cros: Clear secret when it is no longer needed.

chrome/browser/chromeos/login/session/user_session_manager.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/login/session/user_session_manager.h"
 
 #include <string>
 
 #include "base/base_paths.h"
 #include "base/bind.h"
@@ skipping 778 matching lines @@
   // TODO(nkostylev): This pointer should probably never be NULL, but it looks
   // like LoginUtilsImpl::OnProfileCreated() may be getting called before
   // UserSessionManager::PrepareProfile() has set |delegate_| when Chrome is
   // killed during shutdown in tests -- see http://crosbug.com/18269.  Replace
   // this 'if' statement with a CHECK(delegate_) once the underlying issue is
   // resolved.
   if (delegate_)
     delegate_->OnProfilePrepared(profile);
 
   UpdateEasyUnlockKeys(profile);
+  user_context_.ClearSecrets();
 }
 
 void UserSessionManager::InitSessionRestoreStrategy() {
   CommandLine* command_line = CommandLine::ForCurrentProcess();
   bool in_app_mode = chrome::IsRunningInForcedAppMode();
 
   // Are we in kiosk app mode?
   if (in_app_mode) {
     if (command_line->HasSwitch(::switches::kAppModeOAuth2Token)) {
       oauth2_refresh_token_ = command_line->GetSwitchValueASCII(
@@ skipping 187 matching lines @@
 }
 
 void UserSessionManager::UpdateEasyUnlockKeys(Profile* user_profile) {
   if (!GetEasyUnlockKeyManager())
     return;
 
   // Only update Easy unlock keys for regular user.
   if (user_context_.GetUserType() != user_manager::USER_TYPE_REGULAR)
     return;
 
+  // Bail if |user_context_| does not have secret.
+  if (user_context_.GetKey()->GetSecret().empty()) {
+    // Nagging if this is not crash restore case.
+    DCHECK(user_sessions_restored_);
+    return;
+  }
+
   // |user_context_| and |user_profile| must belong to the same user.
   DCHECK_EQ(SigninManagerFactory::GetForProfile(user_profile)
                 ->GetAuthenticatedAccountId(),
             user_context_.GetUserID());
 
   const base::ListValue* device_list = NULL;
   if (EasyUnlockService::Get(user_profile))
     device_list = EasyUnlockService::Get(user_profile)->GetRemoteDevices();
 
   if (device_list) {
@@ skipping 38 matching lines @@
     return NULL;
   }
 
   if (!easy_unlock_key_manager_)
     easy_unlock_key_manager_.reset(new EasyUnlockKeyManager);
 
   return easy_unlock_key_manager_.get();
 }
 
 }  // namespace chromeos