Minimal attestation-based enrollment flow.

chrome/browser/chromeos/login/enrollment/enrollment_screen.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_ENROLLMENT_ENROLLMENT_SCREEN_H_
 #define CHROME_BROWSER_CHROMEOS_LOGIN_ENROLLMENT_ENROLLMENT_SCREEN_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 65 matching lines @@
   void OnDeviceAttributeUploadCompleted(bool success) override;
   void OnDeviceAttributeUpdatePermission(bool granted) override;
 
   // Used for testing.
   EnrollmentScreenActor* GetActor() {
     return actor_;
   }
 
  private:
   FRIEND_TEST_ALL_PREFIXES(EnrollmentScreenTest, TestSuccess);
+  FRIEND_TEST_ALL_PREFIXES(AttestationAuthEnrollmentScreenTest, TestCancel);
+  FRIEND_TEST_ALL_PREFIXES(ForcedAttestationAuthEnrollmentScreenTest,
+                           TestCancel);
+  FRIEND_TEST_ALL_PREFIXES(MultiAuthEnrollmentScreenTest, TestCancel);
   FRIEND_TEST_ALL_PREFIXES(EnterpriseEnrollmentTest,
                            TestProperPageGetsLoadedOnEnrollmentSuccess);
   FRIEND_TEST_ALL_PREFIXES(EnterpriseEnrollmentTest,
                            TestAttributePromptPageGetsLoaded);
   FRIEND_TEST_ALL_PREFIXES(EnterpriseEnrollmentTest,
                            TestAuthCodeGetsProperlyReceivedFromGaia);
 
-  // Creates an enrollment helper.
+  // The authentication mechanisms that this class can use.
+  enum Auth {
+    AUTH_ATTESTATION,
+    AUTH_OAUTH,
+  };
+
+  // Sets the current config to use for enrollment.
+  void SetConfig();
+
+  // Creates an enrollment helper if needed.
   void CreateEnrollmentHelper();
 
   // Clears auth in |enrollment_helper_|. Deletes |enrollment_helper_| and runs
   // |callback| on completion. See the comment for
   // EnterpriseEnrollmentHelper::ClearAuth for details.
   void ClearAuth(const base::Closure& callback);
 
   // Used as a callback for EnterpriseEnrollmentHelper::ClearAuth.
   virtual void OnAuthCleared(const base::Closure& callback);
 
   // Sends an enrollment access token to a remote device.
   void SendEnrollmentAuthToken(const std::string& token);
 
   // Shows successful enrollment status after all enrollment related file
   // operations are completed.
   void ShowEnrollmentStatusOnSuccess();
 
   // Logs an UMA event in one of the "Enrollment.*" histograms, depending on
   // |enrollment_mode_|.
   void UMA(policy::MetricEnrollment sample);
 
+  // Do attestation based enrollment.
+  void AuthenticateUsingAttestation();
+
+  // Shows the interactive screen. Resets auth then shows the signin screen.
+  void ShowInteractiveScreen();
+
   // Shows the signin screen. Used as a callback to run after auth reset.
   void ShowSigninScreen();
 
   // Shows the device attribute prompt screen.
   // Used as a callback to run after successful enrollment.
   void ShowAttributePromptScreen();
 
+  // Handle enrollment errors.
   void OnAnyEnrollmentError();
 
-  pairing_chromeos::ControllerPairingController* shark_controller_;
+  // Advance to the next authentication mechanism if possible.
+  bool AdvanceToNextAuth();
+
+  pairing_chromeos::ControllerPairingController* shark_controller_ = nullptr;
 
   EnrollmentScreenActor* actor_;
+  policy::EnrollmentConfig config_;
   policy::EnrollmentConfig enrollment_config_;
-  bool enrollment_failed_once_;
+  Auth current_auth_ = AUTH_OAUTH;
+  Auth last_auth_ = AUTH_OAUTH;
+  bool enrollment_failed_once_ = false;
   std::string enrolling_user_domain_;
   std::unique_ptr<base::ElapsedTimer> elapsed_timer_;
   std::unique_ptr<EnterpriseEnrollmentHelper> enrollment_helper_;
   base::WeakPtrFactory<EnrollmentScreen> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(EnrollmentScreen);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_LOGIN_ENROLLMENT_ENROLLMENT_SCREEN_H_