Add public key and signature verification to browser-side API keys

content/browser/experiments/api_key.h

Index: content/browser/experiments/api_key.h
diff --git a/content/browser/experiments/api_key.h b/content/browser/experiments/api_key.h
index c11f3f2b16a3596b7bb7c02383af08e6972fe089..159375112d45f7113b55a5ab18a7dd295390c8c5 100644
--- a/content/browser/experiments/api_key.h
+++ b/content/browser/experiments/api_key.h
@@ -39,6 +39,16 @@ class CONTENT_EXPORT ApiKey {
   std::string api_name() { return api_name_; }
   uint64_t expiry_timestamp() { return expiry_timestamp_; }
 
+ protected:
+  friend class ApiKeyTest;
+
+  bool ValidateDate(const base::Time& now) const;
+  bool ValidateSignature(const char* publicKeyPEM) const;

[davidben, 2015/12/18 22:23:17]

public_key_pem

[iclelland, 2015/12/22 05:45:28]

Done. Actually changed to uint8_t* public_key (drop the PEM. It's cleaner.)

+
+  static bool ValidateSignature(const std::string& signatureText,

[davidben, 2015/12/18 22:23:17]

signature_text

[iclelland, 2015/12/22 05:45:28]

Done.

+                                const std::string& data,
+                                const char* publicKeyPEM);

[davidben, 2015/12/18 22:23:17]

public_key_pem

[iclelland, 2015/12/22 05:45:28]

Done.

+
  private:
   ApiKey();
   ApiKey(const std::string& signature,