1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
|
// Copyright 2018 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_SAFE_BROWSING_ADVANCED_PROTECTION_STATUS_MANAGER_DESKTOP_H_
#define CHROME_BROWSER_SAFE_BROWSING_ADVANCED_PROTECTION_STATUS_MANAGER_DESKTOP_H_
#include "base/gtest_prod_util.h"
#include "base/memory/raw_ptr.h"
#include "base/sequence_checker.h"
#include "base/time/time.h"
#include "base/timer/timer.h"
#include "chrome/browser/safe_browsing/advanced_protection_status_manager.h"
#include "components/keyed_service/core/keyed_service.h"
#include "components/signin/public/identity_manager/access_token_info.h"
#include "components/signin/public/identity_manager/account_info.h"
#include "components/signin/public/identity_manager/identity_manager.h"
namespace signin {
class PrimaryAccountAccessTokenFetcher;
}
class PrefService;
FORWARD_DECLARE_TEST(GeneratedHttpsFirstModePrefTest,
AdvancedProtectionStatusChange_InitiallySignedIn);
FORWARD_DECLARE_TEST(GeneratedHttpsFirstModePrefTest,
AdvancedProtectionStatusChange_InitiallyNotSignedIn);
namespace safe_browsing {
// Desktop implementation of `AdvancedProtectionStatusManager`.
// Note that for profile that is not signed-in, we consider it NOT under
// advanced protection.
class AdvancedProtectionStatusManagerDesktop
: public signin::IdentityManager::Observer,
public AdvancedProtectionStatusManager {
public:
AdvancedProtectionStatusManagerDesktop(
PrefService* pref_service,
signin::IdentityManager* identity_manager);
AdvancedProtectionStatusManagerDesktop(
const AdvancedProtectionStatusManagerDesktop&) = delete;
AdvancedProtectionStatusManagerDesktop& operator=(
const AdvancedProtectionStatusManagerDesktop&) = delete;
~AdvancedProtectionStatusManagerDesktop() override;
// AdvancedProtectionManager:
bool IsUnderAdvancedProtection() const override;
void SetAdvancedProtectionStatusForTesting(bool enrolled) override;
// KeyedService:
void Shutdown() override;
bool IsRefreshScheduled();
private:
friend class AdvancedProtectionStatusManagerTest;
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
NotSignedInOnStartUp);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
SignedInLongTimeAgoRefreshFailTransientError);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
SignedInLongTimeAgoRefreshFailNonTransientError);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
SignedInLongTimeAgoNotUnderAP);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
SignedInLongTimeAgoUnderAP);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
AlreadySignedInAndUnderAP);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
SignInAndSignOutEvent);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
AccountRemoval);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
StayInAdvancedProtection);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
AlreadySignedInAndNotUnderAP);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
AdvancedProtectionDisabledAfterSignin);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
StartupAfterLongWaitRefreshesImmediately);
FRIEND_TEST_ALL_PREFIXES(AdvancedProtectionStatusManagerDesktopTest,
TracksUnconsentedPrimaryAccount);
FRIEND_TEST_ALL_PREFIXES(::GeneratedHttpsFirstModePrefTest,
AdvancedProtectionStatusChange_InitiallySignedIn);
FRIEND_TEST_ALL_PREFIXES(::GeneratedHttpsFirstModePrefTest,
AdvancedProtectionStatusChange_InitiallyNotSignedIn);
void Initialize();
// Called after |Initialize()|. May trigger advanced protection status
// refresh.
void MaybeRefreshOnStartUp();
// Subscribes to sign-in events.
void SubscribeToSigninEvents();
// Subscribes from sign-in events.
void UnsubscribeFromSigninEvents();
// IdentityManager::Observer implementations.
void OnPrimaryAccountChanged(
const signin::PrimaryAccountChangeEvent& event) override;
void OnExtendedAccountInfoUpdated(const AccountInfo& info) override;
void OnExtendedAccountInfoRemoved(const AccountInfo& info) override;
void OnAdvancedProtectionEnabled();
void OnAdvancedProtectionDisabled();
void OnAccessTokenFetchComplete(CoreAccountId account_id,
GoogleServiceAuthError error,
signin::AccessTokenInfo token_info);
// Requests Gaia refresh token to obtain advanced protection status.
void RefreshAdvancedProtectionStatus();
// Starts a timer to schedule next refresh.
void ScheduleNextRefresh();
// Cancels any status refresh in the future.
void CancelFutureRefresh();
// Sets |last_refresh_| to now and persists it.
void UpdateLastRefreshTime();
bool IsUnconsentedPrimaryAccount(const CoreAccountInfo& account_info);
// Decodes |id_token| to get advanced protection status.
void OnGetIDToken(const CoreAccountId& account_id,
const std::string& id_token);
// Only called in tests.
void SetMinimumRefreshDelay(const base::TimeDelta& delay);
// Gets the account ID of the unconsented primary account.
// Returns an empty string if user is not signed in.
CoreAccountId GetUnconsentedPrimaryAccountId() const;
// Only called in tests to set a customized minimum delay.
AdvancedProtectionStatusManagerDesktop(
PrefService* pref_service,
signin::IdentityManager* identity_manager,
const base::TimeDelta& min_delay);
SEQUENCE_CHECKER(sequence_checker_);
raw_ptr<PrefService> pref_service_ = nullptr;
raw_ptr<signin::IdentityManager> identity_manager_ = nullptr;
std::unique_ptr<signin::PrimaryAccountAccessTokenFetcher>
access_token_fetcher_;
// Is the primary account under advanced protection.
bool is_under_advanced_protection_ = false;
base::OneShotTimer timer_;
base::Time last_refreshed_;
base::TimeDelta minimum_delay_;
};
} // namespace safe_browsing
#endif // CHROME_BROWSER_SAFE_BROWSING_ADVANCED_PROTECTION_STATUS_MANAGER_DESKTOP_H_
|
