| Index: components/data_reduction_proxy/browser/http_auth_handler_data_reduction_proxy.cc
|
| diff --git a/components/data_reduction_proxy/browser/http_auth_handler_data_reduction_proxy.cc b/components/data_reduction_proxy/browser/http_auth_handler_data_reduction_proxy.cc
|
| deleted file mode 100644
|
| index 6487bfcad9a8d3007be32d3bd966666552b2b2ad..0000000000000000000000000000000000000000
|
| --- a/components/data_reduction_proxy/browser/http_auth_handler_data_reduction_proxy.cc
|
| +++ /dev/null
|
| @@ -1,183 +0,0 @@
|
| -// Copyright 2014 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include "components/data_reduction_proxy/browser/http_auth_handler_data_reduction_proxy.h"
|
| -
|
| -#include <algorithm>
|
| -#include <string>
|
| -#include <vector>
|
| -
|
| -#include "base/i18n/icu_string_conversions.h"
|
| -#include "base/metrics/histogram.h"
|
| -#include "base/strings/string_util.h"
|
| -#include "base/strings/utf_string_conversions.h"
|
| -#include "net/base/net_errors.h"
|
| -#include "net/http/http_auth.h"
|
| -#include "net/http/http_auth_challenge_tokenizer.h"
|
| -#include "net/http/http_request_info.h"
|
| -
|
| -namespace {
|
| -
|
| -const char kDataReductionProxyAuthScheme[] = "spdyproxy";
|
| -
|
| -}
|
| -
|
| -namespace data_reduction_proxy {
|
| -
|
| -using net::AuthCredentials;
|
| -using net::BoundNetLog;
|
| -using net::CompletionCallback;
|
| -using net::HttpAuth;
|
| -using net::HttpAuthChallengeTokenizer;
|
| -using net::HttpAuthHandler;
|
| -using net::HttpAuthHandlerFactory;
|
| -using net::HttpRequestInfo;
|
| -using net::HttpUtil;
|
| -
|
| -// static
|
| -std::string HttpAuthHandlerDataReductionProxy::Scheme() {
|
| - return kDataReductionProxyAuthScheme;
|
| -}
|
| -
|
| -HttpAuthHandlerDataReductionProxy::Factory::Factory(
|
| - const std::vector<GURL>& authorized_spdyproxy_origins) {
|
| - for (unsigned int i = 0; i < authorized_spdyproxy_origins.size(); ++i) {
|
| - if (authorized_spdyproxy_origins[i].possibly_invalid_spec().empty()) {
|
| - VLOG(1) << "SpdyProxy auth without configuring authorized origin.";
|
| - return;
|
| - }
|
| - }
|
| - authorized_spdyproxy_origins_ = authorized_spdyproxy_origins;
|
| -}
|
| -
|
| -HttpAuthHandlerDataReductionProxy::Factory::~Factory() {
|
| -}
|
| -
|
| -int HttpAuthHandlerDataReductionProxy::Factory::CreateAuthHandler(
|
| - HttpAuthChallengeTokenizer* challenge,
|
| - HttpAuth::Target target,
|
| - const GURL& origin,
|
| - CreateReason reason,
|
| - int digest_nonce_count,
|
| - const BoundNetLog& net_log,
|
| - scoped_ptr<HttpAuthHandler>* handler) {
|
| - // If a spdyproxy auth proxy has not been set, refuse all requests to use this
|
| - // auth handler.
|
| - if (authorized_spdyproxy_origins_.empty())
|
| - return net::ERR_UNSUPPORTED_AUTH_SCHEME;
|
| -
|
| - // We ensure that this authentication handler is used only with an authorized
|
| - // SPDY proxy, since otherwise a user's authentication token can be
|
| - // sniffed by a malicious proxy that presents an appropriate challenge.
|
| - const GURL origin_origin = origin.GetOrigin();
|
| - if (!(std::find(authorized_spdyproxy_origins_.begin(),
|
| - authorized_spdyproxy_origins_.end(),
|
| - origin_origin) != authorized_spdyproxy_origins_.end())) {
|
| - UMA_HISTOGRAM_COUNTS("Net.UnexpectedSpdyProxyAuth", 1);
|
| - VLOG(1) << "SpdyProxy auth request with an unexpected config."
