Implement device-local account policy pushing

chrome/browser/chromeos/policy/affiliated_invalidation_service_provider_unittest.cc

-// Copyright 2015 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#include "chrome/browser/chromeos/policy/affiliated_invalidation_service_provider.h"
-
-#include <string>
-
-#include "chrome/browser/chrome_notification_types.h"
-#include "chrome/browser/chromeos/login/users/fake_user_manager.h"
-#include "chrome/browser/chromeos/login/users/scoped_user_manager_enabler.h"
-#include "chrome/browser/chromeos/policy/stub_enterprise_install_attributes.h"
-#include "chrome/browser/chromeos/settings/cros_settings.h"
-#include "chrome/browser/chromeos/settings/device_oauth2_token_service_factory.h"
-#include "chrome/browser/chromeos/settings/device_settings_service.h"
-#include "chrome/browser/invalidation/fake_invalidation_service.h"
-#include "chrome/browser/invalidation/profile_invalidation_provider_factory.h"
-#include "chrome/browser/profiles/profile.h"
-#include "chrome/test/base/testing_browser_process.h"
-#include "chrome/test/base/testing_profile_manager.h"
-#include "chromeos/cryptohome/system_salt_getter.h"
-#include "chromeos/dbus/dbus_thread_manager.h"
-#include "components/invalidation/invalidation_service.h"
-#include "components/invalidation/invalidator_state.h"
-#include "components/invalidation/profile_invalidation_provider.h"
-#include "components/invalidation/ticl_invalidation_service.h"
-#include "components/keyed_service/core/keyed_service.h"
-#include "components/policy/core/common/cloud/cloud_policy_constants.h"
-#include "content/public/browser/browser_context.h"
-#include "content/public/browser/notification_details.h"
-#include "content/public/browser/notification_service.h"
-#include "content/public/test/test_browser_thread_bundle.h"
-#include "testing/gmock/include/gmock/gmock.h"
-#include "testing/gtest/include/gtest/gtest.h"
-
-using testing::Mock;
-using testing::StrictMock;
-
-namespace policy {
-
-namespace {
-
-const char kAffiliatedUserID1[] = "test_1@example.com";
-const char kAffiliatedUserID2[] = "test_2@example.com";
-const char kUnaffiliatedUserID[] = "test@other_domain.test";
-
-KeyedService* BuildProfileInvalidationProvider(
-    content::BrowserContext* context) {
-  scoped_ptr<invalidation::FakeInvalidationService> invalidation_service(
-      new invalidation::FakeInvalidationService);
-  invalidation_service->SetInvalidatorState(
-      syncer::TRANSIENT_INVALIDATION_ERROR);
-  return new invalidation::ProfileInvalidationProvider(
-      invalidation_service.Pass());
-}
-
-}  // namespace
-
-class MockConsumer : public AffiliatedInvalidationServiceProvider::Consumer {
- public:
-  MockConsumer();
-  ~MockConsumer() override;
-
-  MOCK_METHOD1(OnInvalidationServiceSet,
-               void(invalidation::InvalidationService*));
-
- private:
-  DISALLOW_COPY_AND_ASSIGN(MockConsumer);
-};
-
-class AffiliatedInvalidationServiceProviderTest : public testing::Test {
- public:
-  AffiliatedInvalidationServiceProviderTest();
-
-  // testing::Test:
-  virtual void SetUp() override;
-  virtual void TearDown() override;
-
-  // Ownership is not passed. The Profile is owned by the global ProfileManager.
-  Profile* LogInAndReturnProfile(const std::string& user_id);
-
-  // Logs in as an affiliated user and indicates that the per-profile
-  // invalidation service for this user connected. Verifies that this
-  // invalidation service is made available to the |consumer_| and the
-  // device-global invalidation service is destroyed.
-  void LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Logs in as an unaffiliated user and indicates that the per-profile
-  // invalidation service for this user connected. Verifies that this
-  // invalidation service is ignored and the device-global invalidation service
-  // is not destroyed.
-  void LogInAsUnaffiliatedUserAndConnectInvalidationService();
-
-  // Indicates that the device-global invalidation service connected. Verifies
-  // that the |consumer_| is informed about this.
-  void ConnectDeviceGlobalInvalidationService();
-
-  // Indicates that the logged-in user's per-profile invalidation service
-  // disconnected. Verifies that the |consumer_| is informed about this and a
-  // device-global invalidation service is created.
