OLD | NEW |
| (Empty) |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef COMPONENTS_AUTOFILL_CONTENT_BROWSER_WALLET_WALLET_CLIENT_H_ | |
6 #define COMPONENTS_AUTOFILL_CONTENT_BROWSER_WALLET_WALLET_CLIENT_H_ | |
7 | |
8 #include <queue> | |
9 #include <string> | |
10 #include <vector> | |
11 | |
12 #include "base/callback.h" // For base::Closure. | |
13 #include "base/memory/ref_counted.h" | |
14 #include "base/memory/weak_ptr.h" | |
15 #include "base/time/time.h" | |
16 #include "base/values.h" | |
17 #include "components/autofill/content/browser/wallet/full_wallet.h" | |
18 #include "components/autofill/content/browser/wallet/wallet_items.h" | |
19 #include "components/autofill/core/browser/autofill_client.h" | |
20 #include "components/autofill/core/browser/autofill_metrics.h" | |
21 #include "net/url_request/url_fetcher_delegate.h" | |
22 #include "testing/gtest/include/gtest/gtest_prod.h" | |
23 #include "url/gurl.h" | |
24 | |
25 namespace net { | |
26 class URLFetcher; | |
27 class URLRequestContextGetter; | |
28 } | |
29 | |
30 namespace autofill { | |
31 namespace wallet { | |
32 | |
33 class Address; | |
34 class FullWallet; | |
35 class Instrument; | |
36 class WalletClientDelegate; | |
37 | |
38 // WalletClient is responsible for making calls to the Online Wallet backend on | |
39 // the user's behalf. The normal flow for using this class is as follows: | |
40 // 1) GetWalletItems should be called to retrieve the user's Wallet. | |
41 // a) If the user does not have a Wallet, they must AcceptLegalDocuments and | |
42 // SaveToWallet to set up their account before continuing. | |
43 // b) If the user has not accepted the most recent legal documents for | |
44 // Wallet, they must AcceptLegalDocuments. | |
45 // 2) The user then chooses what instrument and shipping address to use for the | |
46 // current transaction. | |
47 // a) If they choose an instrument with a zip code only address, the billing | |
48 // address will need to be updated using SaveToWallet. | |
49 // b) The user may also choose to add a new instrument or address using | |
50 // SaveToWallet. | |
51 // 3) Once the user has selected the backing instrument and shipping address | |
52 // for this transaction, a FullWallet with the fronting card is generated | |
53 // using GetFullWallet. | |
54 // a) GetFullWallet may return a Risk challenge for the user. In that case, | |
55 // the user will need to verify who they are by authenticating their | |
56 // chosen backing instrument through AuthenticateInstrument | |
57 // | |
58 // WalletClient is designed so only one request to Online Wallet can be outgoing | |
59 // at any one time. If |HasRequestInProgress()| is true while calling e.g. | |
60 // GetWalletItems(), the request will be queued and started later. Queued | |
61 // requests start in the order they were received. | |
62 | |
63 class WalletClient : public net::URLFetcherDelegate { | |
64 public: | |
65 // The Risk challenges supported by users of WalletClient. | |
66 enum RiskCapability { | |
67 RELOGIN, | |
68 VERIFY_CVC, | |
69 }; | |
70 | |
71 // The type of error returned by Online Wallet. | |
72 enum ErrorType { | |
73 // Errors to display to users ---------------------------------------------- | |
74 BUYER_ACCOUNT_ERROR, // Risk deny, unsupported country, or | |
75 // account closed. | |
76 BUYER_LEGAL_ADDRESS_NOT_SUPPORTED, // User's Buyer Legal Address is | |
77 // unsupported by Online Wallet. | |
78 UNVERIFIED_KNOW_YOUR_CUSTOMER_STATUS, // User's "know your customer" KYC | |
79 // state is not verified (either | |
80 // KYC_REFER or KYC_FAIL). | |
81 UNSUPPORTED_MERCHANT, // Merchant is blacklisted due to | |
82 // compliance violation. | |
83 SPENDING_LIMIT_EXCEEDED, // The desired transaction amount was | |
84 // over Wallet's limit. | |
85 | |
86 // API errors -------------------------------------------------------------- | |
87 // Request was very malformed or sent to the wrong endpoint. | |
