diff options
author | akalin@chromium.org <akalin@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-03-16 20:54:02 +0000 |
---|---|---|
committer | akalin@chromium.org <akalin@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-03-16 20:54:02 +0000 |
commit | dd7981da8ce9ae81b77c43c308cab8b664b63276 (patch) | |
tree | d06cb20f9a9f0cd762aaf0e7206b0cf8faa0dcd5 /chrome/browser/sync | |
parent | ce08079cf7f61aa56f11dd502690e4318b1db035 (diff) | |
download | chromium_src-dd7981da8ce9ae81b77c43c308cab8b664b63276.zip chromium_src-dd7981da8ce9ae81b77c43c308cab8b664b63276.tar.gz chromium_src-dd7981da8ce9ae81b77c43c308cab8b664b63276.tar.bz2 |
Split up PreXmppAuth and SaslHandler.
Created a X-GOOGLE-TOKEN-only SaslHandler class for use by sync.
BUG=38034
TEST=manual
Review URL: http://codereview.chromium.org/904006
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@41761 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/sync')
5 files changed, 55 insertions, 72 deletions
diff --git a/chrome/browser/sync/notifier/communicator/single_login_attempt.cc b/chrome/browser/sync/notifier/communicator/single_login_attempt.cc index 86e04aa..80c438b 100644 --- a/chrome/browser/sync/notifier/communicator/single_login_attempt.cc +++ b/chrome/browser/sync/notifier/communicator/single_login_attempt.cc @@ -2,7 +2,9 @@ // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. +#include <algorithm> #include <string> +#include <vector> #include "chrome/browser/sync/notifier/communicator/single_login_attempt.h" @@ -23,6 +25,8 @@ #include "talk/base/winsock_initializer.h" #include "talk/xmllite/xmlelement.h" #include "talk/xmpp/prexmppauth.h" +#include "talk/xmpp/saslcookiemechanism.h" +#include "talk/xmpp/saslhandler.h" #include "talk/xmpp/xmppclient.h" #include "talk/xmpp/xmppclientsettings.h" #include "talk/xmpp/xmppconstants.h" @@ -62,6 +66,44 @@ static void GetClientErrorInformation( } } +namespace { + +const char kGaiaAuthMechanism[] = "X-GOOGLE-TOKEN"; + +// This class looks for the X-GOOGLE-TOKEN auth mechanism and uses +// that instead of the default auth mechanism (PLAIN). +class GaiaOnlySaslHandler : public buzz::SaslHandler { + public: + GaiaOnlySaslHandler( + const std::string& username, + const std::string& token, + const std::string& token_service) + : username_(username), + token_(token), + token_service_(token_service) {} + + virtual std::string ChooseBestSaslMechanism( + const std::vector<std::string> & mechanisms, bool encrypted) { + return (std::find(mechanisms.begin(), + mechanisms.end(), kGaiaAuthMechanism) != + mechanisms.end()) ? kGaiaAuthMechanism : ""; + } + + virtual buzz::SaslMechanism* CreateSaslMechanism( + const std::string& mechanism) { + return + (mechanism == kGaiaAuthMechanism) ? + new buzz::SaslCookieMechanism( + kGaiaAuthMechanism, username_, token_, token_service_) + : NULL; + } + + private: + std::string username_, token_, token_service_; +}; + +} // namespace + SingleLoginAttempt::SingleLoginAttempt(talk_base::Task* parent, LoginSettings* login_settings, bool successful_connection) @@ -204,7 +246,8 @@ void SingleLoginAttempt::DoLogin( // Start connecting. client_->Connect(client_settings, login_settings_->lang(), CreateSocket(client_settings), - CreatePreXmppAuth(client_settings)); + CreatePreXmppAuth(client_settings), + CreateSaslHandler(client_settings)); client_->Start(); } @@ -259,6 +302,13 @@ buzz::PreXmppAuth* SingleLoginAttempt::CreatePreXmppAuth( return auth; } +buzz::SaslHandler* SingleLoginAttempt::CreateSaslHandler( + const buzz::XmppClientSettings& xcs) { + buzz::Jid jid(xcs.user(), xcs.host(), buzz::STR_EMPTY); + return new GaiaOnlySaslHandler( + jid.Str(), xcs.auth_cookie(), xcs.token_service()); +} + void SingleLoginAttempt::OnFreshAuthCookie(const std::string& auth_cookie) { // Remember this is a fresh cookie. cookie_refreshed_ = true; diff --git a/chrome/browser/sync/notifier/communicator/single_login_attempt.h b/chrome/browser/sync/notifier/communicator/single_login_attempt.h index 735a781..c798a27 100644 --- a/chrome/browser/sync/notifier/communicator/single_login_attempt.h +++ b/chrome/browser/sync/notifier/communicator/single_login_attempt.h @@ -17,6 +17,7 @@ namespace buzz { class