1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/extensions/api/identity/identity_api.h"
#include "base/values.h"
#include "chrome/browser/extensions/extension_install_prompt.h"
#include "chrome/browser/extensions/extension_function_dispatcher.h"
#include "chrome/browser/extensions/extension_service.h"
#include "chrome/browser/signin/token_service.h"
#include "chrome/browser/signin/token_service_factory.h"
#include "chrome/browser/ui/browser.h"
#include "chrome/browser/ui/tab_contents/tab_contents.h"
#include "chrome/common/extensions/extension.h"
#include "googleurl/src/gurl.h"
namespace extensions {
namespace {
const char kInvalidClientId[] = "Invalid OAuth2 Client ID.";
const char kInvalidScopes[] = "Invalid OAuth2 scopes.";
const char kInvalidRedirect[] = "Did not redirect to the right URL.";
const char kAuthFailure[] = "OAuth2 request failed: ";
const char kGrantRevoked[] = "OAuth2 not granted or revoked.";
} // namespace
GetAuthTokenFunction::GetAuthTokenFunction() {}
GetAuthTokenFunction::~GetAuthTokenFunction() {}
bool GetAuthTokenFunction::RunImpl() {
const Extension* extension = GetExtension();
Extension::OAuth2Info oauth2_info = extension->oauth2_info();
if (oauth2_info.client_id.empty()) {
error_ = kInvalidClientId;
return false;
}
if (oauth2_info.scopes.size() == 0) {
error_ = kInvalidScopes;
return false;
}
AddRef(); // Balanced in OnMintTokenSuccess|Failure.
TokenService* token_service = TokenServiceFactory::GetForProfile(profile());
flow_.reset(new OAuth2MintTokenFlow(
profile()->GetRequestContext(),
this,
OAuth2MintTokenFlow::Parameters(
token_service->GetOAuth2LoginRefreshToken(),
extension->id(),
oauth2_info.client_id,
oauth2_info.scopes,
ExtensionInstallPrompt::ShouldAutomaticallyApproveScopes() ?
OAuth2MintTokenFlow::MODE_MINT_TOKEN_FORCE :
OAuth2MintTokenFlow::MODE_MINT_TOKEN_NO_FORCE)));
flow_->Start();
return true;
}
void GetAuthTokenFunction::OnMintTokenSuccess(const std::string& access_token) {
result_.reset(Value::CreateStringValue(access_token));
SendResponse(true);
Release(); // Balanced in RunImpl.
}
void GetAuthTokenFunction::OnMintTokenFailure(
const GoogleServiceAuthError& error) {
error_ = std::string(kAuthFailure) + error.ToString();
SendResponse(false);
Release(); // Balanced in RunImpl.
}
void GetAuthTokenFunction::OnIssueAdviceSuccess(
const IssueAdviceInfo& issue_advice) {
// Existing grant was revoked and we used NO_FORCE, so we got info back
// instead.
error_ = kGrantRevoked;
// Remove the oauth2 scopes from the extension's granted permissions, if
// revoked server-side.
scoped_refptr<PermissionSet> scopes =
new PermissionSet(GetExtension()->GetActivePermissions()->scopes());
profile()->GetExtensionService()->extension_prefs()->RemoveGrantedPermissions(
GetExtension()->id(), scopes);
// TODO(estade): need to prompt the user for scope permissions.
SendResponse(false);
Release(); // Balanced in RunImpl.
}
LaunchWebAuthFlowFunction::LaunchWebAuthFlowFunction() {}
LaunchWebAuthFlowFunction::~LaunchWebAuthFlowFunction() {}
bool LaunchWebAuthFlowFunction::RunImpl() {
DictionaryValue* arg = NULL;
EXTENSION_FUNCTION_VALIDATE(args_->GetDictionary(0, &arg));
std::string url;
EXTENSION_FUNCTION_VALIDATE(arg->GetString("url", &url));
bool interactive = false;
arg->GetBoolean("interactive", &interactive);
WebAuthFlow::Mode mode = interactive ?
WebAuthFlow::INTERACTIVE : WebAuthFlow::SILENT;
AddRef(); // Balanced in OnAuthFlowSuccess/Failure.
GURL auth_url(url);
auth_flow_.reset(new WebAuthFlow(
this, profile(), GetExtension()->id(), auth_url, mode));
auth_flow_->Start();
return true;
}
void LaunchWebAuthFlowFunction::OnAuthFlowSuccess(
const std::string& redirect_url) {
result_.reset(Value::CreateStringValue(redirect_url));
SendResponse(true);
Release(); // Balanced in RunImpl.
}
void LaunchWebAuthFlowFunction::OnAuthFlowFailure() {
error_ = kInvalidRedirect;
SendResponse(false);
Release(); // Balanced in RunImpl.
}
} // namespace extensions
|
