Load and send Wallet Risk params after user has agreed

chrome/browser/ui/autofill/autofill_dialog_controller_impl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/autofill/autofill_dialog_controller_impl.h"
 
 #include <algorithm>
 #include <string>
 
+#include "base/base64.h"
 #include "base/bind.h"
 #include "base/logging.h"
 #include "base/prefs/pref_service.h"
 #include "base/string_util.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_split.h"
 #include "base/time.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/browser/autofill/personal_data_manager_factory.h"
 #include "chrome/browser/browser_process.h"
@@ skipping 1473 matching lines @@
 
 const AutofillMetrics& AutofillDialogControllerImpl::GetMetricLogger() const {
   return metric_logger_;
 }
 
 DialogType AutofillDialogControllerImpl::GetDialogType() const {
   return dialog_type_;
 }
 
 std::string AutofillDialogControllerImpl::GetRiskData() const {
-  // TODO(dbeam): Implement this.
-  return "risky business";
+  // TODO(dbeam): remove the server restriction that this must not be empty.

[Ilya Sherman, 2013/05/22 22:34:24]

Could you file a tracking bug for the specific changes that need to be made? 
I'm assuming it's correct for the requirement to remain for GetFullWallet()
calls, right?

[Ilya Sherman, 2013/05/22 23:53:59]

^^^

[Dan Beam, 2013/05/23 00:30:40]

omitting risk params works now, I've updated the code in later patchsets

+  return risk_data_.empty() ? "risky business" : risk_data_;
 }
 
 void AutofillDialogControllerImpl::OnDidAcceptLegalDocuments() {
-  // TODO(dbeam): Don't send risk params until legal documents are accepted:
-  // http://crbug.com/173505
+  accepted_legal_documents_ = true;
+  LoadRiskFingerprintData();

[Ilya Sherman, 2013/05/22 22:34:24]

Is this method guaranteed to only be called after 'Submit' is pressed?  If so,
could you add a DCHECK to verify that invariant?

[Dan Beam, 2013/05/22 23:25:20]

Done.

 }
 
 void AutofillDialogControllerImpl::OnDidAuthenticateInstrument(bool success) {
   DCHECK(is_submitting_ && IsPayingWithWallet());
 
   // TODO(dbeam): use the returned full wallet. b/8332329
   if (success)
     GetFullWallet();
   else
     DisableWallet();
@@ skipping 54 matching lines @@
     const GoogleServiceAuthError& error) {
   // TODO(aruslan): report an error.
   LOG(ERROR) << "failed to automatically sign in: " << error.ToString();
   OnWalletSigninError();
 }
 
 void AutofillDialogControllerImpl::OnDidGetWalletItems(
     scoped_ptr<wallet::WalletItems> wallet_items) {
   legal_documents_text_.clear();
   legal_document_link_ranges_.clear();
+  accepted_legal_documents_ = false;
 
   // TODO(dbeam): verify items support kCartCurrency? http://crbug.com/232952
   wallet_items_ = wallet_items.Pass();
   OnWalletOrSigninUpdate();
 }
 
 void AutofillDialogControllerImpl::OnDidSaveAddress(
     const std::string& address_id,
     const std::vector<wallet::RequiredAction>& required_actions) {
   DCHECK(is_submitting_ && IsPayingWithWallet());

[Dan Beam, 2013/05/22 23:25:20]

^ this DCHECK()

 
   if (required_actions.empty()) {
     active_address_id_ = address_id;
-    if (!active_instrument_id_.empty())
-      GetFullWallet();
+    GetFullWalletIfReady();
   } else {
     HandleSaveOrUpdateRequiredActions(required_actions);
   }
 }
 
 void AutofillDialogControllerImpl::OnDidSaveInstrument(
     const std::string& instrument_id,
     const std::vector<wallet::RequiredAction>& required_actions) {
   DCHECK(is_submitting_ && IsPayingWithWallet());
 
   if (required_actions.empty()) {
     active_instrument_id_ = instrument_id;
-    if (!active_address_id_.empty())
-      GetFullWallet();
+    GetFullWalletIfReady();
   } else {
     HandleSaveOrUpdateRequiredActions(required_actions);
   }
 }
 
 void AutofillDialogControllerImpl::OnDidSaveInstrumentAndAddress(
     const std::string& instrument_id,
     const std::string& address_id,
     const std::vector<wallet::RequiredAction>& required_actions) {
   OnDidSaveInstrument(instrument_id, required_actions);
-  OnDidSaveAddress(address_id, required_actions);
+  if (is_submitting_)
+    OnDidSaveAddress(address_id, required_actions);

[Ilya Sherman, 2013/05/22 22:34:24]

Why is the address treated differently than the payment instrument?

