Add Digital Asset Links verification for postMessage API

chrome/browser/android/customtabs/origin_verifier.cc

Index: chrome/browser/android/customtabs/origin_verifier.cc
diff --git a/chrome/browser/android/customtabs/origin_verifier.cc b/chrome/browser/android/customtabs/origin_verifier.cc
new file mode 100644
index 0000000000000000000000000000000000000000..54d64cc020d67a749a6719c49ba343abe71ab5e7
--- /dev/null
+++ b/chrome/browser/android/customtabs/origin_verifier.cc
@@ -0,0 +1,82 @@
+// Copyright (c) 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/android/customtabs/origin_verifier.h"
+
+#include "base/android/jni_android.h"
+#include "base/android/jni_string.h"
+#include "base/strings/string_number_conversions.h"
+#include "base/values.h"
+#include "chrome/browser/browser_process.h"
+#include "chrome/browser/profiles/profile_manager.h"
+#include "jni/OriginVerifier_jni.h"
+
+using base::android::ConvertJavaStringToUTF16;
+using base::android::JavaParamRef;
+
+namespace customtabs {
+
+OriginVerifier::OriginVerifier(JNIEnv* env, jobject obj) {
+  jobject_.Reset(env, obj);
+  Profile* profile = ProfileManager::GetLastUsedProfile()->GetOriginalProfile();
+  DCHECK(profile);
+  asset_link_handler_ =
+      base::MakeUnique<digital_asset_links::DigitalAssetLinksHandler>(
+          profile->GetRequestContext());
+}
+
+OriginVerifier::~OriginVerifier() {}
+
+void OriginVerifier::VerifyOrigin(
+    JNIEnv* env,
+    const JavaParamRef<jobject>& obj,
+    const JavaParamRef<jstring>& j_package_name,
+    const base::android::JavaParamRef<jstring>& j_fingerprint,
+    const JavaParamRef<jstring>& j_origin) {
+  if (!j_package_name || !j_fingerprint || !j_origin)
+    return;
+  std::string package_name = ConvertJavaStringToUTF8(env, j_package_name);
+  std::string fingerprint = ConvertJavaStringToUTF8(env, j_fingerprint);
+  std::string origin = ConvertJavaStringToUTF8(env, j_origin);
+
+  digital_asset_links ::RelationshipCheckResultCallback callback(

[Benoit L, 2017/04/07 15:04:54]

nit: extra " "

[Yusuf, 2017/04/07 23:38:41]

Done.

+      base::Bind(&customtabs::OriginVerifier::OnRelationshipCheckComplete,
+                 base::Unretained(this)));
+  asset_link_handler_->CheckDigitalAssetLinkRelationship(
+      callback, origin, package_name, fingerprint,

[Benoit L, 2017/04/07 15:04:54]

nit: Can you inline the base::Bind() call here?
That's one less copy.

[Yusuf, 2017/04/07 23:38:41]

Done.

+      "delegate_permission/common.use_as_origin");
+}
+
+void OriginVerifier::OnRelationshipCheckComplete(
+    std::unique_ptr<base::DictionaryValue> response) {
+  JNIEnv* env = base::android::AttachCurrentThread();
+
+  bool verified = false;
+
+  if (response) {
+    response->GetBoolean(
+        digital_asset_links::kDigitalAssetLinksCheckResponseKeyLinked,
+        &verified);
+  }
+  Java_OriginVerifier_originVerified(env, jobject_, verified);
+}
+
+void OriginVerifier::Destroy(JNIEnv* env,
+                             const base::android::JavaRef<jobject>& obj) {
+  delete this;
+}
+
+static jlong Init(JNIEnv* env,
+                  const base::android::JavaParamRef<jobject>& obj) {
+  if (!g_browser_process)
+    return 0;
+  OriginVerifier* native_verifier = new OriginVerifier(env, obj);
+  return reinterpret_cast<intptr_t>(native_verifier);
+}
+
+bool RegisterOriginVerifier(JNIEnv* env) {
+  return RegisterNativesImpl(env);
+}
+
+}  // namespace customtabs