-  void DisconnectPerProfileInvalidationService();
-
-  invalidation::FakeInvalidationService* GetProfileInvalidationService(
-      Profile* profile,
-      bool create);
-
- protected:
-  scoped_ptr<AffiliatedInvalidationServiceProvider> provider_;
-  StrictMock<MockConsumer> consumer_;
-  invalidation::TiclInvalidationService* device_invalidation_service_;
-  invalidation::FakeInvalidationService* profile_invalidation_service_;
-
- private:
-  content::TestBrowserThreadBundle thread_bundle_;
-  chromeos::FakeUserManager* fake_user_manager_;
-  chromeos::ScopedUserManagerEnabler user_manager_enabler_;
-  ScopedStubEnterpriseInstallAttributes install_attributes_;
-  scoped_ptr<chromeos::ScopedTestDeviceSettingsService>
-      test_device_settings_service_;
-  scoped_ptr<chromeos::ScopedTestCrosSettings> test_cros_settings_;
-  TestingProfileManager profile_manager_;
-};
-
-MockConsumer::MockConsumer() {
-}
-
-MockConsumer::~MockConsumer() {
-}
-
-AffiliatedInvalidationServiceProviderTest::
-AffiliatedInvalidationServiceProviderTest()
-    : device_invalidation_service_(nullptr),
-      profile_invalidation_service_(nullptr),
-      fake_user_manager_(new chromeos::FakeUserManager),
-      user_manager_enabler_(fake_user_manager_),
-      install_attributes_("example.com",
-                          "user@example.com",
-                          "device_id",
-                          DEVICE_MODE_ENTERPRISE),
-      profile_manager_(TestingBrowserProcess::GetGlobal()) {
-}
-
-void AffiliatedInvalidationServiceProviderTest::SetUp() {
-  chromeos::SystemSaltGetter::Initialize();
-  chromeos::DBusThreadManager::Initialize();
-  chromeos::DeviceOAuth2TokenServiceFactory::Initialize();
-  ASSERT_TRUE(profile_manager_.SetUp());
-
-  test_device_settings_service_.reset(new
-      chromeos::ScopedTestDeviceSettingsService);
-  test_cros_settings_.reset(new chromeos::ScopedTestCrosSettings);
-
-  invalidation::ProfileInvalidationProviderFactory::GetInstance()->
-      RegisterTestingFactory(BuildProfileInvalidationProvider);
-
-  provider_.reset(new AffiliatedInvalidationServiceProvider);
-}
-
-void AffiliatedInvalidationServiceProviderTest::TearDown() {
-  provider_->Shutdown();
-  provider_.reset();
-
-  invalidation::ProfileInvalidationProviderFactory::GetInstance()->
-      RegisterTestingFactory(nullptr);
-  chromeos::DeviceOAuth2TokenServiceFactory::Shutdown();
-  chromeos::DBusThreadManager::Shutdown();
-  chromeos::SystemSaltGetter::Shutdown();
-}
-
-Profile* AffiliatedInvalidationServiceProviderTest::LogInAndReturnProfile(
-    const std::string& user_id) {
-  fake_user_manager_->AddUser(user_id);
-  Profile* profile = profile_manager_.CreateTestingProfile(user_id);
-  content::NotificationService::current()->Notify(
-      chrome::NOTIFICATION_LOGIN_USER_PROFILE_PREPARED,
-      content::NotificationService::AllSources(),
-      content::Details<Profile>(profile));
-  return profile;
-}
-
-void AffiliatedInvalidationServiceProviderTest::
-    LogInAsAffiliatedUserAndConnectInvalidationService() {
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Log in as an affiliated user.
-  Profile* profile = LogInAndReturnProfile(kAffiliatedUserID1);
-  EXPECT_TRUE(profile);
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that a per-profile invalidation service has been created.
-  profile_invalidation_service_ =
-      GetProfileInvalidationService(profile, false /* create */);
-  ASSERT_TRUE(profile_invalidation_service_);
-
-  // Verify that the device-global invalidation service still exists.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Indicate that the per-profile invalidation service has connected. Verify
-  // that the consumer is informed about this.
-  EXPECT_CALL(consumer_,
-              OnInvalidationServiceSet(profile_invalidation_service_)).Times(1);
-  profile_invalidation_service_->SetInvalidatorState(
-      syncer::INVALIDATIONS_ENABLED);
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that the device-global invalidation service has been destroyed.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-void AffiliatedInvalidationServiceProviderTest::
-    LogInAsUnaffiliatedUserAndConnectInvalidationService() {
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Log in as an unaffiliated user.
