Network traffic annotation added to OAuth2ApiCallFlow and its subclasses.

google_apis/gaia/oauth2_mint_token_flow.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "google_apis/gaia/oauth2_mint_token_flow.h"
 
 #include <stddef.h>
 
 #include <string>
 #include <vector>
@@ skipping 261 matching lines @@
         detail, base::ASCIIToUTF16(kDetailSeparators),
         base::TRIM_WHITESPACE, base::SPLIT_WANT_NONEMPTY);
     issue_advice->push_back(entry);
   }
 
   if (!success)
     issue_advice->clear();
 
   return success;
 }
+
+net::PartialNetworkTrafficAnnotationTag
+OAuth2MintTokenFlow::GetNetworkTrafficAnnotationTag() {
+  return net::DefinePartialNetworkTrafficAnnotation("oauth2_mint_token_flow",
+                                                    "oauth2_api_call_flow", R"(
+      semantics {
+        sender: "Chrome Identity API"
+        description:
+          "Requests a token from gaia allowing an app or extension to act as "
+          "the user when calling other google APIs."
+        trigger: "API call from the app/extension"
+        data:
+          "User's login token, the identity of a chrome app/extension, and a "
+          "list of oauth scopes requested by the app/extension."
+        destination: GOOGLE_OWNED_SERVICE
+      }
+      policy {
+        setting: "..."
+        chrome_policy {
+          [POLICY_NAME] {
+            policy_options {mode: MANDATORY/RECOMMENDED/UNSET}
+            [POLICY_NAME]: ... //(value to disable it)
+          }
+        }
+        policy_exception_justification: "..."
+      })");
+}

[Roger Tawa OOO till Jul 10th, 2017/05/26 13:46:11]

This is not controllable by policy.  Although if you disable chrome sign in by
policy, this feature is indirectly disabled.

[Ramin Halavati, 2017/05/29 05:30:52]

Done, please verify.