| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "remoting/protocol/negotiating_client_authenticator.h" | 5 #include "remoting/protocol/negotiating_client_authenticator.h" |
| 6 | 6 |
| 7 #include <algorithm> | 7 #include <algorithm> |
| 8 #include <sstream> | 8 #include <sstream> |
| 9 #include <utility> | 9 #include <utility> |
| 10 | 10 |
| 11 #include "base/bind.h" | 11 #include "base/bind.h" |
| 12 #include "base/callback.h" | 12 #include "base/callback.h" |
| 13 #include "base/logging.h" | 13 #include "base/logging.h" |
| 14 #include "base/strings/string_split.h" | 14 #include "base/strings/string_split.h" |
| 15 #include "remoting/protocol/auth_util.h" | 15 #include "remoting/protocol/auth_util.h" |
| 16 #include "remoting/protocol/channel_authenticator.h" | 16 #include "remoting/protocol/channel_authenticator.h" |
| 17 #include "remoting/protocol/pairing_client_authenticator.h" | 17 #include "remoting/protocol/pairing_client_authenticator.h" |
| 18 #include "remoting/protocol/v2_authenticator.h" | 18 #include "remoting/protocol/v2_authenticator.h" |
| 19 #include "third_party/webrtc/libjingle/xmllite/xmlelement.h" | 19 #include "third_party/webrtc/libjingle/xmllite/xmlelement.h" |
| 20 | 20 |
| 21 namespace remoting { | 21 namespace remoting { |
| 22 namespace protocol { | 22 namespace protocol { |
| 23 | 23 |
| 24 ClientAuthenticationConfig::ClientAuthenticationConfig() {} | |
| 25 ClientAuthenticationConfig::~ClientAuthenticationConfig() {} | |
| 26 | |
| 27 NegotiatingClientAuthenticator::NegotiatingClientAuthenticator( | 24 NegotiatingClientAuthenticator::NegotiatingClientAuthenticator( |
| 28 const ClientAuthenticationConfig& config) | 25 const std::string& client_pairing_id, |
| 26 const std::string& shared_secret, |
| 27 const std::string& authentication_tag, |
| 28 const FetchSecretCallback& fetch_secret_callback, |
| 29 const FetchThirdPartyTokenCallback& fetch_third_party_token_callback) |
| 29 : NegotiatingAuthenticatorBase(MESSAGE_READY), | 30 : NegotiatingAuthenticatorBase(MESSAGE_READY), |
| 30 config_(config), | 31 client_pairing_id_(client_pairing_id), |
| 32 shared_secret_(shared_secret), |
| 33 authentication_tag_(authentication_tag), |
| 34 fetch_secret_callback_(fetch_secret_callback), |
| 35 fetch_third_party_token_callback_(fetch_third_party_token_callback), |
| 31 weak_factory_(this) { | 36 weak_factory_(this) { |
| 32 if (!config_.fetch_third_party_token_callback.is_null()) | 37 if (!fetch_third_party_token_callback.is_null()) |
| 33 AddMethod(Method::THIRD_PARTY); | 38 AddMethod(Method::THIRD_PARTY); |
| 34 AddMethod(Method::SPAKE2_PAIR); | 39 AddMethod(Method::SPAKE2_PAIR); |
| 35 AddMethod(Method::SPAKE2_SHARED_SECRET_HMAC); | 40 AddMethod(Method::SPAKE2_SHARED_SECRET_HMAC); |
| 36 AddMethod(Method::SPAKE2_SHARED_SECRET_PLAIN); | 41 AddMethod(Method::SPAKE2_SHARED_SECRET_PLAIN); |
| 37 } | 42 } |
| 38 | 43 |
| 39 NegotiatingClientAuthenticator::~NegotiatingClientAuthenticator() {} | 44 NegotiatingClientAuthenticator::~NegotiatingClientAuthenticator() {} |
| 40 | 45 |
| 41 void NegotiatingClientAuthenticator::ProcessMessage( | 46 void NegotiatingClientAuthenticator::ProcessMessage( |
| 42 const buzz::XmlElement* message, | 47 const buzz::XmlElement* message, |
| (...skipping 60 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 103 return GetNextMessageInternal(); | 108 return GetNextMessageInternal(); |
| 104 } | 109 } |
| 105 | 110 |
| 106 void NegotiatingClientAuthenticator::CreateAuthenticatorForCurrentMethod( | 111 void NegotiatingClientAuthenticator::CreateAuthenticatorForCurrentMethod( |
| 107 Authenticator::State preferred_initial_state, | 112 Authenticator::State preferred_initial_state, |
| 108 const base::Closure& resume_callback) { | 113 const base::Closure& resume_callback) { |
| 109 DCHECK(current_method_ != Method::INVALID); | 114 DCHECK(current_method_ != Method::INVALID); |
| 110 if (current_method_ == Method::THIRD_PARTY) { | 115 if (current_method_ == Method::THIRD_PARTY) { |
