Add policy that forces SAML users to log in online periodically

chrome/browser/chromeos/login/saml/saml_offline_signin_limiter_factory.h

+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROMEOS_LOGIN_SAML_SAML_OFFLINE_SIGNIN_LIMITER_FACTORY_H_
+#define CHROME_BROWSER_CHROMEOS_LOGIN_SAML_SAML_OFFLINE_SIGNIN_LIMITER_FACTORY_H_
+
+#include "base/basictypes.h"
+#include "base/compiler_specific.h"
+#include "base/memory/singleton.h"
+#include "components/browser_context_keyed_service/browser_context_keyed_service_factory.h"
+
+class Profile;
+
+namespace base {
+class Clock;
+}
+
+namespace chromeos {
+
+class SAMLOfflineSigninLimiter;
+
+// Singleton that owns all SAMLOfflineSigninLimiters and associates them with
+// Profiles.
+class SAMLOfflineSigninLimiterFactory
+    : public BrowserContextKeyedServiceFactory {
+ public:
+  static SAMLOfflineSigninLimiterFactory* GetInstance();
+
+  static SAMLOfflineSigninLimiter* GetForProfile(Profile* profile);
+
+  // |clock| will be passed to all SAMLOfflineSigninLimiters. Ensure that their
+  // Shutdown() methods have been called before destroying |clock|.
+  static void SetClockForTesting(base::Clock* clock);
+
+ private:
+  friend struct DefaultSingletonTraits<SAMLOfflineSigninLimiterFactory>;
+
+  SAMLOfflineSigninLimiterFactory();
+  virtual ~SAMLOfflineSigninLimiterFactory();
+
+  // BrowserContextKeyedServiceFactory:
+  virtual BrowserContextKeyedService* BuildServiceInstanceFor(
+      content::BrowserContext* context) const OVERRIDE;
+
+  static base::Clock* clock_for_testing_;
+
+  DISALLOW_COPY_AND_ASSIGN(SAMLOfflineSigninLimiterFactory);
+};
+
+}  // namespace chromeos
+
+#endif  // CHROME_BROWSER_CHROMEOS_LOGIN_SAML_SAML_OFFLINE_SIGNIN_LIMITER_FACTORY_H_