Allow dynamic updating of authentication policies

net/http/http_auth_preferences.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_HTTP_HTTP_AUTH_PREFERENCES_H_
+#define NET_HTTP_HTTP_AUTH_PREFERENCES_H_
+
+#include <set>
+#include <string>
+#include <vector>
+
+#include "base/macros.h"
+#include "net/base/net_export.h"
+#include "url/gurl.h"
+
+namespace net {
+
+class URLSecurityManager;
+/*

[cbentzel, 2015/12/01 20:56:16]

Nit: /* is pretty inconsistent with how commenting is done.

https://google.github.io/styleguide/cppguide.html#Comment_Style mentions /* is
valid, but should be consistent.

[aberent, 2015/12/02 13:30:19]

Done.

+ * Manage the preferences needed for authentication, and provide a cache of them
+ * accessible from the IO thread.
+ */
+class NET_EXPORT HttpAuthPreferences {
+ public:
+  HttpAuthPreferences(const std::vector<std::string>& auth_schemes
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+                      ,
+                      const std::string& gssapi_library_name
+#endif
+                      );
+  virtual ~HttpAuthPreferences();
+
+  virtual bool IsSupportedScheme(const std::string& scheme) const;
+  virtual bool NegotiateDisableCnameLookup() const;
+  virtual bool NegotiateEnablePort() const;
+#if defined(OS_ANDROID)
+  virtual std::string AuthAndroidNegotiateAccountType() const;
+#endif
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+  virtual std::string GssapiLibraryName() const;
+#endif
+  virtual bool CanUseDefaultCredentials(const GURL& auth_origin) const;
+  virtual bool CanDelegate(const GURL& auth_origin) const;
+
+  void set_negotiate_disable_cname_lookup(bool negotiate_disable_cname_lookup) {
+    negotiate_disable_cname_lookup_ = negotiate_disable_cname_lookup;
+  }
+
+  void set_negotiate_enable_port(bool negotiate_enable_port) {
+    negotiate_enable_port_ = negotiate_enable_port;
+  }
+
+  void set_server_whitelist(const std::string& server_whitelist);
+
+  void set_delegate_whitelist(const std::string& delegate_whitelist);
+
+#if defined(OS_ANDROID)
+  void set_auth_android_negotiate_account_type(
+      const std::string& account_type) {
+    auth_android_negotiate_account_type_ = account_type;
+  }
+#endif
+
+ private:
+  // TODO(aberent) allow changes to auth scheme set after startup.
+  // See https://crbug/549273.
+  const std::set<std::string> auth_schemes_;
+  bool negotiate_disable_cname_lookup_;
+  bool negotiate_enable_port_;
+
+#if defined(OS_ANDROID)
+  std::string auth_android_negotiate_account_type_;
+#endif
+#if defined(OS_POSIX) && !defined(OS_ANDROID)
+  // GSSAPI library name cannot change after startup, since changing it
+  // requires unloading the existing GSSAPI library, which could cause all
+  // sorts of problems for, for example, active Negotiate transactions.
+  const std::string gssapi_library_name_;
+#endif
+  scoped_ptr<URLSecurityManager> security_manager_;
+  DISALLOW_COPY_AND_ASSIGN(HttpAuthPreferences);
+};
+
+}  // namespace net
+#endif  // NET_HTTP_HTTP_AUTH_PREFERENCES_H_