platformKeys: Add per-extension sign permissions.

chrome/browser/extensions/api/platform_keys/platform_keys_api.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/platform_keys/platform_keys_api.h"
 
 #include <vector>
 
 #include "base/bind.h"
 #include "base/logging.h"
@@ skipping 96 matching lines @@
   const std::vector<char>& cert_der = params->certificate;
   if (cert_der.empty())
     return RespondNow(Error(kErrorInvalidX509Cert));
   scoped_refptr<net::X509Certificate> cert_x509 =
       net::X509Certificate::CreateFromBytes(vector_as_array(&cert_der),
                                             cert_der.size());
   if (!cert_x509)
     return RespondNow(Error(kErrorInvalidX509Cert));
 
   PublicKeyInfo key_info;
-  if (!chromeos::platform_keys::GetPublicKey(
-          cert_x509, &key_info.public_key_spki_der, &key_info.key_type,
-          &key_info.key_size_bits) ||
+  key_info.public_key_spki_der =
+      chromeos::platform_keys::GetSubjectPublicKeyInfo(cert_x509);
+  if (!chromeos::platform_keys::GetPublicKey(cert_x509, &key_info.key_type,
+                                             &key_info.key_size_bits) ||
       key_info.key_type != net::X509Certificate::kPublicKeyTypeRSA) {
     return RespondNow(Error(kErrorAlgorithmNotSupported));
   }
 
   api_pki::GetPublicKey::Results::Algorithm algorithm;
   BuildWebCryptoRSAAlgorithmDictionary(key_info,
                                        &algorithm.additional_properties);
 
   return RespondNow(ArgumentList(api_pki::GetPublicKey::Results::Create(
       std::vector<char>(key_info.public_key_spki_der.begin(),
@@ skipping 17 matching lines @@
   DCHECK(service);
 
   chromeos::platform_keys::ClientCertificateRequest request;
   for (const std::vector<char>& cert_authority :
        params->details.request.certificate_authorities) {
     request.certificate_authorities.push_back(
         std::string(cert_authority.begin(), cert_authority.end()));
   }
 
   service->SelectClientCertificates(
-      request, extension_id(),
+      request, params->details.interactive, extension_id(),
       base::Bind(&PlatformKeysInternalSelectClientCertificatesFunction::
                      OnSelectedCertificates,
                  this));
   return RespondLater();
 }
 
 void PlatformKeysInternalSelectClientCertificatesFunction::
     OnSelectedCertificates(scoped_ptr<net::CertificateList> matches,
                            const std::string& error_message) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
   if (!error_message.empty()) {
     Respond(Error(error_message));
     return;
   }
   DCHECK(matches);
   std::vector<linked_ptr<api_pk::Match>> result_matches;
   for (const scoped_refptr<net::X509Certificate>& match : *matches) {
     PublicKeyInfo key_info;
-    if (!chromeos::platform_keys::GetPublicKey(
-            match, &key_info.public_key_spki_der, &key_info.key_type,
-            &key_info.key_size_bits)) {
+    key_info.public_key_spki_der =
+        chromeos::platform_keys::GetSubjectPublicKeyInfo(match);
+    if (!chromeos::platform_keys::GetPublicKey(match, &key_info.key_type,
+                                               &key_info.key_size_bits)) {
       LOG(ERROR) << "Could not retrieve public key info.";
       continue;
     }
     if (key_info.key_type != net::X509Certificate::kPublicKeyTypeRSA) {
       LOG(ERROR) << "Skipping unsupported certificate with non-RSA key.";
       continue;
     }
 
     linked_ptr<api_pk::Match> result_match(new api_pk::Match);
     std::string der_encoded_cert;
@@ skipping 65 matching lines @@
     const std::string& error_message) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
   if (error_message.empty())
     Respond(ArgumentList(api_pki::Sign::Results::Create(
         std::vector<char>(signature.begin(), signature.end()))));
   else
     Respond(Error(error_message));
 }
 
 }  // namespace extensions