Add support to GCMKeyStore for multiple keys per app_id

components/gcm_driver/crypto/gcm_encryption_provider.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_GCM_DRIVER_CRYPTO_GCM_ENCRYPTION_PROVIDER_H_
 #define COMPONENTS_GCM_DRIVER_CRYPTO_GCM_ENCRYPTION_PROVIDER_H_
 
 #include <stdint.h>
 
 #include <memory>
@@ skipping 64 matching lines @@
   ~GCMEncryptionProvider();
 
   // Initializes the encryption provider with the |store_path| and the
   // |blocking_task_runner|. Done separately from the constructor in order to
   // avoid needing a blocking task runner for anything using GCMDriver.
   void Init(
       const base::FilePath& store_path,
       const scoped_refptr<base::SequencedTaskRunner>& blocking_task_runner);
 
   // Retrieves the public key and authentication secret associated with the
-  // |app_id|. If none have been associated yet, they will be created.
+  // |app_id| + |authorized_entity| pair. Will create this info if necessary.
+  // |authorized_entity| should be the InstanceID token's authorized entity, or
+  // "" for non-InstanceID GCM registrations.
   void GetEncryptionInfo(const std::string& app_id,
+                         const std::string& authorized_entity,
                          const EncryptionInfoCallback& callback);
 
-  // Removes all encryption information associated with the |app_id|. Will
-  // invoke the |callback| when this has finished.
+  // Removes all encryption information associated with the |app_id| +
+  // |authorized_entity| pair, then invokes |callback|. |authorized_entity|
+  // should be the InstanceID token's authorized entity, or "*" to remove for
+  // all InstanceID tokens, or "" for non-InstanceID GCM registrations.
   void RemoveEncryptionInfo(const std::string& app_id,
+                            const std::string& authorized_entity,
                             const base::Closure& callback);
 
   // Determines whether |message| contains encrypted content.
   bool IsEncryptedMessage(const IncomingMessage& message) const;
 
   // Attempts to decrypt the |message|. If the |message| is not encrypted, the
   // |callback| will be invoked immediately. Otherwise |callback| will be called
   // asynchronously when |message| has been decrypted. A dispatchable message
   // will be used in case of success, an empty message in case of failure.
   void DecryptMessage(const std::string& app_id,
                       const IncomingMessage& message,
                       const MessageCallback& callback);
 
  private:
-  FRIEND_TEST_ALL_PREFIXES(GCMEncryptionProviderTest, EncryptionRoundTrip);
+  friend class GCMEncryptionProviderTest;
+  FRIEND_TEST_ALL_PREFIXES(GCMEncryptionProviderTest,
+                           EncryptionRoundTripGCMRegistration);
+  FRIEND_TEST_ALL_PREFIXES(GCMEncryptionProviderTest,
+                           EncryptionRoundTripInstanceIDToken);
 
   void DidGetEncryptionInfo(const std::string& app_id,
+                            const std::string& authorized_entity,
                             const EncryptionInfoCallback& callback,
                             const KeyPair& pair,
                             const std::string& auth_secret);
 
   void DidCreateEncryptionInfo(const EncryptionInfoCallback& callback,
                                const KeyPair& pair,
                                const std::string& auth_secret);
 
   void DecryptMessageWithKey(const IncomingMessage& message,
                              const MessageCallback& callback,
                              const std::string& salt,
                              const std::string& dh,
                              uint64_t rs,
                              const KeyPair& pair,
                              const std::string& auth_secret);
 
   std::unique_ptr<GCMKeyStore> key_store_;
 
   base::WeakPtrFactory<GCMEncryptionProvider> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(GCMEncryptionProvider);
 };
 
 }  // namespace gcm
 
 #endif  // COMPONENTS_GCM_DRIVER_CRYPTO_GCM_ENCRYPTION_PROVIDER_H_