summaryrefslogtreecommitdiffstats
path: root/chrome/browser/chromeos/login/auth_response_handler.cc
diff options
context:
space:
mode:
authorcmasone@google.com <cmasone@google.com@0039d316-1c4b-4281-b951-d872f2087c98>2010-03-19 17:14:25 +0000
committercmasone@google.com <cmasone@google.com@0039d316-1c4b-4281-b951-d872f2087c98>2010-03-19 17:14:25 +0000
commit2e47c7c2141baad006d948a5fb0f93fc84d0268c (patch)
treeaf3a2cea736970f7ebe7e30c554db65369bf27cf /chrome/browser/chromeos/login/auth_response_handler.cc
parenta94f6cee3b6c5836e95d289406ea49baedf126bb (diff)
downloadchromium_src-2e47c7c2141baad006d948a5fb0f93fc84d0268c.zip
chromium_src-2e47c7c2141baad006d948a5fb0f93fc84d0268c.tar.gz
chromium_src-2e47c7c2141baad006d948a5fb0f93fc84d0268c.tar.bz2
Enables chrome to do programmatic auth without helper binaries/pam modules.
Functionality protected behind --in-chrome-auth flag. TEST=unittests, also run on Chromium OS with --in-chrome-auth flag. Log in should work. Review URL: http://codereview.chromium.org/1026001 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@42116 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/chromeos/login/auth_response_handler.cc')
-rw-r--r--chrome/browser/chromeos/login/auth_response_handler.cc15
1 files changed, 15 insertions, 0 deletions
diff --git a/chrome/browser/chromeos/login/auth_response_handler.cc b/chrome/browser/chromeos/login/auth_response_handler.cc
new file mode 100644
index 0000000..fea29af
--- /dev/null
+++ b/chrome/browser/chromeos/login/auth_response_handler.cc
@@ -0,0 +1,15 @@
+// Copyright (c) 2010 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/chromeos/login/auth_response_handler.h"
+
+const char AuthResponseHandler::kClientLoginUrl[] =
+ "https://www.google.com/accounts/ClientLogin";
+const char AuthResponseHandler::kIssueAuthTokenUrl[] =
+ "https://www.google.com/accounts/IssueAuthToken";
+// TODO(cmasone): make sure that using an http:// URL in the "continue"
+// parameter here doesn't open the system up to attack long-term.
+const char AuthResponseHandler::kTokenAuthUrl[] =
+ "https://www.google.com/accounts/TokenAuth?"
+ "continue=http://www.google.com/webhp&source=chromeos&auth=";