OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_ | |
6 #define CHROME_BROWSER_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_ | |
7 | |
8 #include <string> | |
9 | |
10 #include "base/basictypes.h" | |
11 #include "base/compiler_specific.h" | |
12 #include "base/memory/scoped_ptr.h" | |
13 #include "base/memory/weak_ptr.h" | |
14 #include "chrome/browser/policy/cloud_policy_client.h" | |
15 #include "chrome/browser/policy/cloud_policy_store.h" | |
16 #include "chrome/browser/policy/cloud_policy_validator.h" | |
17 #include "chrome/browser/policy/device_cloud_policy_manager_chromeos.h" | |
18 | |
19 namespace enterprise_management { | |
20 class PolicyFetchResponse; | |
21 } | |
22 | |
23 namespace policy { | |
24 | |
25 class EnterpriseInstallAttributes; | |
26 | |
27 // Implements the logic that establishes enterprise enrollment for Chromium OS | |
28 // devices. The process is as follows: | |
29 // 1. Given an auth token, register with the policy service. | |
30 // 2. Download the initial policy blob from the service. | |
31 // 3. Verify the policy blob. Everything up to this point doesn't touch device | |
32 // state. | |
33 // 4. Establish the device lock in installation-time attributes. | |
34 // 5. Store the policy blob. | |
35 class EnrollmentHandlerChromeOS : public CloudPolicyClient::Observer, | |
36 public CloudPolicyStore::Observer { | |
37 public: | |
38 typedef DeviceCloudPolicyManagerChromeOS::AllowedDeviceModes | |
39 AllowedDeviceModes; | |
40 typedef DeviceCloudPolicyManagerChromeOS::EnrollmentCallback | |
41 EnrollmentCallback; | |
42 | |
43 // |store| and |install_attributes| must remain valid for the life time of the | |
44 // enrollment handler. |allowed_device_modes| determines what device modes | |
45 // are acceptable. If the mode specified by the server is not acceptable, | |
46 // enrollment will fail with an EnrollmentStatus indicating | |
47 // STATUS_REGISTRATION_BAD_MODE. | |
48 EnrollmentHandlerChromeOS(DeviceCloudPolicyStoreChromeOS* store, | |
49 EnterpriseInstallAttributes* install_attributes, | |
50 scoped_ptr<CloudPolicyClient> client, | |
51 const std::string& auth_token, | |
52 const std::string& client_id, | |
53 bool is_auto_enrollment, | |
54 const AllowedDeviceModes& allowed_device_modes, | |
55 const EnrollmentCallback& completion_callback); | |
56 virtual ~EnrollmentHandlerChromeOS(); | |
57 | |
58 // Starts the enrollment process and reports the result to | |
59 // |completion_callback_|. | |
60 void StartEnrollment(); | |
61 | |
62 // Releases the client. | |
63 scoped_ptr<CloudPolicyClient> ReleaseClient(); | |
64 | |
65 // CloudPolicyClient::Observer: | |
66 virtual void OnPolicyFetched(CloudPolicyClient* client) OVERRIDE; | |
67 virtual void OnRegistrationStateChanged(CloudPolicyClient* client) OVERRIDE; | |
68 virtual void OnClientError(CloudPolicyClient* client) OVERRIDE; | |
69 | |
70 // CloudPolicyStore::Observer: | |
71 virtual void OnStoreLoaded(CloudPolicyStore* store) OVERRIDE; | |
72 virtual void OnStoreError(CloudPolicyStore* store) OVERRIDE; | |
73 | |
74 private: | |
75 // Indicates what step of the process is currently pending. These steps need | |
76 // to be listed in the order they are traversed in. | |
77 enum EnrollmentStep { | |
78 STEP_PENDING, // Not started yet. | |
79 STEP_LOADING_STORE, // Waiting for |store_| to initialize. | |
80 STEP_REGISTRATION, // Currently registering the client. | |
81 STEP_POLICY_FETCH, // Fetching policy. | |
82 STEP_VALIDATION, // Policy validation. | |
83 STEP_LOCK_DEVICE, // Writing installation-time attributes. | |
84 STEP_STORE_POLICY, // Storing policy. | |
85 STEP_FINISHED, // Enrollment process finished, no further action. | |
86 }; | |
87 | |
88 // Starts registration if the store is initialized. | |
89 void AttemptRegistration(); | |
90 | |
91 // Handles the policy validation result, proceeding with installation-time | |
92 // attributes locking if successful. | |
93 void PolicyValidated(DeviceCloudPolicyValidator* validator); | |
94 | |
95 // Writes install attributes and proceeds to policy installation. If | |
96 // unsuccessful, reports the result. | |
97 void WriteInstallAttributes(const std::string& user, | |
98 DeviceMode device_mode, | |
99 const std::string& device_id); | |
100 | |
101 // Drops any ongoing actions. | |
102 void Stop(); | |
103 | |
104 // Reports the result of the enrollment process to the initiator. | |
105 void ReportResult(EnrollmentStatus status); | |
106 | |
107 DeviceCloudPolicyStoreChromeOS* store_; | |
108 EnterpriseInstallAttributes* install_attributes_; | |
109 scoped_ptr<CloudPolicyClient> client_; | |
110 | |
111 std::string auth_token_; | |
112 std::string client_id_; | |
113 bool is_auto_enrollment_; | |
114 AllowedDeviceModes allowed_device_modes_; | |
115 EnrollmentCallback completion_callback_; | |
116 | |
117 // The device mode as received in the registration request. | |
118 DeviceMode device_mode_; | |
119 | |
120 // The validated policy response to be installed in the store. | |
121 scoped_ptr<enterprise_management::PolicyFetchResponse> policy_; | |
122 | |
123 // Current enrollment step. | |
124 EnrollmentStep enrollment_step_; | |
125 | |
126 // Total amount of time in milliseconds spent waiting for lockbox | |
127 // initialization. | |
128 int lockbox_init_duration_; | |
129 | |
130 base::WeakPtrFactory<EnrollmentHandlerChromeOS> weak_factory_; | |
131 | |
132 DISALLOW_COPY_AND_ASSIGN(EnrollmentHandlerChromeOS); | |
133 }; | |
134 | |
135 } // namespace policy | |
136 | |
137 #endif // CHROME_BROWSER_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_ | |
OLD | NEW |