Network traffic annotation added to supervised users.

chrome/browser/supervised_user/child_accounts/family_info_fetcher.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/supervised_user/child_accounts/family_info_fetcher.h"
 
 #include <stddef.h>
 
 #include "base/json/json_reader.h"
 #include "base/macros.h"
 #include "base/strings/stringprintf.h"
 #include "base/values.h"
 #include "chrome/browser/supervised_user/child_accounts/kids_management_api.h"
 #include "components/data_use_measurement/core/data_use_user_data.h"
 #include "net/base/load_flags.h"
 #include "net/http/http_status_code.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "net/url_request/url_request_status.h"
 #include "url/gurl.h"
 
 const char kGetFamilyProfileApiPath[] = "families/mine?alt=json";
 const char kGetFamilyMembersApiPath[] = "families/mine/members?alt=json";
 const char kScope[] = "https://www.googleapis.com/auth/kid.family.readonly";
 const char kAuthorizationHeaderFormat[] = "Authorization: Bearer %s";
 const int kNumRetries = 1;
 
 const char kIdFamily[] = "family";
@@ skipping 137 matching lines @@
 
 void FamilyInfoFetcher::OnGetTokenSuccess(
     const OAuth2TokenService::Request* request,
     const std::string& access_token,
     const base::Time& expiration_time) {
   DCHECK_EQ(access_token_request_.get(), request);
   access_token_ = access_token;
 
   GURL url = kids_management_api::GetURL(request_path_);
   const int id = 0;
-  url_fetcher_ = net::URLFetcher::Create(id, url, net::URLFetcher::GET, this);
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("...", R"(

[Bernhard Bauer, 2017/03/14 10:02:48]

family_info

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+        semantics {
+          sender: "..."

[Bernhard Bauer, 2017/03/14 10:02:48]

supervised_users

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          description: "..."

[Bernhard Bauer, 2017/03/14 10:02:47]

Fetches information about the user's family group from the Google Family API.

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          trigger: "..."

[Bernhard Bauer, 2017/03/14 10:02:48]

Triggered in regular intervals to update profile information.

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          data: "..."

[Bernhard Bauer, 2017/03/14 10:02:47]

The request is authenticated with an OAuth2 access token identifying the Google
account. No other information is sent.

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          destination: WEBSITE/GOOGLE_OWNED_SERVICE/OTHER

[Bernhard Bauer, 2017/03/14 10:02:47]

GOOGLE_OWNED_SERVICE

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+        }
+        policy {
+          cookies_allowed: false/true

[Bernhard Bauer, 2017/03/14 10:02:47]

false

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          cookies_store: "..."

[Bernhard Bauer, 2017/03/14 10:02:48]

user

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          setting: "..."

[Bernhard Bauer, 2017/03/14 10:02:48]

This feature is only enabled for child accounts. If sign-in is restricted to
accounts from a managed domain, those accounts are not going to be child
accounts.

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+          chrome_policy {
+            [POLICY_NAME] {

[Bernhard Bauer, 2017/03/14 10:02:48]

RestrictSigninToPattern

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+              policy_options {mode: MANDATORY/RECOMMENDED/UNSET}

[Bernhard Bauer, 2017/03/14 10:02:48]

MANDATORY

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+              [POLICY_NAME]: ... //(value to disable it)

[Bernhard Bauer, 2017/03/14 10:02:48]

"*@manageddomain.com"

[Ramin Halavati, 2017/03/14 10:56:19]

Done.

+            }
+          }
+          policy_exception_justification: "..."
+        })");
+  url_fetcher_ = net::URLFetcher::Create(id, url, net::URLFetcher::GET, this,
+                                         traffic_annotation);
 
   data_use_measurement::DataUseUserData::AttachToFetcher(
       url_fetcher_.get(),
       data_use_measurement::DataUseUserData::SUPERVISED_USER);
   url_fetcher_->SetRequestContext(request_context_);
   url_fetcher_->SetLoadFlags(net::LOAD_DO_NOT_SEND_COOKIES |
                              net::LOAD_DO_NOT_SAVE_COOKIES);
   url_fetcher_->SetAutomaticallyRetryOnNetworkChanges(kNumRetries);
   url_fetcher_->AddExtraRequestHeader(
       base::StringPrintf(kAuthorizationHeaderFormat, access_token.c_str()));
@@ skipping 132 matching lines @@
     consumer_->OnFailure(SERVICE_ERROR);
     return;
   }
   std::vector<FamilyMember> members;
   if (!ParseMembers(members_list, &members)){
     consumer_->OnFailure(SERVICE_ERROR);
     return;
   }
   consumer_->OnGetFamilyMembersSuccess(members);
 }