[Dan Beam, 2013/05/22 23:25:20]

OnDidSaveInstrument() can set is_submitting_ to false, which makes the DCHECK()
at the top of OnDidSaveAddress() fail.

[Ilya Sherman, 2013/05/22 23:53:59]

Ah, ok.  Please add a comment to this effect so that this looks less confusing /
surprising.

[Dan Beam, 2013/05/23 00:30:40]

Done.

 }
 
 void AutofillDialogControllerImpl::OnDidUpdateAddress(
     const std::string& address_id,
     const std::vector<wallet::RequiredAction>& required_actions) {
   OnDidSaveAddress(address_id, required_actions);
 }
 
 void AutofillDialogControllerImpl::OnDidUpdateInstrument(
     const std::string& instrument_id,
@@ skipping 90 matching lines @@
       wallet_client_(profile_->GetRequestContext(), this),
       suggested_email_(this),
       suggested_cc_(this),
       suggested_billing_(this),
       suggested_cc_billing_(this),
       suggested_shipping_(this),
       input_showing_popup_(NULL),
       weak_ptr_factory_(this),
       is_first_run_(!profile_->GetPrefs()->HasPrefPath(
           ::prefs::kAutofillDialogPayWithoutWallet)),
+      accepted_legal_documents_(false),
       is_submitting_(false),
       wallet_server_validation_error_(false),
       autocheckout_state_(AUTOCHECKOUT_NOT_STARTED),
       was_ui_latency_logged_(false) {
   // TODO(estade): remove duplicates from |form_structure|?
   DCHECK(!callback_.is_null());
 }
 
 AutofillDialogView* AutofillDialogControllerImpl::CreateView() {
   return AutofillDialogView::Create(this);
 }
 
 PersonalDataManager* AutofillDialogControllerImpl::GetManager() {
   return PersonalDataManagerFactory::GetForProfile(profile_);
 }
 
 wallet::WalletClient* AutofillDialogControllerImpl::GetWalletClient() {
   return &wallet_client_;
 }
 
 bool AutofillDialogControllerImpl::IsPayingWithWallet() const {
   return account_chooser_model_.WalletIsSelected() &&
          SignedInState() == SIGNED_IN;
 }
 
 bool AutofillDialogControllerImpl::IsFirstRun() const {
   return is_first_run_;
 }
 
+void AutofillDialogControllerImpl::LoadRiskFingerprintData() {
+  DCHECK(LegalDocumentsAreCurrent());
+
+  // Clear potential stale data to ensure |GetFullWalletIfReady()| triggers only
+  // when a new fingerprint is loaded.
+  risk_data_.clear();
+
+  uint64 obfuscated_gaia_id = 0;
+  bool success = base::StringToUint64(wallet_items_->obfuscated_gaia_id(),
+                                      &obfuscated_gaia_id);
+  DCHECK(success);
+
+  gfx::Rect window_bounds;
+#if !defined(OS_ANDROID)
+  window_bounds = GetBaseWindowForWebContents(web_contents())->GetBounds();
+#else
+  // TODO(dbeam): figure out the correct browser window size to pass along for
+  // android.
+#endif
+
+  PrefService* user_prefs = profile_->GetPrefs();
+  std::string charset = user_prefs->GetString(::prefs::kDefaultCharset);
+  std::string accept_languages =
+      user_prefs->GetString(::prefs::kAcceptLanguages);
+  base::Time install_time = base::Time::FromTimeT(
+      g_browser_process->local_state()->GetInt64(::prefs::kInstallDate));
+
+  risk::GetFingerprint(
+      obfuscated_gaia_id, window_bounds, *web_contents(),
+      chrome::VersionInfo().Version(), charset, accept_languages, install_time,
+      dialog_type_, g_browser_process->GetApplicationLocale(),
+      base::Bind(&AutofillDialogControllerImpl::OnDidLoadRiskFingerprintData,
+                 weak_ptr_factory_.GetWeakPtr()));
+}
+
 void AutofillDialogControllerImpl::OpenTabWithUrl(const GURL& url) {
 #if !defined(OS_ANDROID)
   chrome::NavigateParams params(
       chrome::FindBrowserWithWebContents(web_contents()),
       url,
       content::PAGE_TRANSITION_AUTO_BOOKMARK);
   params.disposition = NEW_FOREGROUND_TAB;
   chrome::Navigate(&params);
 #else
   // TODO(estade): use TabModelList?
@@ skipping 321 matching lines @@
     DialogSection section) {
   return const_cast<DetailInputs*>(&RequestedFieldsForSection(section));
 }
 
 void AutofillDialogControllerImpl::HidePopup() {
   if (popup_controller_)
     popup_controller_->Hide();
   input_showing_popup_ = NULL;
 }
 
