OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/login/signin/oauth2_login_manager.h" | 5 #include "chrome/browser/chromeos/login/signin/oauth2_login_manager.h" |
6 | 6 |
7 #include <utility> | 7 #include <utility> |
8 #include <vector> | 8 #include <vector> |
9 | 9 |
10 #include "base/command_line.h" | 10 #include "base/command_line.h" |
11 #include "base/metrics/histogram.h" | 11 #include "base/metrics/histogram.h" |
12 #include "chrome/browser/profiles/profile.h" | 12 #include "chrome/browser/profiles/profile.h" |
13 #include "chrome/browser/signin/account_tracker_service_factory.h" | 13 #include "chrome/browser/signin/account_tracker_service_factory.h" |
14 #include "chrome/browser/signin/chrome_signin_client_factory.h" | 14 #include "chrome/browser/signin/chrome_signin_client_factory.h" |
15 #include "chrome/browser/signin/gaia_cookie_manager_service_factory.h" | 15 #include "chrome/browser/signin/gaia_cookie_manager_service_factory.h" |
16 #include "chrome/browser/signin/profile_oauth2_token_service_factory.h" | 16 #include "chrome/browser/signin/profile_oauth2_token_service_factory.h" |
17 #include "chrome/browser/signin/signin_manager_factory.h" | 17 #include "chrome/browser/signin/signin_manager_factory.h" |
18 #include "chromeos/chromeos_switches.h" | 18 #include "chromeos/chromeos_switches.h" |
19 #include "components/signin/core/account_id/account_id.h" | |
20 #include "components/signin/core/browser/account_tracker_service.h" | 19 #include "components/signin/core/browser/account_tracker_service.h" |
21 #include "components/signin/core/browser/profile_oauth2_token_service.h" | 20 #include "components/signin/core/browser/profile_oauth2_token_service.h" |
22 #include "components/signin/core/browser/signin_client.h" | 21 #include "components/signin/core/browser/signin_client.h" |
23 #include "components/signin/core/browser/signin_manager.h" | 22 #include "components/signin/core/browser/signin_manager.h" |
24 #include "components/user_manager/user.h" | 23 #include "components/user_manager/user.h" |
25 #include "components/user_manager/user_manager.h" | 24 #include "components/user_manager/user_manager.h" |
26 #include "google_apis/gaia/gaia_auth_util.h" | 25 #include "google_apis/gaia/gaia_auth_util.h" |
27 #include "google_apis/gaia/gaia_urls.h" | 26 #include "google_apis/gaia/gaia_urls.h" |
28 | 27 |
29 namespace chromeos { | 28 namespace chromeos { |
(...skipping 72 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
102 VLOG(1) << "OAuth2 refresh token is already loaded."; | 101 VLOG(1) << "OAuth2 refresh token is already loaded."; |
103 VerifySessionCookies(); | 102 VerifySessionCookies(); |
104 } else { | 103 } else { |
105 VLOG(1) << "Loading OAuth2 refresh token from database."; | 104 VLOG(1) << "Loading OAuth2 refresh token from database."; |
106 | 105 |
107 // Flag user with unknown token status in case there are no saved tokens | 106 // Flag user with unknown token status in case there are no saved tokens |
108 // and OnRefreshTokenAvailable is not called. Flagging it here would | 107 // and OnRefreshTokenAvailable is not called. Flagging it here would |
109 // cause user to go through Gaia in next login to obtain a new refresh | 108 // cause user to go through Gaia in next login to obtain a new refresh |
110 // token. | 109 // token. |
111 user_manager::UserManager::Get()->SaveUserOAuthStatus( | 110 user_manager::UserManager::Get()->SaveUserOAuthStatus( |
112 AccountId::FromUserEmail(primary_account_id), | 111 primary_account_id, user_manager::User::OAUTH_TOKEN_STATUS_UNKNOWN); |
113 user_manager::User::OAUTH_TOKEN_STATUS_UNKNOWN); | |
114 | 112 |
115 token_service->LoadCredentials(primary_account_id); | 113 token_service->LoadCredentials(primary_account_id); |
116 } | 114 } |
117 } | 115 } |
118 | 116 |
119 void OAuth2LoginManager::Stop() { | 117 void OAuth2LoginManager::Stop() { |
120 oauth2_token_fetcher_.reset(); | 118 oauth2_token_fetcher_.reset(); |
