Add Digital Asset Links verification for postMessage API

chrome/android/javatests/src/org/chromium/chrome/browser/customtabs/ClientManagerTest.java

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package org.chromium.chrome.browser.customtabs;
 
 import android.content.Context;
+import android.net.Uri;
 import android.os.Process;
 import android.support.customtabs.CustomTabsSessionToken;
 import android.support.test.InstrumentationRegistry;
 import android.support.test.filters.SmallTest;
 
 import org.junit.Assert;
 import org.junit.Before;
 import org.junit.Rule;
 import org.junit.Test;
 import org.junit.runner.RunWith;
 
+import org.chromium.base.ContextUtils;
 import org.chromium.base.metrics.RecordHistogram;
 import org.chromium.base.test.BaseJUnit4ClassRunner;
 import org.chromium.base.test.util.MetricsUtils;
 import org.chromium.base.test.util.RetryOnFailure;
+import org.chromium.chrome.browser.IntentHandler;
 import org.chromium.content.browser.test.NativeLibraryTestRule;
+import org.chromium.content.browser.test.util.Criteria;
+import org.chromium.content.browser.test.util.CriteriaHelper;
 
 /** Tests for ClientManager. */
 @RunWith(BaseJUnit4ClassRunner.class)
 public class ClientManagerTest {
     @Rule
     public NativeLibraryTestRule mActivityTestRule = new NativeLibraryTestRule();
 
     private static final String URL = "https://www.android.com";
     private ClientManager mClientManager;
     private CustomTabsSessionToken mSession =
@@ skipping 113 matching lines @@
         Assert.assertTrue(mClientManager.newSession(mSession, mUid, null, null));
         Assert.assertTrue(
                 mClientManager.updateStatsAndReturnWhetherAllowed(mSession, mUid, URL, false));
         mClientManager.setIgnoreFragmentsForSession(mSession, true);
         Assert.assertEquals(ClientManager.GOOD_PREDICTION,
                 mClientManager.getPredictionOutcome(mSession, URL + "#fragment"));
     }
 
     @Test
     @SmallTest
+    public void testPostMessageOriginVerification() {
+        Assert.assertTrue(
+                mClientManager.newSession(mSession, mUid, null, new PostMessageHandler(mSession)));
+        // Should always start with no origin.
+        Assert.assertNull(mClientManager.getPostMessageOriginForSessionForTesting(mSession));
+
+        // With no prepopulated origins, this verification should fail.
+        mClientManager.verifyAndInitializeWithPostMessageOriginForSession(mSession, Uri.parse(URL));
+        Assert.assertNull(mClientManager.getPostMessageOriginForSessionForTesting(mSession));
+
+        // If there is a prepopulated origin, we should get a synchronous verification.
+        OriginVerifier.prePopulateVerifiedOriginForTesting(
+                ContextUtils.getApplicationContext().getPackageName(), Uri.parse(URL));
+        mClientManager.verifyAndInitializeWithPostMessageOriginForSession(mSession, Uri.parse(URL));
+        CriteriaHelper.pollUiThread(new Criteria() {
+            @Override
+            public boolean isSatisfied() {
+                return mClientManager.getPostMessageOriginForSessionForTesting(mSession) != null;
+            }
+        });
+        Uri verifiedOrigin = mClientManager.getPostMessageOriginForSessionForTesting(mSession);
+        Assert.assertEquals(IntentHandler.ANDROID_APP_REFERRER_SCHEME, verifiedOrigin.getScheme());
+
+        // initializeWithPostMessageOriginForSession should override without checking origin.
+        mClientManager.initializeWithPostMessageOriginForSession(mSession, null);
+        Assert.assertNull(mClientManager.getPostMessageOriginForSessionForTesting(mSession));
+    }
+
+    @Test
+    @SmallTest
     public void testFirstLowConfidencePredictionIsNotThrottled() {
         Context context = InstrumentationRegistry.getInstrumentation()
                                   .getTargetContext()
                                   .getApplicationContext();
         Assert.assertTrue(mClientManager.newSession(mSession, mUid, null, null));
 
         // Two low confidence in a row is OK.
         Assert.assertTrue(
                 mClientManager.updateStatsAndReturnWhetherAllowed(mSession, mUid, null, true));
         Assert.assertTrue(
@@ skipping 65 matching lines @@
 
         // Low and High confidence, same call.
         RequestThrottler.purgeAllEntriesForTesting(context);
         bothDelta = new MetricsUtils.HistogramDelta(name, ClientManager.BOTH);
         Assert.assertTrue(
                 mClientManager.updateStatsAndReturnWhetherAllowed(mSession, mUid, URL, true));
         mClientManager.registerLaunch(mSession, URL);
         Assert.assertEquals(1, bothDelta.getDelta());
     }
 }