1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/ui/ash/focus_mode/chrome_focus_mode_delegate.h"
#include "ash/shell.h"
#include "ash/system/focus_mode/sounds/youtube_music/request_signer.h"
#include "ash/system/focus_mode/sounds/youtube_music/youtube_music_client.h"
#include "base/containers/span.h"
#include "base/feature_list.h"
#include "base/functional/bind.h"
#include "base/task/thread_pool.h"
#include "base/version_info/version_info.h"
#include "chrome/browser/browser_process.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/profiles/profile_manager.h"
#include "chrome/browser/signin/identity_manager_factory.h"
#include "chrome/browser/ui/ash/focus_mode/signature_builder.h"
#include "components/signin/public/identity_manager/identity_manager.h"
#include "google_apis/common/auth_service.h"
#include "google_apis/common/request_sender.h"
#include "google_apis/gaia/gaia_id.h"
#include "net/traffic_annotation/network_traffic_annotation.h"
namespace {
// Force Focus Mode to report an old version string for testing.
BASE_FEATURE(kFocusModeOldVersion,
"FocusModeOldVersion",
base::FEATURE_DISABLED_BY_DEFAULT);
// Amount of time between now and certificate expiration which will trigger a
// refresh. Certificates are generally issued with lifetimes of about 1 year so
// this won't trigger too often but will refresh a certificate well in advance
// of it expiring.
constexpr base::TimeDelta kCertificateBuffer = base::Hours(36);
// This will be used as a callback that is passed to the client to generate
// `google_apis::RequestSender`. The request sender class implements the
// OAuth 2.0 protocol, so we do not need to do anything extra for authentication
// and authorization.
// `scopes`:
// The OAuth scopes.
// `traffic_annotation_tag`:
// It documents the network request for system admins and regulators.
std::unique_ptr<google_apis::RequestSender> CreateRequestSenderForClient(
const std::vector<std::string>& scopes,
const net::NetworkTrafficAnnotationTag& traffic_annotation_tag) {
Profile* profile = ProfileManager::GetActiveUserProfile();
signin::IdentityManager* identity_manager =
IdentityManagerFactory::GetForProfile(profile);
const scoped_refptr<network::SharedURLLoaderFactory> url_loader_factory =
profile->GetURLLoaderFactory();
std::unique_ptr<google_apis::AuthService> auth_service =
std::make_unique<google_apis::AuthService>(
identity_manager,
identity_manager->GetPrimaryAccountId(signin::ConsentLevel::kSignin),
url_loader_factory, scopes);
return std::make_unique<google_apis::RequestSender>(
std::move(auth_service), url_loader_factory,
base::ThreadPool::CreateSequencedTaskRunner(
{base::MayBlock(),
/* `USER_VISIBLE` is because the requested/returned data is visible
to the user on System UI surfaces. */
base::TaskPriority::USER_VISIBLE,
base::TaskShutdownBehavior::CONTINUE_ON_SHUTDOWN}),
/*custom_user_agent=*/std::string(), traffic_annotation_tag);
}
class RequestSignerImpl : public ash::RequestSigner {
public:
explicit RequestSignerImpl(const AccountId& account_id,
const std::string& device_id)
: account_id_(account_id), device_id_(device_id) {
certificate_manager_ =
CertificateManager::Create(account_id, kCertificateBuffer);
signature_builder_ =
std::make_unique<SignatureBuilder>(certificate_manager_.get());
}
~RequestSignerImpl() override = default;
bool GenerateHeaders(base::span<const uint8_t> data,
HeadersCallback callback) override {
signature_builder_->SetPayload(
std::vector<uint8_t>(data.begin(), data.end()));
PrepareDeviceInfo();
if (!signature_builder_->BuildHeaders(std::move(callback))) {
LOG(WARNING) << "Unable to start request signing";
return false;
}
return true;
}
std::string DeviceInfoHeader() override {
PrepareDeviceInfo();
return signature_builder_->DeviceInfoHeader();
}
private:
void PrepareDeviceInfo() {
signature_builder_->SetBrand("ChromeOS");
signature_builder_->SetModel("Chromebook");
if (!base::FeatureList::IsEnabled(kFocusModeOldVersion)) {
signature_builder_->SetSoftwareVersion(version_info::GetVersionNumber());
} else {
// Report a previous stable version to verify minimum version behavior.
signature_builder_->SetSoftwareVersion("129.0.6668.112");
}
signature_builder_->SetDeviceId(device_id_);
}
const AccountId account_id_;
const std::string device_id_;
std::unique_ptr<CertificateManager> certificate_manager_;
std::unique_ptr<SignatureBuilder> signature_builder_;
};
} // namespace
ChromeFocusModeDelegate::ChromeFocusModeDelegate() = default;
ChromeFocusModeDelegate::~ChromeFocusModeDelegate() = default;
std::unique_ptr<ash::youtube_music::YouTubeMusicClient>
ChromeFocusModeDelegate::CreateYouTubeMusicClient(
const AccountId& account_id,
const std::string& device_id) {
return std::make_unique<ash::youtube_music::YouTubeMusicClient>(
base::BindRepeating(&CreateRequestSenderForClient),
std::make_unique<RequestSignerImpl>(account_id, device_id));
}
const std::string& ChromeFocusModeDelegate::GetLocale() {
return g_browser_process->GetApplicationLocale();
}
bool ChromeFocusModeDelegate::IsMinorUser() {
Profile* profile = ProfileManager::GetActiveUserProfile();
signin::IdentityManager* identity_manager =
IdentityManagerFactory::GetForProfile(profile);
if (!identity_manager) {
// Identity manager is not available (e.g:guest mode).
return false;
}
GaiaId gaia_id = user_manager::UserManager::Get()
->GetActiveUser()
->GetAccountId()
.GetGaiaId();
const AccountInfo account_info =
identity_manager->FindExtendedAccountInfoByGaiaId(gaia_id);
// TODO(b/366042251): Update minor targeting to use a better signal.
return account_info.capabilities.can_use_manta_service() !=
signin::Tribool::kTrue;
}
|