Add test for showing confirmation dialog for unsecure signin

chrome/browser/ui/webui/signin/inline_login_ui_browsertest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include "base/command_line.h"
 #include "chrome/browser/signin/signin_promo.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/tabs/tab_strip_model.h"
+#include "chrome/browser/ui/webui/signin/inline_login_ui.h"
+#include "chrome/browser/ui/webui/signin/login_ui_service.h"
+#include "chrome/browser/ui/webui/signin/login_ui_service_factory.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/url_constants.h"
 #include "chrome/test/base/in_process_browser_test.h"
+#include "chrome/test/base/test_browser_window.h"
 #include "chrome/test/base/test_chrome_web_ui_controller_factory.h"
 #include "chrome/test/base/testing_browser_process.h"
 #include "chrome/test/base/ui_test_utils.h"
+#include "content/public/browser/render_frame_host.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/browser/session_storage_namespace.h"
 #include "content/public/browser/storage_partition.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/browser/web_ui_controller.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/test/browser_test_utils.h"
 #include "content/public/test/test_navigation_observer.h"
+#include "google_apis/gaia/fake_gaia.h"
+#include "google_apis/gaia/gaia_switches.h"
 #include "net/base/url_util.h"
 #include "net/test/embedded_test_server/embedded_test_server.h"
+#include "net/test/embedded_test_server/http_request.h"
+#include "net/test/embedded_test_server/http_response.h"
 #include "testing/gmock/include/gmock/gmock.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 using ::testing::_;
+using ::testing::Invoke;
+using ::testing::InvokeWithoutArgs;
 
 namespace {
 
 struct ContentInfo {
   ContentInfo(int pid, content::StoragePartition* storage_partition) {
     this->pid = pid;
     this->storage_partition = storage_partition;
   }
 
   int pid;
@@ skipping 20 matching lines @@
 
 // Mock the TestChromeWebUIControllerFactory::WebUIProvider to prove that we are
 // not called as expected.
 class FooWebUIProvider
     : public TestChromeWebUIControllerFactory::WebUIProvider {
  public:
   MOCK_METHOD2(NewWebUI, content::WebUIController*(content::WebUI* web_ui,
                                                    const GURL& url));
 };
 
+class MockLoginUIObserver : public LoginUIService::Observer {
+ public:
+  MOCK_METHOD0(OnUntrustedLoginUIShown, void());
+};
+
 const char kFooWebUIURL[] = "chrome://foo/";
 
 }  // namespace
 
 class InlineLoginUIBrowserTest : public InProcessBrowserTest {
  public:
   InlineLoginUIBrowserTest() {}
 };
 
 IN_PROC_BROWSER_TEST_F(InlineLoginUIBrowserTest, DifferentStorageId) {
@@ skipping 62 matching lines @@
         "  handler();"
         "else"
         "  inline.login.getAuthExtHost().addEventListener('ready', handler);"));
 
     std::string message;
     do {
       ASSERT_TRUE(message_queue.WaitForMessage(&message));
     } while (message != "\"ready\"");
   }
 
+ // Executes JavaScript code in the auth iframe hosted by gaia_auth extension.
+  void ExecuteJsInSigninFrame(const std::string& js) {
+    content::WebContents* web_contents =
+        browser()->tab_strip_model()->GetActiveWebContents();
+    ASSERT_TRUE(content::ExecuteScript(InlineLoginUI::GetAuthIframe(
+        web_contents, GURL(), "signin-frame"), js));
+  }
+
+ protected:
+  FakeGaia fake_gaia_;
+
  private:
+  virtual void SetUp() OVERRIDE {
+    ASSERT_TRUE(embedded_test_server()->InitializeAndWaitUntilReady());
+
+    // EmbeddedTestServer spawns a thread to initialize socket.
+    // Stop IO thread in preparation for fork and exec.
+    // embedded_test_server()->StopThread();

[guohui, 2014/08/07 22:31:23]

@xiyuan, your suggested change of splitting the test server startup into two
parts somehow broke all tests in this class that call WaitUntilUIReady. They
would timeout at "ASSERT_TRUE(message_queue.WaitForMessage(&message));" with
your suggested change, and they all pass without.

Any idea what is wrong?

[xiyuan, 2014/08/07 23:07:18]

Splitting into two parts is required, per oshima's CL
https://codereview.chromium.org/83633004. 

Not sure what is wrong. Test server should behave the same in either way. Can
you add some log in FakeGaia::HandleRequest and see if that actually gets hit?
If it is, then maybe add some console.log in the injected JS and see if
gaia_auth_host is properly loaded etc.