|
| - << " origin: " << origin_origin.possibly_invalid_spec();
|
| - return net::ERR_UNSUPPORTED_AUTH_SCHEME;
|
| - }
|
| -
|
| - scoped_ptr<HttpAuthHandler> tmp_handler(
|
| - new HttpAuthHandlerDataReductionProxy());
|
| - if (!tmp_handler->InitFromChallenge(challenge, target, origin, net_log))
|
| - return net::ERR_INVALID_RESPONSE;
|
| - handler->swap(tmp_handler);
|
| - return net::OK;
|
| -}
|
| -
|
| -HttpAuth::AuthorizationResult
|
| -HttpAuthHandlerDataReductionProxy::HandleAnotherChallenge(
|
| - HttpAuthChallengeTokenizer* challenge) {
|
| - // SpdyProxy authentication is always a single round, so any responses
|
| - // should be treated as a rejection.
|
| - return HttpAuth::AUTHORIZATION_RESULT_REJECT;
|
| -}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::NeedsIdentity() {
|
| - return true;
|
| -}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::AllowsDefaultCredentials() {
|
| - return false;
|
| -}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::AllowsExplicitCredentials() {
|
| - return true;
|
| -}
|
| -
|
| -HttpAuthHandlerDataReductionProxy::~HttpAuthHandlerDataReductionProxy() {}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::Init(
|
| - HttpAuthChallengeTokenizer* challenge) {
|
| - auth_scheme_ = HttpAuth::AUTH_SCHEME_SPDYPROXY;
|
| - score_ = 5;
|
| - properties_ = ENCRYPTS_IDENTITY;
|
| - return ParseChallenge(challenge);
|
| -}
|
| -
|
| -int HttpAuthHandlerDataReductionProxy::GenerateAuthTokenImpl(
|
| - const AuthCredentials* credentials, const HttpRequestInfo* request,
|
| - const CompletionCallback&, std::string* auth_token) {
|
| - DCHECK(credentials);
|
| - if (credentials->password().length() == 0) {
|
| - DVLOG(1) << "Received a SpdyProxy auth token request without an "
|
| - << "available token.";
|
| - return -1;
|
| - }
|
| - *auth_token = "SpdyProxy ps=\"" + ps_token_ + "\", sid=\"" +
|
| - base::UTF16ToUTF8(credentials->password()) + "\"";
|
| - return net::OK;
|
| -}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::ParseChallenge(
|
| - HttpAuthChallengeTokenizer* challenge) {
|
| -
|
| - // Verify the challenge's auth-scheme.
|
| - if (!LowerCaseEqualsASCII(challenge->scheme(),
|
| - kDataReductionProxyAuthScheme)) {
|
| - VLOG(1) << "Parsed challenge without SpdyProxy type";
|
| - return false;
|
| - }
|
| -
|
| - HttpUtil::NameValuePairsIterator parameters = challenge->param_pairs();
|
| -
|
| - // Loop through all the properties.
|
| - while (parameters.GetNext()) {
|
| - // FAIL -- couldn't parse a property.
|
| - if (!ParseChallengeProperty(parameters.name(),
|
| - parameters.value()))
|
| - return false;
|
| - }
|
| - // Check if tokenizer failed.
|
| - if (!parameters.valid())
|
| - return false;
|
| -
|
| - // Check that the required properties were provided.
|
| - if (realm_.empty())
|
| - return false;
|
| -
|
| - if (ps_token_.empty())
|
| - return false;
|
| -
|
| - return true;
|
| -}
|
| -
|
| -bool HttpAuthHandlerDataReductionProxy::ParseChallengeProperty(
|
| - const std::string& name, const std::string& value) {
|
| - if (LowerCaseEqualsASCII(name, "realm")) {
|
| - std::string realm;
|
| - if (!base::ConvertToUtf8AndNormalize(value, base::kCodepageLatin1, &realm))
|
| - return false;
|
| - realm_ = realm;
|
| - } else if (LowerCaseEqualsASCII(name, "ps")) {
|
| - ps_token_ = value;
|
| - } else {
|
| - VLOG(1) << "Skipping unrecognized SpdyProxy auth property, " << name;
|
| - }
|
| - return true;
|
| -}
|
| -
|
| -} // namespace data_reduction_proxy
|
|
|