Host-side third party token validation

remoting/host/url_fetcher_token_validator_factory.h

Index: remoting/host/url_fetcher_token_validator_factory.h
diff --git a/remoting/host/url_fetcher_token_validator_factory.h b/remoting/host/url_fetcher_token_validator_factory.h
new file mode 100644
index 0000000000000000000000000000000000000000..8366a6a249d553342884b6d5b94a6591c540654d
--- /dev/null
+++ b/remoting/host/url_fetcher_token_validator_factory.h
@@ -0,0 +1,51 @@
+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_
+#define REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_
+
+#include <set>
+#include <string>
+
+#include "base/basictypes.h"
+#include "net/url_request/url_request_context_getter.h"
+#include "remoting/protocol/third_party_host_authenticator.h"
+
+namespace remoting {
+
+// This class dispenses |TokenValidator| implementations that use a UrlFetcher
+// to contact a |token_validation_url| and exchange the |token| for a
+// |shared_secret|.
+class UrlFetcherTokenValidatorFactory

[Wez, 2013/04/05 22:46:12]

nit: Could this just be TokenValidatorFactoryImpl, since we have no other
implementations of third-party token auth planned?

[rmsousa, 2013/04/06 00:37:25]

Done.

+    : public protocol::ThirdPartyHostAuthenticator::TokenValidatorFactory {
+ public:
+  // Creates a new factory. |token_url| and |token_validation_url| are the
+  // third party authentication service URLs, obtained via policy. |key_pair_|
+  // is used by the host to authenticate with the service by signing the token.
+  UrlFetcherTokenValidatorFactory(
+      const GURL& token_url,
+      const GURL& token_validation_url,
+      scoped_refptr<RsaKeyPair> key_pair,
+      scoped_refptr<net::URLRequestContextGetter> request_context_getter);
+
+  virtual ~UrlFetcherTokenValidatorFactory();
+
+  // TokenValidatorFactory interface.
+  virtual scoped_ptr<protocol::ThirdPartyHostAuthenticator::TokenValidator>
+      CreateTokenValidator(const std::string& local_jid,
+                           const std::string& remote_jid) OVERRIDE;
+

[Sergey Ulanov, 2013/04/05 20:28:34]

nit: remove empty line

[rmsousa, 2013/04/06 00:37:25]

Done.

+  virtual bool IsEnabled() const OVERRIDE;
+
+ private:
+  GURL token_url_;
+  GURL token_validation_url_;
+  scoped_refptr<RsaKeyPair> key_pair_;
+  scoped_refptr<net::URLRequestContextGetter> request_context_getter_;
+  DISALLOW_COPY_AND_ASSIGN(UrlFetcherTokenValidatorFactory);

[Sergey Ulanov, 2013/04/05 20:28:34]

not: empty line above this one.

[rmsousa, 2013/04/06 00:37:25]

Done.

+};
+
+}  // namespace remoting
+
+#endif  // REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_