Implement cloud policy invalidations using the invalidation service framework.

chrome/browser/policy/cloud/cloud_policy_validator_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include <string>
 #include <vector>
 
 #include "base/bind.h"
+#include "base/hash.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/message_loop/message_loop.h"
 #include "base/strings/string_util.h"
 #include "chrome/browser/policy/cloud/cloud_policy_constants.h"
 #include "chrome/browser/policy/cloud/cloud_policy_validator.h"
 #include "chrome/browser/policy/cloud/policy_builder.h"
 #include "content/public/test/test_browser_thread.h"
 #include "crypto/rsa_private_key.h"
 #include "testing/gmock/include/gmock/gmock.h"
 #include "testing/gtest/include/gtest/gtest.h"
@@ skipping 13 matching lines @@
 
 class CloudPolicyValidatorTest : public testing::Test {
  public:
   CloudPolicyValidatorTest()
       : loop_(base::MessageLoop::TYPE_UI),
         timestamp_(base::Time::UnixEpoch() +
                    base::TimeDelta::FromMilliseconds(
                        PolicyBuilder::kFakeTimestamp)),
         ignore_missing_timestamp_(CloudPolicyValidatorBase::TIMESTAMP_REQUIRED),
         ignore_missing_dm_token_(CloudPolicyValidatorBase::DM_TOKEN_REQUIRED),
+        allow_invalid_payload_(false),
         allow_key_rotation_(true),
         existing_dm_token_(PolicyBuilder::kFakeToken),
         file_thread_(content::BrowserThread::FILE, &loop_) {
     policy_.set_new_signing_key(PolicyBuilder::CreateTestNewSigningKey());
   }
 
   void Validate(testing::Action<void(UserCloudPolicyValidator*)> check_action) {
     // Create a validator.
     scoped_ptr<UserCloudPolicyValidator> validator = CreateValidator();
 
@@ skipping 14 matching lines @@
     policy_.Build();
 
     UserCloudPolicyValidator* validator =
         UserCloudPolicyValidator::Create(policy_.GetCopy());
     validator->ValidateTimestamp(timestamp_, timestamp_,
                                  ignore_missing_timestamp_);
     validator->ValidateUsername(PolicyBuilder::kFakeUsername);
     validator->ValidateDomain(PolicyBuilder::kFakeDomain);
     validator->ValidateDMToken(existing_dm_token_, ignore_missing_dm_token_);
     validator->ValidatePolicyType(dm_protocol::kChromeUserPolicyType);
-    validator->ValidatePayload();
+    if (!allow_invalid_payload_)
+      validator->ValidatePayload();
     validator->ValidateSignature(public_key, allow_key_rotation_);
     if (allow_key_rotation_)
       validator->ValidateInitialKey();
     return make_scoped_ptr(validator);
   }
 
 
   void CheckSuccessfulValidation(UserCloudPolicyValidator* validator) {
     EXPECT_TRUE(validator->success());
     EXPECT_EQ(policy_.policy().SerializeAsString(),
               validator->policy()->SerializeAsString());
     EXPECT_EQ(policy_.policy_data().SerializeAsString(),
               validator->policy_data()->SerializeAsString());
     EXPECT_EQ(policy_.payload().SerializeAsString(),
               validator->payload()->SerializeAsString());
   }
 
   base::MessageLoop loop_;
   base::Time timestamp_;
   CloudPolicyValidatorBase::ValidateTimestampOption ignore_missing_timestamp_;
   CloudPolicyValidatorBase::ValidateDMTokenOption ignore_missing_dm_token_;
   std::string signing_key_;
+  bool allow_invalid_payload_;
   bool allow_key_rotation_;
   std::string existing_dm_token_;
 
   UserPolicyBuilder policy_;
 
  private:
   MOCK_METHOD1(ValidationCompletion, void(UserCloudPolicyValidator* validator));
 
   content::TestBrowserThread file_thread_;
 
@@ skipping 171 matching lines @@
   allow_key_rotation_ = false;
   Validate(CheckStatus(CloudPolicyValidatorBase::VALIDATION_BAD_SIGNATURE));
 }
 
 TEST_F(CloudPolicyValidatorTest, NoRotation) {
   allow_key_rotation_ = false;
   policy_.set_new_signing_key(scoped_ptr<crypto::RSAPrivateKey>());
   Validate(CheckStatus(CloudPolicyValidatorBase::VALIDATION_OK));
 }
 
+TEST_F(CloudPolicyValidatorTest, HashValue) {
+  allow_invalid_payload_ = true;
+  std::string policy_value = "test";
+  uint32 expected_value = base::Hash(policy_value);
+  policy_.clear_payload();
+  policy_.policy_data().set_policy_value(policy_value);
+
+  scoped_ptr<UserCloudPolicyValidator> validator = CreateValidator();
+  EXPECT_EQ(0U, validator->hash_value());
+  validator->ValidateHashValue();
+  validator->RunValidation();
+  CheckSuccessfulValidation(validator.get());
+  EXPECT_EQ(expected_value, validator->hash_value());
+}
+
 }  // namespace
 
 }  // namespace policy