Allow dynamic updating of authentication policies

net/http/http_auth_preferences.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_HTTP_HTTP_AUTH_PREFERENCES_H_
+#define NET_HTTP_HTTP_AUTH_PREFERENCES_H_
+
+#include <string>
+#include <vector>
+#include "base/macros.h"
+#include "net/base/net_export.h"
+#include "url/gurl.h"
+
+namespace net {
+
+class URLSecurityManager;
+/*
+ * Manage the preferences needed for authentication, and provide a cache of them
+ * accessible from the IO thread.
+ */
+class NET_EXPORT HttpAuthPreferences {
+ public:
+  HttpAuthPreferences(const std::vector<std::string>& auth_schemes
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+                      ,
+                      std::string gssapi_library_name
+#endif
+                      );
+  virtual ~HttpAuthPreferences();
+
+  virtual std::vector<std::string> auth_schemes() const;
+  virtual bool negotiate_disable_cname_lookup() const;
+  virtual bool negotiate_enable_port() const;
+#if defined(OS_ANDROID)
+  virtual std::string auth_android_negotiate_account_type() const;
+#endif
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+  virtual std::string gssapi_library_name() const;
+#endif
+  virtual bool CanUseDefaultCredentials(const GURL& auth_origin) const;
+  virtual bool CanDelegate(const GURL& auth_origin) const;
+
+  void set_negotiate_disable_cname_lookup(bool negotiate_disable_cname_lookup) {
+    negotiate_disable_cname_lookup_ = negotiate_disable_cname_lookup;
+  }
+
+  void set_negotiate_enable_port(bool negotiate_enable_port) {
+    negotiate_enable_port_ = negotiate_enable_port;
+  }
+
+  void set_server_whitelist(const std::string& server_whitelist);
+
+  void set_delegate_whitelist(const std::string& delegate_whitelist);
+
+#if defined(OS_ANDROID)
+  void set_auth_android_negotiate_account_type(
+      const std::string& account_type) {
+    auth_android_negotiate_account_type_ = account_type;
+  }
+#endif
+
+ private:
+  // TODO(aberent) Make the list of auth schemes a PrefMember, so that the
+  // policy can change after startup (https://crbug/549273).
+  std::vector<std::string> auth_schemes_;
+  bool negotiate_disable_cname_lookup_;
+  bool negotiate_enable_port_;
+
+#if defined(OS_ANDROID)
+  std::string auth_android_negotiate_account_type_;
+#endif
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+  // No PrefMember for the GSSAPI library name, since changing it after startup
+  // requires unloading the existing GSSAPI library, which could cause all sorts
+  // of problems for, for example, active Negotiate transactions.
+  std::string gssapi_library_name_;
+#endif
+  scoped_ptr<URLSecurityManager> security_manager_;
+  DISALLOW_COPY_AND_ASSIGN(HttpAuthPreferences);
+};
+}
+// namespace net
+#endif  // NET_HTTP_HTTP_AUTH_PREFERENCES_H_