If force-sign-in policy is enabled, popup warning dialog before window closing if auth token becom…

chrome/browser/ui/views/profiles/forced_reauthentication_dialog.cc

+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/ui/views/profiles/forced_reauthentication_dialog.h"
+
+#include <memory>
+#include <string>
+#include <utility>
+
+#include "base/i18n/message_formatter.h"
+#include "base/strings/string16.h"
+#include "base/strings/utf_string_conversions.h"
+#include "chrome/browser/profiles/profile.h"
+#include "chrome/browser/ui/browser.h"
+#include "chrome/browser/ui/browser_list.h"
+#include "chrome/browser/ui/browser_window.h"
+#include "chrome/browser/ui/sync/profile_signin_confirmation_helper.h"
+#include "chrome/browser/ui/tabs/tab_strip_model.h"
+#include "chrome/browser/ui/views/frame/browser_view.h"
+#include "chrome/grit/chromium_strings.h"
+#include "chrome/grit/generated_resources.h"
+#include "components/constrained_window/constrained_window_views.h"
+#include "components/signin/core/browser/signin_manager.h"
+#include "ui/base/l10n/l10n_util.h"
+#include "ui/views/background.h"
+#include "ui/views/border.h"
+#include "ui/views/controls/styled_label.h"
+#include "ui/views/layout/grid_layout.h"
+#include "ui/views/layout/layout_constants.h"
+#include "ui/views/layout/layout_provider.h"
+#include "ui/views/view.h"
+#include "ui/views/window/dialog_client_view.h"
+
+namespace {
+
+// Refresh title of the dialog every second.
+constexpr int kRefreshTitleTimer = 1;
+
+// If browser windows are going to be closed soon, close browser window before
+// showing sign in dialog because there might not be enough time for user to
+// finish sign in.
+constexpr int kCloseDirectlyTimer = 60;
+
+void Signout(SigninManager* signin_manager) {
+  signin_manager->SignOut(
+      signin_metrics::AUTHENTICATION_FAILED_WITH_FORCE_SIGNIN,
+      signin_metrics::SignoutDelete::KEEPING);
+}
+
+bool IsMatchingBrowser(Browser* browser, Profile* profile) {
+  return browser->profile()->GetOriginalProfile() ==
+             profile->GetOriginalProfile() &&
+         !browser->tab_strip_model()->empty() &&
+         BrowserView::GetBrowserViewForBrowser(browser)->frame()->IsVisible();
+}
+
+// Find a browser that is assoicated with |profile| to show the dialog for
+// Sign out warning.
+Browser* FindBrowserWithProfile(Profile* profile) {
+  Browser* browser = BrowserList::GetInstance()->GetLastActive();
+  if (browser && IsMatchingBrowser(browser, profile))
+    return browser;
+  for (auto* browser : *BrowserList::GetInstance()) {
+    if (IsMatchingBrowser(browser, profile)) {
+      return browser;
+    }
+  }
+  return nullptr;
+}
+
+// PromptLabel overrides the default insets of StyledLabel.
+class PromptLabel : public views::StyledLabel {
+ public:
+  PromptLabel(const base::string16& text, views::StyledLabelListener* listener)
+      : views::StyledLabel(text, listener) {}
+
+  gfx::Insets GetInsets() const override {
+    return views::LayoutProvider::Get()->GetInsetsMetric(
+        views::INSETS_DIALOG_CONTENTS);
+  }
+};
+
+}  // namespace
+
+ForcedReauthenticationDialog::ForcedReauthenticationDialog(
+    Browser* browser,
+    SigninManager* signin_manager,
+    const base::TimeDelta& countdown_duration)
+    : browser_(browser),
+      signin_manager_(signin_manager),
+      desired_close_time_(base::TimeTicks::Now() + countdown_duration) {
+  constrained_window::CreateBrowserModalDialogViews(
+      this, browser->window()->GetNativeWindow())
+      ->Show();
+  browser->window()->FlashFrame(true);
+  browser->window()->Activate();
+}
+
+ForcedReauthenticationDialog::~ForcedReauthenticationDialog() {}
+
+// static
+ForcedReauthenticationDialog* ForcedReauthenticationDialog::ShowDialog(
+    Profile* profile,
+    SigninManager* signin_manager,
+    const base::TimeDelta& countdown_duration) {
+  Browser* browser = FindBrowserWithProfile(profile);
+  if (browser == nullptr) {  // If there is no browser, we can just sign
+                             // out profile directly.
+    Signout(signin_manager);
+    return nullptr;
+  }
+
+  return new ForcedReauthenticationDialog(browser, signin_manager,
+                                          countdown_duration);
+}
+
+bool ForcedReauthenticationDialog::Accept() {
+  if (GetTimeRemaining() < base::TimeDelta::FromSeconds(kCloseDirectlyTimer)) {
+    Signout(signin_manager_);
+  } else {
+    browser_->signin_view_controller()->ShowModalSignin(
+        profiles::BubbleViewMode::BUBBLE_VIEW_MODE_GAIA_REAUTH, browser_,
+        signin_metrics::AccessPoint::ACCESS_POINT_FORCE_SIGNIN_WARNING);
+  }
+  return true;
+}
+
+bool ForcedReauthenticationDialog::Cancel() {
+  return true;
+}
+
+void ForcedReauthenticationDialog::WindowClosing() {
+  refresh_timer_.Stop();
+}
+
+base::string16 ForcedReauthenticationDialog::GetWindowTitle() const {
+  base::TimeDelta time_left = GetTimeRemaining();
+  return base::i18n::MessageFormatter::FormatWithNumberedArgs(
+      l10n_util::GetStringUTF16(IDS_ENTERPRISE_FORCE_SIGNOUT_TITLE),
+      time_left.InMinutes(), time_left.InSeconds() % 60);
+}
+
+base::string16 ForcedReauthenticationDialog::GetDialogButtonLabel(
+    ui::DialogButton button) const {
+  if (button == ui::DIALOG_BUTTON_OK) {
+    return l10n_util::GetStringUTF16(
+        IDS_ENTERPRISE_FORCE_SIGNOUT_CLOSE_CONFIRM);
+  }
+  return l10n_util::GetStringUTF16(IDS_ENTERPRISE_FORCE_SIGNOUT_CLOSE_DELAY);
+}
+
+ui::ModalType ForcedReauthenticationDialog::GetModalType() const {
+  return ui::MODAL_TYPE_WINDOW;
+}
+
+void ForcedReauthenticationDialog::AddedToWidget() {
+  const SkColor prompt_bar_background_color =
+      GetSigninConfirmationPromptBarColor(
+          GetNativeTheme(), ui::kSigninConfirmationPromptBarBackgroundAlpha);
+  // Create the prompt label.
