OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_MANAGED_MANAGED_USER_AUTHENTICATOR_H_ | |
6 #define CHROME_BROWSER_CHROMEOS_LOGIN_MANAGED_MANAGED_USER_AUTHENTICATOR_H_ | |
7 | |
8 #include <string> | |
9 | |
10 #include "base/basictypes.h" | |
11 #include "base/compiler_specific.h" | |
12 #include "base/memory/ref_counted.h" | |
13 #include "base/memory/scoped_ptr.h" | |
14 #include "third_party/cros_system_api/dbus/service_constants.h" | |
15 | |
16 namespace chromeos { | |
17 | |
18 // Authenticates locally managed users against the cryptohome. | |
19 // | |
20 // Typical flow: | |
21 // AuthenticateToMount() calls a Cryptohome to perform offline login, | |
22 // AuthenticateToCreate() calls a Cryptohome to create new cryptohome. | |
23 class ManagedUserAuthenticator | |
24 : public base::RefCountedThreadSafe<ManagedUserAuthenticator> { | |
25 public: | |
26 enum AuthState { | |
27 CONTINUE, // State indeterminate; try again when more info available. | |
28 NO_MOUNT, // No cryptohome exist for user. | |
29 FAILED_MOUNT, // Failed to mount existing cryptohome - login failed. | |
30 FAILED_TPM, // Failed to mount/create cryptohome because of TPM error. | |
31 SUCCESS, // Login succeeded . | |
32 }; | |
33 | |
34 class AuthAttempt { | |
35 public: | |
36 AuthAttempt(const std::string& username, | |
37 const std::string& password, | |
38 bool add_key_attempt); | |
39 ~AuthAttempt(); | |
40 | |
41 // Copy |cryptohome_code| and |cryptohome_outcome| into this object, | |
42 // so we can have a copy we're sure to own, and can make available | |
43 // on the IO thread. Must be called from the IO thread. | |
44 void RecordCryptohomeStatus(bool cryptohome_outcome, | |
45 cryptohome::MountError cryptohome_code); | |
46 | |
47 // Copy |hash| into this object so we can have a copy we're sure to own | |
48 // and can make available on the IO thread. | |
49 // Must be called from the IO thread. | |
50 void RecordHash(const std::string& hash); | |
51 | |
52 bool cryptohome_complete(); | |
53 bool cryptohome_outcome(); | |
54 bool hash_obtained(); | |
55 std::string hash(); | |
56 cryptohome::MountError cryptohome_code(); | |
57 | |
58 const std::string username; | |
59 const std::string password; | |
60 const bool add_key; | |
61 | |
62 private: | |
63 bool cryptohome_complete_; | |
64 bool cryptohome_outcome_; | |
65 bool hash_obtained_; | |
66 std::string hash_; | |
67 | |
68 cryptohome::MountError cryptohome_code_; | |
69 DISALLOW_COPY_AND_ASSIGN(AuthAttempt); | |
70 }; | |
71 | |
72 class AuthStatusConsumer { | |
73 public: | |
74 virtual ~AuthStatusConsumer() {} | |
75 // The current login attempt has ended in failure, with error. | |
76 virtual void OnAuthenticationFailure(AuthState state) = 0; | |
77 // The current login attempt has ended succesfully. | |
78 virtual void OnMountSuccess(const std::string& mount_hash) = 0; | |
79 // The current add key attempt has ended succesfully. | |
80 virtual void OnAddKeySuccess() = 0; | |
81 }; | |
82 | |
83 explicit ManagedUserAuthenticator(AuthStatusConsumer* consumer); | |
84 | |
85 void AuthenticateToMount(const std::string& username, | |
86 const std::string& password); | |
87 | |
88 void AuthenticateToCreate(const std::string& username, | |
89 const std::string& password); | |
90 | |
91 void AddMasterKey(const std::string& username, | |
92 const std::string& password, | |
93 const std::string& master_key); | |
94 void Resolve(); | |
95 | |
96 private: | |
97 friend class base::RefCountedThreadSafe<ManagedUserAuthenticator>; | |
98 | |
99 ~ManagedUserAuthenticator(); | |
100 | |
101 AuthState ResolveState(); | |
102 AuthState ResolveCryptohomeFailureState(); | |
103 AuthState ResolveCryptohomeSuccessState(); | |
104 void OnAuthenticationSuccess(const std::string& mount_hash, bool add_key); | |
105 void OnAuthenticationFailure(AuthState state); | |
106 | |
107 scoped_ptr<AuthAttempt> current_state_; | |
108 AuthStatusConsumer* consumer_; | |
109 | |
110 DISALLOW_COPY_AND_ASSIGN(ManagedUserAuthenticator); | |
111 }; | |
112 | |
113 } // namespace chromeos | |
114 | |
115 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_MANAGED_MANAGED_USER_AUTHENTICATOR_H_ | |
OLD | NEW |