[Mac] Add option to reauthenticate the OS user before revealing passwords.

chrome/browser/ui/webui/options/password_manager_handler.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/options/password_manager_handler.h"
 
 #include "base/bind.h"
+#include "base/command_line.h"
 #include "base/prefs/pref_service.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/utf_string_conversions.h"
+#include "base/time/time.h"
 #include "base/values.h"
 #include "chrome/browser/chrome_notification_types.h"
+#include "chrome/browser/password_manager/password_manager_util.h"
 #include "chrome/browser/password_manager/password_store_factory.h"
 #include "chrome/browser/profiles/profile.h"
+#include "chrome/common/chrome_switches.h"
 #include "chrome/common/pref_names.h"
 #include "chrome/common/url_constants.h"
 #include "components/autofill/core/common/password_form.h"
 #include "content/public/browser/notification_details.h"
 #include "content/public/browser/notification_source.h"
 #include "content/public/browser/user_metrics.h"
 #include "content/public/browser/web_ui.h"
 #include "grit/chromium_strings.h"
 #include "grit/generated_resources.h"
 #include "net/base/net_util.h"
 #include "ui/base/l10n/l10n_util.h"
 
 namespace options {
 
 PasswordManagerHandler::PasswordManagerHandler()
     : populater_(this),
-      exception_populater_(this),
-      is_user_authenticated_(false) {
+      exception_populater_(this) {
+  require_reauthentication_ = CommandLine::ForCurrentProcess()->HasSwitch(
+      switches::kEnablePasswordManagerReauthentication);
 }
 
 PasswordManagerHandler::~PasswordManagerHandler() {
   PasswordStore* store = GetPasswordStore();
   if (store)
     store->RemoveObserver(this);
 }
 
 void PasswordManagerHandler::GetLocalizedValues(
     DictionaryValue* localized_strings) {
@@ skipping 107 matching lines @@
   }
 }
 
 void PasswordManagerHandler::RequestShowPassword(const ListValue* args) {
   int index;
   if (!ExtractIntegerValue(args, &index)) {
     NOTREACHED();
     return;
   }
 
-  if (!is_user_authenticated_) {
-    // TODO(dubroy): Insert actual authentication code here.
-    is_user_authenticated_ = true;
+  if (IsAuthenticationRequired()) {
+    if (password_manager_util::AuthenticateUser())
+      last_authentication_time_ = base::TimeTicks::Now();
+    else
+      return;
   }
 
   // Call back the front end to reveal the password.
   web_ui()->CallJavascriptFunction(
       "PasswordManager.showPassword",
       base::FundamentalValue(index),
       StringValue(password_list_[index]->password_value));
 }
 
 void PasswordManagerHandler::SetPasswordList() {
   // Due to the way that handlers are (re)initialized under certain types of
   // navigation, we may not be initialized yet. (See bugs 88986 and 86448.)
   // If this is the case, initialize on demand. This is a hack.
   // TODO(mdm): remove this hack once it is no longer necessary.
   if (show_passwords_.GetPrefName().empty())
     InitializeHandler();
 
   ListValue entries;
-  bool show_passwords = *show_passwords_ && is_user_authenticated_;
+  bool show_passwords = *show_passwords_ && !require_reauthentication_;
   string16 placeholder(ASCIIToUTF16("        "));
   for (size_t i = 0; i < password_list_.size(); ++i) {
     ListValue* entry = new ListValue();
     entry->Append(new StringValue(net::FormatUrl(password_list_[i]->origin,
                                                  languages_)));
     entry->Append(new StringValue(password_list_[i]->username_value));
     if (show_passwords) {
       entry->Append(new StringValue(password_list_[i]->password_value));
     } else {
       // Use a placeholder value with the same length as the password.
@@ skipping 11 matching lines @@
   ListValue entries;
   for (size_t i = 0; i < password_exception_list_.size(); ++i) {
     entries.Append(new StringValue(
         net::FormatUrl(password_exception_list_[i]->origin, languages_)));
   }
 
   web_ui()->CallJavascriptFunction("PasswordManager.setPasswordExceptionsList",
                                    entries);
 }
 
+bool PasswordManagerHandler::IsAuthenticationRequired() {
+  base::TimeDelta delta = base::TimeDelta::FromSeconds(60);
+  return require_reauthentication_ &&
+      (base::TimeTicks::Now() - last_authentication_time_) > delta;
+}
+
 PasswordManagerHandler::ListPopulater::ListPopulater(
     PasswordManagerHandler* page)
     : page_(page),
       pending_login_query_(0) {
 }
 
 PasswordManagerHandler::ListPopulater::~ListPopulater() {
 }
 
 PasswordManagerHandler::PasswordListPopulater::PasswordListPopulater(
@@ skipping 62 matching lines @@
 
 void PasswordManagerHandler::PasswordExceptionListPopulater::
     OnGetPasswordStoreResults(
         const std::vector<autofill::PasswordForm*>& results) {
   // TODO(kaiwang): Implement when I refactor
   // PasswordStore::GetAutofillableLogins and PasswordStore::GetBlacklistLogins.
   NOTIMPLEMENTED();
 }
 
 }  // namespace options