Device robot refresh token integrity validation.

chrome/service/cloud_print/cloud_print_auth.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/service/cloud_print/cloud_print_auth.h"
 
 #include "base/bind.h"
 #include "base/strings/string_util.h"
 #include "chrome/common/cloud_print/cloud_print_constants.h"
 #include "chrome/common/cloud_print/cloud_print_helpers.h"
@@ skipping 44 matching lines @@
 }
 
 void CloudPrintAuth::AuthenticateWithRobotAuthCode(
     const std::string& robot_oauth_auth_code,
     const std::string& robot_email) {
   VLOG(1) << "CP_AUTH: Authenticating with robot auth code";
 
   robot_email_ = robot_email;
   // Now that we have an auth code we need to get the refresh and access tokens.
   oauth_client_.reset(new gaia::GaiaOAuthClient(
-      GaiaUrls::GetInstance()->oauth2_token_url(),
       g_service_process->GetServiceURLRequestContextGetter()));
   oauth_client_->GetTokensFromAuthCode(oauth_client_info_,
                                        robot_oauth_auth_code,
                                        kCloudPrintAuthMaxRetryCount,
                                        this);
 }
 
 void CloudPrintAuth::RefreshAccessToken() {
   oauth_client_.reset(new gaia::GaiaOAuthClient(
-      GaiaUrls::GetInstance()->oauth2_token_url(),
       g_service_process->GetServiceURLRequestContextGetter()));
+  std::vector<std::string> empty_scope_list;  // (Use scope from refresh token.)
   oauth_client_->RefreshToken(oauth_client_info_,
                               refresh_token_,
+                              empty_scope_list,
                               kCloudPrintAuthMaxRetryCount,
                               this);
 }
 
 void CloudPrintAuth::OnGetTokensResponse(const std::string& refresh_token,
                                          const std::string& access_token,
                                          int expires_in_seconds) {
   refresh_token_ = refresh_token;
   // After saving the refresh token, this is just like having just refreshed
   // the access token. Just call OnRefreshTokenResponse.
@@ skipping 43 matching lines @@
   std::string auth_code;
   if (!json_data->GetString(kOAuthCodeValue, &auth_code)) {
     VLOG(1) << "CP_AUTH: Creating robot account returned invalid json response";
     client_->OnInvalidCredentials();
     return CloudPrintURLFetcher::STOP_PROCESSING;
   }
 
   json_data->GetString(kXMPPJidValue, &robot_email_);
   // Now that we have an auth code we need to get the refresh and access tokens.
   oauth_client_.reset(new gaia::GaiaOAuthClient(
-      GaiaUrls::GetInstance()->oauth2_token_url(),
       g_service_process->GetServiceURLRequestContextGetter()));
   oauth_client_->GetTokensFromAuthCode(oauth_client_info_,
                                        auth_code,
                                        kCloudPrintAPIMaxRetryCount,
                                        this);
 
   return CloudPrintURLFetcher::STOP_PROCESSING;
 }
 
 CloudPrintURLFetcher::ResponseAction CloudPrintAuth::OnRequestAuthError() {
   VLOG(1) << "CP_AUTH: Creating robot account authentication error";
   // Notify client about authentication error.
   client_->OnInvalidCredentials();
   return CloudPrintURLFetcher::STOP_PROCESSING;
 }
 
 std::string CloudPrintAuth::GetAuthHeader() {
   DCHECK(!client_login_token_.empty());
   std::string header;
   header = "Authorization: GoogleLogin auth=";
   header += client_login_token_;
   return header;
 }
 
 CloudPrintAuth::~CloudPrintAuth() {}
 
 }  // namespace cloud_print