Disconnect all users if too many connection requests are received for It2Me

remoting/protocol/authenticator.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_PROTOCOL_AUTHENTICATOR_H_
 #define REMOTING_PROTOCOL_AUTHENTICATOR_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 35 matching lines @@
   // When GetNextMessage() is called:
   //    MESSAGE_READY -> WAITING_MESSAGE
   //    MESSAGE_READY -> ACCEPTED
   enum State {
     // Waiting for the next message from the peer.
     WAITING_MESSAGE,
 
     // Next message is ready to be sent to the peer.
     MESSAGE_READY,
 
-    // Session is authenticated successufully.
+    // Session is authenticated successfully.
     ACCEPTED,
 
     // Session is rejected.
     REJECTED,
 
     // Asynchronously processing the last message from the peer.
     PROCESSING_MESSAGE,
   };
 
   enum RejectionReason {
     INVALID_CREDENTIALS,
     INVALID_ACCOUNT,
     PROTOCOL_ERROR,
     REJECTED_BY_USER,
+    TOO_MANY_CONNECTIONS,

[Sergey Ulanov, 2017/03/15 22:25:33]

Maybe add comments for each rejection reason? They were not necessary when this
enum had just 2 values (INVALID_CREDENTIALS and PROTOCOL_ERROR), but that's not
the case anymore, and it's more ambiguous now.

[joedow, 2017/03/16 21:32:18]

Done.

   };
 
   // Callback used for layered Authenticator implementations, particularly
   // third-party and pairing authenticators. They use this callback to create
   // base SPAKE2 authenticators.
   typedef base::Callback<std::unique_ptr<Authenticator>(
       const std::string& shared_secret,
       Authenticator::State initial_state)>
       CreateBaseAuthenticatorCallback;
 
@@ skipping 46 matching lines @@
 // Factory for Authenticator instances.
 class AuthenticatorFactory {
  public:
   AuthenticatorFactory() {}
   virtual ~AuthenticatorFactory() {}
 
   // Called when session-initiate stanza is received to create
   // authenticator for the new session. |first_message| specifies
   // authentication part of the session-initiate stanza so that
   // appropriate type of Authenticator can be chosen for the session
-  // (useful when multiple authenticators is supported). Returns nullptr
+  // (useful when multiple authenticators are supported). Returns nullptr
   // if the |first_message| is invalid and the session should be
   // rejected. ProcessMessage() should be called with |first_message|
   // for the result of this method.
   virtual std::unique_ptr<Authenticator> CreateAuthenticator(
       const std::string& local_jid,
       const std::string& remote_jid) = 0;
 };
 
 }  // namespace protocol
 }  // namespace remoting
 
 #endif  // REMOTING_PROTOCOL_AUTHENTICATOR_H_