121 login_verifier_.reset(); | 119 login_verifier_.reset(); |
122 } | 120 } |
123 | 121 |
124 bool OAuth2LoginManager::SessionRestoreIsRunning() const { | 122 bool OAuth2LoginManager::SessionRestoreIsRunning() const { |
125 return state_ == SESSION_RESTORE_PREPARING || | 123 return state_ == SESSION_RESTORE_PREPARING || |
126 state_ == SESSION_RESTORE_IN_PROGRESS; | 124 state_ == SESSION_RESTORE_IN_PROGRESS; |
127 } | 125 } |
128 | 126 |
129 bool OAuth2LoginManager::ShouldBlockTabLoading() const { | 127 bool OAuth2LoginManager::ShouldBlockTabLoading() const { |
130 return SessionRestoreIsRunning(); | 128 return SessionRestoreIsRunning(); |
131 } | 129 } |
132 | 130 |
133 void OAuth2LoginManager::OnRefreshTokenAvailable( | 131 void OAuth2LoginManager::OnRefreshTokenAvailable( |
134 const std::string& user_email) { | 132 const std::string& account_id) { |
135 VLOG(1) << "OnRefreshTokenAvailable"; | 133 VLOG(1) << "OnRefreshTokenAvailable"; |
136 | 134 |
137 if (state_ == SESSION_RESTORE_NOT_STARTED) | 135 if (state_ == SESSION_RESTORE_NOT_STARTED) |
138 return; | 136 return; |
139 | 137 |
140 // TODO(fgorski): Once ProfileOAuth2TokenService supports multi-login, make | 138 // TODO(fgorski): Once ProfileOAuth2TokenService supports multi-login, make |
141 // sure to restore session cookies in the context of the correct user_email. | 139 // sure to restore session cookies in the context of the correct account_id. |
142 | 140 |
143 // Do not validate tokens for supervised users, as they don't actually have | 141 // Do not validate tokens for supervised users, as they don't actually have |
144 // oauth2 token. | 142 // oauth2 token. |
145 if (user_manager::UserManager::Get()->IsLoggedInAsSupervisedUser()) { | 143 if (user_manager::UserManager::Get()->IsLoggedInAsSupervisedUser()) { |
146 VLOG(1) << "Logged in as supervised user, skip token validation."; | 144 VLOG(1) << "Logged in as supervised user, skip token validation."; |
147 return; | 145 return; |
148 } | 146 } |
149 // Only restore session cookies for the primary account in the profile. | 147 // Only restore session cookies for the primary account in the profile. |
150 if (GetPrimaryAccountId() == user_email) { | 148 if (GetPrimaryAccountId() == account_id) { |
151 // Token is loaded. Undo the flagging before token loading. | 149 // Token is loaded. Undo the flagging before token loading. |
152 user_manager::UserManager::Get()->SaveUserOAuthStatus( | 150 user_manager::UserManager::Get()->SaveUserOAuthStatus( |
153 AccountId::FromUserEmail(user_email), | 151 account_id, user_manager::User::OAUTH2_TOKEN_STATUS_VALID); |
154 user_manager::User::OAUTH2_TOKEN_STATUS_VALID); | |
155 VerifySessionCookies(); | 152 VerifySessionCookies(); |
156 } | 153 } |
157 } | 154 } |
158 | 155 |
159 ProfileOAuth2TokenService* OAuth2LoginManager::GetTokenService() { | 156 ProfileOAuth2TokenService* OAuth2LoginManager::GetTokenService() { |
160 return ProfileOAuth2TokenServiceFactory::GetForProfile(user_profile_); | 157 return ProfileOAuth2TokenServiceFactory::GetForProfile(user_profile_); |
161 } | 158 } |
162 | 159 |
163 const std::string& OAuth2LoginManager::GetPrimaryAccountId() { | 160 const std::string& OAuth2LoginManager::GetPrimaryAccountId() { |
164 SigninManagerBase* signin_manager = | 161 SigninManagerBase* signin_manager = |
(...skipping 247 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
412 FOR_EACH_OBSERVER(Observer, observer_list_, | 409 FOR_EACH_OBSERVER(Observer, observer_list_, |
413 OnSessionRestoreStateChanged(user_profile_, state_)); | 410 OnSessionRestoreStateChanged(user_profile_, state_)); |
414 } | 411 } |
415 | 412 |
416 void OAuth2LoginManager::SetSessionRestoreStartForTesting( | 413 void OAuth2LoginManager::SetSessionRestoreStartForTesting( |
417 const base::Time& time) { | 414 const base::Time& time) { |
418 session_restore_start_ = time; | 415 session_restore_start_ = time; |
419 } | 416 } |
420 | 417 |
421 } // namespace chromeos | 418 } // namespace chromeos |
OLD | NEW |