-  Profile* profile = LogInAndReturnProfile(kUnaffiliatedUserID);
-  EXPECT_TRUE(profile);
-
-  // Verify that a per-profile invalidation service has been created.
-  profile_invalidation_service_ =
-      GetProfileInvalidationService(profile, false /* create */);
-  ASSERT_TRUE(profile_invalidation_service_);
-
-  // Verify that the device-global invalidation service still exists.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Indicate that the per-profile invalidation service has connected. Verify
-  // that the consumer is not called back.
-  profile_invalidation_service_->SetInvalidatorState(
-      syncer::INVALIDATIONS_ENABLED);
-
-  // Verify that the device-global invalidation service still exists.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-void AffiliatedInvalidationServiceProviderTest::
-    ConnectDeviceGlobalInvalidationService() {
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  device_invalidation_service_ =
-      provider_->GetDeviceInvalidationServiceForTest();
-  ASSERT_TRUE(device_invalidation_service_);
-
-  // Indicate that the device-global invalidation service has connected. Verify
-  // that the consumer is informed about this.
-  EXPECT_CALL(consumer_, OnInvalidationServiceSet(device_invalidation_service_))
-      .Times(1);
-  device_invalidation_service_->OnInvalidatorStateChange(
-      syncer::INVALIDATIONS_ENABLED);
-
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-void AffiliatedInvalidationServiceProviderTest::
-    DisconnectPerProfileInvalidationService() {
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  ASSERT_TRUE(profile_invalidation_service_);
-
-  // Indicate that the per-profile invalidation service has disconnected. Verify
-  // that the consumer is informed about this.
-  EXPECT_CALL(consumer_, OnInvalidationServiceSet(nullptr)).Times(1);
-  profile_invalidation_service_->SetInvalidatorState(
-      syncer::INVALIDATION_CREDENTIALS_REJECTED);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-invalidation::FakeInvalidationService*
-AffiliatedInvalidationServiceProviderTest::GetProfileInvalidationService(
-    Profile* profile, bool create) {
-  invalidation::ProfileInvalidationProvider* invalidation_provider =
-      static_cast<invalidation::ProfileInvalidationProvider*>(
-          invalidation::ProfileInvalidationProviderFactory::GetInstance()->
-              GetServiceForBrowserContext(profile, create));
-  if (!invalidation_provider)
-    return nullptr;
-  return static_cast<invalidation::FakeInvalidationService*>(
-      invalidation_provider->GetInvalidationService());
-}
-
-// No consumers are registered with the AffiliatedInvalidationServiceProvider.
-// Verifies that no device-global invalidation service is created, whether an
-// affiliated user is logged in or not.
-TEST_F(AffiliatedInvalidationServiceProviderTest, NoConsumers) {
-  // Verify that no device-global invalidation service has been created.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as an affiliated user.
-  EXPECT_TRUE(LogInAndReturnProfile(kAffiliatedUserID1));
-
-  // Verify that no device-global invalidation service has been created.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider.
-// Verifies that when no per-profile invalidation service belonging to an
-// affiliated user is available, a device-global invalidation service is
-// created. Further verifies that when the device-global invalidation service
-// connects, it is made available to the consumer.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       UseDeviceInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Indicate that the device-global invalidation service connected. Verify that
-  // that the consumer is informed about this.
-  ConnectDeviceGlobalInvalidationService();
-
-  // Indicate that the device-global invalidation service has disconnected.
-  // Verify that the consumer is informed about this.
-  EXPECT_CALL(consumer_, OnInvalidationServiceSet(nullptr)).Times(1);
-  device_invalidation_service_->OnInvalidatorStateChange(
-      syncer::INVALIDATION_CREDENTIALS_REJECTED);
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that the device-global invalidation service still exists.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider.
-// Verifies that when a per-profile invalidation service belonging to an
-// affiliated user connects, it is made available to the consumer.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       UseAffiliatedProfileInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as an affiliated user and indicate that the per-profile invalidation
-  // service for this user connected. Verify that this invalidation service is
-  // made available to the |consumer_| and the device-global invalidation
-  // service is destroyed.
-  LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Indicate that the logged-in user's per-profile invalidation service
-  // disconnected. Verify that the consumer is informed about this and a
-  // device-global invalidation service is created.