+  size_t offset;
+  std::string email = signin_manager_->GetAuthenticatedAccountInfo().email;
+  const base::string16 domain =
+      base::ASCIIToUTF16(gaia::ExtractDomainName(email));
+  const base::string16 prompt_text =
+      l10n_util::GetStringFUTF16(IDS_ENTERPRISE_SIGNIN_ALERT, domain, &offset);
+
+  // Create the prompt label.
+  PromptLabel* prompt_label = new PromptLabel(prompt_text, nullptr);
+  prompt_label->SetDisplayedOnBackgroundColor(prompt_bar_background_color);
+
+  views::StyledLabel::RangeStyleInfo bold_style;
+  bold_style.weight = gfx::Font::Weight::BOLD;
+  prompt_label->AddStyleRange(gfx::Range(offset, offset + domain.size()),
+                              bold_style);
+
+  prompt_label->SetBorder(views::CreateSolidSidedBorder(
+      1, 0, 1, 0,
+      ui::GetSigninConfirmationPromptBarColor(
+          GetNativeTheme(), ui::kSigninConfirmationPromptBarBorderAlpha)));
+  prompt_label->SetBackground(
+      views::CreateSolidBackground(prompt_bar_background_color));
+
+  // Create the explanation label.
+  base::string16 signin_explanation_text;
+  base::string16 close_warning;
+  close_warning = l10n_util::GetStringUTF16(
+      IDS_ENTERPRISE_FORCE_SIGNOUT_ADDITIONAL_EXPLANATION);
+  if (email.empty()) {
+    signin_explanation_text = l10n_util::GetStringFUTF16(
+        IDS_ENTERPRISE_FORCE_SIGNOUT_EXPLANATION_WITHOUT_USER_NAME,
+        close_warning);
+  } else {
+    signin_explanation_text =
+        l10n_util::GetStringFUTF16(IDS_ENTERPRISE_FORCE_SIGNOUT_EXPLANATION,
+                                   base::ASCIIToUTF16(email), close_warning);
+  }
+  views::StyledLabel* explanation_label =
+      new views::StyledLabel(signin_explanation_text, nullptr);
+
+  // Layout the components.
+  const gfx::Insets panel_insets =
+      views::LayoutProvider::Get()->GetInsetsMetric(
+          views::INSETS_DIALOG_CONTENTS);
+  SetBorder(views::CreateEmptyBorder(panel_insets.top(), 0,
+                                     panel_insets.bottom(), 0));
+  views::GridLayout* dialog_layout = new views::GridLayout(this);
+  SetLayoutManager(dialog_layout);
+
+  // Use a column set with no padding.
+  dialog_layout->AddColumnSet(0)->AddColumn(views::GridLayout::FILL,
+                                            views::GridLayout::FILL, 100,
+                                            views::GridLayout::USE_PREF, 0, 0);
+  dialog_layout->StartRow(0, 0);
+  dialog_layout->AddView(prompt_label, 1, 1, views::GridLayout::FILL,
+                         views::GridLayout::FILL, 0, 0);
+
+  // Use a new column set for the explanation label so we can add padding.
+  dialog_layout->AddPaddingRow(0.0, views::kPanelVertMargin);
+  views::ColumnSet* explanation_columns = dialog_layout->AddColumnSet(1);
+  explanation_columns->AddPaddingColumn(0.0, views::kButtonHEdgeMarginNew);
+  explanation_columns->AddColumn(views::GridLayout::FILL,
+                                 views::GridLayout::FILL, 100,
+                                 views::GridLayout::USE_PREF, 0, 0);
+  explanation_columns->AddPaddingColumn(0.0, views::kButtonHEdgeMarginNew);
+  dialog_layout->StartRow(0, 1);
+  const int kPreferredWidth = 440;
+  dialog_layout->AddView(explanation_label, 1, 1, views::GridLayout::FILL,
+                         views::GridLayout::FILL, kPreferredWidth,
+                         explanation_label->GetHeightForWidth(kPreferredWidth));
+  refresh_timer_.Start(FROM_HERE,
+                       base::TimeDelta::FromSeconds(kRefreshTitleTimer), this,
+                       &ForcedReauthenticationDialog::OnCountDown);
+}
+
+void ForcedReauthenticationDialog::OnCountDown() {
+  if (desired_close_time_ <= base::TimeTicks::Now()) {
+    Cancel();
+    GetWidget()->Close();
+  }
+  GetWidget()->UpdateWindowTitle();
+}
+
+base::TimeDelta ForcedReauthenticationDialog::GetTimeRemaining() const {
+  base::TimeTicks now = base::TimeTicks::Now();
+  if (desired_close_time_ <= now)
+    return base::TimeDelta();
+  return desired_close_time_ - now;
+}