OLD | NEW |
---|---|
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_LOGIN_PERFORMER_H_ | 5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_CHROME_LOGIN_PERFORMER_H_ |
6 #define CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_LOGIN_PERFORMER_H_ | 6 #define CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_CHROME_LOGIN_PERFORMER_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
11 #include "base/memory/scoped_ptr.h" | 11 #include "base/memory/scoped_ptr.h" |
12 #include "base/memory/weak_ptr.h" | 12 #include "base/memory/weak_ptr.h" |
13 #include "chrome/browser/chromeos/policy/wildcard_login_checker.h" | 13 #include "chrome/browser/chromeos/policy/wildcard_login_checker.h" |
14 #include "chromeos/login/auth/auth_status_consumer.h" | 14 #include "chromeos/login/auth/auth_status_consumer.h" |
15 #include "chromeos/login/auth/authenticator.h" | 15 #include "chromeos/login/auth/authenticator.h" |
16 #include "chromeos/login/auth/extended_authenticator.h" | 16 #include "chromeos/login/auth/extended_authenticator.h" |
17 #include "chromeos/login/auth/login_performer.h" | |
17 #include "chromeos/login/auth/online_attempt_host.h" | 18 #include "chromeos/login/auth/online_attempt_host.h" |
18 #include "chromeos/login/auth/user_context.h" | 19 #include "chromeos/login/auth/user_context.h" |
19 #include "content/public/browser/notification_observer.h" | 20 #include "content/public/browser/notification_observer.h" |
20 #include "content/public/browser/notification_registrar.h" | 21 #include "content/public/browser/notification_registrar.h" |
21 #include "google_apis/gaia/google_service_auth_error.h" | 22 #include "google_apis/gaia/google_service_auth_error.h" |
22 | 23 |
23 namespace policy { | 24 namespace policy { |
24 class WildcardLoginChecker; | 25 class WildcardLoginChecker; |
25 } | 26 } |
26 | 27 |
27 namespace chromeos { | 28 namespace chromeos { |
28 | 29 |
29 // This class encapsulates sign in operations. | 30 // This class encapsulates sign in operations. |
Nikita (slow)
2014/10/06 15:12:34
nit: Comment needs to be updated too.
| |
30 // Sign in is performed in a way that offline auth is executed first. | 31 // Sign in is performed in a way that offline auth is executed first. |
31 // Once offline auth is OK - user homedir is mounted, UI is launched. | 32 // Once offline auth is OK - user homedir is mounted, UI is launched. |
32 // At this point LoginPerformer |delegate_| is destroyed and it releases | 33 // At this point LoginPerformer |delegate_| is destroyed and it releases |
33 // LP instance ownership. LP waits for online login result. | 34 // LP instance ownership. LP waits for online login result. |
34 // If auth is succeeded, cookie fetcher is executed, LP instance deletes itself. | 35 // If auth is succeeded, cookie fetcher is executed, LP instance deletes itself. |
35 // | 36 // |
36 // If |delegate_| is not NULL it will handle error messages, password input. | 37 // If |delegate_| is not NULL it will handle error messages, password input. |
37 class LoginPerformer : public AuthStatusConsumer, | 38 class ChromeLoginPerformer : public LoginPerformer { |
38 public OnlineAttemptHost::Delegate { | |
39 public: | 39 public: |
40 typedef enum AuthorizationMode { | 40 explicit ChromeLoginPerformer(Delegate* delegate); |
41 // Authorization performed internally by Chrome. | 41 virtual ~ChromeLoginPerformer(); |
42 AUTH_MODE_INTERNAL, | |
43 // Authorization performed by an extension. | |
44 AUTH_MODE_EXTENSION | |
45 } AuthorizationMode; | |
46 | |
47 // Delegate class to get notifications from the LoginPerformer. | |
48 class Delegate : public AuthStatusConsumer { | |
49 public: | |
50 virtual ~Delegate() {} | |
51 virtual void WhiteListCheckFailed(const std::string& email) = 0; | |
52 virtual void PolicyLoadFailed() = 0; | |
53 virtual void OnOnlineChecked(const std::string& email, bool success) = 0; | |
54 }; | |
55 | |
56 explicit LoginPerformer(Delegate* delegate); | |
57 virtual ~LoginPerformer(); | |
58 | |
59 // AuthStatusConsumer implementation: | |
60 virtual void OnAuthFailure(const AuthFailure& error) override; | |
61 virtual void OnRetailModeAuthSuccess( | |
62 const UserContext& user_context) override; | |
63 virtual void OnAuthSuccess(const UserContext& user_context) override; | |
64 virtual void OnOffTheRecordAuthSuccess() override; | |
65 virtual void OnPasswordChangeDetected() override; | |
66 | |
67 // Performs a login for |user_context|. | |
68 // If auth_mode is AUTH_MODE_EXTENSION, there are no further auth checks, | |
69 // AUTH_MODE_INTERNAL will perform auth checks. | |
70 void PerformLogin(const UserContext& user_context, | |
71 AuthorizationMode auth_mode); | |
72 | |
73 // Performs supervised user login with a given |user_context|. | |
74 void LoginAsSupervisedUser(const UserContext& user_context); | |
75 | |
76 // Performs retail mode login. | |
77 void LoginRetailMode(); | |
78 | |
79 // Performs actions to prepare guest mode login. | |
80 void LoginOffTheRecord(); | |
81 | |
82 // Performs public session login with a given |user_context|. | |
83 void LoginAsPublicSession(const UserContext& user_context); | |
