Index: components/password_manager/core/browser/affiliation_utils.h |
diff --git a/components/password_manager/core/browser/affiliation_utils.h b/components/password_manager/core/browser/affiliation_utils.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..960d347f5b0f689da87f2de1008d3bf91b52c3f3 |
--- /dev/null |
+++ b/components/password_manager/core/browser/affiliation_utils.h |
@@ -0,0 +1,197 @@ |
+// Copyright 2014 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+// This file contains utilities related to working with "facets". |
+// |
+// A "facet" is defined as the manifestation of a logical application on a given |
+// platform. For example, "My Bank" may have released an Android application |
+// and a Web application accessible from a browser. These are all facets of the |
+// "My Bank" logical application. |
+// |
+// Facets that belong to the same logical application are said to be affiliated |
+// with each other. Conceptually, "affiliations" can be seen as an equivalence |
+// relation defined over the set of all facets. Each equivalence class contains |
+// facets that belong to the same logical application, and therefore should be |
+// treated as synonymous for certain purposes, e.g., sharing credentials. |
+// |
+// A valid facet identifier will be a URI of the form: |
+// |
+// * https://<host>[:<port>] |
+// |
+// For web sites. Only HTTPS sites are supported. The syntax corresponds to |
+// that of 'serialized-origin' in RFC 6454. That is, in canonical form, the |
+// URI must not contain components other than the scheme (required, must be |
+// "https"), host (required), and port (optional); with canonicalization |
+// performed the same way as it normally would be for standard URLs. |
+// |
+// * android://<certificate_hash>@<package_name> |
+// |
+// For Android applications. In canonical form, the URI must not contain |
+// components other than the scheme (must be "android"), username, and host |
+// (all required). The host part must be a valid Android package name, with |
+// no escaping, so it must be composed of characters [a-zA-Z0-9_.]. |
+// |
+// The username part must be the hash of the certificate used to sign the |
+// APK, base64-encoded using padding and the "URL and filename safe" base64 |
+// alphabet, with no further escaping. This is normally calculated as: |
+// |
+// echo -n -e "$PEM_KEY" | |
+// openssl x509 -outform DER | |
+// openssl sha -sha512 -binary | base64 | tr '+/' '-_' |
+// |
+ |
+#ifndef COMPONENTS_PASSWORD_MANAGER_CORE_BROWSER_AFFILIATION_UTILS_H_ |
+#define COMPONENTS_PASSWORD_MANAGER_CORE_BROWSER_AFFILIATION_UTILS_H_ |
+ |
+#include <iosfwd> |
+#include <string> |
+#include <vector> |
+ |
+#include <stddef.h> |
+ |
+#include "base/containers/hash_tables.h" |
+#include "base/logging.h" |
+#include "base/strings/utf_string_conversions.h" |
+#include "base/time/time.h" |
+#include "url/third_party/mozilla/url_parse.h" |
+ |
+namespace autofill { |
+struct PasswordForm; |
+} // namespace autofill |
+ |
+namespace password_manager { |
+ |
+// Encapsulates a facet URI in canonical form. |
+// |
+// This is a very light-weight wrapper around an std::string containing the text |
+// of the URI, and can be passed around as a value. The main rationale for the |
+// existence of this class is to make it clearer in the code when a certain URI |
+// is known to be a valid facet URI in canonical form, and to allow verifying |
+// and converting URIs to such canonical form. |
+// |
+// Note that it would be impractical to use GURL to represent facet URIs, as |
+// GURL has built-in logic to parse the rest of the URI according to its scheme, |
+// and obviously, it does not recognize the "android" scheme. Therefore, after |
+// parsing, everything ends up in the path component, which is not too helpful. |
+class FacetURI { |
+ public: |
+ FacetURI(); |
+ |
+ // As a light-weight std::string wrapper, allow copy and assign. |
+ FacetURI(const FacetURI&) = default; |
+ FacetURI& operator=(const FacetURI&) = default; |
+ |
+ // Constructs an instance to encapsulate the canonical form of |spec|. |
+ // If |spec| is not a valid facet URI, then an invalid instance is returned, |
+ // which then should be discarded. |
+ static FacetURI FromPotentiallyInvalidSpec(const std::string& spec); |
+ |
+ // Constructs a valid FacetURI instance from a valid |canonical_spec|. |