| 111 current_authenticator_.reset(new ThirdPartyClientAuthenticator( | 116 current_authenticator_.reset(new ThirdPartyClientAuthenticator( |
| 112 base::Bind(&V2Authenticator::CreateForClient), | 117 base::Bind(&V2Authenticator::CreateForClient), |
| 113 config_.fetch_third_party_token_callback)); | 118 fetch_third_party_token_callback_)); |
| 114 resume_callback.Run(); | 119 resume_callback.Run(); |
| 115 } else { | 120 } else { |
| 116 DCHECK(current_method_ == Method::SPAKE2_SHARED_SECRET_PLAIN || | 121 DCHECK(current_method_ == Method::SPAKE2_SHARED_SECRET_PLAIN || |
| 117 current_method_ == Method::SPAKE2_PAIR || | 122 current_method_ == Method::SPAKE2_PAIR || |
| 118 current_method_ == Method::SPAKE2_SHARED_SECRET_HMAC); | 123 current_method_ == Method::SPAKE2_SHARED_SECRET_HMAC); |
| 119 bool pairing_supported = (current_method_ == Method::SPAKE2_PAIR); | 124 bool pairing_supported = (current_method_ == Method::SPAKE2_PAIR); |
| 120 SecretFetchedCallback callback = base::Bind( | 125 SecretFetchedCallback callback = base::Bind( |
| 121 &NegotiatingClientAuthenticator::CreateV2AuthenticatorWithSecret, | 126 &NegotiatingClientAuthenticator::CreateV2AuthenticatorWithSecret, |
| 122 weak_factory_.GetWeakPtr(), preferred_initial_state, resume_callback); | 127 weak_factory_.GetWeakPtr(), preferred_initial_state, resume_callback); |
| 123 config_.fetch_secret_callback.Run(pairing_supported, callback); | 128 fetch_secret_callback_.Run(pairing_supported, callback); |
| 124 } | 129 } |
| 125 } | 130 } |
| 126 | 131 |
| 127 void NegotiatingClientAuthenticator::CreatePreferredAuthenticator() { | 132 void NegotiatingClientAuthenticator::CreatePreferredAuthenticator() { |
| 128 if (!config_.pairing_client_id.empty() && !config_.pairing_secret.empty() && | 133 if (!client_pairing_id_.empty() && !shared_secret_.empty() && |
| 129 std::find(methods_.begin(), methods_.end(), Method::SPAKE2_PAIR) != | 134 std::find(methods_.begin(), methods_.end(), Method::SPAKE2_PAIR) != |
| 130 methods_.end()) { | 135 methods_.end()) { |
| 131 // If the client specified a pairing id and shared secret, then create a | 136 // If the client specified a pairing id and shared secret, then create a |
| 132 // PairingAuthenticator. | 137 // PairingAuthenticator. |
| 133 current_authenticator_.reset(new PairingClientAuthenticator( | 138 current_authenticator_.reset(new PairingClientAuthenticator( |
| 134 config_.pairing_client_id, config_.pairing_secret, | 139 client_pairing_id_, shared_secret_, |
| 135 base::Bind(&V2Authenticator::CreateForClient), | 140 base::Bind(&V2Authenticator::CreateForClient), fetch_secret_callback_, |
| 136 config_.fetch_secret_callback, config_.host_id)); | 141 authentication_tag_)); |
| 137 current_method_ = Method::SPAKE2_PAIR; | 142 current_method_ = Method::SPAKE2_PAIR; |
| 138 } | 143 } |
| 139 } | 144 } |
| 140 | 145 |
| 141 void NegotiatingClientAuthenticator::CreateV2AuthenticatorWithSecret( | 146 void NegotiatingClientAuthenticator::CreateV2AuthenticatorWithSecret( |
| 142 Authenticator::State initial_state, | 147 Authenticator::State initial_state, |
| 143 const base::Closure& resume_callback, | 148 const base::Closure& resume_callback, |
| 144 const std::string& shared_secret) { | 149 const std::string& shared_secret) { |
| 145 current_authenticator_ = V2Authenticator::CreateForClient( | 150 current_authenticator_ = V2Authenticator::CreateForClient( |
| 146 (current_method_ == Method::SPAKE2_SHARED_SECRET_PLAIN) | 151 (current_method_ == Method::SPAKE2_SHARED_SECRET_PLAIN) |
| 147 ? shared_secret | 152 ? shared_secret |
| 148 : GetSharedSecretHash(config_.host_id, shared_secret), | 153 : GetSharedSecretHash(authentication_tag_, shared_secret), |
| 149 initial_state); | 154 initial_state); |
| 150 resume_callback.Run(); | 155 resume_callback.Run(); |
| 151 } | 156 } |
| 152 | 157 |
| 153 } // namespace protocol | 158 } // namespace protocol |
| 154 } // namespace remoting | 159 } // namespace remoting |
| OLD | NEW |