| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ | 5 #ifndef CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ |
| 6 #define CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ | 6 #define CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/compiler_specific.h" | 10 #include "base/compiler_specific.h" |
| 11 #include "base/memory/scoped_ptr.h" | 11 #include "base/memory/scoped_ptr.h" |
| 12 #include "base/memory/weak_ptr.h" | 12 #include "base/memory/weak_ptr.h" |
| 13 #include "chrome/browser/supervised_user/legacy/supervised_user_shared_settings_
service.h" | 13 #include "chrome/browser/supervised_user/legacy/supervised_user_shared_settings_
service.h" |
| 14 #include "chrome/browser/supervised_user/legacy/supervised_user_sync_service.h" | 14 #include "chrome/browser/supervised_user/legacy/supervised_user_sync_service.h" |
| 15 #include "chrome/browser/supervised_user/supervised_users.h" | 15 #include "chrome/browser/supervised_user/supervised_users.h" |
| 16 #include "chromeos/login/auth/extended_authenticator.h" | 16 #include "chromeos/login/auth/extended_authenticator.h" |
| 17 #include "components/keyed_service/core/keyed_service.h" | 17 #include "components/keyed_service/core/keyed_service.h" |
| 18 #include "components/user_manager/user_id.h" |
| 19 |
| 18 | 20 |
| 19 namespace chromeos { | 21 namespace chromeos { |
| 20 | 22 |
| 21 class UserContext; | 23 class UserContext; |
| 22 | 24 |
| 23 // Handles supervised user password change that is detected while manager is | 25 // Handles supervised user password change that is detected while manager is |
| 24 // signed in. | 26 // signed in. |
| 25 // It uses manager's master key to authorize update of supervised user's key. | 27 // It uses manager's master key to authorize update of supervised user's key. |
| 26 // Edge case: Pre-M35 supervised users don't have correct labels for keys. | 28 // Edge case: Pre-M35 supervised users don't have correct labels for keys. |
| 27 // After new supervised user key is added, migration is done in following way: | 29 // After new supervised user key is added, migration is done in following way: |
| 28 // 1) Master key is added with correct label | 30 // 1) Master key is added with correct label |
| 29 // 2) Old supervised user's key is deleted. | 31 // 2) Old supervised user's key is deleted. |
| 30 // 3) Old master key is deleted. | 32 // 3) Old master key is deleted. |
| 31 class ManagerPasswordService | 33 class ManagerPasswordService |
| 32 : public KeyedService, | 34 : public KeyedService, |
| 33 public chromeos::ExtendedAuthenticator::NewAuthStatusConsumer { | 35 public chromeos::ExtendedAuthenticator::NewAuthStatusConsumer { |
| 34 public: | 36 public: |
| 35 ManagerPasswordService(); | 37 ManagerPasswordService(); |
| 36 ~ManagerPasswordService() override; | 38 ~ManagerPasswordService() override; |
| 37 | 39 |
| 38 void Shutdown() override; | 40 void Shutdown() override; |
| 39 | 41 |
| 40 void Init(const std::string& user_id, | 42 void Init(const user_manager::UserID& user_id, |
| 41 SupervisedUserSyncService* user_service, | 43 SupervisedUserSyncService* user_service, |
| 42 SupervisedUserSharedSettingsService* service); | 44 SupervisedUserSharedSettingsService* service); |
| 43 | 45 |
| 44 // chromeos::ExtendedAuthenticator::AuthStatusConsumer overrides: | 46 // chromeos::ExtendedAuthenticator::AuthStatusConsumer overrides: |
| 45 void OnAuthenticationFailure(ExtendedAuthenticator::AuthState state) override; | 47 void OnAuthenticationFailure(ExtendedAuthenticator::AuthState state) override; |
| 46 | 48 |
| 47 private: | 49 private: |
| 48 void OnSharedSettingsChange(const std::string& su_id, const std::string& key); | 50 void OnSharedSettingsChange(const std::string& su_id, const std::string& key); |
| 49 void GetSupervisedUsersCallback( | 51 void GetSupervisedUsersCallback( |
| 50 const std::string& sync_su_id, | 52 const std::string& sync_su_id, |
| 51 const std::string& user_id, | 53 const user_manager::UserID& user_id, |
| 52 scoped_ptr<base::DictionaryValue> password_data, | 54 scoped_ptr<base::DictionaryValue> password_data, |
| 53 const base::DictionaryValue* supervised_users); | 55 const base::DictionaryValue* supervised_users); |
| 54 void OnAddKeySuccess(const UserContext& master_key_context, | 56 void OnAddKeySuccess(const UserContext& master_key_context, |
| 55 const std::string& user_id, | 57 const user_manager::UserID& user_id, |
| 56 scoped_ptr<base::DictionaryValue> password_data); | 58 scoped_ptr<base::DictionaryValue> password_data); |
| 57 void OnKeyTransformedIfNeeded(const UserContext& master_key_context); | 59 void OnKeyTransformedIfNeeded(const UserContext& master_key_context); |
| 58 void OnNewManagerKeySuccess(const UserContext& master_key_context); | 60 void OnNewManagerKeySuccess(const UserContext& master_key_context); |
| 59 void OnOldSupervisedUserKeyDeleted(const UserContext& master_key_context); | 61 void OnOldSupervisedUserKeyDeleted(const UserContext& master_key_context); |
| 60 void OnOldManagerKeyDeleted(const UserContext& master_key_context); | 62 void OnOldManagerKeyDeleted(const UserContext& master_key_context); |
| 61 | 63 |
| 62 // Cached value from Init(). | 64 // Cached value from Init(). |
| 63 // User id of currently logged in user, that have supervised users on device. | 65 // User id of currently logged in user, that have supervised users on device. |
| 64 std::string user_id_; | 66 user_manager::UserID user_id_; |
| 65 SupervisedUserSyncService* user_service_; | 67 SupervisedUserSyncService* user_service_; |
| 66 SupervisedUserSharedSettingsService* settings_service_; | 68 SupervisedUserSharedSettingsService* settings_service_; |
| 67 | 69 |
| 68 scoped_ptr<SupervisedUserSharedSettingsService::ChangeCallbackList:: | 70 scoped_ptr<SupervisedUserSharedSettingsService::ChangeCallbackList:: |
| 69 Subscription> | 71 Subscription> |
| 70 settings_service_subscription_; | 72 settings_service_subscription_; |
| 71 | 73 |
| 72 scoped_refptr<ExtendedAuthenticator> authenticator_; | 74 scoped_refptr<ExtendedAuthenticator> authenticator_; |
| 73 | 75 |
| 74 base::WeakPtrFactory<ManagerPasswordService> weak_ptr_factory_; | 76 base::WeakPtrFactory<ManagerPasswordService> weak_ptr_factory_; |
| 75 | 77 |
| 76 DISALLOW_COPY_AND_ASSIGN(ManagerPasswordService); | 78 DISALLOW_COPY_AND_ASSIGN(ManagerPasswordService); |
| 77 }; | 79 }; |
| 78 | 80 |
| 79 } // namespace chromeos | 81 } // namespace chromeos |
| 80 #endif // CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ | 82 #endif // CHROME_BROWSER_SUPERVISED_USER_CHROMEOS_MANAGER_PASSWORD_SERVICE_H_ |
| OLD | NEW |