Minimal attestation-based enrollment flow.

chrome/browser/chromeos/policy/enrollment_handler_chromeos.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_
 #define CHROME_BROWSER_CHROMEOS_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 10 matching lines @@
 #include "components/policy/core/common/cloud/cloud_policy_store.h"
 #include "google_apis/gaia/gaia_oauth_client.h"
 #include "policy/proto/device_management_backend.pb.h"
 
 namespace base {
 class SequencedTaskRunner;
 }
 
 namespace chromeos {
 class CryptohomeClient;
+
+namespace attestation {
+class AttestationFlow;
+}
 }
 
 namespace cryptohome {
 class AsyncMethodCaller;
 }
 
 namespace policy {
 
 class DeviceCloudPolicyStoreChromeOS;
 class ServerBackedStateKeysBroker;
@@ skipping 77 matching lines @@
     STEP_VALIDATION,          // Policy validation.
     STEP_ROBOT_AUTH_FETCH,    // Fetching device API auth code.
     STEP_ROBOT_AUTH_REFRESH,  // Fetching device API refresh token.
     STEP_LOCK_DEVICE,         // Writing installation-time attributes.
     STEP_STORE_TOKEN_AND_ID,  // Storing DM token and virtual device ID.
     STEP_STORE_ROBOT_AUTH,    // Encrypting & writing robot refresh token.
     STEP_STORE_POLICY,        // Storing policy and API refresh token.
     STEP_FINISHED,            // Enrollment process finished, no further action.
   };
 
-  // Handles the response to the attestation flow requesting a registration
-  // certificate.
+  // Handles the response to a request for server-backed state keys.
+  void HandleStateKeysResult(const std::vector<std::string>& state_keys);
+
+  // Starts attestation based enrollment flow.
+  void StartAttestationBasedEnrollmentFlow();
+
+  // Handles the response to a request for a registration certificate.
   void HandleRegistrationCertificateResult(
       bool success,
       const std::string& pem_certificate_chain);
-  // Handles the response to a request for server-backed state keys.
-  void HandleStateKeysResult(const std::vector<std::string>& state_keys);
 
   // Starts registration if the store is initialized.
   void StartRegistration();
 
   // Handles the policy validation result, proceeding with device lock if
   // successful.
   void HandlePolicyValidationResult(DeviceCloudPolicyValidator* validator);
 
   // Calls InstallAttributes::LockDevice() for enterprise enrollment and
   // DeviceSettingsService::SetManagementSettings() for consumer
@@ skipping 21 matching lines @@
   void ReportResult(EnrollmentStatus status);
 
   DeviceCloudPolicyStoreChromeOS* store_;
   EnterpriseInstallAttributes* install_attributes_;
   ServerBackedStateKeysBroker* state_keys_broker_;
   cryptohome::AsyncMethodCaller* async_method_caller_;
   chromeos::CryptohomeClient* cryptohome_client_;
   std::unique_ptr<CloudPolicyClient> client_;
   scoped_refptr<base::SequencedTaskRunner> background_task_runner_;
   std::unique_ptr<gaia::GaiaOAuthClient> gaia_oauth_client_;
+  std::unique_ptr<chromeos::attestation::AttestationFlow> attestation_flow_;
 
   EnrollmentConfig enrollment_config_;
   std::string auth_token_;
   std::string client_id_;
   std::string requisition_;
   AllowedDeviceModes allowed_device_modes_;
   EnrollmentCallback completion_callback_;
 
   // The current state key provided by |state_keys_broker_|.
   std::string current_state_key_;
@@ skipping 21 matching lines @@
   int lockbox_init_duration_;
 
   base::WeakPtrFactory<EnrollmentHandlerChromeOS> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(EnrollmentHandlerChromeOS);
 };
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_CHROMEOS_POLICY_ENROLLMENT_HANDLER_CHROMEOS_H_