Network traffic annotation added to supervised users.

chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc

Index: chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc
diff --git a/chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc b/chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc
index 153fc80249e738ff1a8407c847af5867cf7446f7..ff412f99b644ff6844e597bcb78ba6b108a3d609 100644
--- a/chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc
+++ b/chrome/browser/supervised_user/legacy/supervised_user_refresh_token_fetcher.cc
@@ -20,6 +20,7 @@
 #include "net/base/load_flags.h"
 #include "net/base/net_errors.h"
 #include "net/http/http_status_code.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "net/url_request/url_fetcher.h"
 #include "net/url_request/url_request_status.h"
 
@@ -161,7 +162,29 @@ void SupervisedUserRefreshTokenFetcherImpl::OnGetTokenSuccess(
   // unit tests.
   const int id = 1;
 
-  url_fetcher_ = URLFetcher::Create(id, url, URLFetcher::POST, this);
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("...", R"(

[Bernhard Bauer, 2017/03/14 10:02:50]

supervised_user_refresh_token_fetcher

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+        semantics {
+          sender: "..."

[Bernhard Bauer, 2017/03/14 10:02:50]

supervised_users

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          description: "..."

[Bernhard Bauer, 2017/03/14 10:02:50]

Fetches an OAuth2 refresh token scoped down to the supervised user Sync scope
and tied to the given Supervised User ID, identifying the Supervised User
Profile to be created.

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          trigger: "..."

[Bernhard Bauer, 2017/03/14 10:02:50]

Called when creating a new Supervised User profile in Chrome to fetch OAuth
credentials for using Sync with new profile.

[Ramin Halavati, 2017/03/14 10:56:20]

Done.

+          data: "..."

[Bernhard Bauer, 2017/03/14 10:02:51]

The request is authenticated with an OAuth2 access token identifying the Google
account and contains the following information:
* The Supervised User ID, a randomly generated 64-bit identifier for the profile
* The device name, to identify the refresh token in account management

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          destination: WEBSITE/GOOGLE_OWNED_SERVICE/OTHER

[Bernhard Bauer, 2017/03/14 10:02:50]

GOOGLE_OWNED_SERVICE

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+        }
+        policy {
+          cookies_allowed: false/true

[Bernhard Bauer, 2017/03/14 10:02:50]

false

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          cookies_store: "..."

[Bernhard Bauer, 2017/03/14 10:02:50]

user

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          setting: "..."

[Bernhard Bauer, 2017/03/14 10:02:50]

Adding new users from the user manager can be disabled in chrome://settings/.

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+          chrome_policy {
+            [POLICY_NAME] {

[Bernhard Bauer, 2017/03/14 10:02:50]

SupervisedUserCreationEnabled

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+              policy_options {mode: MANDATORY/RECOMMENDED/UNSET}

[Bernhard Bauer, 2017/03/14 10:02:50]

MANDATORY

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+              [POLICY_NAME]: ... //(value to disable it)

[Bernhard Bauer, 2017/03/14 10:02:50]

false

[Ramin Halavati, 2017/03/14 10:56:21]

Done.

+            }
+          }
+          policy_exception_justification: "..."
+        })");
+  url_fetcher_ =
+      URLFetcher::Create(id, url, URLFetcher::POST, this, traffic_annotation);
 
   data_use_measurement::DataUseUserData::AttachToFetcher(
       url_fetcher_.get(),