Cast audio only policy enforcement support.

extensions/browser/api/cast_channel/cast_auth_util.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/browser/api/cast_channel/cast_auth_util.h"
 
 #include "base/logging.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/stringprintf.h"
 #include "extensions/browser/api/cast_channel/cast_message_util.h"
 #include "extensions/common/api/cast_channel/cast_channel.pb.h"
 
 namespace extensions {
 namespace core_api {
 namespace cast_channel {
 namespace {
 
 const char* const kParseErrorPrefix = "Failed to parse auth message: ";
 
+const char kAudioOnlyPolicy[] =
+    {0x06, 0x0A, 0x2B, 0x06, 0x01, 0x04, 0x01, 0xD6, 0x79, 0x02, 0x05, 0x02};
+
 // Extracts an embedded DeviceAuthMessage payload from an auth challenge reply
 // message.
 AuthResult ParseAuthMessage(const CastMessage& challenge_reply,
                             DeviceAuthMessage* auth_message) {
   if (challenge_reply.payload_type() != CastMessage_PayloadType_BINARY) {
     return AuthResult::CreateWithParseError(
         "Wrong payload type in challenge reply",
         AuthResult::ERROR_WRONG_PAYLOAD_TYPE);
   }
   if (!challenge_reply.has_payload_binary()) {
@@ skipping 17 matching lines @@
   }
   if (!auth_message->has_response()) {
     return AuthResult::CreateWithParseError(
         "Auth message has no response field", AuthResult::ERROR_NO_RESPONSE);
   }
   return AuthResult();
 }
 
 }  // namespace
 
-AuthResult::AuthResult() : error_type(ERROR_NONE), nss_error_code(0) {
+AuthResult::AuthResult()
+    : error_type(ERROR_NONE), nss_error_code(0), channel_policy(POLICY_NONE) {
 }
 
 AuthResult::~AuthResult() {
 }
 
 // static
 AuthResult AuthResult::CreateWithParseError(const std::string& error_message,
                                             ErrorType error_type) {
   return AuthResult(kParseErrorPrefix + error_message, error_type, 0);
 }
@@ skipping 26 matching lines @@
   if (!result.success()) {
     return result;
   }
 
   const AuthResponse& response = auth_message.response();
   result = VerifyCredentials(response, peer_cert);
   if (!result.success()) {
     return result;
   }
 
-  return AuthResult();
+  if (response.client_auth_certificate().find(kAudioOnlyPolicy) !=
+      std::string::npos) {
+    result.channel_policy |= AuthResult::POLICY_AUDIO_ONLY;
+  }
+
+  return result;
 }
 
 }  // namespace cast_channel
 }  // namespace core_api
 }  // namespace extensions