-  DisconnectPerProfileInvalidationService();
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider.
-// Verifies that when a per-profile invalidation service belonging to an
-// unaffiliated user connects, it is ignored.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       DoNotUseUnaffiliatedProfileInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as an unaffiliated user and indicate that the per-profile
-  // invalidation service for this user connected. Verify that this invalidation
-  // service is ignored and the device-global invalidation service is not
-  // destroyed.
-  LogInAsUnaffiliatedUserAndConnectInvalidationService();
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// device-global invalidation service exists, is connected and is made available
-// to the consumer. Verifies that when a per-profile invalidation service
-// belonging to an affiliated user connects, it is made available to the
-// consumer instead and the device-global invalidation service is destroyed.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       SwitchToAffiliatedProfileInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Indicate that the device-global invalidation service connected. Verify that
-  // that the consumer is informed about this.
-  ConnectDeviceGlobalInvalidationService();
-
-  // Log in as an affiliated user and indicate that the per-profile invalidation
-  // service for this user connected. Verify that this invalidation service is
-  // made available to the |consumer_| and the device-global invalidation
-  // service is destroyed.
-  LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// device-global invalidation service exists, is connected and is made available
-// to the consumer. Verifies that when a per-profile invalidation service
-// belonging to an unaffiliated user connects, it is ignored and the
-// device-global invalidation service continues to be made available to the
-// consumer.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       DoNotSwitchToUnaffiliatedProfileInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Indicate that the device-global invalidation service connected. Verify that
-  // that the consumer is informed about this.
-  ConnectDeviceGlobalInvalidationService();
-
-  // Log in as an unaffiliated user and indicate that the per-profile
-  // invalidation service for this user connected. Verify that this invalidation
-  // service is ignored and the device-global invalidation service is not
-  // destroyed.
-  LogInAsUnaffiliatedUserAndConnectInvalidationService();
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// per-profile invalidation service belonging to an affiliated user exists, is
-// connected and is made available to the consumer. Verifies that when the
-// per-profile invalidation service disconnects, a device-global invalidation
-// service is created. Further verifies that when the device-global invalidation
-// service connects, it is made available to the consumer.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       SwitchToDeviceInvalidationService) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as an affiliated user and indicate that the per-profile invalidation
-  // service for this user connected. Verify that this invalidation service is
-  // made available to the |consumer_| and the device-global invalidation
-  // service is destroyed.
-  LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Indicate that the logged-in user's per-profile invalidation service
-  // disconnected. Verify that the consumer is informed about this and a
-  // device-global invalidation service is created.
-  DisconnectPerProfileInvalidationService();
-
-  // Indicate that the device-global invalidation service connected. Verify that
-  // that the consumer is informed about this.
-  ConnectDeviceGlobalInvalidationService();
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// per-profile invalidation service belonging to a first affiliated user exists,
-// is connected and is made available to the consumer. A per-profile
-// invalidation service belonging to a second affiliated user also exists and is
-// connected. Verifies that when the per-profile invalidation service belonging
-// to the first user disconnects, the per-profile invalidation service belonging
-// to the second user is made available to the consumer instead.
-TEST_F(AffiliatedInvalidationServiceProviderTest,
-       SwitchBetweenAffiliatedProfileInvalidationServices) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as a first affiliated user and indicate that the per-profile
-  // invalidation service for this user connected. Verify that this invalidation
-  // service is made available to the |consumer_| and the device-global
-  // invalidation service is destroyed.
-  LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Log in as a second affiliated user.
-  Profile* second_profile = LogInAndReturnProfile(kAffiliatedUserID2);
-  EXPECT_TRUE(second_profile);
-
-  // Verify that the device-global invalidation service still does not exist.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Verify that a per-profile invalidation service for the second user has been
-  // created.
-  invalidation::FakeInvalidationService* second_profile_invalidation_service =
-      GetProfileInvalidationService(second_profile, false /* create */);
-  ASSERT_TRUE(second_profile_invalidation_service);
-
-  // Indicate that the second user's per-profile invalidation service has
-  // connected. Verify that the consumer is not called back.
-  second_profile_invalidation_service->SetInvalidatorState(
-      syncer::INVALIDATIONS_ENABLED);
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Indicate that the first user's per-profile invalidation service has
-  // disconnected. Verify that the consumer is informed that the second user's
-  // per-profile invalidation service should be used instead of the first
-  // user's.
