Allow the background page to get an OAuth token for apps v1.

remoting/webapp/crd/js/third_party_token_fetcher.js

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 /**
  * @fileoverview
  * Third party authentication support for the remoting web-app.
  *
  * When third party authentication is being used, the client must request both a
  * token and a shared secret from a third-party server. The server can then
@@ skipping 23 matching lines @@
  *     domain, received from the directory server.
  * @param {function(string, string):void} onThirdPartyTokenFetched Callback.
  */
 remoting.ThirdPartyTokenFetcher = function(
     tokenUrl, hostPublicKey, scope, tokenUrlPatterns,
     onThirdPartyTokenFetched) {
   this.tokenUrl_ = tokenUrl;
   this.tokenScope_ = scope;
   this.onThirdPartyTokenFetched_ = onThirdPartyTokenFetched;
   this.failFetchToken_ = function() { onThirdPartyTokenFetched('', ''); };
-  this.xsrfToken_ = remoting.generateXsrfToken();
+  this.xsrfToken_ = base.generateXsrfToken();
   this.tokenUrlPatterns_ = tokenUrlPatterns;
   this.hostPublicKey_ = hostPublicKey;
   if (chrome.identity) {
     /** @type {function():void}
      * @private */
     this.fetchTokenInternal_ = this.fetchTokenIdentityApi_.bind(this);
     this.redirectUri_ = 'https://' + window.location.hostname +
         '.chromiumapp.org/ThirdPartyAuth';
   } else {
     this.fetchTokenInternal_ = this.fetchTokenWindowOpen_.bind(this);
@@ skipping 110 matching lines @@
 /**
  * Fetch a token from a token server using the identity.launchWebAuthFlow API.
  * @private
  */
 remoting.ThirdPartyTokenFetcher.prototype.fetchTokenIdentityApi_ = function() {
   var fullTokenUrl = this.getFullTokenUrl_();
   chrome.identity.launchWebAuthFlow(
     {'url': fullTokenUrl, 'interactive': true},
     this.parseRedirectUrl_.bind(this));
 };