Add Digital Asset Links verification for postMessage API

chrome/browser/android/customtabs/origin_verifier.cc

Index: chrome/browser/android/customtabs/origin_verifier.cc
diff --git a/chrome/browser/android/customtabs/origin_verifier.cc b/chrome/browser/android/customtabs/origin_verifier.cc
new file mode 100644
index 0000000000000000000000000000000000000000..0a533b8de46344e598f10492bcd6e47f7aba7c7e
--- /dev/null
+++ b/chrome/browser/android/customtabs/origin_verifier.cc
@@ -0,0 +1,75 @@
+// Copyright (c) 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/android/customtabs/origin_verifier.h"
+
+#include "base/android/jni_android.h"
+#include "base/android/jni_string.h"
+#include "base/strings/string_number_conversions.h"
+#include "base/values.h"
+#include "chrome/browser/profiles/profile_manager.h"
+#include "jni/OriginVerifier_jni.h"
+
+using base::android::ConvertJavaStringToUTF16;
+using base::android::JavaParamRef;
+
+namespace customtabs {
+
+OriginVerifier::OriginVerifier(JNIEnv* env, jobject obj) {
+  jobject_.Reset(env, obj);
+  Profile* profile = ProfileManager::GetPrimaryUserProfile();
+  asset_link_handler_.reset(new digital_asset_links::DigitalAssetLinksHandler(
+      profile->GetRequestContext()));
+}
+
+OriginVerifier::~OriginVerifier() {}
+
+void OriginVerifier::VerifyOrigin(
+    JNIEnv* env,
+    const JavaParamRef<jobject>& obj,
+    const JavaParamRef<jstring>& j_package_name,
+    const base::android::JavaParamRef<jstring>& j_fingerprint,
+    const JavaParamRef<jstring>& j_origin) {
+  if (!j_package_name || !j_fingerprint || !j_origin)
+    return;
+  std::string package_name = ConvertJavaStringToUTF8(env, j_package_name);
+  std::string fingerprint = ConvertJavaStringToUTF8(env, j_fingerprint);
+  std::string origin = ConvertJavaStringToUTF8(env, j_origin);
+
+  asset_link_handler_.get()->CheckDigitalAssetLinkRelationship(
+      this, origin, package_name, fingerprint,
+      "delegate_permission/common.use_as_origin");
+}
+
+void OriginVerifier::OnRelationshipCheckComplete(
+    const base::DictionaryValue* response) {
+  JNIEnv* env = base::android::AttachCurrentThread();
+
+  if (!response) {

[Benoit L, 2017/03/31 15:38:42]

What about:

bool verified = false;

if (response) {
  response->GetBoolean(
        digital_asset_links::kDigitalAssetLinksCheckResponseKeyLinked,
&verified);
}
Java_OriginVerifier_originVerified(env, jobject_, verified);

[Yusuf, 2017/03/31 22:41:49]

Done.

+    Java_OriginVerifier_originVerified(env, jobject_, false);
+    return;
+  }
+  bool verified;
+  response->GetBoolean(
+      digital_asset_links::kDigitalAssetLinksCheckResponseKeyLinked, &verified);
+  Java_OriginVerifier_originVerified(env, jobject_, verified);
+}
+
+void OriginVerifier::Destroy(JNIEnv* env,
+                             const base::android::JavaRef<jobject>& obj) {
+  asset_link_handler_.reset();

[Benoit L, 2017/03/31 15:38:42]

since there is delete this below, this is unnecessary.

[Yusuf, 2017/03/31 22:41:49]

Done.

+  delete this;
+}
+
+static jlong Init(JNIEnv* env,
+                  const base::android::JavaParamRef<jobject>& obj) {
+  OriginVerifier* native_verifier = new OriginVerifier(env, obj);
+  return reinterpret_cast<intptr_t>(native_verifier);
+}
+
+bool RegisterOriginVerifier(JNIEnv* env) {
+  return RegisterNativesImpl(env);
+}
+
+}  // namespace customtabs