Retrieve the authenticated user's e-mail from GAIA during SAML enrollment

chrome/browser/resources/chromeos/login/oobe_screen_oauth_enrollment.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 login.createScreen('OAuthEnrollmentScreen', 'oauth-enrollment', function() {
   /** @const */ var STEP_SIGNIN = 'signin';
   /** @const */ var STEP_WORKING = 'working';
   /** @const */ var STEP_ERROR = 'error';
   /** @const */ var STEP_EXPLAIN = 'explain';
   /** @const */ var STEP_SUCCESS = 'success';
 
   return {
     EXTERNAL_API: [
       'setIsAutoEnrollment',
       'showStep',
       'showError',
       'showWorking',
+      'setAuthenticatedUserEmail',
     ],
 
     /**
      * URL to load in the sign in frame.
      */
     signInUrl_: null,
 
     /**
      * Whether this is a manual or auto enrollment.
      */
@@ skipping 13 matching lines @@
      * Dialog to confirm that auto-enrollment should really be cancelled.
      * This is only created the first time it's used.
      */
     confirmDialog_: null,
 
     /**
      * The current step. This is the last value passed to showStep().
      */
     currentStep_: null,
 
+    /**
+     * Opaque token used to correlate request and response while retrieving the
+     * authenticated user's e-mail address from GAIA.
+     */
+    attemptToken_: null,
+
     /** @override */
     decorate: function() {
       window.addEventListener('message',
                               this.onMessage_.bind(this), false);
       $('oauth-enroll-error-retry').addEventListener('click',
                                                      this.doRetry_.bind(this));
       var links = document.querySelectorAll('.oauth-enroll-explain-link');
       for (var i = 0; i < links.length; i++) {
         links[i].addEventListener('click',
                                   this.showStep.bind(this, STEP_EXPLAIN));
@@ skipping 165 matching lines @@
     /**
      * Sets a progressing message and switches to the working screen.
      * @param {string} message the progress message.
      */
     showWorking: function(message) {
       $('oauth-enroll-working-message').textContent = message;
       this.showStep(STEP_WORKING);
     },
 
     /**
+     * Invoked when the authenticated user's e-mail address has been retrieved.
+     * This completes SAML authentication.
+     * @param {number} attemptToken An opaque token used to correlate this
+     *     method invocation with the corresponding request to retrieve the
+     *     user's e-mail address.
+     * @param {string} email The authenticated user's e-mail address.
+     */
+    setAuthenticatedUserEmail: function(attemptToken, email) {
+      if (this.attemptToken_ == attemptToken)
+        chrome.send('oauthEnrollCompleteLogin', [email]);
+    },
+
+    /**
      * Handler for cancellations of an enforced auto-enrollment.
      */
     cancelAutoEnrollment: function() {
       // Check if this is forced enrollment flow for a kiosk app.
       if (this.preventCancellation_)
         return;
 
       // The dialog to confirm cancellation of auto-enrollment is only shown
       // if this is an auto-enrollment, and if the user is currently in the
       // 'explain' step.
@@ skipping 43 matching lines @@
     /**
      * Event handler for HTML5 messages.
      * @param {Object} m HTML5 message.
      */
     onMessage_: function(m) {
       if (!this.isSigninMessage_(m))
         return;
 
       var msg = m.data;
 
-      // 'completeLogin' for full gaia signin flow. For SAML case,
-      // 'confirmPassword' is sent after authentication. Since enrollment
-      // does not need the actual password, this is treated the same as
-      // 'completeLogin'.
-      if (msg.method == 'completeLogin' || msg.method == 'confirmPassword')
+      if (msg.method == 'completeLogin') {
+        // A user has successfully authenticated via regular GAIA.
         chrome.send('oauthEnrollCompleteLogin', [msg.email]);
+      }
+
+      if (msg.method == 'retrieveAuthenticatedUserEmail') {
+        // A user has successfully authenticated via SAML. However, the user's
+        // identity is not known. Instead of reporting success immediately,
+        // retrieve the user's e-mail address first.
+        this.attemptToken_ = msg.attemptToken;
+        this.showWorking(null);
+        chrome.send('oauthEnrollRetrieveAuthenticatedUserEmail',
+                    [msg.attemptToken]);
+      }
     }
   };
 });