Implementation of sync password hash clearing.

components/password_manager/core/browser/password_store_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // The passwords in the tests below are all empty because PasswordStoreDefault
 // does not store the actual passwords on OS X (they are stored in the Keychain
 // instead). We could special-case it, but it is easier to just have empty
 // passwords. This will not be needed anymore if crbug.com/466638 is fixed.
 
 #include <stddef.h>
@@ skipping 85 matching lines @@
 };
 
 }  // namespace
 
 class PasswordStoreTest : public testing::Test {
  protected:
   PasswordStoreTest()
       : scoped_task_environment_(
             base::test::ScopedTaskEnvironment::MainThreadType::UI) {}
 
-  void SetUp() override { ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); }
+  void SetUp() override {
+    ASSERT_TRUE(temp_dir_.CreateUniqueTempDir());
+#if defined(OS_MACOSX)
+    // Mock Keychain. There is a call to Keychain on initializling
+    // PasswordReuseDetector, so it should be mocked.
+    OSCryptMocker::SetUpWithSingleton();
+#endif
+  }
 
-  void TearDown() override { ASSERT_TRUE(temp_dir_.Delete()); }
+  void TearDown() override {
+    ASSERT_TRUE(temp_dir_.Delete());
+#if defined(OS_MACOSX)
+    OSCryptMocker::TearDown();
+#endif
+  }
 
   base::FilePath test_login_db_file_path() const {
     return temp_dir_.GetPath().Append(FILE_PATH_LITERAL("login_test"));
   }
 
   base::test::ScopedTaskEnvironment scoped_task_environment_;
   base::ScopedTempDir temp_dir_;
 };
 
 TEST_F(PasswordStoreTest, IgnoreOldWwwGoogleLogins) {
@@ skipping 797 matching lines @@
 
 // TODO(crbug.com/706392): Fix password reuse detection for Android.
 #if !defined(OS_ANDROID) && !defined(OS_IOS)
 TEST_F(PasswordStoreTest, CheckPasswordReuse) {
   static constexpr PasswordFormData kTestCredentials[] = {
       {PasswordForm::SCHEME_HTML, "https://www.google.com",
        "https://www.google.com", "", L"", L"", L"", L"", L"password", true, 1},
       {PasswordForm::SCHEME_HTML, "https://facebook.com",
        "https://facebook.com", "", L"", L"", L"", L"", L"topsecret", true, 1}};
 
-#if defined(OS_MACOSX)
-  // Mock Keychain. There is a call to Keychain on initializling
-  // PasswordReuseDetector, so it should be mocked.
-  OSCryptMocker::SetUpWithSingleton();
-#endif
   scoped_refptr<PasswordStoreDefault> store(new PasswordStoreDefault(
       base::ThreadTaskRunnerHandle::Get(), base::ThreadTaskRunnerHandle::Get(),
       base::MakeUnique<LoginDatabase>(test_login_db_file_path())));
   store->Init(syncer::SyncableService::StartSyncFlare(), nullptr);
 
   for (const auto& test_credentials : kTestCredentials) {
     auto credentials = CreatePasswordFormFromDataForTesting(test_credentials);
     store->AddLogin(*credentials);
     base::RunLoop().RunUntilIdle();
   }
@@ skipping 19 matching lines @@
       EXPECT_CALL(mock_consumer, OnReuseFound(_, _, _, _)).Times(0);
     }
 
     store->CheckReuse(base::WideToUTF16(test_data.input), test_data.domain,
                       &mock_consumer);
     base::RunLoop().RunUntilIdle();
   }
 
   store->ShutdownOnUIThread();
   base::RunLoop().RunUntilIdle();
-#if defined(OS_MACOSX)
-  OSCryptMocker::TearDown();
-#endif
+}
+
+TEST_F(PasswordStoreTest, SavingClearingSyncPassword) {
+  scoped_refptr<PasswordStoreDefault> store(new PasswordStoreDefault(
+      base::ThreadTaskRunnerHandle::Get(), base::ThreadTaskRunnerHandle::Get(),
+      base::MakeUnique<LoginDatabase>(test_login_db_file_path())));
+  store->Init(syncer::SyncableService::StartSyncFlare(), nullptr);
+
+  const base::string16 sync_password = base::ASCIIToUTF16("password");
+  const base::string16 input = base::ASCIIToUTF16("123password");
+  store->SaveSyncPasswordHash(sync_password);
+  base::RunLoop().RunUntilIdle();
+
+  // Check that sync password reuse is found.
+  MockPasswordReuseDetectorConsumer mock_consumer;
+  EXPECT_CALL(mock_consumer,
+              OnReuseFound(sync_password, "accounts.google.com", 1, 0));
+  store->CheckReuse(input, "https://facebook.com", &mock_consumer);
+  base::RunLoop().RunUntilIdle();
+  testing::Mock::VerifyAndClearExpectations(&mock_consumer);
+
+  // Check that no sync password reuse is found after clearing the saved sync
+  // password hash.
+  store->ClearSyncPasswordHash();
+  EXPECT_CALL(mock_consumer, OnReuseFound(_, _, _, _)).Times(0);
+  store->CheckReuse(input, "https://facebook.com", &mock_consumer);
+  base::RunLoop().RunUntilIdle();
+
+  store->ShutdownOnUIThread();
+  base::RunLoop().RunUntilIdle();
 }
 #endif
 
 }  // namespace password_manager