Implementation of sensitive card information escrowing

chrome/browser/autofill/wallet/wallet_client_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/logging.h"
 #include "base/string_number_conversions.h"
 #include "base/string_util.h"
 #include "chrome/browser/autofill/wallet/cart.h"
 #include "chrome/browser/autofill/wallet/full_wallet.h"
 #include "chrome/browser/autofill/wallet/wallet_client.h"
@@ skipping 149 matching lines @@
 
 const char kSendExtendedAutofillStatusOfFailureValidRequest[] =
     "{"
         "\"api_key\":\"abcdefg\","
         "\"google_transaction_id\":\"google_transaction_id\","
         "\"hostname\":\"hostname\","
         "\"reason\":\"CANNOT_PROCEED\","
         "\"success\":false"
     "}";
 
+const char kEscrowSensitiveInformationRequest[] =
+    "gid=obfuscated_gaia_id&cardNumber=pan&cvv=cvn";
+
 }  // anonymous namespace
 
 namespace wallet {
 
 class WalletClientTest : public testing::Test {
  public:
   WalletClientTest() : io_thread_(content::BrowserThread::IO) {}
 
   virtual void SetUp() {
     io_thread_.StartIOThread();
@@ skipping 15 matching lines @@
 
 class MockWalletClientObserver
     : public wallet::WalletClient::WalletClientObserver {
  public:
   MockWalletClientObserver() {}
   ~MockWalletClientObserver() {}
 
   MOCK_METHOD0(OnAcceptLegalDocuments, void());
   MOCK_METHOD2(OnEncryptOtp, void(const std::string& encrypted_otp,
                                   const std::string& session_material));
+  MOCK_METHOD1(OnDidEscrowSensitiveInformation,
+               void(const std::string& escrow_handle));
   MOCK_METHOD1(OnGetFullWallet, void(FullWallet* full_wallet));
   MOCK_METHOD1(OnGetWalletItems, void(WalletItems* wallet_items));
   MOCK_METHOD0(OnSendExtendedAutofillStatus, void());
   MOCK_METHOD0(OnWalletError, void());
   MOCK_METHOD1(OnNetworkError, void(int response_code));
 };
 
 // TODO(ahutter): Implement API compatibility tests. See
 // http://crbug.com/164465.
 
 // TODO(ahutter): Improve this when the error body is captured. See
 // http://crbug.com/164410.
 TEST_F(WalletClientTest, WalletErrorOnExpectedVoidResponse) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnWalletError()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.SendExtendedAutofillStatus(true, "", "", "", &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
+  ASSERT_TRUE(fetcher);
   fetcher->set_response_code(net::HTTP_INTERNAL_SERVER_ERROR);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 // TODO(ahutter): Improve this when the error body is captured. See
 // http://crbug.com/164410.
 TEST_F(WalletClientTest, WalletErrorOnExpectedResponse) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnWalletError()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   Cart cart("currency_code", "currency_code");
   wallet_client.GetFullWallet("", "", "", cart, "", "", "", &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
+  ASSERT_TRUE(fetcher);
   fetcher->set_response_code(net::HTTP_INTERNAL_SERVER_ERROR);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, NetworkFailureOnExpectedVoidResponse) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnNetworkError(net::HTTP_UNAUTHORIZED)).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.SendExtendedAutofillStatus(true, "", "", "", &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
+  ASSERT_TRUE(fetcher);
   fetcher->set_response_code(net::HTTP_UNAUTHORIZED);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, NetworkFailureOnExpectedResponse) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnNetworkError(net::HTTP_UNAUTHORIZED)).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   Cart cart("currency_code", "currency_code");
   wallet_client.GetFullWallet("", "", "", cart, "", "", "", &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
+  ASSERT_TRUE(fetcher);
   fetcher->set_response_code(net::HTTP_UNAUTHORIZED);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, RequestError) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnWalletError()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.SendExtendedAutofillStatus(true, "", "", "", &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
+  ASSERT_TRUE(fetcher);
   fetcher->set_response_code(net::HTTP_BAD_REQUEST);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 // TODO(ahutter): Add test for EncryptOtp.
-// TODO(ahutter): Add retry and failure tests for EncryptOtp, GetWalletItems,
+// TODO(ahutter): Add failure tests for EncryptOtp, GetWalletItems,
 // GetFullWallet for when data is missing or invalid.
 
