chrome.identity API: Restrict gaia ID access

chrome/common/extensions/api/identity.idl

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Use the <code>chrome.identity</code> API to get OAuth2 access tokens.
 namespace identity {
 
   dictionary AccountInfo {
     // A unique identifier for the account. This ID will not change
     // for the lifetime of the account.
     DOMString id;
   };
 
   dictionary ProfileUserInfo {
     // An email address for the user account signed into the current
-    // profile. Empty if the user is not signed in.
+    // profile. Empty if the user is not signed in or the
+    // <code>identity.email</code> manifest permission is not
+    // specified.
     DOMString email;
 
     // A unique identifier for the account. This ID will not change
     // for the lifetime of the account. Empty if the user is not
-    // signed in.
+    // signed in or (in M41+) the <code>identity.email</code>
+    // manifest permission is not specified.
     DOMString id;
   };
 
   dictionary TokenDetails {
     // Fetching a token may require the user to sign-in to Chrome, or
     // approve the application's requested scopes. If the interactive
     // flag is <code>true</code>, <code>getAuthToken</code> will
     // prompt the user as necessary. When the flag is
     // <code>false</code> or omitted, <code>getAuthToken</code> will
     // return failure any time a prompt would be required.
@@ skipping 120 matching lines @@
     //
     // |path| : The path appended to the end of the generated URL.
     [nocompile] static DOMString getRedirectURL(optional DOMString path);
   };
 
   interface Events {
     // Fired when signin state changes for an account on the user's profile.
     static void onSignInChanged(AccountInfo account, boolean signedIn);
   };
 };