Support Kerberos on Android

net/android/http_android_auth_negotiate.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_HTTP_HTTP_ANDROID_AUTH_NEGOTIATE_H_
+#define NET_HTTP_HTTP_ANDROID_AUTH_NEGOTIATE_H_
+
+#include <jni.h>
+#include <string>
+
+#include "base/android/jni_android.h"
+#include "base/macros.h"
+
+#include "net/base/completion_callback.h"
+#include "net/http/http_auth.h"
+
+namespace net {
+
+class HttpAuthChallengeTokenizer;
+
+namespace android {
+
+class NET_EXPORT_PRIVATE AndroidAuthNegotiate {
+ public:
+  AndroidAuthNegotiate(const std::string& account_type,
+                       const std::string& scheme);
+  ~AndroidAuthNegotiate();
+  bool Init();
+
+  bool NeedsIdentity() const;
+
+  bool AllowsExplicitCredentials() const;
+
+  HttpAuth::AuthorizationResult ParseChallenge(
+      net::HttpAuthChallengeTokenizer* tok);
+
+  // Generates an authentication token.
+  // The return value is an error code. If it's not |OK|, the value of
+  // |*auth_token| is unspecified.
+  // The function may return |IO_PENDING|, and call |callback| on completion.
+  // |auth_token| must remain valid until the callback has been called.
+  // |spn| is the Service Principal Name of the server that the token is
+  // being generated for.
+  // If this is the first round of a multiple round scheme, credentials are
+  // obtained using |*credentials|. If |credentials| is NULL, the default
+  // credentials are used instead.
+  int GenerateAuthToken(const AuthCredentials* credentials,
+                        const std::string& spn,
+                        std::string* auth_token,
+                        const net::CompletionCallback& callback);
+
+  // Delegation is allowed on the Kerberos ticket. This allows certain servers
+  // to act as the user, such as an IIS server retrieiving data from a

[Bernhard Bauer, 2015/05/18 15:11:53]

Nit: "retrieving"

[aberent, 2015/05/18 17:07:30]

Fixed here, and in the Windows and Posix versions of this file (I copied this
from the Posix version)

+  // Kerberized MSSQL server.
+  void Delegate();
+  void SetResult(JNIEnv* env, jobject obj, bool result, jstring token);
+  static bool Register(JNIEnv* env);
+
+ private:
+  std::string account_type_;
+  std::string scheme_;
+  bool can_delegate_;
+  bool first_challenge_;
+  std::string server_auth_token_;
+  std::string* auth_token_;
+  base::android::ScopedJavaGlobalRef<jobject> java_authenticator_;
+  net::CompletionCallback completion_callback_;
+
+  DISALLOW_COPY_AND_ASSIGN(AndroidAuthNegotiate);
+};
+
+}  // namespace android
+}  // namespace net
+
+#endif  // NET_HTTP_HTTP_ANDROID_AUTH_NEGOTIATE_H_