+TEST_F(WalletClientTest, EscrowSensitiveInformationSuccess) {
+  MockWalletClientObserver observer;
+  EXPECT_CALL(observer, OnDidEscrowSensitiveInformation("abc")).Times(1);
+
+  net::TestURLFetcherFactory factory;
+
+  WalletClient wallet_client(profile_.GetRequestContext());
+  wallet_client.EscrowSensitiveInformation("pan",
+                                           "cvn",
+                                           "obfuscated_gaia_id",
+                                           &observer);
+  net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kEscrowSensitiveInformationRequest, fetcher->upload_data());
+  fetcher->set_response_code(net::HTTP_OK);
+  fetcher->SetResponseString("abc");
+  fetcher->delegate()->OnURLFetchComplete(fetcher);
+}
+
+TEST_F(WalletClientTest, EscrowSensitiveInformationFailure) {
+  MockWalletClientObserver observer;
+  EXPECT_CALL(observer, OnWalletError()).Times(1);
+
+  net::TestURLFetcherFactory factory;
+
+  WalletClient wallet_client(profile_.GetRequestContext());
+  wallet_client.EscrowSensitiveInformation("pan",
+                                           "cvn",
+                                           "obfuscated_gaia_id",
+                                           &observer);
+  net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kEscrowSensitiveInformationRequest, fetcher->upload_data());
+  fetcher->set_response_code(net::HTTP_OK);
+  fetcher->SetResponseString("");
+  fetcher->delegate()->OnURLFetchComplete(fetcher);
+}
+
 TEST_F(WalletClientTest, GetFullWallet) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnGetFullWallet(testing::NotNull())).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   Cart cart("currency_code", "currency_code");
   wallet_client.GetFullWallet("instrument_id",
                               "shipping_address_id",
                               "merchant_domain",
                               cart,
                               "google_transaction_id",
                               "encrypted_otp",
                               "session_material",
                               &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
-  ASSERT_EQ(kGetFullWalletValidRequest, fetcher->upload_data());
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kGetFullWalletValidRequest, fetcher->upload_data());
   fetcher->set_response_code(net::HTTP_OK);
   fetcher->SetResponseString(kGetFullWalletValidResponse);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, AcceptLegalDocuments) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnAcceptLegalDocuments()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   std::vector<std::string> doc_ids;
   doc_ids.push_back("doc_1");
   doc_ids.push_back("doc_2");
   wallet_client.AcceptLegalDocuments(doc_ids,
                                      kGoogleTransactionId,
                                      &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
-  ASSERT_EQ(kAcceptLegalDocumentsValidRequest, fetcher->upload_data());
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kAcceptLegalDocumentsValidRequest, fetcher->upload_data());
   fetcher->set_response_code(net::HTTP_OK);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, GetWalletItems) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnGetWalletItems(testing::NotNull())).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.GetWalletItems(&observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
-  ASSERT_EQ(kGetWalletItemsValidRequest, fetcher->upload_data());
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kGetWalletItemsValidRequest, fetcher->upload_data());
   fetcher->set_response_code(net::HTTP_OK);
   fetcher->SetResponseString(kGetWalletItemsValidResponse);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, SendExtendedAutofillOfStatusSuccess) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnSendExtendedAutofillStatus()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.SendExtendedAutofillStatus(true,
                                            "hostname",
                                            "",
                                            "google_transaction_id",
                                            &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
-  ASSERT_EQ(kSendExtendedAutofillStatusOfSuccessValidRequest,
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kSendExtendedAutofillStatusOfSuccessValidRequest,
             fetcher->upload_data());
   fetcher->set_response_code(net::HTTP_OK);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 TEST_F(WalletClientTest, SendExtendedAutofillStatusOfFailure) {
   MockWalletClientObserver observer;
   EXPECT_CALL(observer, OnSendExtendedAutofillStatus()).Times(1);
 
   net::TestURLFetcherFactory factory;
 
   WalletClient wallet_client(profile_.GetRequestContext());
   wallet_client.SendExtendedAutofillStatus(false,
                                            "hostname",
                                            "CANNOT_PROCEED",
                                            "google_transaction_id",
                                            &observer);
   net::TestURLFetcher* fetcher = factory.GetFetcherByID(0);
-  DCHECK(fetcher);
-  ASSERT_EQ(kSendExtendedAutofillStatusOfFailureValidRequest,
+  ASSERT_TRUE(fetcher);
+  EXPECT_EQ(kSendExtendedAutofillStatusOfFailureValidRequest,
             fetcher->upload_data());
   fetcher->set_response_code(net::HTTP_OK);
   fetcher->delegate()->OnURLFetchComplete(fetcher);
 }
 
 }  // namespace wallet