Allow dynamic updating of authentication policies

net/http/http_auth_handler_factory.h

Index: net/http/http_auth_handler_factory.h
diff --git a/net/http/http_auth_handler_factory.h b/net/http/http_auth_handler_factory.h
index 1261bedd567645f3e6c5fc3a5e214f2652569297..15bf6e3a9361577f0b3b3213fa2a1c7d90f6b95b 100644
--- a/net/http/http_auth_handler_factory.h
+++ b/net/http/http_auth_handler_factory.h
@@ -106,6 +106,23 @@ class NET_EXPORT HttpAuthHandlerFactory {
       const BoundNetLog& net_log,
       scoped_ptr<HttpAuthHandler>* handler);
 
+  // For appropriate factories |SetNegotiateDisableCnameLookup()| sets whether
+  // the auth handlers generated by this factory should skip looking up the
+  // canonical DNS name of the the host that they are authenticating to when
+  // generating the SPN. The default value is false.
+  virtual void SetNegotiateDisableCnameLookup(bool disable_cname_lookup) {}
+
+  // Sets the android account type to use, if relevant for this authenticator
+  virtual void SetAndroidAuthNegotiateAccountType(
+      const std::string& account_type) {}
+
+  // For appropriate factories |SetNegotiateEnablePort()| get/set whether the
+  // auth handlers
+  // generated by this factory should include the port number of the server
+  // they are authenticating to when constructing a Kerberos SPN. The default
+  // value is false.
+  virtual void SetNegotiateEnablePort(bool use_port) {}
+
   // Creates a standard HttpAuthHandlerRegistryFactory. The caller is
   // responsible for deleting the factory.
   // The default factory supports Basic, Digest, NTLM, and Negotiate schemes.
@@ -183,10 +200,13 @@ class NET_EXPORT HttpAuthHandlerRegistryFactory
       const std::vector<std::string>& supported_schemes,
       URLSecurityManager* security_manager,
       HostResolver* host_resolver,
-      const std::string& gssapi_library_name,
-      const std::string& auth_android_negotiate_account_type,
-      bool negotiate_disable_cname_lookup,
-      bool negotiate_enable_port);
+      const std::string& gssapi_library_name);
+
+  void SetAndroidAuthNegotiateAccountType(
+      const std::string& account_type) override;
+  void SetNegotiateDisableCnameLookup(
+      bool negotiate_disable_cname_lookup) override;
+  void SetNegotiateEnablePort(bool negotiate_enable_port) override;
 
   // Creates an auth handler by dispatching out to the registered factories
   // based on the first token in |challenge|.