[signin] Generate OAuth token on Dice Signin responses

chrome/browser/signin/chrome_signin_helper.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/signin/chrome_signin_helper.h"
 
 #include "base/logging.h"
 #include "base/strings/string_util.h"
 #include "build/build_config.h"
 #include "chrome/browser/prefs/incognito_mode_prefs.h"
 #include "chrome/browser/profiles/profile_io_data.h"
 #include "chrome/browser/signin/account_reconcilor_factory.h"
 #include "chrome/browser/signin/chrome_signin_client.h"
+#include "chrome/browser/signin/chrome_signin_client_factory.h"
+#include "chrome/browser/signin/dice_response_handler.h"
 #include "chrome/browser/tab_contents/tab_util.h"
 #include "chrome/browser/ui/browser_window.h"
 #include "chrome/common/url_constants.h"
 #include "components/signin/core/browser/account_reconcilor.h"
 #include "components/signin/core/browser/chrome_connected_header_helper.h"
 #include "components/signin/core/browser/signin_header_helper.h"
 #include "components/signin/core/common/profile_management_switches.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/web_contents.h"
 #include "google_apis/gaia/gaia_auth_util.h"
@@ skipping 74 matching lines @@
         ui::PAGE_TRANSITION_AUTO_TOPLEVEL, false));
   } else {
     signin_metrics::LogAccountReconcilorStateOnGaiaResponse(
         account_reconcilor->GetState());
     AccountManagementScreenHelper::OpenAccountManagementScreen(profile,
                                                                service_type);
   }
 #endif  // !defined(OS_ANDROID)
 }
 
+#if !defined(OS_ANDROID)
+void ProcessDiceHeaderUIThread(
+    const DiceResponseParams& dice_params,
+    const content::ResourceRequestInfo::WebContentsGetter&
+        web_contents_getter) {
+  DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
+  DCHECK_EQ(switches::AccountConsistencyMethod::kDice,
+            switches::GetAccountConsistencyMethod());
+
+  content::WebContents* web_contents = web_contents_getter.Run();
+  if (!web_contents)
+    return;
+
+  Profile* profile =
+      Profile::FromBrowserContext(web_contents->GetBrowserContext());
+  DCHECK(!profile->IsOffTheRecord());
+
+  DiceResponseHandler* dice_response_handler =
+      DiceResponseHandler::GetForProfile(profile);
+  dice_response_handler->ProcessDiceHeader(dice_params);
+}
+#endif  // !defined(OS_ANDROID)
+
 // Looks for the X-Chrome-Manage-Accounts response header, and if found,
 // tries to show the avatar bubble in the browser identified by the
 // child/route id. Must be called on IO thread.
 void ProcessMirrorResponseHeaderIfExists(
     net::URLRequest* request,
     ProfileIOData* io_data,
     const content::ResourceRequestInfo::WebContentsGetter&
         web_contents_getter) {
   DCHECK_CURRENTLY_ON(content::BrowserThread::IO);
 
@@ skipping 33 matching lines @@
   // garbage, then |service_type| is set to |GAIA_SERVICE_TYPE_NONE|.
   if (params.service_type == GAIA_SERVICE_TYPE_NONE)
     return;
 
   content::BrowserThread::PostTask(
       content::BrowserThread::UI, FROM_HERE,
       base::Bind(ProcessMirrorHeaderUIThread, params, web_contents_getter));
 }
 
 #if !defined(OS_ANDROID)
-void ProcessDiceResponseHeaderIfExists(net::URLRequest* request,
-                                       ProfileIOData* io_data) {
+void ProcessDiceResponseHeaderIfExists(
+    net::URLRequest* request,
+    ProfileIOData* io_data,
+    const content::ResourceRequestInfo::WebContentsGetter&
+        web_contents_getter) {
   DCHECK_CURRENTLY_ON(content::BrowserThread::IO);
 
   if (io_data->IsOffTheRecord())
     return;
 
   const content::ResourceRequestInfo* info =
       content::ResourceRequestInfo::ForRequest(request);
   if (!(info && info->GetResourceType() == content::RESOURCE_TYPE_MAIN_FRAME))
     return;
 
@@ skipping 14 matching lines @@
                                              &header_value)) {
     return;
   }
 
   DiceResponseParams params = BuildDiceResponseParams(header_value);
   // If the request does not have a response header or if the header contains
   // garbage, then |user_intention| is set to |NONE|.
   if (params.user_intention == DiceAction::NONE)
     return;
 
-  // TODO(droger): Process the Dice header: on sign-in, exchange the
-  // authorization code for a refresh token, on sign-out just follow the
-  // sign-out URL.
+  content::BrowserThread::PostTask(
+      content::BrowserThread::UI, FROM_HERE,
+      base::Bind(ProcessDiceHeaderUIThread, params, web_contents_getter));
 }
 #endif  // !defined(OS_ANDROID)
 
 }  // namespace
 
 void FixAccountConsistencyRequestHeader(net::URLRequest* request,
                                         const GURL& redirect_url,
                                         ProfileIOData* io_data,
                                         int child_id,
                                         int route_id) {
@@ skipping 35 matching lines @@
     const GURL& redirect_url,
     ProfileIOData* io_data,
     const content::ResourceRequestInfo::WebContentsGetter&
         web_contents_getter) {
   if (redirect_url.is_empty()) {
     // This is not a redirect.
 
     // See if the response contains the X-Chrome-Manage-Accounts header. If so
     // show the profile avatar bubble so that user can complete signin/out
     // action the native UI.
-    signin::ProcessMirrorResponseHeaderIfExists(request, io_data,
-                                                web_contents_getter);
+    ProcessMirrorResponseHeaderIfExists(request, io_data, web_contents_getter);
   } else {
-// This is a redirect.
+    // This is a redirect.
 
 #if !defined(OS_ANDROID)
     // Process the Dice header: on sign-in, exchange the authorization code for
     // a refresh token, on sign-out just follow the sign-out URL.
-    signin::ProcessDiceResponseHeaderIfExists(request, io_data);
+    ProcessDiceResponseHeaderIfExists(request, io_data, web_contents_getter);
 #endif
   }
 }
 
 }  // namespace signin