Add Digital Asset Links verification for postMessage API

chrome/browser/android/customtabs/origin_verifier.cc

Index: chrome/browser/android/customtabs/origin_verifier.cc
diff --git a/chrome/browser/android/customtabs/origin_verifier.cc b/chrome/browser/android/customtabs/origin_verifier.cc
new file mode 100644
index 0000000000000000000000000000000000000000..47b79ea4e2cec430df6153042ee1f0b5ed3953a1
--- /dev/null
+++ b/chrome/browser/android/customtabs/origin_verifier.cc
@@ -0,0 +1,91 @@
+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/android/customtabs/origin_verifier.h"
+
+#include "base/android/jni_android.h"
+#include "base/android/jni_string.h"
+#include "base/values.h"
+#include "chrome/browser/android/digital_asset_links/digital_asset_links_handler.h"
+#include "chrome/browser/browser_process.h"
+#include "chrome/browser/profiles/profile_android.h"
+#include "chrome/browser/profiles/profile_manager.h"
+#include "content/public/browser/browser_thread.h"
+#include "jni/OriginVerifier_jni.h"
+
+using base::android::ConvertJavaStringToUTF16;
+using base::android::JavaParamRef;
+
+namespace customtabs {
+
+OriginVerifier::OriginVerifier(JNIEnv* env, jobject obj, jobject jprofile) {
+  jobject_.Reset(env, obj);
+  Profile* profile = ProfileAndroid::FromProfileAndroid(jprofile);
+  DCHECK(profile);
+  asset_link_handler_ =
+      base::MakeUnique<digital_asset_links::DigitalAssetLinksHandler>(
+          profile->GetRequestContext());
+}
+
+OriginVerifier::~OriginVerifier() {}
+
+void OriginVerifier::VerifyOrigin(JNIEnv* env,
+                                  const JavaParamRef<jobject>& obj,
+                                  const JavaParamRef<jstring>& j_package_name,
+                                  const JavaParamRef<jstring>& j_fingerprint,
+                                  const JavaParamRef<jstring>& j_origin) {
+  if (!j_package_name || !j_fingerprint || !j_origin)
+    return;
+
+  std::string package_name = ConvertJavaStringToUTF8(env, j_package_name);
+  std::string fingerprint = ConvertJavaStringToUTF8(env, j_fingerprint);
+  std::string origin = ConvertJavaStringToUTF8(env, j_origin);
+
+  // Multiple calls here will end up resetting the callback on the handler side
+  // and cancelling previous requests.
+  // If during the request this verifier gets killed, the handler and the
+  // UrlFetcher making the request will also get killed, so we won't get any
+  // dangling callback reference issues.
+  DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
+  asset_link_handler_->CheckDigitalAssetLinkRelationship(

[nyquist, 2017/04/27 04:38:25]

DigitalAssetLinksHandler::CheckDigitalAssetLinkRelationship returns a bool
return value. I think that probably should imply that you want to post a failing
callback back to Java? Because when it returns null, the
DigitalAssetLinksHandler doesn't post anything.

I was just thinking something along the lines of:
base::ThreadTaskRunnerHandle::Get()->PostTask(
        FROM_HERE, base::Bind(.... something like below ...));

One note though, is it safe to use base::Unretained(this) for that case? I mean
in case this gets destroyed while that callback is pending.

So I guess what I'm saying is that it's probably easier to return false from
this nativeVerifyOrigin method, and then do the callback from Java instead,
since you already do that for when it's cached (except of course with |false|
this time :-p ). I think that's definitely the easiest.

Or, if you're not going to check it, maybe make it void?

[Yusuf, 2017/04/27 18:31:06]

Done.

+      base::Bind(&customtabs::OriginVerifier::OnRelationshipCheckComplete,
+                 base::Unretained(this)),
+      origin, package_name, fingerprint,
+      "delegate_permission/common.use_as_origin");
+}
+
+void OriginVerifier::OnRelationshipCheckComplete(
+    std::unique_ptr<base::DictionaryValue> response) {
+  JNIEnv* env = base::android::AttachCurrentThread();
+
+  bool verified = false;
+
+  if (response) {
+    response->GetBoolean(
+        digital_asset_links::kDigitalAssetLinksCheckResponseKeyLinked,
+        &verified);
+  }
+  Java_OriginVerifier_originVerified(env, jobject_, verified);
+}
+
+void OriginVerifier::Destroy(JNIEnv* env,
+                             const base::android::JavaRef<jobject>& obj) {
+  delete this;
+}
+
+static jlong Init(JNIEnv* env,
+                  const base::android::JavaParamRef<jobject>& obj,
+                  const base::android::JavaParamRef<jobject>& jprofile) {
+  if (!g_browser_process)
+    return 0;
+
+  OriginVerifier* native_verifier = new OriginVerifier(env, obj, jprofile);
+  return reinterpret_cast<intptr_t>(native_verifier);
+}
+
+bool RegisterOriginVerifier(JNIEnv* env) {
+  return RegisterNativesImpl(env);
+}
+
+}  // namespace customtabs