88 BAD_REQUEST, | |
89 // API call had missing or invalid parameters. | |
90 INVALID_PARAMS, | |
91 // The server API version of the request is no longer supported. | |
92 UNSUPPORTED_API_VERSION, | |
93 // The user agent is not supported or a bad Google API key was provided. | |
94 UNSUPPORTED_USER_AGENT_OR_API_KEY, | |
95 | |
96 // Server errors ----------------------------------------------------------- | |
97 INTERNAL_ERROR, // Unknown server side error. | |
98 SERVICE_UNAVAILABLE, // Online Wallet is down. | |
99 | |
100 // Other errors ------------------------------------------------------------ | |
101 MALFORMED_RESPONSE, // The response from Wallet was malformed. | |
102 NETWORK_ERROR, // The response code of the server was something | |
103 // other than a 200 or 400. | |
104 | |
105 UNKNOWN_ERROR, // Catch all error type. | |
106 }; | |
107 | |
108 struct FullWalletRequest { | |
109 public: | |
110 FullWalletRequest(const std::string& instrument_id, | |
111 const std::string& address_id, | |
112 const std::string& google_transaction_id, | |
113 const std::vector<RiskCapability> risk_capabilities, | |
114 bool new_wallet_user); | |
115 ~FullWalletRequest(); | |
116 | |
117 // The ID of the backing instrument. Should have been selected by the user | |
118 // in some UI. | |
119 std::string instrument_id; | |
120 | |
121 // The ID of the shipping address. Should have been selected by the user | |
122 // in some UI. | |
123 std::string address_id; | |
124 | |
125 // The transaction ID from GetWalletItems. | |
126 std::string google_transaction_id; | |
127 | |
128 // The Risk challenges supported by the user of WalletClient | |
129 std::vector<RiskCapability> risk_capabilities; | |
130 | |
131 // True if the user does not have Wallet profile. | |
132 bool new_wallet_user; | |
133 | |
134 private: | |
135 DISALLOW_ASSIGN(FullWalletRequest); | |
136 }; | |
137 | |
138 // |context_getter| is reference counted so it has no lifetime or ownership | |
139 // requirements. |delegate| must outlive |this|. |source_url| is the url | |
140 // of the merchant page. | |
141 WalletClient(net::URLRequestContextGetter* context_getter, | |
142 WalletClientDelegate* delegate, | |
143 const GURL& source_url); | |
144 | |
145 ~WalletClient() override; | |
146 | |
147 // GetWalletItems retrieves the user's online wallet. The WalletItems | |
148 // returned may require additional action such as presenting legal documents | |
149 // to the user to be accepted. | |
150 virtual void GetWalletItems(const base::string16& amount, | |
151 const base::string16& currency); | |
152 | |
153 // The GetWalletItems call to the Online Wallet backend may require the user | |
154 // to accept various legal documents before a FullWallet can be generated. | |
155 // The |google_transaction_id| is provided in the response to the | |
156 // GetWalletItems call. If |documents| are empty, |delegate_| will not receive | |
157 // a corresponding |OnDidAcceptLegalDocuments()| call. | |
158 virtual void AcceptLegalDocuments( | |
159 const std::vector<WalletItems::LegalDocument*>& documents, | |
160 const std::string& google_transaction_id); | |
161 | |
162 // Authenticates that |card_verification_number| is for the backing instrument | |
163 // with |instrument_id|. |obfuscated_gaia_id| is used as a key when escrowing | |
164 // |card_verification_number|. |delegate_| is notified when the request is | |
165 // complete. Used to respond to Risk challenges. | |
166 virtual void AuthenticateInstrument( | |
167 const std::string& instrument_id, | |
168 const std::string& card_verification_number); | |
169 | |
170 // GetFullWallet retrieves the a FullWallet for the user. | |
171 virtual void GetFullWallet(const FullWalletRequest& full_wallet_request); | |
172 | |
173 // Saves the data in |instrument| and/or |address| to Wallet. |instrument| | |
174 // does not have to be complete if it's being used to update an existing | |
