_authenticator_factory.cc
new file mode 100644
index 0000000000000000000000000000000000000000..b1f92cbd387a5e27afe885d88f0f577e60fe5eef
--- /dev/null
+++ b/remoting/protocol/me2me_host_authenticator_factory.cc
@@ -0,0 +1,60 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "remoting/protocol/me2me_host_authenticator_factory.h"
+
+#include "base/string_util.h"
+#include "crypto/rsa_private_key.h"
+#include "remoting/protocol/v1_authenticator.h"
+#include "remoting/protocol/v2_authenticator.h"
+
+namespace remoting {
+namespace protocol {
+
+Me2MeHostAuthenticatorFactory::Me2MeHostAuthenticatorFactory(
+    const std::string& local_jid,
+    const std::string& local_cert,
+    const crypto::RSAPrivateKey* local_private_key,
+    const std::string& shared_secret)
+    : local_cert_(local_cert),
+      local_private_key_(local_private_key->Copy()),
+      shared_secret_(shared_secret) {
+  // Verify that |local_jid| is bare.
+  DCHECK_EQ(local_jid.find('/'), std::string::npos);
+  local_jid_prefix_ = local_jid + '/';
+}
+
+Me2MeHostAuthenticatorFactory::~Me2MeHostAuthenticatorFactory() {
+}
+
+Authenticator* Me2MeHostAuthenticatorFactory::CreateAuthenticator(
+    const std::string& remote_jid,
+    const buzz::XmlElement* first_message) {
+  // Reject incoming connection if the client's jid is not an ASCII string.
+  if (!IsStringASCII(remote_jid)) {
+    LOG(ERROR) << "Rejecting incoming connection from " << remote_jid;
+    return false;
+  }
+
+  // Check that the client has the same bare jid as the host, i.e.
+  // client's full JID starts with host's bare jid. Comparison is case
+  // insensitive.
+  if (!StartsWithASCII(remote_jid, local_jid_prefix_, false)) {
+    LOG(ERROR) << "Rejecting incoming connection from " << remote_jid;
+    return NULL;
+  }
+
+  if (V2Authenticator::IsEkeMessage(first_message)) {

[Wez, 2012/01/09 23:04:47]

Comment this out since V2 is not ready yet?

[Sergey Ulanov, 2012/01/09 23:08:13]

Done.

+    return V2Authenticator::CreateForHost(
+        local_cert_, local_private_key_.get(), shared_secret_);
+  }
+
+  // TODO(sergeyu): Old clients still use V1 auth protocol. Remove
+  // this once we are done migrating to V2.
+  return new V1HostAuthenticator(local_cert_, local_private_key_.get(),
+                                 shared_secret_, remote_jid);
+}
+
+}  // namespace protocol
+}  // namespace remoting