Disconnect all users if too many connection requests are received for It2Me

remoting/protocol/authenticator.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_PROTOCOL_AUTHENTICATOR_H_
 #define REMOTING_PROTOCOL_AUTHENTICATOR_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 35 matching lines @@
   // When GetNextMessage() is called:
   //    MESSAGE_READY -> WAITING_MESSAGE
   //    MESSAGE_READY -> ACCEPTED
   enum State {
     // Waiting for the next message from the peer.
     WAITING_MESSAGE,
 
     // Next message is ready to be sent to the peer.
     MESSAGE_READY,
 
-    // Session is authenticated successufully.
+    // Session is authenticated successfully.
     ACCEPTED,
 
     // Session is rejected.
     REJECTED,
 
     // Asynchronously processing the last message from the peer.
     PROCESSING_MESSAGE,
   };
 
   enum RejectionReason {
+    // The account credentials were not valid (i.e. incorrect PIN).
     INVALID_CREDENTIALS,
+
+    // The client JID was not valid (i.e. violated a policy or was malformed).
     INVALID_ACCOUNT,
+
+    // Generic error used when something goes wrong establishing a session.
     PROTOCOL_ERROR,
+
+    // Session was rejected by the user (i.e. via the confirmation dialog).
     REJECTED_BY_USER,
+
+    // Multiple, valid connection requests were received for the same session.
+    TOO_MANY_CONNECTIONS,
   };
 
   // Callback used for layered Authenticator implementations, particularly
   // third-party and pairing authenticators. They use this callback to create
   // base SPAKE2 authenticators.
   typedef base::Callback<std::unique_ptr<Authenticator>(
       const std::string& shared_secret,
       Authenticator::State initial_state)>
       CreateBaseAuthenticatorCallback;
 
@@ skipping 46 matching lines @@
 // Factory for Authenticator instances.
 class AuthenticatorFactory {
  public:
   AuthenticatorFactory() {}
   virtual ~AuthenticatorFactory() {}
 
   // Called when session-initiate stanza is received to create
   // authenticator for the new session. |first_message| specifies
   // authentication part of the session-initiate stanza so that
   // appropriate type of Authenticator can be chosen for the session
-  // (useful when multiple authenticators is supported). Returns nullptr
+  // (useful when multiple authenticators are supported). Returns nullptr
   // if the |first_message| is invalid and the session should be
   // rejected. ProcessMessage() should be called with |first_message|
   // for the result of this method.
   virtual std::unique_ptr<Authenticator> CreateAuthenticator(
       const std::string& local_jid,
       const std::string& remote_jid) = 0;
 };
 
 }  // namespace protocol
 }  // namespace remoting
 
 #endif  // REMOTING_PROTOCOL_AUTHENTICATOR_H_