175 // instrument, like in the case of expiration date or address only updates. | |
176 // |reference_instrument| and |reference_address| are the original instrument | |
177 // and address to be updated on the server (and should be NULL if |instrument| | |
178 // or |address| are new data). | |
179 virtual void SaveToWallet( | |
180 scoped_ptr<Instrument> instrument, | |
181 scoped_ptr<Address> address, | |
182 const WalletItems::MaskedInstrument* reference_instrument, | |
183 const Address* reference_address); | |
184 | |
185 bool HasRequestInProgress() const; | |
186 | |
187 // Cancels and clears the current |request_|. | |
188 void CancelRequest(); | |
189 | |
190 // Sets the user index and cancels any pending requests. | |
191 void SetUserIndex(size_t user_index); | |
192 size_t user_index() const { return user_index_; } | |
193 | |
194 private: | |
195 FRIEND_TEST_ALL_PREFIXES(WalletClientTest, PendingRequest); | |
196 FRIEND_TEST_ALL_PREFIXES(WalletClientTest, CancelRequests); | |
197 | |
198 enum RequestType { | |
199 NO_REQUEST, | |
200 ACCEPT_LEGAL_DOCUMENTS, | |
201 AUTHENTICATE_INSTRUMENT, | |
202 GET_FULL_WALLET, | |
203 GET_WALLET_ITEMS, | |
204 SAVE_TO_WALLET, | |
205 }; | |
206 | |
207 // Like AcceptLegalDocuments, but takes a vector of document ids. | |
208 void DoAcceptLegalDocuments( | |
209 const std::vector<std::string>& document_ids, | |
210 const std::string& google_transaction_id); | |
211 | |
212 // Posts |post_body| to |url| with content type |mime_type| and notifies | |
213 // |delegate_| when the request is complete. | |
214 void MakeWalletRequest(const GURL& url, | |
215 const std::string& post_body, | |
216 const std::string& mime_type, | |
217 RequestType request_type); | |
218 | |
219 // Performs bookkeeping tasks for any invalid requests. | |
220 void HandleMalformedResponse(RequestType request_type, | |
221 net::URLFetcher* request); | |
222 void HandleNetworkError(int response_code); | |
223 void HandleWalletError(ErrorType error_type); | |
224 | |
225 // net::URLFetcherDelegate: | |
226 void OnURLFetchComplete(const net::URLFetcher* source) override; | |
227 | |
228 // Logs an UMA metric for each of the |required_actions|. | |
229 void LogRequiredActions( | |
230 const std::vector<RequiredAction>& required_actions) const; | |
231 | |
232 // Converts |request_type| to an UMA metric. | |
233 AutofillMetrics::WalletApiCallMetric RequestTypeToUmaMetric( | |
234 RequestType request_type) const; | |
235 | |
236 // The context for the request. Ensures the gdToken cookie is set as a header | |
237 // in the requests to Online Wallet if it is present. | |
238 scoped_refptr<net::URLRequestContextGetter> context_getter_; | |
239 | |
240 // Observer class that has its various On* methods called based on the results | |
241 // of a request to Online Wallet. | |
242 WalletClientDelegate* const delegate_; // must outlive |this|. | |
243 | |
244 // The index of the user account we're making requests for. The index is into | |
245 // GAIA's list of signed in users. | |
246 size_t user_index_; | |
247 | |
248 // The URL of the page we're making requests on behalf of. | |
249 GURL source_url_; | |
250 | |
251 // The current request object. | |
252 scoped_ptr<net::URLFetcher> request_; | |
253 | |
254 // The type of the current request. Must be NO_REQUEST for a request | |
255 // to be initiated as only one request may be running at a given time. | |
256 RequestType request_type_; | |
257 | |
258 // The one time pad used for GetFullWallet encryption. | |
259 std::vector<uint8> one_time_pad_; | |
260 | |
261 // When the current request started. Used to track client side latency. | |
262 base::Time request_started_timestamp_; | |
263 | |
264 base::WeakPtrFactory<WalletClient> weak_ptr_factory_; | |
265 | |
266 DISALLOW_COPY_AND_ASSIGN(WalletClient); | |
267 }; | |
268 | |
269 } // namespace wallet | |
270 } // namespace autofill | |
271 | |
272 #endif // COMPONENTS_AUTOFILL_CONTENT_BROWSER_WALLET_WALLET_CLIENT_H_ | |
OLD | NEW |