+
+    InProcessBrowserTest::SetUp();
+  }
+
   virtual void SetUpOnMainThread() OVERRIDE {
+    // embedded_test_server()->RestartThreadAndListen();
+
+    embedded_test_server()->RegisterRequestHandler(
+        base::Bind(&FakeGaia::HandleRequest, base::Unretained(&fake_gaia_)));
+
     content::WebUIControllerFactory::UnregisterFactoryForTesting(
         ChromeWebUIControllerFactory::GetInstance());
     test_factory_.reset(new TestChromeWebUIControllerFactory);
     content::WebUIControllerFactory::RegisterFactory(test_factory_.get());
     test_factory_->AddFactoryOverride(
         GURL(kFooWebUIURL).host(), &foo_provider_);
   }
 
   virtual void TearDownOnMainThread() OVERRIDE {
     test_factory_->RemoveFactoryOverride(GURL(kFooWebUIURL).host());
     content::WebUIControllerFactory::UnregisterFactoryForTesting(
         test_factory_.get());
     test_factory_.reset();
   }
 
+  virtual void SetUpCommandLine(CommandLine* command_line) OVERRIDE {
+    const GURL& base_url = embedded_test_server()->base_url();
+    command_line->AppendSwitchASCII(::switches::kGaiaUrl, base_url.spec());
+    command_line->AppendSwitchASCII(::switches::kLsoUrl, base_url.spec());
+    command_line->AppendSwitchASCII(::switches::kGoogleApisUrl,
+                                    base_url.spec());
+    fake_gaia_.Initialize();
+  }
+
   FooWebUIProvider foo_provider_;
   scoped_ptr<TestChromeWebUIControllerFactory> test_factory_;
 };
 
 // Make sure that the foo webui handler is working properly and that it gets
 // created when navigated to normally.
 IN_PROC_BROWSER_TEST_F(InlineLoginUISafeIframeBrowserTest, Basic) {
   const GURL kUrl(kFooWebUIURL);
   EXPECT_CALL(foo_provider(), NewWebUI(_, ::testing::Eq(kUrl)))
       .WillOnce(ReturnNewWebUI());
@@ skipping 13 matching lines @@
 #if defined(OS_CHROMEOS)
 #define MAYBE_TopFrameNavigationDisallowed DISABLED_TopFrameNavigationDisallowed
 #else
 #define MAYBE_TopFrameNavigationDisallowed TopFrameNavigationDisallowed
 #endif
 
 // Make sure that the gaia iframe cannot trigger top-frame navigation.
 // TODO(guohui): flaky on trybot crbug/364759.
 IN_PROC_BROWSER_TEST_F(InlineLoginUISafeIframeBrowserTest,
     MAYBE_TopFrameNavigationDisallowed) {
-  ASSERT_TRUE(embedded_test_server()->InitializeAndWaitUntilReady());
   // Loads into gaia iframe a web page that attempts to deframe on load.
   GURL deframe_url(embedded_test_server()->GetURL("/login/deframe.html"));
   GURL url(net::AppendOrReplaceQueryParameter(
       signin::GetPromoURL(signin::SOURCE_START_PAGE, false),
       "frameUrl", deframe_url.spec()));
   ui_test_utils::NavigateToURL(browser(), url);
   WaitUntilUIReady();
 
   content::WebContents* contents =
       browser()->tab_strip_model()->GetActiveWebContents();
@@ skipping 21 matching lines @@
   content::WebContents* contents =
       browser()->tab_strip_model()->GetActiveWebContents();
   ASSERT_TRUE(content::ExecuteScript(
       contents, "window.location.href = 'chrome://foo'"));
 
   content::TestNavigationObserver navigation_observer(contents, 1);
   navigation_observer.Wait();
 
   EXPECT_EQ(GURL("about:blank"), contents->GetVisibleURL());
 }
+
+#if !defined(OS_CHROMEOS)
+IN_PROC_BROWSER_TEST_F(InlineLoginUISafeIframeBrowserTest,
+    ConfirmationRequiredForNonsecureSignin) {
+  fake_gaia_.SetFakeMergeSessionParamsForEmail("email");
+
+  // Navigates to the Chrome signin page which loads the fake gaia auth page.
+  // Since the fake gaia auth page is served over HTTP, thus expects to see an
+  // untrusted signin confirmation dialog upon submitting credentials below.
+  ui_test_utils::NavigateToURL(
+      browser(), signin::GetPromoURL(signin::SOURCE_START_PAGE, false));
+  WaitUntilUIReady();
+
+  MockLoginUIObserver observer;
+  LoginUIServiceFactory::GetForProfile(browser()->profile())
+      ->AddObserver(&observer);
+  base::RunLoop run_loop;
+  EXPECT_CALL(observer, OnUntrustedLoginUIShown())
+      .WillOnce(InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit));
+
+  content::WebContents* contents =
+      browser()->tab_strip_model()->GetActiveWebContents();
+  std::string js =
+      "document.getElementById('Email').value = 'email';"
+      "document.getElementById('Passwd').value = 'password';"
+      "document.getElementById('signIn').click();";
+  ExecuteJsInSigninFrame(js);
+
+  run_loop.Run();
+  base::MessageLoop::current()->RunUntilIdle();
+}
+#endif // OS_CHROMEOS