After signin token check failed, show force reauth dialog and start window closing countdown.

chrome/browser/signin/force_signin_verifier.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
+#include "base/bind.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/signin/force_signin_verifier.h"
 #include "chrome/browser/signin/profile_oauth2_token_service_factory.h"
 #include "chrome/browser/signin/signin_manager_factory.h"
+#include "chrome/browser/ui/views/profiles/forced_reauthentication_dialog.h"
 #include "components/signin/core/browser/signin_manager.h"
 #include "google_apis/gaia/gaia_constants.h"
+#include "ui/views/widget/widget.h"
+#include "ui/views/widget/widget_deletion_observer.h"
 
 namespace {
 const net::BackoffEntry::Policy kBackoffPolicy = {
     0,              // Number of initial errors to ignore before applying
                     // exponential back-off rules.
     2000,           // Initial delay in ms.
     2,              // Factor by which the waiting time will be multiplied.
     0.2,            // Fuzzing percentage.
     4 * 60 * 1000,  // Maximum amount of time to delay th request in ms.
     -1,             // Never discard the entry.
     false           // Do not always use initial delay.
 };
 
+// The duration of window closing countdown when verification failed. Use the
+// short countdown if the verfication is finished in
+// |kShortCountdownVerificationTimeLimitInSeconds|, otherwise use the normal
+// countdown.
+const int kShortCountdownVerificationTimeLimitInSeconds = 3;
+const int kWindowClosingNormalCountdownDurationInSecond = 300;
+const int kWindowClosingShortCountdownDurationInSecond = 30;
+
 }  // namespace
 
 ForceSigninVerifier::ForceSigninVerifier(Profile* profile)
     : OAuth2TokenService::Consumer("force_signin_verifier"),
+#if !defined(OS_MACOSX)
+      profile_(profile),
+#endif
       has_token_verified_(false),
       backoff_entry_(&kBackoffPolicy),
       oauth2_token_service_(
           ProfileOAuth2TokenServiceFactory::GetForProfile(profile)),
       signin_manager_(SigninManagerFactory::GetForProfile(profile)),
-      token_request_time_(base::Time::Now()) {
+      token_request_time_(base::Time::Now()),
+      reauth_dialog_(nullptr) {
   net::NetworkChangeNotifier::AddNetworkChangeObserver(this);
   SendRequest();
 }
 
 ForceSigninVerifier::~ForceSigninVerifier() {
   Cancel();
+  if (dialog_observer_.get() && dialog_observer_->IsWidgetAlive())
+    reauth_dialog_->Close();
 }
 
 void ForceSigninVerifier::OnGetTokenSuccess(
     const OAuth2TokenService::Request* request,
     const std::string& access_token,
     const base::Time& expiration_time) {
   has_token_verified_ = true;
   net::NetworkChangeNotifier::RemoveNetworkChangeObserver(this);
   Cancel();
 }
@@ skipping 31 matching lines @@
   backoff_entry_.Reset();
   backoff_request_timer_.Stop();
   access_token_request_.reset();
   net::NetworkChangeNotifier::RemoveNetworkChangeObserver(this);
 }
 
 bool ForceSigninVerifier::HasTokenBeenVerified() {
   return has_token_verified_;
 }
 
+void ForceSigninVerifier::AbortSignoutCountdownIfExisted() {
+  window_close_timer_.Stop();
+}
+
 void ForceSigninVerifier::SendRequest() {
   if (!ShouldSendRequest())
     return;
 
   std::string account_id = signin_manager_->GetAuthenticatedAccountId();
   OAuth2TokenService::ScopeSet oauth2_scopes;
   oauth2_scopes.insert(GaiaConstants::kChromeSyncOAuth2Scope);
   access_token_request_ =
       oauth2_token_service_->StartRequest(account_id, oauth2_scopes, this);
 }
 
 bool ForceSigninVerifier::ShouldSendRequest() {
   return !has_token_verified_ && access_token_request_.get() == nullptr &&
          !net::NetworkChangeNotifier::IsOffline() &&
          signin_manager_->IsAuthenticated();
 }
 
+base::TimeDelta ForceSigninVerifier::StartCountdown() {
+  base::TimeDelta countdown_duration;
+  if (base::Time::Now() - token_request_time_ >
+      base::TimeDelta::FromSeconds(
+          kShortCountdownVerificationTimeLimitInSeconds)) {
+    countdown_duration = base::TimeDelta::FromSeconds(
+        kWindowClosingNormalCountdownDurationInSecond);
+  } else {
+    countdown_duration = base::TimeDelta::FromSeconds(
+        kWindowClosingShortCountdownDurationInSecond);
+  }
+
+  window_close_timer_.Start(FROM_HERE, countdown_duration, this,
+                            &ForceSigninVerifier::CloseAllBrowserWindows);
+  return countdown_duration;
+}
+
 void ForceSigninVerifier::ShowDialog() {
-  // TODO(zmin): Show app modal dialog.
+#if !defined(OS_MACOSX)
+  base::TimeDelta countdown_duration = StartCountdown();
+  reauth_dialog_ = ForcedReauthenticationDialog::ShowDialog(
+                       profile_, signin_manager_, countdown_duration)
+                       ->GetWidget();
+  dialog_observer_ =
+      base::MakeUnique<views::WidgetDeletionObserver>(reauth_dialog_);
+#endif
+}
+
+void ForceSigninVerifier::CloseAllBrowserWindows() {
+  // Do not close window if there is ongoing reauth. If it fails later, the
+  // signin process should take care of the signout.
+  if (signin_manager_->AuthInProgress())
+    return;
+  dialog_observer_.reset();
+  signin_manager_->SignOut(
+      signin_metrics::AUTHENTICATION_FAILED_WITH_FORCE_SIGNIN,
+      signin_metrics::SignoutDelete::IGNORE_METRIC);
 }
 
 OAuth2TokenService::Request* ForceSigninVerifier::GetRequestForTesting() {
   return access_token_request_.get();
 }
 
 net::BackoffEntry* ForceSigninVerifier::GetBackoffEntryForTesting() {
   return &backoff_entry_;
 }
 
 base::OneShotTimer* ForceSigninVerifier::GetOneShotTimerForTesting() {
   return &backoff_request_timer_;
 }
+
+base::OneShotTimer* ForceSigninVerifier::GetWindowCloseTimerForTesting() {
+  return &window_close_timer_;
+}