Google OAuth Device Flow support for FNL

examples/authentication_demo/google_authentication_demo.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "base/bind.h"
+#include "base/logging.h"
+#include "base/synchronization/waitable_event.h"
+#include "base/threading/platform_thread.h"
+

[jln (very slow on Chromium), 2015/12/01 00:08:44]

Nit: no blank line here.

[ukode, 2015/12/16 19:24:12]

Done.

+#include "mojo/public/c/system/main.h"
+#include "mojo/public/cpp/application/application_connection.h"
+#include "mojo/public/cpp/application/application_delegate.h"
+#include "mojo/public/cpp/application/application_impl.h"
+#include "mojo/public/cpp/application/application_runner.h"
+#include "mojo/public/cpp/utility/run_loop.h"
+#include "mojo/services/authentication/interfaces/authentication.mojom.h"
+
+namespace authentication {
+namespace examples {
+
+class GoogleAuthenticationClientDelegate :
+    public mojo::ApplicationDelegate {
+  public:
+    void Initialize(mojo::ApplicationImpl* app) override {
+      app->ConnectToService("mojo:authentication", &auth_service_);
+
+      mojo::Array<mojo::String> scopes;
+      scopes.push_back("profile");
+      scopes.push_back("email");
+
+      LOG(INFO) << "Starting the device flow handshake...";
+      auth_service_->GetOAuth2DeviceCode(scopes.Pass(),
+          base::Bind(
+            &GoogleAuthenticationClientDelegate::OnDeviceCode,
+            base::Unretained(this)));
+    }
+
+  private:
+     void OnDeviceCode(const mojo::String& url, const mojo::String& device_code,
+       const mojo::String& user_code, const mojo::String& error) {
+       if (!error.is_null()) {
+         LOG(INFO) << "Error: " << error;
+         mojo::RunLoop::current()->Quit(); //All done!
+         return;
+       }
+       // Display the verification url and user code in system UI and ask the
+       // user to authorize in a companion device
+       LOG(INFO) << "Verification Url: " << url;
+       LOG(INFO) << "Device Code: " << device_code;
+       LOG(INFO) << "User Code: " << user_code;
+
+       //TODO: Replace this with polling logic or show some spinner in System UI
+       LOG(INFO) << "Waiting for user autorization on a secondary device...";
+       base::PlatformThread::Sleep(base::TimeDelta::FromMilliseconds(45000));
+
+       // Exchange the authorization to a long lived token
+       LOG(INFO) << "Check for user authorization...";
+       AddAccount(device_code);
+   }
+
+   // Exchange device code to a refresh token, and persist the grant.
+   void AddAccount(const std::string device_code) {
+     auth_service_->AddAccount(device_code,
+       base::Bind(
+         &GoogleAuthenticationClientDelegate::OnAddAccount,
+         base::Unretained(this)));
+   }
+
+   void OnAddAccount(const mojo::String& username, const mojo::String& error) {
+     if (!error.is_null() || username.is_null()) {
+       LOG(INFO) << "Missing username or Error: " << error;
+       mojo::RunLoop::current()->Quit(); //All done!
+       return;
+     }
+
+     LOG(INFO) << "Successfully registered user: " << username;
+     LOG(INFO) << "Fetching access token for user [" << username << "]...";
+     FetchOAuth2AccessToken(username);
+   }
+
+   // Fetch a new access token for an existing user grant.
+   void FetchOAuth2AccessToken(const mojo::String& username) {
+     mojo::Array<mojo::String> scopes;
+     scopes.push_back("profile");
+
+     auth_service_->GetOAuth2Token(username, scopes.Pass(),
+       base::Bind(
+         &GoogleAuthenticationClientDelegate::OnGetOAuth2Token,
+         base::Unretained(this)));
+   }
+
+   void OnGetOAuth2Token(const mojo::String& access_token,
+     const mojo::String& error) {
+     if (!error.is_null()) {
+       LOG(INFO) << "Error: " << error;
+       mojo::RunLoop::current()->Quit(); //All done!
+       return;
+     }
+
+     if (access_token.is_null()) {
+       LOG(INFO) << "Unable to fetch access token, exiting!";
+     } else {
+       LOG(INFO) << "Access Token: " << access_token;
+     }
+     mojo::RunLoop::current()->Quit(); //All done!
+     return;
+   }
+
+   AuthenticationServicePtr auth_service_;
+};
+
+} // namespace examples
+} // namespace auth
+
+MojoResult MojoMain(MojoHandle application_request) {
+  mojo::ApplicationRunner runner(
+    new authentication::examples::GoogleAuthenticationClientDelegate);
+  return runner.Run(application_request);
+}