Allow dynamic updating of authentication policies

net/http/http_auth_handler_factory.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_HANDLER_FACTORY_H_
 #define NET_HTTP_HTTP_AUTH_HANDLER_FACTORY_H_
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 88 matching lines @@
   // |challenge| and calls |CreateAuthHandler|. See |CreateAuthHandler| for
   // more details on return values.
   int CreatePreemptiveAuthHandlerFromString(
       const std::string& challenge,
       HttpAuth::Target target,
       const GURL& origin,
       int digest_nonce_count,
       const BoundNetLog& net_log,
       scoped_ptr<HttpAuthHandler>* handler);
 
+  // For appropriate factories |SetNegotiateDisableCnameLookup()| sets whether
+  // the auth handlers generated by this factory should skip looking up the
+  // canonical DNS name of the the host that they are authenticating to when
+  // generating the SPN. The default value is false.
+  virtual void SetNegotiateDisableCnameLookup(bool disable_cname_lookup) {}
+
+  // Sets the android account type to use, if relevant for this authenticator
+  virtual void SetAndroidAuthNegotiateAccountType(
+      const std::string& account_type) {}
+
+  // For appropriate factories |SetNegotiateEnablePort()| get/set whether the
+  // auth handlers
+  // generated by this factory should include the port number of the server
+  // they are authenticating to when constructing a Kerberos SPN. The default
+  // value is false.
+  virtual void SetNegotiateEnablePort(bool use_port) {}
+
   // Creates a standard HttpAuthHandlerRegistryFactory. The caller is
   // responsible for deleting the factory.
   // The default factory supports Basic, Digest, NTLM, and Negotiate schemes.
   //
   // |resolver| is used by the Negotiate authentication handler to perform
   // CNAME lookups to generate a Kerberos SPN for the server. It must be
   // non-NULL.  |resolver| must remain valid for the lifetime of the
   // HttpAuthHandlerRegistryFactory and any HttpAuthHandlers created by said
   // factory.
   static scoped_ptr<HttpAuthHandlerRegistryFactory> CreateDefault(
@@ skipping 57 matching lines @@
   // |auth_android_negotiate_account_type| is an Android account type, used to
   // find the appropriate authenticator service on Android. It is ignored on
   // non-Android platforms.
   //
   // |negotiate_disable_cname_lookup| and |negotiate_enable_port| both control
   // how Negotiate does SPN generation, by default these should be false.
   static HttpAuthHandlerRegistryFactory* Create(
       const std::vector<std::string>& supported_schemes,
       URLSecurityManager* security_manager,
       HostResolver* host_resolver,
-      const std::string& gssapi_library_name,
-      const std::string& auth_android_negotiate_account_type,
-      bool negotiate_disable_cname_lookup,
-      bool negotiate_enable_port);
+      const std::string& gssapi_library_name);
+
+  void SetAndroidAuthNegotiateAccountType(
+      const std::string& account_type) override;
+  void SetNegotiateDisableCnameLookup(
+      bool negotiate_disable_cname_lookup) override;
+  void SetNegotiateEnablePort(bool negotiate_enable_port) override;
 
   // Creates an auth handler by dispatching out to the registered factories
   // based on the first token in |challenge|.
   int CreateAuthHandler(HttpAuthChallengeTokenizer* challenge,
                         HttpAuth::Target target,
                         const GURL& origin,
                         CreateReason reason,
                         int digest_nonce_count,
                         const BoundNetLog& net_log,
                         scoped_ptr<HttpAuthHandler>* handler) override;
 
  private:
   typedef std::map<std::string, HttpAuthHandlerFactory*> FactoryMap;
 
   FactoryMap factory_map_;
   DISALLOW_COPY_AND_ASSIGN(HttpAuthHandlerRegistryFactory);
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_HANDLER_FACTORY_H_