84 | |
85 // Performs a login into the kiosk mode account with |app_user_id|. | |
86 void LoginAsKioskAccount(const std::string& app_user_id, | |
87 bool use_guest_mount); | |
88 | |
89 // Migrates cryptohome using |old_password| specified. | |
90 void RecoverEncryptedData(const std::string& old_password); | |
91 | |
92 // Reinitializes cryptohome with the new password. | |
93 void ResyncEncryptedData(); | |
94 | |
95 // Returns latest auth error. | |
96 const GoogleServiceAuthError& error() const { | |
97 return last_login_failure_.error(); | |
98 } | |
99 | |
100 // True if password change has been detected. | |
101 bool password_changed() { return password_changed_; } | |
102 | |
103 // Number of times we've been called with OnPasswordChangeDetected(). | |
104 // If user enters incorrect old password, same LoginPerformer instance will | |
105 // be called so callback count makes it possible to distinguish initial | |
106 // "password changed detected" event from further attempts to enter old | |
107 // password for cryptohome migration (when > 1). | |
108 int password_changed_callback_count() { | |
109 return password_changed_callback_count_; | |
110 } | |
111 | |
112 void set_delegate(Delegate* delegate) { delegate_ = delegate; } | |
113 | |
114 AuthorizationMode auth_mode() const { return auth_mode_; } | |
115 | 42 |
116 protected: | 43 protected: |
117 // Implements OnlineAttemptHost::Delegate. | 44 virtual bool RunTrustedCheck(const base::Closure& callback) OVERRIDE; |
118 virtual void OnChecked(const std::string& username, bool success) override; | 45 void DidRunTrustedCheck(const base::Closure& callback); |
46 virtual bool IsUserWhitelisted(const std::string& username, | |
47 bool* wildcard_match) OVERRIDE; | |
48 | |
49 virtual void RunOnlineWhitelistCheck( | |
50 const std::string& username, | |
51 bool wildcard_match, | |
52 const base::Closure& success_callback, | |
53 const base::Closure& failure_callback) OVERRIDE; | |
54 virtual bool AreSupervisedUsersAllowed() OVERRIDE; | |
55 | |
56 virtual bool UseExtendedAuthenticatorForSupervisedUser( | |
57 const UserContext& user_context) OVERRIDE; | |
58 | |
59 virtual UserContext TransformSupervisedKey( | |
60 const UserContext& context) OVERRIDE; | |
61 | |
62 virtual void SetupSupervisedUserFlow(const std::string& user_id) OVERRIDE; | |
63 | |
64 virtual scoped_refptr<Authenticator> CreateAuthenticator() OVERRIDE; | |
65 virtual bool CheckPolicyForUser(const std::string& username) OVERRIDE; | |
66 virtual Profile* GetSigninProfile() OVERRIDE; | |
67 virtual net::URLRequestContextGetter* GetSigninRequestContext() OVERRIDE; | |
119 | 68 |
120 private: | 69 private: |
121 // Starts login completion of externally authenticated user. | |
122 void StartLoginCompletion(); | |
123 | |
124 // Starts authentication. | |
125 void StartAuthentication(); | |
126 | |
127 // Completion callback for the online wildcard login check for enterprise | |
128 // devices. Continues the login process or signals whitelist check failure | |
129 // depending on the value of |result|. | |
130 void OnlineWildcardLoginCheckCompleted( | 70 void OnlineWildcardLoginCheckCompleted( |
71 const base::Closure& success_callback, | |
72 const base::Closure& failure_callback, | |
131 policy::WildcardLoginChecker::Result result); | 73 policy::WildcardLoginChecker::Result result); |
132 | 74 |
133 // Used for logging in. | |
134 scoped_refptr<Authenticator> authenticator_; | |
135 scoped_refptr<ExtendedAuthenticator> extended_authenticator_; | |
136 | |
137 // Used to make auxiliary online check. | |
138 OnlineAttemptHost online_attempt_host_; | |
139 | |
140 // Represents last login failure that was encountered when communicating to | |
141 // sign-in server. AuthFailure.LoginFailureNone() by default. | |
142 AuthFailure last_login_failure_; | |
143 | |
144 // User credentials for the current login attempt. | |
145 UserContext user_context_; | |
146 | |
147 // Notifications receiver. | |
148 Delegate* delegate_; | |
149 | |
150 // True if password change has been detected. | |
151 // Once correct password is entered homedir migration is executed. | |
152 bool password_changed_; | |
153 int password_changed_callback_count_; | |
154 | |
155 // Authorization mode type. | |
156 AuthorizationMode auth_mode_; | |
157 | |
158 // Used to verify logins that matched wildcard on the login whitelist. | 75 // Used to verify logins that matched wildcard on the login whitelist. |
159 scoped_ptr<policy::WildcardLoginChecker> wildcard_login_checker_; | 76 scoped_ptr<policy::WildcardLoginChecker> wildcard_login_checker_; |
77 base::WeakPtrFactory<ChromeLoginPerformer> weak_factory_; | |
160 | 78 |
161 base::WeakPtrFactory<LoginPerformer> weak_factory_; | 79 DISALLOW_COPY_AND_ASSIGN(ChromeLoginPerformer); |
162 | |
163 DISALLOW_COPY_AND_ASSIGN(LoginPerformer); | |
164 }; | 80 }; |
165 | 81 |
166 } // namespace chromeos | 82 } // namespace chromeos |
167 | 83 |
168 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_LOGIN_PERFORMER_H_ | 84 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_AUTH_CHROME_LOGIN_PERFORMER_H_ |
OLD | NEW |