CREDENTIAL: Rework the integration with Fetch (2/2)

content/child/web_url_loader_impl.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/child/web_url_loader_impl.h"
 
 #include <stdint.h>
 #include <algorithm>
 #include <string>
 #include <utility>
@@ skipping 521 matching lines @@
   request_info.fetch_redirect_mode =
       GetFetchRedirectModeForWebURLRequest(request);
   request_info.fetch_request_context_type =
       GetRequestContextTypeForWebURLRequest(request);
   request_info.fetch_frame_type =
       GetRequestContextFrameTypeForWebURLRequest(request);
   request_info.extra_data = request.getExtraData();
   request_info.report_raw_headers = request.reportRawHeaders();
   request_info.loading_web_task_runner.reset(web_task_runner_->clone());
 
-  scoped_refptr<ResourceRequestBody> request_body =
-      GetRequestBodyForWebURLRequest(request).get();
+  // If the request has an attached credential, then use it as the
+  // |request_body| and ensure that the service worker will be presented
+  // with a Request whose body is empty.
+  //
+  // This doesn't line up with the way the spec is written (see
+  // https://w3c.github.io/webappsec-credential-management/#monkey-patching)
+  // but it has the advantage of actually working with our architechture.
+  scoped_refptr<ResourceRequestBody> request_body;
+  if (!request.attachedCredentialBody().isNull()) {
+    request_body =
+        GetRequestBodyForWebURLRequest(request, CREDENTIAL_BODY).get();
+    request_info.empty_body_in_service_worker = true;
+  } else {
+    request_body = GetRequestBodyForWebURLRequest(request, HTTP_BODY).get();
+    request_info.empty_body_in_service_worker = false;
+  }
 
   // PlzNavigate: during navigation, the renderer should request a stream which
   // contains the body of the response. The network request has already been
   // made by the browser.
   if (stream_override_.get()) {
     CHECK(IsBrowserSideNavigationEnabled());
     DCHECK(!sync_load_response);
     DCHECK_NE(WebURLRequest::FrameTypeNone, request.getFrameType());
     request_info.resource_body_stream_url = stream_override_->stream_url;
   }
 
   if (sync_load_response) {
-    resource_dispatcher_->StartSync(
-        request_info, request_body.get(), sync_load_response);
+    resource_dispatcher_->StartSync(request_info, request_body.get(),
+                                    sync_load_response);
     return;
   }
 
   request_id_ = resource_dispatcher_->StartAsync(
       request_info, request_body.get(),
       make_scoped_ptr(new WebURLLoaderImpl::RequestPeerImpl(this)));
 }
 
 void WebURLLoaderImpl::Context::SetWebTaskRunner(
     scoped_ptr<blink::WebTaskRunner> web_task_runner) {
@@ skipping 604 matching lines @@
     response->clearHTTPHeaderField(webStringName);
     while (response_headers->EnumerateHeader(&iterator, name, &value)) {
       response->addHTTPHeaderField(webStringName,
                                    WebString::fromLatin1(value));
     }
   }
   return true;
 }
 
 }  // namespace content