AsyncSocket; class CaptchaChallenge; class PreXmppAuth; +class SaslHandler; class XmppClient; class XmppClientSettings; class XmppClientSettings; @@ -96,6 +97,8 @@ class SingleLoginAttempt : public talk_base::Task, public sigslot::has_slots<> { void DoLogin(const ConnectionSettings& connection_settings); buzz::AsyncSocket* CreateSocket(const buzz::XmppClientSettings& xcs); buzz::PreXmppAuth* CreatePreXmppAuth(const buzz::XmppClientSettings& xcs); + static buzz::SaslHandler* CreateSaslHandler( + const buzz::XmppClientSettings& xcs); // Cleans up any xmpp client state to get ready for a new one. void ClearClient(); diff --git a/chrome/browser/sync/notifier/communicator/xmpp_connection_generator.cc b/chrome/browser/sync/notifier/communicator/xmpp_connection_generator.cc index 6221f2e..2f28a59 100644 --- a/chrome/browser/sync/notifier/communicator/xmpp_connection_generator.cc +++ b/chrome/browser/sync/notifier/communicator/xmpp_connection_generator.cc @@ -21,7 +21,7 @@ #include "chrome/browser/sync/notifier/communicator/connection_settings.h" #include "chrome/browser/sync/notifier/communicator/product_info.h" #include "talk/base/autodetectproxy.h" -#include "talk/base/httpcommon.h" +#include "talk/base/httpcommon-inl.h" #include "talk/base/task.h" #include "talk/base/thread.h" #include "talk/xmpp/prexmppauth.h" diff --git a/chrome/browser/sync/notifier/gaia_auth/gaiaauth.cc b/chrome/browser/sync/notifier/gaia_auth/gaiaauth.cc index d87ea4e..1558b06 100644 --- a/chrome/browser/sync/notifier/gaia_auth/gaiaauth.cc +++ b/chrome/browser/sync/notifier/gaia_auth/gaiaauth.cc @@ -365,71 +365,6 @@ void GaiaAuth::OnAuthDone() { SignalAuthDone(); } -std::string GaiaAuth::ChooseBestSaslMechanism( - const std::vector<std::string> & mechanisms, bool encrypted) { - if (!done_) - return ""; - - std::vector<std::string>::const_iterator it; - - // A token is the weakest auth - 15s, service-limited, so prefer it. - it = std::find(mechanisms.begin(), mechanisms.end(), "X-GOOGLE-TOKEN"); - if (it != mechanisms.end()) - return "X-GOOGLE-TOKEN"; - - // A cookie is the next weakest - 14 days. - it = std::find(mechanisms.begin(), mechanisms.end(), "X-GOOGLE-COOKIE"); - if (it != mechanisms.end()) - return "X-GOOGLE-COOKIE"; - - // Never pass @google.com passwords without encryption!! - if (!encrypted && - buzz::Jid(worker_task_->GetUsername()).domain() == "google.com") { - return ""; - } - - // As a last resort, use plain authentication. - if (buzz::Jid(worker_task_->GetUsername()).domain() != "google.com") { - it = std::find(mechanisms.begin(), mechanisms.end(), "PLAIN"); - if (it != mechanisms.end()) - return "PLAIN"; - } - - // No good mechanism found. - return ""; -} - -buzz::SaslMechanism* GaiaAuth::CreateSaslMechanism( - const std::string& mechanism) { - if (!done_) { - return NULL; - } - - if (mechanism == "X-GOOGLE-TOKEN") { - return new buzz::SaslCookieMechanism( - mechanism, - worker_task_->GetUsername(), - worker_task_->GetToken(), - worker_task_->GetTokenService()); - } - - if (mechanism == "X-GOOGLE-COOKIE") { - return new buzz::SaslCookieMechanism( - "X-GOOGLE-COOKIE", - worker_task_->GetUsername(), - worker_task_->GetSID(), - worker_task_->GetTokenService()); - } - - if (mechanism == "PLAIN") { - return new buzz::SaslPlainMechanism(buzz::Jid(worker_task_->GetUsername()), - worker_task_->GetPassword()); - } - - // Oh well - none of the above. - return NULL; -} - std::string GaiaAuth::CreateAuthenticatedUrl( const std::string & continue_url, const std::string & service) { if (!done_ || worker_task_->GetToken().empty()) diff --git a/chrome/browser/sync/notifier/gaia_auth/gaiaauth.h b/chrome/browser/sync/notifier/gaia_auth/gaiaauth.h index e489f36..0de7632 100644 --- a/chrome/browser/sync/notifier/gaia_auth/gaiaauth.h +++ b/chrome/browser/sync/notifier/gaia_auth/gaiaauth.h @@ -85,11 +85,6 @@ class GaiaAuth : public PreXmppAuth { token_service_ = token_service; } - virtual std::string ChooseBestSaslMechanism( - const std::vector<std::string>& mechanisms, bool encrypted); - virtual buzz::SaslMechanism* CreateSaslMechanism( - const std::string& mechanism); - std::string CreateAuthenticatedUrl(const std::string& continue_url, const std::string& service); |