Device robot refresh token integrity validation.

chrome/browser/signin/ubertoken_fetcher.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include "chrome/browser/signin/ubertoken_fetcher.h"
+
+#include <vector>
+
 #include "base/logging.h"
 #include "base/strings/stringprintf.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/signin/token_service.h"
 #include "chrome/browser/signin/token_service_factory.h"
-#include "chrome/browser/signin/ubertoken_fetcher.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "google_apis/gaia/gaia_constants.h"
 #include "google_apis/gaia/gaia_urls.h"
 #include "google_apis/gaia/google_service_auth_error.h"
 #include "net/base/load_flags.h"
 
 UbertokenFetcher::UbertokenFetcher(Profile* profile,
                                    UbertokenConsumer* consumer)
     : profile_(profile), consumer_(consumer) {
   DCHECK(profile);
@@ skipping 19 matching lines @@
 }
 
 void UbertokenFetcher::StartFetchingUbertoken() {
   TokenService* token_service = TokenServiceFactory::GetForProfile(profile_);
   DCHECK(token_service->HasOAuthLoginToken());
   gaia::OAuthClientInfo client_info;
   GaiaUrls* urls = GaiaUrls::GetInstance();
   client_info.client_id = urls->oauth2_chrome_client_id();
   client_info.client_secret = urls->oauth2_chrome_client_secret();
   gaia_oauth_client_.reset(new gaia::GaiaOAuthClient(
-      urls->oauth2_token_url(), profile_->GetRequestContext()));
+      profile_->GetRequestContext()));
+  std::vector<std::string> empty_scope_list;  // (Use scope from refresh token.)
   gaia_oauth_client_->RefreshToken(
-      client_info, token_service->GetOAuth2LoginRefreshToken(), 1, this);
+      client_info, token_service->GetOAuth2LoginRefreshToken(),
+      empty_scope_list, 1, this);
 }
 
 void UbertokenFetcher::Observe(int type,
                                const content::NotificationSource& source,
                                const content::NotificationDetails& details) {
   DCHECK(type == chrome::NOTIFICATION_TOKEN_AVAILABLE ||
          type == chrome::NOTIFICATION_TOKEN_REQUEST_FAILED);
 
   if (type == chrome::NOTIFICATION_TOKEN_AVAILABLE) {
     TokenService::TokenAvailableDetails* token_details =
@@ skipping 43 matching lines @@
 }
 
 void UbertokenFetcher::OnUberAuthTokenSuccess(const std::string& token) {
   consumer_->OnUbertokenSuccess(token);
 }
 
 void UbertokenFetcher::OnUberAuthTokenFailure(
     const GoogleServiceAuthError& error) {
   consumer_->OnUbertokenFailure(error);
 }