1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/ash/crosapi/device_oauth2_token_service_ash.h"
#include "base/functional/callback.h"
#include "chrome/browser/ash/profiles/profile_helper.h"
#include "chrome/browser/device_identity/device_oauth2_token_service.h"
#include "chrome/browser/device_identity/device_oauth2_token_service_factory.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/signin/identity_manager_factory.h"
#include "chromeos/crosapi/mojom/identity_manager.mojom.h"
#include "components/account_manager_core/account_manager_util.h"
#include "components/signin/public/identity_manager/account_info.h"
#include "components/signin/public/identity_manager/identity_manager.h"
#include "components/signin/public/identity_manager/scope_set.h"
#include "ui/gfx/image/image.h"
namespace crosapi {
DeviceOAuth2TokenServiceAsh::DeviceOAuth2TokenServiceAsh()
: OAuth2AccessTokenManager::Consumer("device_oauth2_token_service_ash") {}
DeviceOAuth2TokenServiceAsh::~DeviceOAuth2TokenServiceAsh() = default;
void DeviceOAuth2TokenServiceAsh::BindReceiver(
mojo::PendingReceiver<mojom::DeviceOAuth2TokenService> receiver) {
receivers_.Add(this, std::move(receiver));
}
void DeviceOAuth2TokenServiceAsh::FetchAccessTokenForDeviceAccount(
const std::vector<std::string>& scopes,
FetchAccessTokenForDeviceAccountCallback callback) {
std::unique_ptr<OAuth2AccessTokenManager::Request> request =
DeviceOAuth2TokenServiceFactory::Get()->StartAccessTokenRequest(
signin::ScopeSet(scopes.begin(), scopes.end()), this);
auto [it, success] =
access_token_requests_.emplace(std::move(request), std::move(callback));
DCHECK(success);
}
void DeviceOAuth2TokenServiceAsh::OnGetTokenSuccess(
const OAuth2AccessTokenManager::Request* request,
const OAuth2AccessTokenConsumer::TokenResponse& token_response) {
OnTokenFetchComplete(
request,
mojom::AccessTokenResult::NewAccessTokenInfo(mojom::AccessTokenInfo::New(
token_response.access_token, token_response.expiration_time,
token_response.id_token)));
}
void DeviceOAuth2TokenServiceAsh::OnGetTokenFailure(
const OAuth2AccessTokenManager::Request* request,
const GoogleServiceAuthError& error) {
OnTokenFetchComplete(
request, mojom::AccessTokenResult::NewError(
account_manager::ToMojoGoogleServiceAuthError(error)));
}
void DeviceOAuth2TokenServiceAsh::OnTokenFetchComplete(
const OAuth2AccessTokenManager::Request* request,
mojom::AccessTokenResultPtr result) {
auto it = access_token_requests_.find(request);
if (it == access_token_requests_.end()) {
NOTREACHED();
}
// To avoid UaF, the item should be removed from the map before calling the
// callback. This requires keeping the callback in a temporary variable.
auto callback = std::move(it->second);
access_token_requests_.erase(it);
if (callback)
std::move(callback).Run(std::move(result));
// `this` may be destroyed.
}
} // namespace crosapi
|
