Add Active Directory password change screen.

chrome/browser/ui/webui/chromeos/login/gaia_screen_handler.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/chromeos/login/gaia_screen_handler.h"
 
 #include "ash/common/system/chromeos/devicetype_utils.h"
 #include "base/bind.h"
 #include "base/callback.h"
 #include "base/guid.h"
@@ skipping 398 matching lines @@
   AddCallback("loginWebuiReady", &GaiaScreenHandler::HandleGaiaUIReady);
   AddCallback("toggleEasyBootstrap",
               &GaiaScreenHandler::HandleToggleEasyBootstrap);
   AddCallback("identifierEntered", &GaiaScreenHandler::HandleIdentifierEntered);
   AddCallback("updateOfflineLogin",
               &GaiaScreenHandler::set_offline_login_is_active);
   AddCallback("authExtensionLoaded",
               &GaiaScreenHandler::HandleAuthExtensionLoaded);
   AddCallback("completeAdAuthentication",
               &GaiaScreenHandler::HandleCompleteAdAuthentication);
+  AddCallback("completeAdPasswordChange",
+              &GaiaScreenHandler::HandleCompleteAdPasswordChange);
 }
 
 void GaiaScreenHandler::OnPortalDetectionCompleted(
     const NetworkState* network,
     const NetworkPortalDetector::CaptivePortalState& state) {
   VLOG(1) << "OnPortalDetectionCompleted "
           << NetworkPortalDetector::CaptivePortalStatusString(state.status);
 
   const NetworkPortalDetector::CaptivePortalStatus previous_status =
       captive_portal_status_;
@@ skipping 67 matching lines @@
                  << "' authenticated by alias '" << canonicalized_email << "'.";
   }
 
   return account_id;
 }
 
 void GaiaScreenHandler::DoAdAuth(const std::string& username,
                                  const Key& key,
                                  authpolicy::ErrorType error,
                                  const std::string& uid) {
-  if (error == authpolicy::ERROR_NONE && !uid.empty()) {
-    const AccountId account_id(
-        GetAccountId(username, uid, AccountType::ACTIVE_DIRECTORY));
-    UserContext user_context(account_id);
-    user_context.SetKey(key);
-    user_context.SetAuthFlow(UserContext::AUTH_FLOW_ACTIVE_DIRECTORY);
-    user_context.SetIsUsingOAuth(false);
-    user_context.SetUserType(
-        user_manager::UserType::USER_TYPE_ACTIVE_DIRECTORY);
-    Delegate()->CompleteLogin(user_context);
-  } else {
-    // TODO(rsorokin): Proper error handling.
-    DLOG(ERROR) << "Failed to auth " << username << ", code " << error;
-    LoadAuthExtension(true, false /* offline */);
+  switch (error) {
+    case authpolicy::ERROR_NONE: {
+      DCHECK(!uid.empty());
+      const AccountId account_id(
+          GetAccountId(username, uid, AccountType::ACTIVE_DIRECTORY));
+      UserContext user_context(account_id);
+      user_context.SetKey(key);
+      user_context.SetAuthFlow(UserContext::AUTH_FLOW_ACTIVE_DIRECTORY);
+      user_context.SetIsUsingOAuth(false);
+      user_context.SetUserType(
+          user_manager::UserType::USER_TYPE_ACTIVE_DIRECTORY);
+      Delegate()->CompleteLogin(user_context);
+      break;
+    }
+    case authpolicy::ERROR_PASSWORD_EXPIRED: {
+      core_oobe_actor_->ShowActiveDirectoryPasswordChangeScreen(username);
+      break;
+    }
+    default:

[michaelpg, 2017/01/11 22:09:15]

shouldn't default go at the end?

[Roman Sorokin (ftl), 2017/01/12 12:38:50]

Done.

+      // TODO(rsorokin): Proper error handling.
+      DLOG(WARNING) << "Unhandled error code: " << error;
+    case authpolicy::ERROR_UNKNOWN:
+    case authpolicy::ERROR_DBUS_FAILURE:
+    case authpolicy::ERROR_PARSE_UPN_FAILED:
+    case authpolicy::ERROR_BAD_USER_NAME:
+    case authpolicy::ERROR_BAD_PASSWORD:
+    case authpolicy::ERROR_CANNOT_RESOLVE_KDC:
+    case authpolicy::ERROR_KINIT_FAILED:
+    case authpolicy::ERROR_NET_FAILED:
+    case authpolicy::ERROR_SMBCLIENT_FAILED:
+    case authpolicy::ERROR_PARSE_FAILED:
+    case authpolicy::ERROR_PARSE_PREG_FAILED:
+    case authpolicy::ERROR_BAD_GPOS:
+    case authpolicy::ERROR_LOCAL_IO:
+    case authpolicy::ERROR_NOT_JOINED:
+    case authpolicy::ERROR_NOT_LOGGED_IN:
+    case authpolicy::ERROR_STORE_POLICY_FAILED:
+      LoadAuthExtension(true, false /* offline */);
   }
 }
 
 void GaiaScreenHandler::HandleCompleteAdAuthentication(
-    const std::string& user_name,
+    const std::string& username,
     const std::string& password) {
-  Delegate()->SetDisplayEmail(user_name);
-  set_populated_email(user_name);
+  Delegate()->SetDisplayEmail(username);
+  set_populated_email(username);
 
   login::GetPipeReadEnd(
       password,
       base::Bind(&GaiaScreenHandler::OnPasswordPipeReady,
-                 weak_factory_.GetWeakPtr(), user_name, Key(password)));
+                 weak_factory_.GetWeakPtr(), username, Key(password)));
 }
 
-void GaiaScreenHandler::OnPasswordPipeReady(const std::string& user_name,
+void GaiaScreenHandler::HandleCompleteAdPasswordChange(
+    const std::string& username,
+    const std::string& old_password,
+    const std::string& new_password,
+    const std::string& repeat_new_password) {
+  Delegate()->SetDisplayEmail(username);
+  set_populated_email(username);
+
+  login::GetPipeReadEnd(
+      old_password + "\n" + new_password + "\n" + repeat_new_password,
+      base::Bind(&GaiaScreenHandler::OnPasswordPipeReady,
+                 weak_factory_.GetWeakPtr(), username, Key(new_password)));
+}
+
+void GaiaScreenHandler::OnPasswordPipeReady(const std::string& username,
                                             const Key& key,
                                             base::ScopedFD password_fd) {
   DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
   if (!password_fd.is_valid()) {
     DLOG(ERROR) << "Got invalid password_fd";
     return;
   }
   chromeos::AuthPolicyClient* client =
       chromeos::DBusThreadManager::Get()->GetAuthPolicyClient();
   client->AuthenticateUser(
-      user_name, password_fd.get(),
+      username, password_fd.get(),
       base::Bind(&GaiaScreenHandler::DoAdAuth, weak_factory_.GetWeakPtr(),
-                 user_name, key));
+                 username, key));
 }
 
 void GaiaScreenHandler::HandleCompleteAuthentication(
     const std::string& gaia_id,
     const std::string& email,
     const std::string& password,
     const std::string& auth_code,
     bool using_saml,
     const std::string& gaps_cookie) {
   if (!Delegate())
@@ skipping 365 matching lines @@
 bool GaiaScreenHandler::IsRestrictiveProxy() const {
   return !disable_restrictive_proxy_check_for_test_ &&
          !IsOnline(captive_portal_status_);
 }
 
 void GaiaScreenHandler::DisableRestrictiveProxyCheckForTest() {
   disable_restrictive_proxy_check_for_test_ = true;
 }
 
 }  // namespace chromeos