Support Kerberos on Android

net/http/http_auth_handler_negotiate.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-#ifndef NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_
-#define NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_
+#ifndef NET_ANDROID_HTTP_AUTH_HANDLER_NEGOTIATE_H_
+#define NET_ANDROID_HTTP_AUTH_HANDLER_NEGOTIATE_H_
 
 #include <string>
 
 #include "build/build_config.h"
 #include "net/base/address_list.h"
 #include "net/base/net_export.h"
 #include "net/http/http_auth_handler.h"
 #include "net/http/http_auth_handler_factory.h"
 
 #if defined(OS_WIN)
 #include "net/http/http_auth_sspi_win.h"
+#elif defined(OS_ANDROID)

[Bernhard Bauer, 2015/06/10 17:11:03]

I think I would rather put these into alphabetic order, i.e. ANDROID before
POSIX before WIN.

[aberent, 2015/06/15 15:52:20]

Done.

+#include "net/android/http_android_auth_negotiate.h"
 #elif defined(OS_POSIX)
 #include "net/http/http_auth_gssapi_posix.h"
 #endif
 
 namespace net {
 
 class HostResolver;
 class SingleRequestHostResolver;
 class URLSecurityManager;
 
 // Handler for WWW-Authenticate: Negotiate protocol.
 //
 // See http://tools.ietf.org/html/rfc4178 and http://tools.ietf.org/html/rfc4559
 // for more information about the protocol.
 
 class NET_EXPORT_PRIVATE HttpAuthHandlerNegotiate : public HttpAuthHandler {
  public:
-#if defined(OS_WIN)
+#if defined(OS_ANDROID)
+  typedef net::android::AndroidAuthNegotiate AuthSystem;
+#elif defined(OS_WIN)
   typedef SSPILibrary AuthLibrary;
   typedef HttpAuthSSPI AuthSystem;
 #elif defined(OS_POSIX)
   typedef GSSAPILibrary AuthLibrary;
   typedef HttpAuthGSSAPI AuthSystem;
 #endif
 
   class NET_EXPORT_PRIVATE Factory : public HttpAuthHandlerFactory {
    public:
     Factory();
@@ skipping 10 matching lines @@
 
     // |use_port()| and |set_use_port()| get/set whether the auth handlers
     // generated by this factory should include the port number of the server
     // they are authenticating to when constructing a Kerberos SPN. The default
     // value is false.
     bool use_port() const { return use_port_; }
     void set_use_port(bool use_port) { use_port_ = use_port; }
 
     void set_host_resolver(HostResolver* host_resolver);
 
+#if defined(OS_ANDROID)
+    // Sets the account type to use for authentication
+    void set_account_type(const std::string& account_type) {
+      account_type_ = account_type;
+    }
+#else

[cbentzel, 2015/06/11 20:51:43]

Should do #endif/#if defined() here - set_account_type and set_library are
unrelated to each other so #else makes this fragile for reordering. Similar
concerns in the rest of the file.

[aberent, 2015/06/15 15:52:20]

Done.

     // Sets the system library to use, thereby assuming ownership of
     // |auth_library|.
     void set_library(AuthLibrary* auth_library) {
       auth_library_.reset(auth_library);
     }
+#endif
 
     int CreateAuthHandler(HttpAuthChallengeTokenizer* challenge,
                           HttpAuth::Target target,
                           const GURL& origin,
                           CreateReason reason,
                           int digest_nonce_count,
                           const BoundNetLog& net_log,
                           scoped_ptr<HttpAuthHandler>* handler) override;
 
    private:
     bool disable_cname_lookup_;
     bool use_port_;
     HostResolver* resolver_;
 #if defined(OS_WIN)
     ULONG max_token_length_;
     bool first_creation_;
 #endif
     bool is_unsupported_;
+#if defined(OS_ANDROID)
+    std::string account_type_;
+#else
     scoped_ptr<AuthLibrary> auth_library_;
+#endif
   };
 
-  HttpAuthHandlerNegotiate(AuthLibrary* sspi_library,
+  HttpAuthHandlerNegotiate(
+#if defined(OS_ANDROID)
+      std::string account_type,
+#else
+      AuthLibrary* sspi_library,
+#endif
 #if defined(OS_WIN)
-                           ULONG max_token_length,
+      ULONG max_token_length,
 #endif
-                           URLSecurityManager* url_security_manager,
-                           HostResolver* host_resolver,
-                           bool disable_cname_lookup,
-                           bool use_port);
+      URLSecurityManager* url_security_manager,
+      HostResolver* host_resolver,
+      bool disable_cname_lookup,
+      bool use_port);
 
   ~HttpAuthHandlerNegotiate() override;
 
   // These are public for unit tests
   std::string CreateSPN(const AddressList& address_list, const GURL& orign);
   const std::string& spn() const { return spn_; }
 
   // HttpAuthHandler:
   HttpAuth::AuthorizationResult HandleAnotherChallenge(
       HttpAuthChallengeTokenizer* challenge) override;
@@ skipping 47 matching lines @@
   CompletionCallback callback_;
   std::string* auth_token_;
 
   State next_state_;
 
   const URLSecurityManager* url_security_manager_;
 };
 
 }  // namespace net
 
-#endif  // NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_
+#endif  // NET_ANDROID_HTTP_AUTH_HANDLER_NEGOTIATE_H_

[cbentzel, 2015/06/11 20:51:43]

Nit: Move back to NET_HTTP_HTTP (and the same for header guards above)

[aberent, 2015/06/15 15:52:20]

Done.