cros: Update SAML flow.

chrome/browser/resources/chromeos/login/screen_gaia_signin.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 /**
  * @fileoverview Oobe signin screen implementation.
  */
 
 <include src="../../gaia_auth_host/gaia_auth_host.js"></include>
 
@@ skipping 50 matching lines @@
      */
     loadingTimer_: undefined,
 
     /**
      * Whether user can cancel Gaia screen.
      * @type {boolean}
      * @private
      */
     cancelAllowed_: undefined,
 
+    /**
+     * SAML password confirmation attempt count.
+     * @type {number}
+     */
+    samlPasswordConfirmAttempt_: 0,
+
     /** @override */
     decorate: function() {
       this.gaiaAuthHost_ = new cr.login.GaiaAuthHost($('signin-frame'));
       this.gaiaAuthHost_.addEventListener(
           'ready', this.onAuthReady_.bind(this));
       this.gaiaAuthHost_.retrieveAuthenticatedUserEmailCallback =
           this.onRetrieveAuthenticatedUserEmail_.bind(this);
       this.gaiaAuthHost_.confirmPasswordCallback =
           this.onAuthConfirmPassword_.bind(this);
       this.gaiaAuthHost_.noPasswordCallback =
@@ skipping 139 matching lines @@
     },
 
     /**
      * Loads the authentication extension into the iframe.
      * @param {Object} data Extension parameters bag.
      * @private
      */
     loadAuthExtension: function(data) {
       this.isLocal = data.isLocal;
       this.email = '';
+
+      // Reset SAML
       this.classList.toggle('saml', false);
+      this.samlPasswordConfirmAttempt_ = 0;
 
       this.updateAuthExtension(data);
 
       var params = {};
       for (var i in cr.login.GaiaAuthHost.SUPPORTED_PARAMS) {
         var name = cr.login.GaiaAuthHost.SUPPORTED_PARAMS[i];
         if (data[name])
           params[name] = data[name];
       }
 
@@ skipping 130 matching lines @@
     },
 
     /**
      * Invoked when the auth host needs the user to confirm password.
      * @private
      */
     onAuthConfirmPassword_: function() {
       this.loading = true;
       Oobe.getInstance().headerHidden = false;
 
-      login.ConfirmPasswordScreen.show(
-          this.onConfirmPasswordCollected_.bind(this));
+      if (this.samlPasswordConfirmAttempt_ <= 1) {
+        login.ConfirmPasswordScreen.show(
+            this.samlPasswordConfirmAttempt_,
+            this.onConfirmPasswordCollected_.bind(this));
+      } else {
+        this.showFatalAuthError();
+      }
     },
 
     /**
      * Invoked when the confirm password screen is dismissed.
      * @private
      */
     onConfirmPasswordCollected_: function(password) {
+      this.samlPasswordConfirmAttempt_++;
       this.gaiaAuthHost_.verifyConfirmedPassword(password);
 
       // Shows signin UI again without changing states.
       Oobe.showScreen({id: SCREEN_GAIA_SIGNIN});
     },
 
     /**
      * Inovked when the auth flow completes but no password is available.
      * @param {string} email The authenticated user email.
      */
     onAuthNoPassword_: function(email) {
-      login.MessageBoxScreen.show(
-          loadTimeData.getString('noPasswordWarningTitle'),
-          loadTimeData.getString('noPasswordWarningBody'),
-          loadTimeData.getString('noPasswordWarningOkButton'),
-          Oobe.showSigninUI);
+      this.showFatalAuthError();
     },
 
     /**
+     * Shows the fatal auth error.
+     */
+    showFatalAuthError: function() {
+      login.FatalErrorScreen.show(Oobe.showSigninUI);
+    },
+
+    /**
      * Invoked when auth is completed successfully.
      * @param {!Object} credentials Credentials of the completed authentication.
      * @private
      */
     onAuthCompleted_: function(credentials) {
       if (credentials.useOffline) {
         this.email = credentials.email;
         chrome.send('authenticateUser',
                     [credentials.email, credentials.password]);
       } else if (credentials.authCode) {
@@ skipping 128 matching lines @@
      * Handler for iframe's error notification coming from the outside.
      * For more info see C++ class 'SnifferObserver' which calls this method.
      * @param {number} error Error code.
      */
     onFrameError: function(error) {
       this.error_ = error;
       chrome.send('frameLoadingCompleted', [this.error_]);
     },
   };
 });