-void AutofillDialogControllerImpl::LoadRiskFingerprintData() {
-  // TODO(dbeam): Add a CHECK or otherwise strong guarantee that the ToS have
-  // been accepted prior to calling into this method. Also, ensure that the UI
-  // contains a clear indication to the user as to what data will be collected.
-  // Until then, this code should not be called. http://crbug.com/173505
-
-  int64 gaia_id = 0;
-  bool success =
-      base::StringToInt64(wallet_items_->obfuscated_gaia_id(), &gaia_id);
-  DCHECK(success);
-
-  gfx::Rect window_bounds =
-      GetBaseWindowForWebContents(web_contents())->GetBounds();
-
-  PrefService* user_prefs = profile_->GetPrefs();
-  std::string charset = user_prefs->GetString(::prefs::kDefaultCharset);
-  std::string accept_languages =
-      user_prefs->GetString(::prefs::kAcceptLanguages);
-  base::Time install_time = base::Time::FromTimeT(
-      g_browser_process->local_state()->GetInt64(::prefs::kInstallDate));
-
-  risk::GetFingerprint(
-      gaia_id, window_bounds, *web_contents(), chrome::VersionInfo().Version(),
-      charset, accept_languages, install_time, GetDialogType(),
-      g_browser_process->GetApplicationLocale(),
-      base::Bind(&AutofillDialogControllerImpl::OnDidLoadRiskFingerprintData,
-                 weak_ptr_factory_.GetWeakPtr()));
-}
-
 void AutofillDialogControllerImpl::OnDidLoadRiskFingerprintData(
     scoped_ptr<risk::Fingerprint> fingerprint) {
-  NOTIMPLEMENTED();
+  DCHECK(LegalDocumentsAreCurrent());
+
+  std::string proto_data;
+  fingerprint->SerializeToString(&proto_data);
+  bool success = base::Base64Encode(proto_data, &risk_data_);
+  DCHECK(success);
+
+  GetFullWalletIfReady();
 }
 
 bool AutofillDialogControllerImpl::IsManuallyEditingSection(
     DialogSection section) const {
   std::map<DialogSection, bool>::const_iterator it =
       section_editing_state_.find(section);
   return (it != section_editing_state_.end() && it->second) ||
          SuggestionsMenuModelForSection(section)->
              GetItemKeyForCheckedItem() == kAddNewItemKey;
 }
@@ skipping 87 matching lines @@
 
 void AutofillDialogControllerImpl::SetIsSubmitting(bool submitting) {
   is_submitting_ = submitting;
 
   if (view_) {
     view_->UpdateButtonStrip();
     view_->UpdateNotificationArea();
   }
 }
 
+bool AutofillDialogControllerImpl::LegalDocumentsAreCurrent() const {
+  return accepted_legal_documents_ ||
+      (wallet_items_ && wallet_items_->legal_documents().empty());
+}
+
 void AutofillDialogControllerImpl::SubmitWithWallet() {
   // TODO(dbeam): disallow interacting with the dialog while submitting.
   // http://crbug.com/230932
 
   active_instrument_id_.clear();
   active_address_id_.clear();
   full_wallet_.reset();
 
   content::BrowserThread::PostTask(
      content::BrowserThread::IO, FROM_HERE,
      base::Bind(&UserDidOptIntoLocationServices));
 
   GetWalletClient()->AcceptLegalDocuments(
       wallet_items_->legal_documents(),
       wallet_items_->google_transaction_id(),
       source_url_);
 
+  if (LegalDocumentsAreCurrent())
+    LoadRiskFingerprintData();
+
   SuggestionsMenuModel* billing =
       SuggestionsMenuModelForSection(SECTION_CC_BILLING);
   int instrument_index = -1;
   base::StringToInt(billing->GetItemKeyForCheckedItem(), &instrument_index);
 
   if (!IsManuallyEditingSection(SECTION_CC_BILLING)) {
     active_instrument_id_ =
         wallet_items_->instruments()[instrument_index]->object_id();
     DCHECK(!active_instrument_id_.empty());
   }
 
