Add ManagedUserTokenFetcher to fetch scoped-down tokens.

google_apis/gaia/gaia_oauth_client.cc

Index: google_apis/gaia/gaia_oauth_client.cc
diff --git a/google_apis/gaia/gaia_oauth_client.cc b/google_apis/gaia/gaia_oauth_client.cc
index a9bae4f36bfe807186d6a912ab1be7ecf2d61de5..7e15c9df6bc0c78781ecaba9de02e9cfecdf8127 100644
--- a/google_apis/gaia/gaia_oauth_client.cc
+++ b/google_apis/gaia/gaia_oauth_client.cc
@@ -203,7 +203,7 @@ void GaiaOAuthClient::Core::HandleResponse(
     // If we don't have an access token yet and the the error was not
     // RC_BAD_REQUEST, we may need to retry.
     if ((source->GetMaxRetriesOn5xx() != -1) &&
-        (num_retries_ > source->GetMaxRetriesOn5xx())) {
+        (num_retries_ >= source->GetMaxRetriesOn5xx())) {

[Andrew T Wilson (Slow), 2013/05/27 13:52:15]

Do we have a test that exercises this change?

[Bernhard Bauer, 2013/05/27 14:42:13]

device_cloud_policy_manager_chromeos_unittest.cc (which used to work around the
off-by-one error here), and also
ManagedUserTokenFetcherTest.FetchRefreshTokenTransientNetworkError, which tests
that the number of retries is correct.

       // Retry limit reached. Give up.
       delegate_->OnNetworkError(source->GetResponseCode());
     } else {