Correctly deal with tokens for supervised users in ProfileOAuth2TokenService.

chrome/browser/policy/cloud/user_policy_signin_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/cloud/user_policy_signin_service.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/callback.h"
 #include "chrome/browser/browser_process.h"
@@ skipping 93 matching lines @@
 
 void UserPolicySigninService::OnRefreshTokenAvailable(
     const std::string& account_id) {
   // If using a TestingProfile with no UserCloudPolicyManager, skip
   // initialization.
   if (!GetManager()) {
     DVLOG(1) << "Skipping initialization for tests due to missing components.";
     return;
   }
 
-  std::string username = GetSigninManager()->GetAuthenticatedUsername();
-  // Should not have OAuth tokens if the user isn't signed in.
-  DCHECK(!username.empty());
+  // Ignore OAuth tokens for any account but the primary one.
+  if (account_id != oauth2_token_service_->GetPrimaryAccountId())
+    return;
+
   // ProfileOAuth2TokenService now has a refresh token so initialize the
   // UserCloudPolicyManager.
-  InitializeForSignedInUser(username);
+  InitializeForSignedInUser(GetSigninManager()->GetAuthenticatedUsername());
 }
 
 void UserPolicySigninService::InitializeUserCloudPolicyManager(
     const std::string& username,
     scoped_ptr<CloudPolicyClient> client) {
   UserPolicySigninServiceBase::InitializeUserCloudPolicyManager(username,
                                                                 client.Pass());
   ProhibitSignoutIfNeeded();
 }
 
@@ skipping 56 matching lines @@
 }
 
 void UserPolicySigninService::ProhibitSignoutIfNeeded() {
   if (GetManager()->IsClientRegistered()) {
     DVLOG(1) << "User is registered for policy - prohibiting signout";
     GetSigninManager()->ProhibitSignout(true);
   }
 }
 
 }  // namespace policy