-  EXPECT_CALL(consumer_,
-              OnInvalidationServiceSet(second_profile_invalidation_service))
-      .Times(1);
-  profile_invalidation_service_->SetInvalidatorState(
-      syncer::INVALIDATION_CREDENTIALS_REJECTED);
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that the device-global invalidation service still does not exist.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// device-global invalidation service exists, is connected and is made available
-// to the consumer. Verifies that when a second consumer registers, the
-// device-global invalidation service is made available to it as well. Further
-// verifies that when the first consumer unregisters, the device-global
-// invalidation service is not destroyed and remains available to the second
-// consumer. Further verifies that when the second consumer also unregisters,
-// the device-global invalidation service is destroyed.
-TEST_F(AffiliatedInvalidationServiceProviderTest, MultipleConsumers) {
-  // Register a first consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Indicate that the device-global invalidation service connected. Verify that
-  // that the consumer is informed about this.
-  ConnectDeviceGlobalInvalidationService();
-
-  // Register a second consumer. Verify that the consumer is called back
-  // immediately as a connected invalidation service is available.
-  StrictMock<MockConsumer> second_consumer;
-  EXPECT_CALL(second_consumer,
-              OnInvalidationServiceSet(device_invalidation_service_)).Times(1);
-  provider_->RegisterConsumer(&second_consumer);
-  Mock::VerifyAndClearExpectations(&second_consumer);
-
-  // Unregister the first consumer.
-  provider_->UnregisterConsumer(&consumer_);
-
-  // Verify that the device-global invalidation service still exists.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Unregister the second consumer.
-  provider_->UnregisterConsumer(&second_consumer);
-
-  // Verify that the device-global invalidation service has been destroyed.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-  Mock::VerifyAndClearExpectations(&consumer_);
-  Mock::VerifyAndClearExpectations(&second_consumer);
-}
-
-// A consumer is registered with the AffiliatedInvalidationServiceProvider. A
-// per-profile invalidation service belonging to a first affiliated user exists,
-// is connected and is made available to the consumer. Verifies that when the
-// provider is shut down, the consumer is informed that no invalidation service
-// is available for use anymore. Also verifies that no device-global
-// invalidation service is created and a per-profile invalidation service
-// belonging to a second affiliated user that subsequently connects is ignored.
-TEST_F(AffiliatedInvalidationServiceProviderTest, NoServiceAfterShutdown) {
-  // Register a consumer. Verify that the consumer is not called back
-  // immediately as no connected invalidation service exists yet.
-  provider_->RegisterConsumer(&consumer_);
-
-  // Verify that a device-global invalidation service has been created.
-  EXPECT_TRUE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as a first affiliated user and indicate that the per-profile
-  // invalidation service for this user connected. Verify that this invalidation
-  // service is made available to the |consumer_| and the device-global
-  // invalidation service is destroyed.
-  LogInAsAffiliatedUserAndConnectInvalidationService();
-
-  // Shut down the |provider_|. Verify that the |consumer_| is informed that no
-  // invalidation service is available for use anymore.
-  EXPECT_CALL(consumer_, OnInvalidationServiceSet(nullptr)).Times(1);
-  provider_->Shutdown();
-  Mock::VerifyAndClearExpectations(&consumer_);
-
-  // Verify that the device-global invalidation service still does not exist.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Log in as a second affiliated user.
-  Profile* second_profile = LogInAndReturnProfile(kAffiliatedUserID2);
-  EXPECT_TRUE(second_profile);
-
-  // Verify that the device-global invalidation service still does not exist.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Create a per-profile invalidation service for the second user.
-  invalidation::FakeInvalidationService* second_profile_invalidation_service =
-      GetProfileInvalidationService(second_profile, true /* create */);
-  ASSERT_TRUE(second_profile_invalidation_service);
-
-  // Indicate that the second user's per-profile invalidation service has
-  // connected. Verify that the consumer is not called back.
-  second_profile_invalidation_service->SetInvalidatorState(
-      syncer::INVALIDATIONS_ENABLED);
-
-  // Verify that the device-global invalidation service still does not exist.
-  EXPECT_FALSE(provider_->GetDeviceInvalidationServiceForTest());
-
-  // Unregister the consumer.
-  provider_->UnregisterConsumer(&consumer_);
-  Mock::VerifyAndClearExpectations(&consumer_);
-}
-
-}  // namespace policy