Network traffic annotation added to google_apis/gaia.

google_apis/gaia/oauth2_access_token_fetcher_impl.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "google_apis/gaia/oauth2_access_token_fetcher_impl.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
 #include "base/json/json_reader.h"
 #include "base/metrics/histogram.h"
 #include "base/metrics/histogram_macros.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "base/time/time.h"
 #include "base/values.h"
 #include "google_apis/gaia/gaia_auth_util.h"
 #include "google_apis/gaia/gaia_urls.h"
 #include "google_apis/gaia/google_service_auth_error.h"
 #include "net/base/escape.h"
 #include "net/base/load_flags.h"
 #include "net/http/http_status_code.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "net/url_request/url_fetcher.h"
 #include "net/url_request/url_request_context_getter.h"
 #include "net/url_request/url_request_status.h"
 
 using net::URLFetcher;
 using net::URLFetcherDelegate;
 using net::URLRequestContextGetter;
 using net::URLRequestStatus;
 
 namespace {
@@ skipping 55 matching lines @@
     return GoogleServiceAuthError::FromConnectionError(status.error());
   }
 }
 
 static std::unique_ptr<URLFetcher> CreateFetcher(
     URLRequestContextGetter* getter,
     const GURL& url,
     const std::string& body,
     URLFetcherDelegate* delegate) {
   bool empty_body = body.empty();
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("oauth2_access_token_fetcher", R"(
+        semantics {
+          sender: "OAuth2 Access Token Fetcher"

[msarda, 2017/05/22 11:49:36]

Here and below:
s/OAuth2/Oauth 2.0

[Ramin Halavati, 2017/05/22 12:42:17]

Done.

+          description:
+            "This request is used by the Token Service to fetch an OAuth2 "
+            "access token for a known Google account."
+          trigger:
+            "This request can be triggered at any moment when any service "
+            "requests an OAuth2 access token from the Token Service."
+          data:
+            "Chrome OAuth2 client id and secret, the set of OAuth2 scopes and "
+            "the OAuth2 refresh token."
+          destination: GOOGLE_OWNED_SERVICE
+        }
+        policy {
+          cookies_allowed: false
+          setting: "This feature cannot be disabled in settings."
+          policy_exception_justification:
+            "Not implemented. Disabling Oauth2 Access Token Fetcher would "

[msarda, 2017/05/22 11:49:36]

Not sure about this policy statement. See comment in the other file.

[msarda, 2017/05/22 11:49:36]

s/Oauth2/OAuth 2.0

[Ramin Halavati, 2017/05/22 12:42:17]

Done.

+            "break features need access tokens (e.g. sync, chrome identity "
+            "API, etc)."
+        })");
   std::unique_ptr<URLFetcher> result = net::URLFetcher::Create(
-      0, url, empty_body ? URLFetcher::GET : URLFetcher::POST, delegate);
+      0, url, empty_body ? URLFetcher::GET : URLFetcher::POST, delegate,
+      traffic_annotation);
 
   gaia::MarkURLFetcherAsGaia(result.get());
   result->SetRequestContext(getter);
   result->SetLoadFlags(net::LOAD_DO_NOT_SEND_COOKIES |
                        net::LOAD_DO_NOT_SAVE_COOKIES);
   // Fetchers are sometimes cancelled because a network change was detected,
   // especially at startup and after sign-in on ChromeOS. Retrying once should
   // be enough in those cases; let the fetcher retry up to 3 times just in case.
   // http://crbug.com/163710
   result->SetAutomaticallyRetryOnNetworkChanges(3);
@@ skipping 203 matching lines @@
 bool OAuth2AccessTokenFetcherImpl::ParseGetAccessTokenFailureResponse(
     const net::URLFetcher* source,
     std::string* error) {
   CHECK(error);
   std::unique_ptr<base::DictionaryValue> value =
       ParseGetAccessTokenResponse(source);
   if (value.get() == NULL)
     return false;
   return value->GetString(kErrorKey, error);
 }