   SuggestionsMenuModel* shipping =
       SuggestionsMenuModelForSection(SECTION_SHIPPING);
   int address_index = -1;
   base::StringToInt(shipping->GetItemKeyForCheckedItem(), &address_index);
 
   if (!IsManuallyEditingSection(SECTION_SHIPPING) &&
       shipping->GetItemKeyForCheckedItem() != kSameAsBillingKey) {
     active_address_id_ =
         wallet_items_->addresses()[address_index]->object_id();
     DCHECK(!active_address_id_.empty());
   }
 
-  if (!active_instrument_id_.empty() && !active_address_id_.empty()) {
-    GetFullWallet();
+  if (!active_instrument_id_.empty() && !active_address_id_.empty())

[Ilya Sherman, 2013/05/22 22:34:24]

This block could use a comment now.  Seems like it might be cleaner to decompose
methods for saving the instrument and address if needed, though.

[Dan Beam, 2013/05/22 23:25:20]

Done.

     return;
-  }
 
   scoped_ptr<wallet::Instrument> inputted_instrument =
       CreateTransientInstrument();
   scoped_ptr<wallet::WalletClient::UpdateInstrumentRequest> update_request =
       CreateUpdateInstrumentRequest(
           inputted_instrument.get(),
           !section_editing_state_[SECTION_CC_BILLING] ? std::string() :
               wallet_items_->instruments()[instrument_index]->object_id());
 
   scoped_ptr<wallet::Address> inputted_address;
@@ skipping 86 matching lines @@
   DetailOutputMap output;
   view_->GetUserInput(SECTION_SHIPPING, &output);
 
   AutofillProfile profile;
   FillFormGroupFromOutputs(output, &profile);
 
   return scoped_ptr<wallet::Address>(new wallet::Address(profile));
 }
 
 void AutofillDialogControllerImpl::GetFullWallet() {
-  DCHECK(is_submitting_);
-  DCHECK(IsPayingWithWallet());
-  DCHECK(wallet_items_);
-  DCHECK(!active_instrument_id_.empty());
-  DCHECK(!active_address_id_.empty());

[Ilya Sherman, 2013/05/22 22:34:24]

Why did you remove these DCHECKs?

[Dan Beam, 2013/05/22 23:25:20]

I made this function GetFullWalletIfReady(), but decided to split later. Added
back.

+  DCHECK(is_submitting_ && IsPayingWithWallet());

[Ilya Sherman, 2013/05/22 22:34:24]

nit: Better to have these as separate DCHECKs, so that a failure tells you which
check failed.

[Dan Beam, 2013/05/22 23:25:20]

Done.

 
   std::vector<wallet::WalletClient::RiskCapability> capabilities;
   capabilities.push_back(wallet::WalletClient::VERIFY_CVC);
 
   GetWalletClient()->GetFullWallet(wallet::WalletClient::FullWalletRequest(
       active_instrument_id_,
       active_address_id_,
       source_url_,
       wallet::Cart(base::IntToString(kCartMax), kCartCurrency),
       wallet_items_->google_transaction_id(),
       capabilities));
 }
 
+void AutofillDialogControllerImpl::GetFullWalletIfReady() {
+  DCHECK(is_submitting_ && IsPayingWithWallet());
+
+  if (!active_instrument_id_.empty() && !active_address_id_.empty() &&
+      !risk_data_.empty()) {
+    GetFullWallet();
+  }
+}
+
 void AutofillDialogControllerImpl::HandleSaveOrUpdateRequiredActions(
     const std::vector<wallet::RequiredAction>& required_actions) {
   DCHECK(!required_actions.empty());
 
   for (std::vector<wallet::RequiredAction>::const_iterator iter =
            required_actions.begin();
        iter != required_actions.end(); ++iter) {
     if (*iter == wallet::INVALID_FORM_FIELD) {
       wallet_server_validation_error_ = true;
     } else {
@@ skipping 155 matching lines @@
         AutofillMetrics::DIALOG_USER_SIGNED_IN_NO_WALLET_NO_AUTOFILL;
   }
 
   // Has Wallet items.
   return has_autofill_profiles ?
       AutofillMetrics::DIALOG_USER_SIGNED_IN_HAS_WALLET_HAS_AUTOFILL :
       AutofillMetrics::DIALOG_USER_SIGNED_IN_HAS_WALLET_NO_AUTOFILL;
 }
 
 }  // namespace autofill