+ // Note: The passed-in URI is not verified at all. Use only when you are sure |
+ // the URI is valid and in canonical form. |
+ static FacetURI FromCanonicalSpec(const std::string& canonical_spec); |
+ |
+ // Comparison operators so that FacetURI can be used in std::equal. |
+ bool operator==(const FacetURI& other) const; |
+ bool operator!=(const FacetURI& other) const; |
+ |
+ // Relational operators so that FacetURI can be used in sorted containers. |
+ bool operator<(const FacetURI& other) const; |
+ bool operator>(const FacetURI& other) const; |
+ |
+ // Returns whether or not this instance represents a valid facet identifier |
+ // referring to a Web application. |
+ bool IsValidWebFacetURI() const; |
+ |
+ // Returns whether or not this instance represents a valid facet identifier |
+ // referring to an Android application. |
+ bool IsValidAndroidFacetURI() const; |
+ |
+ // Returns whether or not this instance represents a valid facet identifier |
+ // referring to either a Web or an Android application. The empty identfier is |
+ // not considered valid. |
+ bool is_valid() const { return is_valid_; } |
+ |
+ // Returns whether or not this instance represents the empty facet identifier. |
+ bool is_empty() const { return canonical_spec_.empty(); } |
+ |
+ // Returns the canonical scheme of the encapsulated facet URI, provided it is |
+ // valid, or the empty string otherwise. |
+ std::string scheme() const; |
+ |
+ // Returns the canonical package name that the encapsulated facet URI |
+ // references, provided it is a valid Android facet URI, or the empty string |
+ // otherwise. |
+ std::string android_package_name() const; |
+ |
+ // Returns the text of the encapsulated canonical URI, which must be valid. |
+ const std::string& canonical_spec() const { |
+ DCHECK(is_valid_); |
+ return canonical_spec_; |
+ } |
+ |
+ // Returns the text of the encapsulated canonical URI, even if it is invalid. |
+ const std::string& potentially_invalid_spec() const { |
+ return canonical_spec_; |
+ } |
+ |
+ private: |
+ // Internal constructor to be used by the static factory methods. |
+ FacetURI(const std::string& canonical_spec, bool is_valid); |
+ |
+ // Whether |canonical_spec_| contains a valid facet URI in canonical form. |
+ bool is_valid_; |
+ |
+ // The text of the encapsulated canonical URI, valid if and only if |
+ // |is_valid_| is true. |
+ std::string canonical_spec_; |
+ |
+ // Identified components of the canonical spec. |
+ url::Parsed parsed_; |
+}; |
+ |
+// A collection of facets affiliated with each other, i.e. an equivalence class. |
+typedef std::vector<FacetURI> AffiliatedFacets; |
+ |
+// A collection of facets affiliated with each other, i.e. an equivalence class, |
+// plus a timestamp that indicates the last time the data was updated from an |
+// authoritative source. |
+struct AffiliatedFacetsWithUpdateTime { |
+ AffiliatedFacetsWithUpdateTime(); |
+ AffiliatedFacetsWithUpdateTime(const AffiliatedFacetsWithUpdateTime& other); |
+ ~AffiliatedFacetsWithUpdateTime(); |
+ |
+ AffiliatedFacets facets; |
+ base::Time last_update_time; |
+}; |
+ |
+// Returns whether or not equivalence classes |a| and |b| are equal, that is, |
+// whether or not they consist of the same set of facets. |
+// |
+// Note that this will do some sorting, so it can be expensive for large inputs. |
+bool AreEquivalenceClassesEqual(const AffiliatedFacets& a, |
+ const AffiliatedFacets& b); |
+ |
+// A shorter way to spell FacetURI::IsValidAndroidFacetURI(). |
+bool IsValidAndroidFacetURI(const std::string& uri); |
+ |
+// Returns the origin URI in a format which can be presented to a user based of |
+// |password_from| field values. |
+std::string GetHumanReadableOrigin(const autofill::PasswordForm& password_form); |
+ |
+// Returns the Android origin URI for presenting to a user. |
+std::string GetHumanReadableOriginForAndroidUri(const FacetURI facet_uri); |
+ |
+// For logging use only. |
+std::ostream& operator<<(std::ostream& os, const FacetURI& facet_uri); |
+ |
+struct FacetURIHash { |
+ size_t operator()(const FacetURI& facet_uri) const { |
+ return std::hash<std::string>()(facet_uri.potentially_invalid_spec()); |
+ } |
+}; |
+ |
+} // namespace password_manager |
+ |
+#endif // COMPONENTS_PASSWORD_MANAGER_CORE_BROWSER_AFFILIATION_UTILS_H_ |