Ensure Sync access token is revoked when user is signed out.

chrome/browser/sync/profile_sync_service_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/basictypes.h"
 #include "base/callback.h"
 #include "base/command_line.h"
 #include "base/compiler_specific.h"
 #include "base/location.h"
 #include "base/memory/scoped_ptr.h"
@@ skipping 666 matching lines @@
       ->UpdateCredentials(secondary_account_id, "second_account_refresh_token");
   ProfileOAuth2TokenServiceFactory::GetForProfile(profile())
       ->RevokeCredentials(secondary_account_id);
   EXPECT_FALSE(service()->GetAccessTokenForTest().empty());
 
   ProfileOAuth2TokenServiceFactory::GetForProfile(profile())
       ->RevokeCredentials(primary_account_id);
   EXPECT_TRUE(service()->GetAccessTokenForTest().empty());
 }
 
+TEST_F(ProfileSyncServiceTest, SignOutRevokeAccessToken) {
+  CreateService(browser_sync::AUTO_START);
+  IssueTestTokens();
+  ExpectDataTypeManagerCreation(1, GetDefaultConfigureCalledCallback());
+  ExpectSyncBackendHostCreation(1);
+  InitializeForNthSync();
+  EXPECT_TRUE(service()->IsSyncActive());
+
+  std::string primary_account_id =
+      SigninManagerFactory::GetForProfile(profile())
+          ->GetAuthenticatedAccountId();
+  ProfileOAuth2TokenServiceFactory::GetForProfile(profile())
+      ->LoadCredentials(primary_account_id);
+  base::RunLoop().RunUntilIdle();
+  EXPECT_FALSE(service()->GetAccessTokenForTest().empty());
+
+  SigninManagerFactory::GetForProfile(profile())
+      ->SignOut(signin_metrics::SIGNOUT_TEST);
+  EXPECT_TRUE(service()->GetAccessTokenForTest().empty());
+}
+
 #if defined(ENABLE_PRE_SYNC_BACKUP)
 TEST_F(ProfileSyncServiceTest, DontStartBackupOnBrowserStart) {
   CreateServiceWithoutSignIn();
   InitializeForFirstSync();
   PumpLoop();
   EXPECT_EQ(ProfileSyncService::IDLE, service()->backend_mode());
 }
 
 TEST_F(ProfileSyncServiceTest, BackupBeforeFirstSync) {
   CreateServiceWithoutSignIn();
@@ skipping 373 matching lines @@
 // dereferenced in OnSyncCycleCompleted. The fix is to use find() to check if
 // entry for sessions exists in map.
 TEST_F(ProfileSyncServiceTest, ValidPointersInDTCMap) {
   CreateService(browser_sync::AUTO_START);
   service()->OnSessionRestoreComplete();
   service()->OnSyncCycleCompleted();
 }
 
 }  // namespace
 }  // namespace browser_sync