Add credential passing API for Chrome OS SAML login

chrome/browser/resources/gaia_auth/main.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 /**
  * Authenticator class wraps the communications between Gaia and its host.
  */
 function Authenticator() {
 }
 
@@ skipping 183 matching lines @@
   /**
    * Invoked when 'enableSAML' event is received to initialize SAML support.
    */
   onEnableSAML_: function() {
     this.isSAMLFlow_ = false;
 
     this.samlSupportChannel_ = new Channel();
     this.samlSupportChannel_.connect('authMain');
     this.samlSupportChannel_.registerMessage(
         'onAuthPageLoaded', this.onAuthPageLoaded_.bind(this));
+    this.samlSupportChannel_.registerMessage(
+        'apiCall', this.onAPICall_.bind(this));
     this.samlSupportChannel_.send({
       name: 'setGaiaUrl',
       gaiaUrl: this.gaiaUrl_
     });
   },
 
   /**
    * Invoked when the background page sends 'onHostedPageLoaded' message.
    * @param {!Object} msg Details sent with the message.
    */
   onAuthPageLoaded_: function(msg) {
     var isSAMLPage = msg.url.indexOf(this.gaiaUrl_) != 0;
 
     if (isSAMLPage && !this.isSAMLFlow_) {
       // GAIA redirected to a SAML login page. The credentials provided to this
       // page will determine what user gets logged in. The credentials obtained
       // from the GAIA login from are no longer relevant and can be discarded.
       this.isSAMLFlow_ = true;
       this.email_ = null;
       this.password_ = null;
     }
 
     window.parent.postMessage({
       'method': 'authPageLoaded',
       'isSAML': this.isSAMLFlow_,
       'domain': extractDomain(msg.url)
     }, this.parentPage_);
   },
 
+  /**
+   * Invoked when one of the credential passing API methods is called by a SAML
+   * provider.
+   * @param {!Object} msg Details of the API call.
+   */
+  onAPICall_: function(msg) {
+    var call = msg.call;
+    if (call.method == 'add') {
+      this.apiToken_ = call.token;
+      this.email_ = call.user;
+      this.password_ = call.password;
+    } else if (call.method == 'confirm') {
+      if (call.token != this.apiToken_)
+        console.error('Authenticator.onAPICall_: token mismatch');
+    } else {
+      console.error('Authenticator.onAPICall_: unknown message');
+    }
+  },
+
   onLoginUILoaded: function() {
     var msg = {
       'method': 'loginUILoaded'
     };
     window.parent.postMessage(msg, this.parentPage_);
     if (this.inlineMode_) {
       // TODO(guohui): temporary workaround until webview team fixes the focus
       // on their side.
       var gaiaFrame = $('gaia-frame');
       gaiaFrame.focus();
       gaiaFrame.onblur = function() {
         gaiaFrame.focus();
       };
     }
     this.loaded_ = true;
   },
 
   onConfirmLogin_: function() {
     if (!this.isSAMLFlow_) {
       this.completeLogin(this.email_, this.password_);
       return;
     }
 
     // Retrieve the e-mail address of the user who just authenticated from GAIA.
     window.parent.postMessage({method: 'retrieveAuthenticatedUserEmail',
                                attemptToken: this.attemptToken_},
                               this.parentPage_);
 
-    this.samlSupportChannel_.sendWithCallback(
-        {name: 'getScrapedPasswords'},
-        function(passwords) {
-          if (passwords.length == 0) {
-            window.parent.postMessage(
-                {method: 'noPassword', email: this.email_},
-                this.parentPage_);
-          } else {
-            window.parent.postMessage(
-                {method: 'confirmPassword', email: this.email_},
-                this.parentPage_);
-          }
-        }.bind(this));
+    if (!this.password_) {
+      this.samlSupportChannel_.sendWithCallback(
+          {name: 'getScrapedPasswords'},
+          function(passwords) {
+            if (passwords.length == 0) {
+              window.parent.postMessage(
+                  {method: 'noPassword', email: this.email_},
+                  this.parentPage_);
+            } else {
+              window.parent.postMessage(
+                  {method: 'confirmPassword', email: this.email_},
+                  this.parentPage_);
+            }
+          }.bind(this));
+    }
   },
 
   maybeCompleteSAMLLogin_: function() {
     // SAML login is complete when the user's e-mail address has been retrieved
     // from GAIA and the user has successfully confirmed the password.
     if (this.email_ !== null && this.password_ !== null)
       this.completeLogin(this.email_, this.password_);
   },
 
   onVerifyConfirmedPassword_: function(password) {
@@ skipping 50 matching lines @@
     } else if (msg.method == 'redirectToSignin' &&
                this.isParentMessage_(e)) {
       $('gaia-frame').src = this.constructInitialFrameUrl_();
     } else {
        console.error('Authenticator.onMessage: unknown message + origin!?');
     }
   }
 };
 
 Authenticator.getInstance().initialize();